$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42e1bc86-bbc2-45dc-8409-cda34970a69c.cer File: 42e1bc86-bbc2-45dc-8409-cda34970a69c.cer (raw, json) Hash identifier: B+vXsFl+/8m9vM2+xBDHlkSu3Fd+Iezjd4Cqy6UCpXk= Subject key identifier: F0:13:DC:5B:B0:1A:5B:15:21:39:30:33:F9:27:DD:35:37:A2:30:CB Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584ADBF975C3D606DFF622BCC400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42e1bc86-bbc2-45dc-8409-cda34970a69c/42e1bc86-bbc2-45dc-8409-cda34970a69c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42e1bc86-bbc2-45dc-8409-cda34970a69c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 15 Aug 2025 00:45:25 +0000 Certificate not after: Thu 18 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 35956 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:f9:75:c3:d6:06:df:f6:22:bc:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 15 00:45:25 2025 GMT Not After : Nov 18 01:45:25 2027 GMT Subject: CN=42e1bc86-bbc2-45dc-8409-cda34970a69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6c:48:df:14:0b:7d:2c:9a:b5:9c:6f:7d:4d: ad:9a:f7:7f:c1:fd:0b:f2:2a:17:eb:35:7d:eb:26: 86:55:51:4d:a9:55:8f:4a:20:45:08:20:31:7d:3c: de:49:c1:07:67:a0:72:8d:8d:2f:d9:60:fc:0b:01: f1:11:10:c1:d1:cd:98:5e:67:5c:8a:4a:18:65:36: cf:eb:49:19:a6:ca:b2:9e:e1:e8:84:5a:94:7e:4e: 8b:67:29:35:39:ca:a1:ae:a2:56:63:5d:4e:50:80: c7:15:f5:6b:ea:bf:65:a3:1c:01:5a:13:1c:08:02: c0:73:2e:c4:c2:77:b6:9b:a7:47:bd:2f:7d:28:12: 1e:9f:07:27:5f:81:54:d1:af:a9:85:24:89:87:08: 3e:6d:e5:7f:47:46:15:43:ef:4a:d5:b2:69:da:3f: c9:6a:85:ec:2a:d4:69:9c:9f:13:0d:5e:fe:04:18: fb:0c:fb:79:6f:7c:d6:f3:00:dc:43:8d:4e:01:78: 5f:cb:63:d6:24:19:e1:fa:88:19:89:d1:82:da:ef: f4:03:51:0d:78:3b:a0:23:fe:3a:5e:a0:29:06:2d: 5d:b6:d6:86:44:a6:25:75:bc:f5:94:25:31:01:45: 5c:6c:c7:a0:d9:b1:f7:be:71:42:5c:f9:a4:a7:11: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:13:DC:5B:B0:1A:5B:15:21:39:30:33:F9:27:DD:35:37:A2:30:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42e1bc86-bbc2-45dc-8409-cda34970a69c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/42e1bc86-bbc2-45dc-8409-cda34970a69c/42e1bc86-bbc2-45dc-8409-cda34970a69c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 35956 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:81:83:ca:4b:bf:e4:24:41:1e:5d:4c:ef:46:c0:d4:af:9c: 27:31:6b:07:c0:a2:74:8d:05:25:35:e7:07:09:c1:be:df:55: 24:6e:80:0b:5e:94:b9:0c:3a:a1:af:c6:09:07:fa:63:56:f9: e6:d8:5b:d2:1e:88:69:d8:60:fd:b5:6b:9c:50:3e:82:b7:98: b3:51:61:d4:af:a0:17:f0:bc:60:f2:2c:76:2b:4a:7f:af:f3: 6a:68:62:01:02:03:39:32:aa:21:ef:2b:1d:0e:04:d0:68:d1: 4c:2d:df:a4:8e:5f:83:4b:69:23:1f:17:ee:de:10:12:8a:be: a5:90:e1:e1:20:7f:61:6c:07:a6:da:98:c1:c7:ff:fa:c3:f6: 0e:09:c9:90:ba:a4:d6:ed:a4:41:46:2b:0e:76:b9:78:35:05: b7:e0:4b:12:5b:a6:88:93:46:be:fc:4b:f8:fa:90:17:2d:e9: 4f:3d:1e:41:57:8e:24:86:47:4b:99:93:e1:6e:cc:8b:f0:0e: 4c:20:9a:90:08:8c:60:23:6e:51:2f:af:f8:14:86:cb:11:85: 3a:aa:85:af:20:7c:87:f7:03:42:2e:fb:9c:56:96:ab:d1:62: a0:39:16:e3:ab:b8:cb:b1:b1:cd:33:28:87:d7:27:54:77:b9: 59:12:57:2b -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWErb+XXD1gbf9iK8xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDgxNTAwNDUyNVoXDTI3MTExODAxNDUyNVowLzEtMCsGA1UEAxMk NDJlMWJjODYtYmJjMi00NWRjLTg0MDktY2RhMzQ5NzBhNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomxI3xQLfSyatZxvfU2tmvd/wf0L8ioX6zV9 6yaGVVFNqVWPSiBFCCAxfTzeScEHZ6ByjY0v2WD8CwHxERDB0c2YXmdcikoYZTbP 60kZpsqynuHohFqUfk6LZyk1OcqhrqJWY11OUIDHFfVr6r9loxwBWhMcCALAcy7E wne2m6dHvS99KBIenwcnX4FU0a+phSSJhwg+beV/R0YVQ+9K1bJp2j/JaoXsKtRp nJ8TDV7+BBj7DPt5b3zW8wDcQ41OAXhfy2PWJBnh+ogZidGC2u/0A1ENeDugI/46 XqApBi1dttaGRKYldbz1lCUxAUVcbMeg2bH3vnFCXPmkpxFqpQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFPAT3FuwGlsVITkwM/kn3TU3ojDLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 MmUxYmM4Ni1iYmMyLTQ1ZGMtODQwOS1jZGEzNDk3MGE2OWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzQyZTFiYzg2LWJiYzItNDVkYy04 NDA5LWNkYTM0OTcwYTY5Yy80MmUxYmM4Ni1iYmMyLTQ1ZGMtODQwOS1jZGEzNDk3 MGE2OWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIx0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFqBg8pLv+QkQR5dTO9GwNSvnCcx awfAonSNBSU15wcJwb7fVSRugAtelLkMOqGvxgkH+mNW+ebYW9IeiGnYYP21a5xQ PoK3mLNRYdSvoBfwvGDyLHYrSn+v82poYgECAzkyqiHvKx0OBNBo0Uwt36SOX4NL aSMfF+7eEBKKvqWQ4eEgf2FsB6bamMHH//rD9g4JyZC6pNbtpEFGKw52uXg1Bbfg SxJbpoiTRr78S/j6kBct6U89HkFXjiSGR0uZk+FuzIvwDkwgmpAIjGAjblEvr/gU hssRhTqqha8gfIf3A0Iu+5xWlqvRYqA5FuOruMuxsc0zKIfXJ1R3uVkSVys= -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:25 2025 by rpki-client