$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1837829-3336-4160-9529-c459b8aeea58.cer File: b1837829-3336-4160-9529-c459b8aeea58.cer (raw, json) Hash identifier: hxf6QnRywiWISUJIKuAs2wQNhBl36I+9E1YdO3EyMFM= Subject key identifier: 38:41:10:0D:81:98:67:67:60:B9:91:FA:37:83:4B:6C:7A:9B:66:75 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584BAA84741186886F774CBAA000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1837829-3336-4160-9529-c459b8aeea58/b1837829-3336-4160-9529-c459b8aeea58.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1837829-3336-4160-9529-c459b8aeea58/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Oct 2025 00:22:00 +0000 Certificate not after: Mon 31 Jan 2028 01:22:00 +0000 Subordinate resources: AS: 21990 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:84:74:11:86:88:6f:77:4c:ba:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 28 00:22:00 2025 GMT Not After : Jan 31 01:22:00 2028 GMT Subject: CN=b1837829-3336-4160-9529-c459b8aeea58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:1a:ea:7f:05:11:c7:6c:f2:a8:b7:59:5e: 7b:20:72:0e:f2:d0:07:79:bd:99:2e:be:16:75:58: 46:de:2b:86:2f:fe:ab:96:cf:4f:21:44:b8:d1:09: ed:6f:2c:a4:ec:a8:8b:ad:90:e6:9e:fc:51:38:42: 1e:6b:ee:52:ee:7c:91:80:95:ce:8f:6c:b8:b8:7d: 39:58:81:32:be:c9:34:fb:57:7d:55:58:7a:94:9c: c1:90:37:c4:f8:6c:1a:d2:5a:7e:84:08:1c:e5:4c: 53:b6:a1:9c:8c:c7:b7:1e:77:14:1e:09:c6:d2:45: 40:09:4a:27:67:e1:27:09:bf:e8:5b:16:da:f1:a1: e1:9b:49:1f:b8:cc:15:bf:35:27:c0:f3:a6:24:4c: 30:c3:31:2f:67:e0:e6:34:2f:02:e3:18:0c:2a:28: b3:55:81:5c:2b:9b:dd:d3:34:fa:e5:63:65:6d:d6: d5:02:63:55:3d:1f:e7:bb:35:8f:5c:b3:3a:a1:1b: 12:2d:60:c7:27:06:43:95:97:8b:b4:68:4f:5f:31: 92:2a:78:38:49:c7:75:31:46:54:7b:db:cb:19:55: f5:e2:ac:ad:b2:17:3a:9d:4c:b3:36:0e:b7:19:0d: 02:1e:35:38:50:c3:2b:62:d8:6c:0e:80:d9:4a:f5: 29:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:41:10:0D:81:98:67:67:60:B9:91:FA:37:83:4B:6C:7A:9B:66:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1837829-3336-4160-9529-c459b8aeea58/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1837829-3336-4160-9529-c459b8aeea58/b1837829-3336-4160-9529-c459b8aeea58.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 21990 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:6d:10:1b:64:de:df:6a:ba:ad:0c:ae:d2:da:5e:00:ba:1c: 3c:54:a1:47:c0:92:37:59:70:be:8f:7a:9f:4d:85:a2:e9:fc: ed:2a:fb:7c:2b:54:48:a3:7b:70:10:0e:6e:3c:c3:3b:ba:c0: 60:97:8e:72:b4:7c:8d:3b:90:1d:0a:45:6a:85:a8:6b:f8:8d: ce:05:24:42:51:db:cf:c8:57:f2:90:53:49:f4:3b:8b:af:cf: a0:36:c7:ca:e9:32:61:a3:13:ef:0d:24:e6:33:46:6c:fa:ee: 05:99:79:e9:bf:33:bc:15:ba:1f:e0:17:c9:48:a0:e5:de:47: 1d:c4:2a:b3:27:14:d4:a7:81:77:10:73:97:f9:ac:27:9b:cd: 1b:1f:a5:6d:81:6d:83:84:6e:98:5a:cb:8b:15:33:f6:5e:94: 2d:d9:37:d1:bb:a3:86:2f:94:73:62:e3:b7:04:c3:30:a4:da: 7a:2d:44:a9:72:08:d7:b2:91:c5:da:6e:94:6a:78:7b:3a:ee: 04:13:58:08:e8:dc:33:68:78:c8:67:6b:50:ae:27:1d:17:62: 46:fc:c6:8a:d9:a9:82:13:24:3d:5f:13:3e:57:cd:36:6b:cd: bd:dd:e4:b9:c5:28:45:2e:87:ea:8c:4b:8f:a0:c0:80:22:d7: bd:a8:09:4c -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEuqhHQRhohvd0y6oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTAyODAwMjIwMFoXDTI4MDEzMTAxMjIwMFowLzEtMCsGA1UEAxMk YjE4Mzc4MjktMzMzNi00MTYwLTk1MjktYzQ1OWI4YWVlYTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkIa6n8FEcds8qi3WV57IHIO8tAHeb2ZLr4W dVhG3iuGL/6rls9PIUS40Qntbyyk7KiLrZDmnvxROEIea+5S7nyRgJXOj2y4uH05 WIEyvsk0+1d9VVh6lJzBkDfE+Gwa0lp+hAgc5UxTtqGcjMe3HncUHgnG0kVACUon Z+EnCb/oWxba8aHhm0kfuMwVvzUnwPOmJEwwwzEvZ+DmNC8C4xgMKiizVYFcK5vd 0zT65WNlbdbVAmNVPR/nuzWPXLM6oRsSLWDHJwZDlZeLtGhPXzGSKng4Scd1MUZU e9vLGVX14qytshc6nUyzNg63GQ0CHjU4UMMrYthsDoDZSvUp2wIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFDhBEA2BmGdnYLmR+jeDS2x6m2Z1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i MTgzNzgyOS0zMzM2LTQxNjAtOTUyOS1jNDU5YjhhZWVhNTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2IxODM3ODI5LTMzMzYtNDE2MC05 NTI5LWM0NTliOGFlZWE1OC9iMTgzNzgyOS0zMzM2LTQxNjAtOTUyOS1jNDU5Yjhh ZWVhNTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVeYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQ20QG2Te32q6rQyu0tpeALocPFSh R8CSN1lwvo96n02Foun87Sr7fCtUSKN7cBAObjzDO7rAYJeOcrR8jTuQHQpFaoWo a/iNzgUkQlHbz8hX8pBTSfQ7i6/PoDbHyukyYaMT7w0k5jNGbPruBZl56b8zvBW6 H+AXyUig5d5HHcQqsycU1KeBdxBzl/msJ5vNGx+lbYFtg4RumFrLixUz9l6ULdk3 0bujhi+Uc2LjtwTDMKTaei1EqXII17KRxdpulGp4ezruBBNYCOjcM2h4yGdrUK4n HRdiRvzGitmpghMkPV8TPlfNNmvNvd3kucUoRS6H6oxLj6DAgCLXvagJTA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:02 2025 by rpki-client