$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017.cer File: d3627be9-2fb3-42f3-bcb2-6a247a2d1017.cer (raw, json) Hash identifier: qQ7Hu0fAhCf6j7kRluYvUGEmj+kmStzADeYtvMLoQo0= Subject key identifier: A1:22:53:81:63:B5:4E:E7:2C:64:FF:9B:F6:EA:92:AD:B0:A1:A5:64 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AA15933BF55D3112A089E4240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/d3627be9-2fb3-42f3-bcb2-6a247a2d1017.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Jul 2025 00:45:38 +0000 Certificate not after: Thu 28 Oct 2027 00:45:38 +0000 Subordinate resources: AS: 396278 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:59:33:bf:55:d3:11:2a:08:9e:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 25 00:45:38 2025 GMT Not After : Oct 28 00:45:38 2027 GMT Subject: CN=d3627be9-2fb3-42f3-bcb2-6a247a2d1017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:2b:3d:06:b4:70:df:45:5a:c8:6c:85:02: d3:0d:1e:46:a0:e8:f1:b0:96:d5:28:66:58:90:11: 9a:a1:a4:a1:28:b9:cc:8f:d6:e4:a5:b8:53:9b:4f: af:59:c2:30:12:3b:33:c8:2a:83:fb:12:cf:f9:52: 3e:e5:94:db:87:f8:34:69:19:0b:fc:26:0f:a1:c6: 56:1f:c0:50:02:23:75:d6:eb:90:e9:7c:02:ef:f8: e2:78:75:a1:7d:2c:6c:b1:ed:8e:c4:51:87:d2:a4: 81:57:bd:bb:4a:6d:72:8b:80:a2:e2:a1:fb:42:57: 40:18:68:9e:54:e6:78:ad:ce:cc:d8:27:5a:90:a3: 31:3b:b1:7c:8a:4c:a6:52:2a:21:b5:dd:b5:e3:73: e4:e3:de:88:ed:74:25:24:c1:d6:9e:cd:a2:4a:f0: 66:5d:65:d2:f6:c8:cc:0b:f7:9a:9b:43:6f:3c:8d: a2:d8:57:84:07:97:42:3b:54:48:b0:d0:27:b7:de: c6:0e:45:dd:05:eb:0e:84:7f:da:78:36:ff:f7:85: eb:1e:3c:4a:41:96:7e:86:ca:3f:7e:40:f0:35:0d: 8f:e1:4a:39:4c:80:6b:f0:44:fe:81:e4:0d:ca:39: f9:04:bc:ad:fe:fb:8b:af:53:18:ea:21:db:3b:9e: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:22:53:81:63:B5:4E:E7:2C:64:FF:9B:F6:EA:92:AD:B0:A1:A5:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/d3627be9-2fb3-42f3-bcb2-6a247a2d1017.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 396278 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a6:89:a7:b6:a9:4c:4a:97:a9:8e:25:f4:d9:4b:43:ce:50: 0b:6c:c4:ca:da:2f:56:ad:49:35:94:f3:f0:90:42:c1:c9:0e: c3:55:c4:36:7f:9c:04:d5:74:66:35:e9:b7:80:22:b4:2a:b9: 62:20:da:33:48:c1:f9:b2:56:5e:bd:6d:bb:18:3d:f9:c9:3f: 67:09:62:05:3e:31:0f:f2:87:af:56:da:8a:69:77:41:e2:95: 29:8a:58:bd:bb:ca:55:da:72:d8:9e:9b:a8:1d:5a:72:28:74: 77:76:8c:2e:9d:ff:a0:15:8e:67:5a:a0:93:7e:15:c0:53:20: 73:b2:3a:91:22:48:51:60:f9:7d:5a:d9:50:e4:c5:ae:ae:68: 4b:c9:2f:a9:43:23:9c:c4:d3:b9:20:ca:9c:41:eb:da:dd:d5: fc:79:f1:69:ea:a8:f9:6e:30:3c:bd:ac:f4:df:9d:2f:93:68: 4c:9e:ac:b9:c3:2f:5f:b4:24:fc:53:52:d7:25:4a:b7:c7:84: 6f:e3:cf:31:cc:13:02:59:5e:17:9e:67:a6:09:82:f4:80:94: 8f:1b:cc:5d:c0:bd:30:69:8d:d6:4f:79:b2:91:6d:f7:c8:65: 0a:2d:35:6f:ac:7b:18:aa:99:55:e2:39:6c:90:33:fe:21:76: 61:d2:1d:dd -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEqhWTO/VdMRKgieQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDcyNTAwNDUzOFoXDTI3MTAyODAwNDUzOFowLzEtMCsGA1UEAxMk ZDM2MjdiZTktMmZiMy00MmYzLWJjYjItNmEyNDdhMmQxMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOwrPQa0cN9FWshshQLTDR5GoOjxsJbVKGZY kBGaoaShKLnMj9bkpbhTm0+vWcIwEjszyCqD+xLP+VI+5ZTbh/g0aRkL/CYPocZW H8BQAiN11uuQ6XwC7/jieHWhfSxsse2OxFGH0qSBV727Sm1yi4Ci4qH7QldAGGie VOZ4rc7M2CdakKMxO7F8ikymUiohtd2143Pk496I7XQlJMHWns2iSvBmXWXS9sjM C/eam0NvPI2i2FeEB5dCO1RIsNAnt97GDkXdBesOhH/aeDb/94XrHjxKQZZ+hso/ fkDwNQ2P4Uo5TIBr8ET+geQNyjn5BLyt/vuLr1MY6iHbO57F8wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFKEiU4FjtU7nLGT/m/bqkq2woaVkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k MzYyN2JlOS0yZmIzLTQyZjMtYmNiMi02YTI0N2EyZDEwMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QzNjI3YmU5LTJmYjMtNDJmMy1i Y2IyLTZhMjQ3YTJkMTAxNy9kMzYyN2JlOS0yZmIzLTQyZjMtYmNiMi02YTI0N2Ey ZDEwMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgv2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGKmiae2qUxKl6mOJfTZS0POUAts xMraL1atSTWU8/CQQsHJDsNVxDZ/nATVdGY16beAIrQquWIg2jNIwfmyVl69bbsY PfnJP2cJYgU+MQ/yh69W2oppd0HilSmKWL27ylXactiem6gdWnIodHd2jC6d/6AV jmdaoJN+FcBTIHOyOpEiSFFg+X1a2VDkxa6uaEvJL6lDI5zE07kgypxB69rd1fx5 8WnqqPluMDy9rPTfnS+TaEyerLnDL1+0JPxTUtclSrfHhG/jzzHMEwJZXheeZ6YJ gvSAlI8bzF3AvTBpjdZPebKRbffIZQotNW+sexiqmVXiOWyQM/4hdmHSHd0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:43:35 2025 by rpki-client