$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1d00c69-15f8-4c30-a015-aa9c98bc82d4.cer File: e1d00c69-15f8-4c30-a015-aa9c98bc82d4.cer (raw, json) Hash identifier: XhZATqCjGPK+iwNX/XvjmDYoo6rfClAF03D3joVS9dY= Subject key identifier: 87:9F:DC:5E:79:0C:17:DD:1E:F2:A8:FD:04:D3:4A:79:85:7A:10:0F Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584AFE1A610A8A04E35A76EB0600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1d00c69-15f8-4c30-a015-aa9c98bc82d4/e1d00c69-15f8-4c30-a015-aa9c98bc82d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1d00c69-15f8-4c30-a015-aa9c98bc82d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Aug 2025 06:09:14 +0000 Certificate not after: Tue 30 Nov 2027 07:09:14 +0000 Subordinate resources: AS: 401802 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:1a:61:0a:8a:04:e3:5a:76:eb:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 27 06:09:14 2025 GMT Not After : Nov 30 07:09:14 2027 GMT Subject: CN=e1d00c69-15f8-4c30-a015-aa9c98bc82d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d3:09:3c:30:9d:e3:4d:fc:db:f9:98:a8:40: f2:e8:b2:ad:4b:27:34:85:0a:a7:9e:36:ba:09:94: bf:4a:14:c9:c2:4f:8c:96:e1:0e:d5:eb:1c:91:22: 85:8c:3d:08:13:d1:65:7f:61:93:6f:cd:86:fd:00: d0:2b:d8:6c:b5:61:97:05:77:eb:12:c9:61:ba:ab: 19:c8:1a:f3:b5:3e:09:c7:ac:67:b1:84:3a:07:d4: 8a:7a:98:45:f3:29:0a:45:d7:ac:67:95:33:1b:44: b6:d7:60:de:93:bc:e8:7b:33:55:63:d2:0e:df:1e: 71:32:cf:49:24:86:4b:10:6f:2e:65:c9:70:26:43: 84:c8:ee:2b:91:35:6a:9d:4a:6e:f1:6b:2e:a5:27: 7a:2d:96:85:c4:cd:2b:55:09:20:83:4d:53:f5:ee: f3:ac:8c:0d:4e:99:d8:9b:c8:03:98:c2:0b:a9:82: a5:e3:ce:59:d5:41:8a:ae:de:34:13:6f:d0:90:7c: 73:43:3d:df:31:fe:09:1a:d5:8d:10:ae:16:a8:39: a2:3a:a2:49:72:01:dd:2c:d7:2a:20:82:98:37:cf: 55:12:33:20:75:f8:58:7c:f6:1e:5e:8b:55:e1:a5: 36:1c:1a:a2:5c:1d:7c:c6:5d:2b:67:98:bf:67:21: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9F:DC:5E:79:0C:17:DD:1E:F2:A8:FD:04:D3:4A:79:85:7A:10:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1d00c69-15f8-4c30-a015-aa9c98bc82d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1d00c69-15f8-4c30-a015-aa9c98bc82d4/e1d00c69-15f8-4c30-a015-aa9c98bc82d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401802 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a7:5b:e1:60:82:ff:f5:c1:b4:f0:0b:50:72:13:c6:09:9b: ff:9b:8e:cc:8e:ae:a6:89:b6:57:d7:bc:93:76:8c:47:e8:98: e4:3d:c7:df:2b:b7:1c:d8:a5:b7:33:43:88:5e:3c:6a:ff:07: c9:ed:00:fe:fa:51:3a:41:53:6c:cd:cf:ea:d9:4b:2b:fd:f5: 01:d1:fd:37:61:99:d0:fc:45:8c:13:09:cb:02:a3:70:2a:16: 38:aa:7a:ee:ee:01:89:40:63:07:f5:a5:37:7b:3b:7c:ca:75: 7b:03:2c:97:02:dd:c1:76:a6:5e:c2:14:ea:23:13:8f:5b:c6: 34:9f:9c:0b:dd:57:47:a1:ad:d9:23:87:8a:02:f5:e8:a4:4a: 5d:a5:25:8b:d2:b5:b3:c5:75:9c:cc:32:d4:6c:78:92:ec:c1: 81:90:1d:86:1c:61:fc:a7:3d:f2:e8:98:4d:27:de:15:84:a4: e6:13:65:46:48:95:8a:b5:4b:3a:6d:e2:d2:cd:ba:67:42:cd: b1:77:30:99:35:b6:3e:1f:af:f3:13:29:ae:41:19:25:b7:92: 6d:ea:f9:f3:06:bf:9a:e4:73:e4:d6:fe:f7:50:1d:e7:a5:c1: 09:4a:eb:dd:d7:4e:72:6e:7e:73:59:1a:a0:f4:34:45:b3:89: b9:e6:c8:64 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEr+GmEKigTjWnbrBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDgyNzA2MDkxNFoXDTI3MTEzMDA3MDkxNFowLzEtMCsGA1UEAxMk ZTFkMDBjNjktMTVmOC00YzMwLWEwMTUtYWE5Yzk4YmM4MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tMJPDCd40382/mYqEDy6LKtSyc0hQqnnja6 CZS/ShTJwk+MluEO1esckSKFjD0IE9Flf2GTb82G/QDQK9hstWGXBXfrEslhuqsZ yBrztT4Jx6xnsYQ6B9SKephF8ykKRdesZ5UzG0S212Dek7zoezNVY9IO3x5xMs9J JIZLEG8uZclwJkOEyO4rkTVqnUpu8WsupSd6LZaFxM0rVQkgg01T9e7zrIwNTpnY m8gDmMILqYKl485Z1UGKrt40E2/QkHxzQz3fMf4JGtWNEK4WqDmiOqJJcgHdLNcq IIKYN89VEjMgdfhYfPYeXotV4aU2HBqiXB18xl0rZ5i/ZyFunwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFIef3F55DBfdHvKo/QTTSnmFehAPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MWQwMGM2OS0xNWY4LTRjMzAtYTAxNS1hYTljOThiYzgyZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UxZDAwYzY5LTE1ZjgtNGMzMC1h MDE1LWFhOWM5OGJjODJkNC9lMWQwMGM2OS0xNWY4LTRjMzAtYTAxNS1hYTljOThi YzgyZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiGKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGmnW+Fggv/1wbTwC1ByE8YJm/+b jsyOrqaJtlfXvJN2jEfomOQ9x98rtxzYpbczQ4hePGr/B8ntAP76UTpBU2zNz+rZ Syv99QHR/TdhmdD8RYwTCcsCo3AqFjiqeu7uAYlAYwf1pTd7O3zKdXsDLJcC3cF2 pl7CFOojE49bxjSfnAvdV0ehrdkjh4oC9eikSl2lJYvStbPFdZzMMtRseJLswYGQ HYYcYfynPfLomE0n3hWEpOYTZUZIlYq1Szpt4tLNumdCzbF3MJk1tj4fr/MTKa5B GSW3km3q+fMGv5rkc+TW/vdQHeelwQlK693XTnJufnNZGqD0NEWzibnmyGQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:48:50 2025 by rpki-client