$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28.cer File: dcde9ece-4528-4865-9bea-93bbd069fd28.cer (raw, json) Hash identifier: q7OurAuuVWZcvPSFujwSMP9Nrue5L0O9Q4WB3IT5KrI= Subject key identifier: D1:BB:A4:3D:34:30:4C:58:4D:16:09:78:2C:EB:0B:04:F0:FD:1D:8B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A11CEB71E698354228CC64880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28/dcde9ece-4528-4865-9bea-93bbd069fd28.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Jun 2025 14:46:01 +0000 Certificate not after: Mon 06 Sep 2027 14:46:01 +0000 Subordinate resources: AS: 31763 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:ce:b7:1e:69:83:54:22:8c:c6:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 3 14:46:01 2025 GMT Not After : Sep 6 14:46:01 2027 GMT Subject: CN=dcde9ece-4528-4865-9bea-93bbd069fd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:c4:5d:16:2d:c4:d5:a8:b3:b2:d6:e2:8b: ef:73:96:e8:b0:44:c6:b2:7b:0b:75:78:9e:d4:9f: e1:fe:47:18:e7:eb:90:c6:a3:47:d4:88:9c:f7:b7: 25:7b:f5:34:81:3f:8a:99:48:55:cf:65:2c:f3:19: b1:77:2a:40:70:b3:0e:81:e5:ea:8a:92:e3:25:98: fe:3d:1a:fb:ca:ed:40:64:4c:bc:26:79:c9:af:6d: 2f:d7:85:52:7e:76:9c:95:f6:99:2a:f7:07:3e:6a: 21:d6:aa:65:a4:eb:76:57:78:3e:25:8b:aa:72:1c: c0:97:22:2d:0c:9c:28:88:2c:e4:47:a4:d8:ac:74: f2:af:c3:a3:9f:14:24:33:c8:3b:44:dc:00:aa:9d: 6a:63:d3:05:18:17:da:65:9e:d2:c1:f5:2a:68:38: 8f:70:47:38:c2:ae:5a:33:57:64:15:18:3e:2e:95: 00:72:f5:4f:e7:83:bb:0e:ef:4b:6c:6a:ad:e5:f9: 6c:1f:d5:3d:e3:52:2e:3a:02:81:0e:c4:39:ff:a7: 8e:21:d7:e7:10:fc:ae:23:03:cb:63:42:6b:32:df: dc:51:4e:7f:cf:81:b0:f0:5f:e2:23:f2:a5:28:42: 02:bb:c0:89:12:19:6f:29:a9:e9:3b:5d:3b:b0:97: cd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BB:A4:3D:34:30:4C:58:4D:16:09:78:2C:EB:0B:04:F0:FD:1D:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dcde9ece-4528-4865-9bea-93bbd069fd28/dcde9ece-4528-4865-9bea-93bbd069fd28.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 31763 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b2:80:4d:2d:09:3d:39:82:54:10:ba:3d:6a:8a:85:e7:95: 49:78:69:99:c2:d2:4e:4e:c2:2a:cf:c1:bf:cf:ce:9b:e2:44: 0a:43:0d:bf:87:24:08:4f:ec:d4:6d:cc:5b:39:5c:b4:8c:90: 7b:fe:bb:42:f0:f5:54:b9:8d:40:d0:3a:11:32:60:89:e5:2e: b9:ab:ac:c2:c5:d5:72:3c:0b:19:c8:51:ec:91:dd:11:c9:54: 47:08:7a:05:83:fc:75:b6:29:dd:c0:06:01:c7:62:20:e8:05: e9:76:af:20:ee:02:32:1f:75:f3:ac:0a:09:cb:a5:c3:60:0b: c7:04:47:d2:4e:50:4f:7a:4c:9e:85:2b:3c:ab:9a:e2:1e:f8: 76:bb:25:33:22:bd:53:66:f8:c9:7e:d2:0a:41:25:0a:9a:78: 91:9b:43:83:59:9e:20:35:58:6a:be:80:43:a1:ec:9f:b7:71: 1e:6b:0b:eb:e4:a0:5a:a5:ff:67:cf:62:0a:3e:7f:15:9f:d6: ab:3d:ea:ef:47:71:13:60:c1:85:67:11:7b:40:cd:62:e0:0d: 03:5b:1a:d7:b9:2a:05:95:fd:11:5e:38:b6:6d:c4:37:56:73: 14:de:20:fb:b9:1f:27:8f:3d:95:1e:1b:09:ae:33:69:b0:91: 17:57:4c:cf -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEoRzrceaYNUIozGSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYwMzE0NDYwMVoXDTI3MDkwNjE0NDYwMVowLzEtMCsGA1UEAxMk ZGNkZTllY2UtNDUyOC00ODY1LTliZWEtOTNiYmQwNjlmZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2rEXRYtxNWos7LW4ovvc5bosETGsnsLdXie 1J/h/kcY5+uQxqNH1Iic97cle/U0gT+KmUhVz2Us8xmxdypAcLMOgeXqipLjJZj+ PRr7yu1AZEy8JnnJr20v14VSfnaclfaZKvcHPmoh1qplpOt2V3g+JYuqchzAlyIt DJwoiCzkR6TYrHTyr8OjnxQkM8g7RNwAqp1qY9MFGBfaZZ7SwfUqaDiPcEc4wq5a M1dkFRg+LpUAcvVP54O7Du9LbGqt5flsH9U941IuOgKBDsQ5/6eOIdfnEPyuIwPL Y0JrMt/cUU5/z4Gw8F/iI/KlKEICu8CJEhlvKanpO107sJfNKwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFNG7pD00MExYTRYJeCzrCwTw/R2LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k Y2RlOWVjZS00NTI4LTQ4NjUtOWJlYS05M2JiZDA2OWZkMjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2RjZGU5ZWNlLTQ1MjgtNDg2NS05 YmVhLTkzYmJkMDY5ZmQyOC9kY2RlOWVjZS00NTI4LTQ4NjUtOWJlYS05M2JiZDA2 OWZkMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfBMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAH7KATS0JPTmCVBC6PWqKheeVSXhp mcLSTk7CKs/Bv8/Om+JECkMNv4ckCE/s1G3MWzlctIyQe/67QvD1VLmNQNA6ETJg ieUuuauswsXVcjwLGchR7JHdEclURwh6BYP8dbYp3cAGAcdiIOgF6XavIO4CMh91 86wKCculw2ALxwRH0k5QT3pMnoUrPKua4h74drslMyK9U2b4yX7SCkElCpp4kZtD g1meIDVYar6AQ6Hsn7dxHmsL6+SgWqX/Z89iCj5/FZ/Wqz3q70dxE2DBhWcRe0DN YuANA1sa17kqBZX9EV44tm3EN1ZzFN4g+7kfJ489lR4bCa4zabCRF1dMzw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:41:40 2025 by rpki-client