$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a8f50d-c29c-40ec-afd7-584614697f65.cer File: 34a8f50d-c29c-40ec-afd7-584614697f65.cer (raw, json) Hash identifier: sFD89qYQpsnE/FcKwFR9WmwEG+nQ8bBfKXyxoskAvO8= Subject key identifier: BE:72:47:7F:5A:40:C8:EE:10:A1:EF:02:7C:02:6E:E4:CE:AF:0E:6D Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AD3996794B51F5D651EF02840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a8f50d-c29c-40ec-afd7-584614697f65/34a8f50d-c29c-40ec-afd7-584614697f65.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a8f50d-c29c-40ec-afd7-584614697f65/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Aug 2025 00:45:25 +0000 Certificate not after: Mon 15 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 33343 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:99:67:94:b5:1f:5d:65:1e:f0:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 12 00:45:25 2025 GMT Not After : Nov 15 01:45:25 2027 GMT Subject: CN=34a8f50d-c29c-40ec-afd7-584614697f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:90:e8:46:17:50:93:38:0e:67:ad:db:28: 8d:b4:06:db:0b:f2:14:c5:fd:a6:b1:dc:df:68:d2: 39:2b:2c:30:0c:ac:9b:8e:94:f6:b6:c5:e2:97:53: 81:01:85:17:21:8f:18:30:f1:5d:b2:8c:cd:24:68: 24:d2:ca:cf:89:14:0f:4c:9a:8e:4b:dd:f4:af:25: 39:e7:ca:da:29:85:82:08:c1:fc:03:11:82:27:01: 42:f5:29:be:3f:f3:de:89:93:39:da:a8:f7:b6:3f: 50:9c:f0:4c:4d:0b:9f:e0:23:a5:41:b2:b4:aa:60: 51:c3:62:9f:10:8e:0c:99:27:e8:4e:c5:f5:73:7a: 4f:b1:64:d5:04:78:a3:4e:62:71:28:5d:02:56:03: 19:7c:32:02:ee:36:23:dd:34:76:bf:67:ea:f0:47: 52:18:76:14:2c:6a:f0:cf:4d:d7:14:c9:0f:5c:4d: 15:22:52:4d:e2:11:e7:f1:23:f1:53:5b:0f:0c:64: 48:38:c3:fd:0e:f5:2c:24:da:45:61:0c:64:48:77: 2d:0a:fc:e1:a4:7c:87:fd:24:ea:25:23:ef:da:6a: 8f:ed:41:9e:8a:89:c9:21:56:11:d5:51:95:7a:42: be:f3:5a:0b:da:6a:bc:79:fa:d4:18:70:bf:58:bc: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:47:7F:5A:40:C8:EE:10:A1:EF:02:7C:02:6E:E4:CE:AF:0E:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a8f50d-c29c-40ec-afd7-584614697f65/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a8f50d-c29c-40ec-afd7-584614697f65/34a8f50d-c29c-40ec-afd7-584614697f65.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 33343 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d4:83:e0:4a:68:b4:9d:1a:c6:72:f1:72:4a:0a:1f:b9:6a: dc:c5:8c:ab:1f:fe:52:da:b3:af:2c:69:01:50:37:41:96:25: b3:35:77:71:1b:79:6a:84:05:35:32:20:b4:28:0d:40:3f:b0: 5d:53:75:da:b4:49:05:b4:f8:83:55:e2:7c:08:27:53:d3:c1: a8:68:c1:19:db:12:60:c0:b4:38:1b:e4:c4:bd:50:25:cc:d3: 9a:c4:ec:99:41:3b:e2:8a:d1:af:5e:0b:46:a8:e0:f2:9b:18: a1:5b:1b:64:55:59:bd:c8:7c:d1:5e:81:51:9a:f3:d0:a1:af: c5:46:b4:ba:96:32:4d:d6:96:ca:ff:bf:90:e4:ab:6c:06:dc: 0b:9a:39:fb:2d:09:64:e9:09:9c:24:d3:67:67:aa:09:d6:00: 9b:f2:ac:0a:e8:88:aa:90:41:e5:eb:c6:74:b0:dd:a0:09:01: 7d:43:38:e2:e8:66:bb:ff:f7:ac:c5:d1:5a:40:b1:59:d5:d5: 02:bd:23:6d:92:80:ca:4d:e2:72:d8:c8:fa:4b:1c:f8:5f:f3: 72:28:1a:a4:57:4f:8f:6f:58:ee:eb:a7:a5:7b:49:6d:4f:8f: f9:bd:36:dc:47:b2:1d:87:1b:62:0c:9c:8c:1d:13:f3:ae:9d: 7d:73:eb:81 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWErTmWeUtR9dZR7wKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDgxMjAwNDUyNVoXDTI3MTExNTAxNDUyNVowLzEtMCsGA1UEAxMk MzRhOGY1MGQtYzI5Yy00MGVjLWFmZDctNTg0NjE0Njk3ZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSaQ6EYXUJM4Dmet2yiNtAbbC/IUxf2msdzf aNI5KywwDKybjpT2tsXil1OBAYUXIY8YMPFdsozNJGgk0srPiRQPTJqOS930ryU5 58raKYWCCMH8AxGCJwFC9Sm+P/PeiZM52qj3tj9QnPBMTQuf4COlQbK0qmBRw2Kf EI4MmSfoTsX1c3pPsWTVBHijTmJxKF0CVgMZfDIC7jYj3TR2v2fq8EdSGHYULGrw z03XFMkPXE0VIlJN4hHn8SPxU1sPDGRIOMP9DvUsJNpFYQxkSHctCvzhpHyH/STq JSPv2mqP7UGeionJIVYR1VGVekK+81oL2mq8efrUGHC/WLzrHQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFL5yR39aQMjuEKHvAnwCbuTOrw5tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z NGE4ZjUwZC1jMjljLTQwZWMtYWZkNy01ODQ2MTQ2OTdmNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzM0YThmNTBkLWMyOWMtNDBlYy1h ZmQ3LTU4NDYxNDY5N2Y2NS8zNGE4ZjUwZC1jMjljLTQwZWMtYWZkNy01ODQ2MTQ2 OTdmNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAII/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHbUg+BKaLSdGsZy8XJKCh+5atzF jKsf/lLas68saQFQN0GWJbM1d3EbeWqEBTUyILQoDUA/sF1Tddq0SQW0+INV4nwI J1PTwahowRnbEmDAtDgb5MS9UCXM05rE7JlBO+KK0a9eC0ao4PKbGKFbG2RVWb3I fNFegVGa89Chr8VGtLqWMk3Wlsr/v5Dkq2wG3AuaOfstCWTpCZwk02dnqgnWAJvy rAroiKqQQeXrxnSw3aAJAX1DOOLoZrv/96zF0VpAsVnV1QK9I22SgMpN4nLYyPpL HPhf83IoGqRXT49vWO7rp6V7SW1Pj/m9NtxHsh2HG2IMnIwdE/OunX1z64E= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:24 2025 by rpki-client