$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec0bcb82-24bc-47a4-a8fa-2ea114b0e5bb.cer File: ec0bcb82-24bc-47a4-a8fa-2ea114b0e5bb.cer (raw, json) Hash identifier: OCboeVy17WsQtO5umqvmlrPSSXf+t8n9c+d57Mj4h/k= Subject key identifier: BA:2B:25:EC:CB:8F:25:9D:DA:2B:82:DB:D5:D4:97:FB:4F:FB:3F:23 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584AA6EE8F60C83D6D55DDBBBAE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec0bcb82-24bc-47a4-a8fa-2ea114b0e5bb/ec0bcb82-24bc-47a4-a8fa-2ea114b0e5bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec0bcb82-24bc-47a4-a8fa-2ea114b0e5bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 27 Jul 2025 00:45:37 +0000 Certificate not after: Sat 30 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 27455 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:ee:8f:60:c8:3d:6d:55:dd:bb:ba:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 27 00:45:37 2025 GMT Not After : Oct 30 00:45:37 2027 GMT Subject: CN=ec0bcb82-24bc-47a4-a8fa-2ea114b0e5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:7f:58:2c:93:b0:0c:53:e9:fa:fc:96:b2: 29:8e:26:10:76:c8:19:3b:c5:df:2a:e4:20:eb:fc: e3:3d:5b:09:d8:fe:58:bc:92:fd:00:1a:6b:d6:f0: 2a:70:f8:ea:f8:94:cc:53:60:5d:1b:40:9d:13:6c: ed:f0:cd:97:e6:43:eb:60:98:ff:18:5e:3a:19:e4: e1:4d:df:19:18:30:1f:bd:ac:a9:89:e0:c9:ba:18: 9f:0a:b6:ea:aa:a3:b0:29:a6:f5:9b:70:81:c2:51: f4:c2:51:ae:f3:2c:38:0b:b4:10:e1:7e:71:6f:52: 46:62:89:2d:17:ac:51:34:cc:cf:1b:ef:f9:bf:db: 9d:34:23:3c:9b:15:8d:52:ad:e0:86:a4:1f:1e:85: ce:2a:fe:61:da:9c:b8:72:1f:84:0b:ec:cf:73:26: ff:c1:0b:a0:35:63:86:64:53:fb:41:08:48:a0:9c: c4:04:22:e8:e2:3f:eb:52:98:12:6e:50:85:19:44: 61:8d:56:e7:06:02:e2:fe:f5:20:cc:2c:4b:b5:64: 7f:6a:dd:3d:a8:71:3d:1a:d5:08:90:f6:ed:91:f3: 59:4a:b7:60:be:af:37:93:9c:d0:bd:72:13:84:e4: 9e:e8:c1:15:f1:0e:e6:de:1b:45:09:29:d7:94:51: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2B:25:EC:CB:8F:25:9D:DA:2B:82:DB:D5:D4:97:FB:4F:FB:3F:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec0bcb82-24bc-47a4-a8fa-2ea114b0e5bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec0bcb82-24bc-47a4-a8fa-2ea114b0e5bb/ec0bcb82-24bc-47a4-a8fa-2ea114b0e5bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 27455 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:91:8c:4e:9d:42:c3:ad:32:0b:06:25:3d:85:5b:16:17:3e: 49:84:3e:b6:32:a4:6f:20:af:aa:46:3b:f4:34:25:4e:56:d3: 92:52:84:fb:d8:f2:ef:7e:49:ec:88:1f:19:0d:62:4e:a0:aa: 61:3f:59:3e:6a:9d:dd:ff:4a:5e:da:48:e2:fd:26:c5:ea:29: 70:a7:00:06:0c:14:0b:fa:7d:a9:b1:f7:b9:90:04:1e:d9:f2: d4:70:80:18:90:d4:bf:1b:19:40:d9:42:2c:51:f3:db:1a:af: 25:b8:d7:a7:f2:20:b6:fb:6d:83:ac:b0:56:c0:a3:ce:f2:ee: 88:79:2d:e5:f9:73:c5:63:e9:ca:b8:d5:c9:ff:f4:bc:fe:a7: f0:58:ce:03:15:81:9b:ca:74:2d:34:2c:9d:5f:7c:f9:e5:f1: 70:d0:1e:9c:7a:01:42:06:06:3d:b4:d1:a2:bf:f5:d6:1e:28: 02:b3:d8:52:f8:1a:4f:1d:bd:f4:af:d8:f1:85:1a:cd:1b:5d: df:e1:91:80:4b:6e:de:05:57:c0:43:3a:75:ef:de:4a:9e:61: d4:bb:08:51:f2:01:c7:f6:8a:82:ce:4d:9b:09:27:b8:f1:64: 76:b9:05:48:ee:3d:80:5b:f0:59:6d:99:fc:41:1c:fa:2b:94: 68:a1:2f:de -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEqm7o9gyD1tVd27uuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MDcyNzAwNDUzN1oXDTI3MTAzMDAwNDUzN1owLzEtMCsGA1UEAxMk ZWMwYmNiODItMjRiYy00N2E0LWE4ZmEtMmVhMTE0YjBlNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTx/WCyTsAxT6fr8lrIpjiYQdsgZO8XfKuQg 6/zjPVsJ2P5YvJL9ABpr1vAqcPjq+JTMU2BdG0CdE2zt8M2X5kPrYJj/GF46GeTh Td8ZGDAfvaypieDJuhifCrbqqqOwKab1m3CBwlH0wlGu8yw4C7QQ4X5xb1JGYokt F6xRNMzPG+/5v9udNCM8mxWNUq3ghqQfHoXOKv5h2py4ch+EC+zPcyb/wQugNWOG ZFP7QQhIoJzEBCLo4j/rUpgSblCFGURhjVbnBgLi/vUgzCxLtWR/at09qHE9GtUI kPbtkfNZSrdgvq83k5zQvXIThOSe6MEV8Q7m3htFCSnXlFE8XQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFLorJezLjyWd2iuC29XUl/tP+z8jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9l YzBiY2I4Mi0yNGJjLTQ3YTQtYThmYS0yZWExMTRiMGU1YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2VjMGJjYjgyLTI0YmMtNDdhNC1h OGZhLTJlYTExNGIwZTViYi9lYzBiY2I4Mi0yNGJjLTQ3YTQtYThmYS0yZWExMTRi MGU1YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICaz8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOJGMTp1Cw60yCwYlPYVbFhc+SYQ+ tjKkbyCvqkY79DQlTlbTklKE+9jy735J7IgfGQ1iTqCqYT9ZPmqd3f9KXtpI4v0m xeopcKcABgwUC/p9qbH3uZAEHtny1HCAGJDUvxsZQNlCLFHz2xqvJbjXp/Igtvtt g6ywVsCjzvLuiHkt5flzxWPpyrjVyf/0vP6n8FjOAxWBm8p0LTQsnV98+eXxcNAe nHoBQgYGPbTRor/11h4oArPYUvgaTx299K/Y8YUazRtd3+GRgEtu3gVXwEM6de/e Sp5h1LsIUfIBx/aKgs5NmwknuPFkdrkFSO49gFvwWW2Z/EEc+iuUaKEv3g== -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:19 2025 by rpki-client