$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f.cer File: cdcd237b-8c52-4d20-808c-c916ddbd962f.cer (raw, json) Hash identifier: 5QnWRKXLvAkB87iiuxdQwjDDU9TI0JaRCJrqd1Cd4kw= Subject key identifier: 49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285849D15D37F69E52D1A941A38E30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 May 2025 12:45:35 +0000 Certificate not after: Sat 14 Aug 2027 12:45:35 +0000 Subordinate resources: AS: 401187 IP: 2620:c3:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:5d:37:f6:9e:52:d1:a9:41:a3:8e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: May 11 12:45:35 2025 GMT Not After : Aug 14 12:45:35 2027 GMT Subject: CN=cdcd237b-8c52-4d20-808c-c916ddbd962f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:99:be:0c:e3:a0:e7:5b:cc:a9:da:85:7a:df: dd:0b:84:59:bc:d8:7a:83:8d:a1:55:bc:a3:8e:79: c9:a2:a3:01:6e:a1:64:e7:4c:85:5a:67:76:3e:3f: 0d:f6:29:47:3e:1d:8c:bd:b6:db:89:a8:a7:24:74: e2:5a:6c:86:0d:68:e2:8a:1c:e3:cd:84:f4:ea:20: 0d:ca:dc:b9:07:89:3d:4f:9a:33:3a:35:28:52:73: f5:1f:4c:b8:7e:4b:5a:e6:93:14:20:79:e5:29:33: 76:7b:0e:60:f1:e9:32:a3:02:10:be:e5:f1:fb:45: 70:c3:80:48:3b:50:a0:5f:7b:10:b7:40:ad:f1:bd: 2c:99:ff:85:0d:f2:15:45:fb:0b:3d:01:e2:61:98: 83:b2:33:9b:78:72:76:27:8c:8a:9e:f2:dd:f9:36: 83:d6:3f:a7:62:2d:70:9c:80:e1:83:18:e6:97:0a: e5:fa:ba:b3:77:1e:ea:76:86:1d:17:db:35:60:bb: f6:c7:76:e0:0a:64:40:47:03:a4:eb:7d:20:5d:92: 2e:07:09:c6:b0:21:73:75:c8:7c:16:36:bf:97:d9: 11:8c:9a:f0:93:68:2b:3b:9c:5f:57:66:01:9b:7e: c7:a1:74:f7:4b:36:4f:12:cc:84:e6:0a:ad:e4:7f: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:56:C4:C7:34:EE:62:CF:ED:7F:76:92:74:A9:78:8A:BC:8E:9F:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdcd237b-8c52-4d20-808c-c916ddbd962f/cdcd237b-8c52-4d20-808c-c916ddbd962f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2620:c3:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401187 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:4c:e1:6c:ae:b4:30:81:d5:9e:b6:97:61:bc:74:e6:c9:34: 11:03:f5:59:57:f4:6f:2e:16:83:c1:e7:1b:90:ea:a0:65:e1: ba:ea:b4:28:23:7b:bd:7f:59:84:ab:3b:6a:b5:df:81:a3:11: 91:fa:12:ef:54:67:bd:5e:91:38:53:2c:99:ec:d8:ac:85:e5: c2:bb:9f:0a:2c:85:86:dd:e8:ac:bd:ca:0c:dc:33:e6:f2:bd: 84:28:e2:ec:f3:39:77:36:ac:71:bf:a1:be:c3:fd:d5:38:ea: 6e:bc:62:78:c0:1c:d5:73:2f:81:0a:54:bd:a2:9f:9f:f0:4e: d6:3b:3f:af:6f:c7:65:b2:fa:1a:24:ba:42:25:1c:34:3a:57: af:cb:c7:27:9d:7e:5e:c6:aa:e3:c6:4a:81:8d:d1:29:e8:2b: 95:6d:d8:03:d5:42:b5:b5:ed:79:35:e7:85:ef:aa:26:02:8a: c4:91:a9:90:85:e6:8b:0a:21:7b:f4:1a:c8:b3:8e:99:27:8c: 7a:2a:d3:86:ef:d8:c7:fb:9e:e9:e5:e2:b1:80:bd:d9:b5:d1: 47:c2:d9:40:66:72:07:84:70:1b:55:50:a3:66:eb:18:ef:bb: 4a:45:e6:2b:46:3a:36:b4:61:30:61:a8:bc:97:fa:84:a3:c5: e2:c8:ed:4b -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEnRXTf2nlLRqUGjjjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDUxMTEyNDUzNVoXDTI3MDgxNDEyNDUzNVowLzEtMCsGA1UEAxMk Y2RjZDIzN2ItOGM1Mi00ZDIwLTgwOGMtYzkxNmRkYmQ5NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpm+DOOg51vMqdqFet/dC4RZvNh6g42hVbyj jnnJoqMBbqFk50yFWmd2Pj8N9ilHPh2MvbbbiainJHTiWmyGDWjiihzjzYT06iAN yty5B4k9T5ozOjUoUnP1H0y4fkta5pMUIHnlKTN2ew5g8ekyowIQvuXx+0Vww4BI O1CgX3sQt0Ct8b0smf+FDfIVRfsLPQHiYZiDsjObeHJ2J4yKnvLd+TaD1j+nYi1w nIDhgxjmlwrl+rqzdx7qdoYdF9s1YLv2x3bgCmRARwOk630gXZIuBwnGsCFzdch8 Fja/l9kRjJrwk2grO5xfV2YBm37HoXT3SzZPEsyE5gqt5H8h2QIDAQABo4IEHjCC BBowHQYDVR0OBBYEFElWxMc07mLP7X92knSpeIq8jp8fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j ZGNkMjM3Yi04YzUyLTRkMjAtODA4Yy1jOTE2ZGRiZDk2MmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NkY2QyMzdiLThjNTItNGQyMC04 MDhjLWM5MTZkZGJkOTYyZi9jZGNkMjM3Yi04YzUyLTRkMjAtODA4Yy1jOTE2ZGRi ZDk2MmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADDYAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBh8jMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBADtM4WyutDCB1Z62l2G8dObJNBED9VlX9G8uFoPB5xuQ 6qBl4brqtCgje71/WYSrO2q134GjEZH6Eu9UZ71ekThTLJns2KyF5cK7nwoshYbd 6Ky9ygzcM+byvYQo4uzzOXc2rHG/ob7D/dU46m68YnjAHNVzL4EKVL2in5/wTtY7 P69vx2Wy+hokukIlHDQ6V6/Lxyedfl7GquPGSoGN0SnoK5Vt2APVQrW17Xk154Xv qiYCisSRqZCF5osKIXv0GsizjpknjHoq04bv2Mf7nunl4rGAvdm10UfC2UBmcgeE cBtVUKNm6xjvu0pF5itGOja0YTBhqLyX+oSjxeLI7Us= -----END CERTIFICATE-----Generated at Wed Nov 5 13:20:39 2025 by rpki-client