$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer File: 3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer (raw, json) Hash identifier: ej00hkZf3sOc/sPt7krtqb2+y6ozRS8bilvZGa+g+cQ= Subject key identifier: A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33 Authority key identifier: 3C:69:1D:55:9F:55:1E:8C:6B:12:ED:6C:AC:EF:64:F8:58:EC:CA:CB Certificate issuer: /CN=a2cdb319-ae5d-4d45-8754-29f4bc31c46d Certificate serial: 010D0C9F4328584BB80E12EC0D697B96FCFD8100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer Manifest: rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.mft caRepository: rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sat 01 Nov 2025 20:44:48 +0000 Certificate not after: Fri 04 Feb 2028 21:44:48 +0000 Subordinate resources: AS: 32042 IP: 2602:f4e3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:0e:12:ec:0d:69:7b:96:fc:fd:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2cdb319-ae5d-4d45-8754-29f4bc31c46d Validity Not Before: Nov 1 20:44:48 2025 GMT Not After : Feb 4 21:44:48 2028 GMT Subject: CN=3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:52:43:d6:b8:1c:22:c8:ca:74:db:65:d9: d5:ed:67:6d:3f:25:76:c4:ba:3f:6a:a9:37:0d:98: f5:de:e1:ee:47:96:67:70:9c:2a:9c:b8:f2:9e:32: b6:2e:f8:69:fa:30:af:29:5c:bd:cf:6f:c7:00:36: c0:a3:20:56:6b:7b:e6:f4:7e:1a:3f:4d:09:4a:f2: 5c:13:a4:b6:27:2a:42:98:d7:50:89:78:38:e7:d9: f7:5e:b4:b5:8a:4a:dc:12:73:de:b3:a0:e1:f0:52: 85:2c:71:d2:a2:03:60:bc:2d:16:7c:33:64:c0:cc: 0d:3f:4a:64:df:81:db:40:7e:9f:40:a0:1b:3d:9d: 1d:0a:e7:58:bd:d6:af:a4:d7:93:6c:f7:2a:96:de: 45:73:85:a8:7c:58:38:80:71:91:42:3d:15:7f:da: 7e:d1:5a:17:d3:32:c2:32:14:23:c1:ee:25:d1:e7: 09:76:ed:40:eb:f7:b0:87:df:67:b2:0a:0c:2d:3d: 43:4f:f5:8d:20:05:fd:06:2d:c7:c5:8b:61:04:9c: 62:c5:04:85:5d:ba:73:6a:27:55:d6:7b:b5:a3:c4: 81:97:51:47:5d:2f:82:52:9a:85:27:44:87:7d:23: e6:a6:6d:f9:a7:ea:4d:22:0c:f6:cc:35:a6:77:21: 20:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.crl X509v3 Authority Key Identifier: keyid:3C:69:1D:55:9F:55:1E:8C:6B:12:ED:6C:AC:EF:64:F8:58:EC:CA:CB X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4e3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32042 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:45:3f:68:09:d9:20:96:78:0f:b3:ac:ff:a7:f5:f6:e7:05: 9c:32:06:83:8d:a1:ca:1e:46:50:3d:10:e8:f4:fb:5e:25:bd: 19:11:b0:01:58:58:ab:f2:42:79:b6:f6:76:1a:d4:bf:de:ee: 64:75:cb:be:8c:f9:8d:7e:78:9f:51:3c:bc:42:e6:a5:09:c1: eb:7a:33:6f:5b:7b:88:e4:66:29:92:e2:98:a1:52:ca:21:2c: 