$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7.cer File: e245cff5-7032-45c2-9463-fce67888b2f7.cer (raw, json) Hash identifier: CbfGcye8ym/qmeRFg1cukp2fcQfq6JN62UE4Q54N+wk= Subject key identifier: 88:A7:7F:D6:97:C2:9C:95:80:0B:12:A8:2F:F2:70:C5:D0:01:E7:E5 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AA9B93F63F70940CF8EEFBA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/e245cff5-7032-45c2-9463-fce67888b2f7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Jul 2025 00:45:37 +0000 Certificate not after: Sun 31 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 55052 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:b9:3f:63:f7:09:40:cf:8e:ef:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 28 00:45:37 2025 GMT Not After : Oct 31 00:45:37 2027 GMT Subject: CN=e245cff5-7032-45c2-9463-fce67888b2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e9:b6:d5:3c:2a:05:a4:0b:c0:10:90:e3:4a: 61:83:4b:ee:67:85:2c:e0:b8:b6:42:d2:6c:6e:da: cf:ea:2d:1a:bb:1c:6b:12:15:6f:44:e8:53:fe:2e: 3f:83:e1:05:82:47:94:89:26:4a:4e:ca:dd:50:43: 37:42:1e:93:a4:b8:14:42:b3:51:22:c0:6d:9f:db: 30:9d:72:00:9b:8a:51:a2:f8:d2:fc:dc:19:14:bf: 99:ee:60:f5:89:af:40:f8:5b:91:3a:35:a3:35:2c: 60:c7:b0:06:0e:6a:af:72:80:ad:ee:d6:eb:c5:bb: 4c:ba:4b:53:a6:16:d8:61:d1:55:9d:08:21:a5:8f: 98:d5:1b:7b:8c:79:94:8b:08:b6:b1:94:ac:38:b7: 2b:d4:29:f4:7c:c3:07:34:9b:cd:d9:c3:16:76:ff: 2f:93:07:e4:0a:3a:35:89:a7:ae:61:4e:5b:41:3d: a6:44:c0:dd:c0:5f:f6:08:f2:67:6c:1d:f2:4c:55: 6b:4d:a2:1f:92:51:a2:56:42:d5:73:2c:1d:69:f9: f8:49:0b:27:6d:d5:c1:c1:cc:a8:2c:21:d8:ad:c6: 0b:88:3d:70:2c:e0:9b:c4:3e:37:46:bc:03:f8:02: 6f:9f:03:dd:7e:8b:e8:24:7e:dc:ad:4e:64:76:5c: da:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A7:7F:D6:97:C2:9C:95:80:0B:12:A8:2F:F2:70:C5:D0:01:E7:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e245cff5-7032-45c2-9463-fce67888b2f7/e245cff5-7032-45c2-9463-fce67888b2f7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 55052 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ec:a8:71:19:71:b9:91:ea:e0:3d:54:cb:b5:44:65:7a:9d: 3d:b0:60:76:68:7c:ac:64:02:de:e6:ac:b9:64:b9:9c:a0:5d: bd:2d:6a:63:7a:1d:ca:78:e6:73:6a:76:02:90:ca:2b:59:e0: 14:fe:d1:8f:1a:eb:00:0c:60:33:15:3c:7a:2d:4f:8c:6b:dc: 43:ff:d0:73:c4:de:f9:cd:e3:95:19:1a:7a:f9:d3:33:89:11: 91:35:1c:6d:2e:fc:78:49:82:cb:03:98:b3:3d:8d:6f:f6:64: e3:0c:e5:3a:28:96:0b:ea:43:09:75:6a:e0:9c:b3:b8:a4:75: 1a:a4:d2:48:92:81:f6:63:e7:2d:12:91:34:af:3d:1c:a5:9e: d3:e0:6c:c1:c9:1f:fa:35:d0:17:44:ad:4e:4b:2d:66:13:b7: fa:60:67:da:1a:11:87:c8:64:9c:81:37:56:25:94:4d:9e:38: 82:c3:fb:89:75:45:13:94:0a:31:0f:f5:93:e7:7b:df:6e:a6: 93:dc:0d:58:20:68:76:e5:5e:64:6e:ae:ad:e1:1b:b0:63:5c: 77:36:b9:2b:64:84:94:0c:35:53:87:aa:0a:ae:12:55:0b:91: 85:44:8a:66:a6:e6:b2:bc:9b:9e:06:dd:c1:3a:ed:5d:43:97: e1:9e:97:d3 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEqpuT9j9wlAz47vuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcyODAwNDUzN1oXDTI3MTAzMTAwNDUzN1owLzEtMCsGA1UEAxMk ZTI0NWNmZjUtNzAzMi00NWMyLTk0NjMtZmNlNjc4ODhiMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAium21TwqBaQLwBCQ40phg0vuZ4Us4Li2QtJs btrP6i0auxxrEhVvROhT/i4/g+EFgkeUiSZKTsrdUEM3Qh6TpLgUQrNRIsBtn9sw nXIAm4pRovjS/NwZFL+Z7mD1ia9A+FuROjWjNSxgx7AGDmqvcoCt7tbrxbtMuktT phbYYdFVnQghpY+Y1Rt7jHmUiwi2sZSsOLcr1Cn0fMMHNJvN2cMWdv8vkwfkCjo1 iaeuYU5bQT2mRMDdwF/2CPJnbB3yTFVrTaIfklGiVkLVcywdafn4SQsnbdXBwcyo LCHYrcYLiD1wLOCbxD43RrwD+AJvnwPdfovoJH7crU5kdlzaewIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFIinf9aXwpyVgAsSqC/ycMXQAeflMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9l MjQ1Y2ZmNS03MDMyLTQ1YzItOTQ2My1mY2U2Nzg4OGIyZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2UyNDVjZmY1LTcwMzItNDVjMi05 NDYzLWZjZTY3ODg4YjJmNy9lMjQ1Y2ZmNS03MDMyLTQ1YzItOTQ2My1mY2U2Nzg4 OGIyZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANcMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGzsqHEZcbmR6uA9VMu1RGV6nT2w YHZofKxkAt7mrLlkuZygXb0tamN6Hcp45nNqdgKQyitZ4BT+0Y8a6wAMYDMVPHot T4xr3EP/0HPE3vnN45UZGnr50zOJEZE1HG0u/HhJgssDmLM9jW/2ZOMM5Toolgvq Qwl1auCcs7ikdRqk0kiSgfZj5y0SkTSvPRylntPgbMHJH/o10BdErU5LLWYTt/pg Z9oaEYfIZJyBN1YllE2eOILD+4l1RROUCjEP9ZPne99uppPcDVggaHblXmRurq3h G7BjXHc2uStkhJQMNVOHqgquElULkYVEimam5rK8m54G3cE67V1Dl+Gel9M= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:32 2025 by rpki-client