54:0a:4b:e4:6e:d0:b2:c3:b0:0a:46:31:cd:87:fc:2a:d5:48: bc:9e:38:3e:26:e4:94:81:be:77:97:fb:a3:41:23:ba:d1:e0: cc:db:fb:ff:9c:fc:b8:a2:6e:fb:5b:61:7c:4f:08:41:c2:a6: 3d:cf:7e:24:ea:13:2f:7e:4f:8b:36:fa:39:14:92:e9:68:4f: 21:5c:e1:8e:29:1f:c0:d0:39:07:2e:f4:c1:74:85:d5:10:22: a6:a5:02:e1:94:bc:93:fc:e9:85:ae:00:d0:aa:4b:dc:5d:01: f7:f4:48:8c:fc:5e:c2:ee:05:68:3b:4f:78:fa:05:e9:ee:d5: 95:68:23:16:ef:3c:6d:c6:2a:4f:77:d1:51:6c:e9:c3:d2:d8: 00:66:de:d6:9c:45:31:90:db:3f:60:fd:f5:55:64:ef:f3:ab: 1f:c9:a4:74 -----BEGIN CERTIFICATE----- MIIGvjCCBaagAwIBAgIUAQ0Mn0MoWEu4DhLsDWl7lvz9gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjZGIzMTktYWU1ZC00ZDQ1LTg3NTQtMjlmNGJjMzFj NDZkMB4XDTI1MTEwMTIwNDQ0OFoXDTI4MDIwNDIxNDQ0OFowPTE7MDkGA1UEAxMy M2MxN2E3NmNjNGM3YTlhZTU4MmUxZDllMDU3N2RkNmZiZDI3ZDU5NTVlYTA5NDcy ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnlJD1rgcIsjKdNtl 2dXtZ20/JXbEuj9qqTcNmPXe4e5HlmdwnCqcuPKeMrYu+Gn6MK8pXL3Pb8cANsCj IFZre+b0fho/TQlK8lwTpLYnKkKY11CJeDjn2fdetLWKStwSc96zoOHwUoUscdKi A2C8LRZ8M2TAzA0/SmTfgdtAfp9AoBs9nR0K51i91q+k15Ns9yqW3kVzhah8WDiA cZFCPRV/2n7RWhfTMsIyFCPB7iXR5wl27UDr97CH32eyCgwtPUNP9Y0gBf0GLcfF i2EEnGLFBIVdunNqJ1XWe7WjxIGXUUddL4JSmoUnRId9I+ambfmn6k0iDPbMNaZ3 ISDjAgMBAAGjggPCMIIDvjAdBgNVHQ4EFgQUqI+03RwQAitu/bOlJzZhpB4nUjMw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvYTM0N2MwNGZhYTYzNDIzYmFjNGZiMTFi Nzc1OWI2OTYvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvYTM0N2MwNGZhYTYzNDIzYmFjNGZiMTFiNzc1OWI2OTYv MC9BODhGQjRERDFDMTAwMjJCNkVGREIzQTUyNzM2NjFBNDFFMjc1MjMzLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdh Ny00NTg4LWFiZWEtZTQ5MDllZjFiNGUyL2EyY2RiMzE5LWFlNWQtNGQ0NS04NzU0 LTI5ZjRiYzMxYzQ2ZC9hMmNkYjMxOS1hZTVkLTRkNDUtODc1NC0yOWY0YmMzMWM0 NmQuY3JsMB8GA1UdIwQYMBaAFDxpHVWfVR6MaxLtbKzvZPhY7MrLMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3LTQ1ODgt YWJlYS1lNDkwOWVmMWI0ZTIvYTJjZGIzMTktYWU1ZC00ZDQ1LTg3NTQtMjlmNGJj MzFjNDZkLmNlcjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCYC9OMAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAn0qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAApFP2gJ2SCWeA+zrP+n 9fbnBZwyBoONocoeRlA9EOj0+14lvRkRsAFYWKvyQnm29nYa1L/e7mR1y76M+Y1+ eJ9RPLxC5qUJwet6M29be4jkZimS4pihUsohLFQKS+Ru0LLDsApGMc2H/CrVSLye OD4m5JSBvneX+6NBI7rR4Mzb+/+c/LiibvtbYXxPCEHCpj3PfiTqEy9+T4s2+jkU kuloTyFc4Y4pH8DQOQcu9MF0hdUQIqalAuGUvJP86YWuANCqS9xdAff0SIz8XsLu BWg7T3j6Benu1ZVoIxbvPG3GKk930VFs6cPS2ABm3tacRTGQ2z9g/fVVZO/zqx/J pHQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:48:27 2025 by rpki-client