$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31c17c01-6a02-495c-a763-aa175a3d8aee.cer File: 31c17c01-6a02-495c-a763-aa175a3d8aee.cer (raw, json) Hash identifier: nxf752qQyoI0rwU9Yf6v6Z/Uh4+OtfYzl9DqNV/6jPk= Subject key identifier: 5A:8A:E7:A2:EE:02:4E:2E:FE:DB:10:88:BA:1D:D7:8F:D3:31:68:5C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584E8F4D77772FE21FC1787EF800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31c17c01-6a02-495c-a763-aa175a3d8aee/31c17c01-6a02-495c-a763-aa175a3d8aee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31c17c01-6a02-495c-a763-aa175a3d8aee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Jul 2026 08:45:11 +0000 Certificate not after: Sun 22 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 10821 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:4d:77:77:2f:e2:1f:c1:78:7e:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 20 08:45:11 2026 GMT Not After : Oct 22 08:45:11 2028 GMT Subject: CN=31c17c01-6a02-495c-a763-aa175a3d8aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:e7:fe:27:cf:8b:9f:52:b4:07:a8:8d:4a: a5:f3:06:6f:e1:d6:a6:ba:97:8c:77:dc:9d:b4:27: 37:64:bc:01:f2:66:1c:ec:b7:94:b5:ac:59:d3:e6: 96:b1:d4:fb:d0:c7:05:1f:51:17:51:1a:ee:3a:10: f7:3b:9c:38:a5:70:42:93:8b:06:51:1d:63:c3:79: b5:b0:8a:0f:d7:f4:81:6c:22:0c:1b:b3:4b:41:33: 55:4f:6d:87:30:4f:f7:16:03:13:81:44:42:22:93: 41:a3:24:ea:24:62:ad:fb:c9:ea:e8:76:d4:7a:d6: 4b:3c:34:c8:58:d4:47:fe:72:ee:43:f8:ac:de:17: b5:90:bb:77:5f:69:e0:79:ec:2a:70:6f:5b:12:13: 14:29:2e:16:81:22:3e:6e:e7:02:b7:18:dd:81:28: 39:dc:ff:b4:66:2e:d9:b3:8f:03:4d:b4:27:06:20: 41:6d:60:c3:c8:85:1b:93:d6:75:f4:42:fa:9e:85: df:3b:3a:ec:df:63:55:e7:8f:49:3a:1d:5e:d9:fa: ac:43:c8:13:b6:70:2c:ce:a9:2a:e2:43:ba:2e:7b: 9a:8e:e4:ee:d2:1c:c8:b0:2b:c5:5a:e0:c5:4b:4d: 7b:16:b5:17:70:78:ba:6e:bc:b2:75:f4:75:d4:30: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8A:E7:A2:EE:02:4E:2E:FE:DB:10:88:BA:1D:D7:8F:D3:31:68:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31c17c01-6a02-495c-a763-aa175a3d8aee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31c17c01-6a02-495c-a763-aa175a3d8aee/31c17c01-6a02-495c-a763-aa175a3d8aee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 10821 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:76:60:e8:8f:67:56:32:fb:af:0e:d0:0f:c2:b7:1c:c3:6b: b9:a3:ca:f2:90:73:5f:a5:ec:9d:2c:20:c9:83:e4:c2:36:e5: 13:56:f8:46:b6:70:4b:5b:ae:c7:ba:c3:84:7e:8e:5b:82:f3: ca:68:5c:0a:6f:50:32:54:b7:cf:60:7d:fb:41:5b:ac:98:c5: b9:10:0c:03:ef:50:5f:c8:bc:a8:96:99:b2:6f:df:d8:a4:3f: f1:bd:5b:08:79:49:8b:c7:75:46:4b:df:ec:dd:8e:82:ad:4f: 0c:84:b0:93:5d:cb:76:38:f3:a0:b7:9e:7a:ba:1d:64:e8:2c: 2d:7f:c9:ec:e1:16:ea:51:47:10:60:9e:6f:5a:31:e1:59:ec: fb:9c:3a:b3:2c:06:2d:2b:4d:2a:02:02:ce:8d:6b:24:52:7b: 21:17:a0:52:1d:fe:e5:ce:69:db:bc:60:f0:ad:63:ba:a2:98: f9:00:81:61:30:a8:c8:b0:04:b9:22:df:4b:23:fd:0b:22:50: b8:5b:5c:cb:8f:78:3a:25:59:c9:8f:af:8a:e8:30:a7:26:c5: 9d:82:a5:e3:a4:56:f6:51:6f:52:cb:1a:c2:32:c8:35:8e:e5: 4e:4f:9d:a6:30:43:85:15:ba:ba:c3:83:0e:31:65:43:a8:56: 73:8d:78:67 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE6PTXd3L+IfwXh++AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI2MDcyMDA4NDUxMVoXDTI4MTAyMjA4NDUxMVowLzEtMCsGA1UEAxMk MzFjMTdjMDEtNmEwMi00OTVjLWE3NjMtYWExNzVhM2Q4YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFPn/ifPi59StAeojUql8wZv4damupeMd9yd tCc3ZLwB8mYc7LeUtaxZ0+aWsdT70McFH1EXURruOhD3O5w4pXBCk4sGUR1jw3m1 sIoP1/SBbCIMG7NLQTNVT22HME/3FgMTgURCIpNBoyTqJGKt+8nq6HbUetZLPDTI WNRH/nLuQ/is3he1kLt3X2ngeewqcG9bEhMUKS4WgSI+bucCtxjdgSg53P+0Zi7Z s48DTbQnBiBBbWDDyIUbk9Z19EL6noXfOzrs32NV549JOh1e2fqsQ8gTtnAszqkq 4kO6LnuajuTu0hzIsCvFWuDFS017FrUXcHi6bryydfR11DDuDwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFFqK56LuAk4u/tsQiLod14/TMWhcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z MWMxN2MwMS02YTAyLTQ5NWMtYTc2My1hYTE3NWEzZDhhZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzMxYzE3YzAxLTZhMDItNDk1Yy1h NzYzLWFhMTc1YTNkOGFlZS8zMWMxN2MwMS02YTAyLTQ5NWMtYTc2My1hYTE3NWEz ZDhhZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICKkUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAY3Zg6I9nVjL7rw7QD8K3HMNruaPK 8pBzX6XsnSwgyYPkwjblE1b4RrZwS1uux7rDhH6OW4LzymhcCm9QMlS3z2B9+0Fb rJjFuRAMA+9QX8i8qJaZsm/f2KQ/8b1bCHlJi8d1Rkvf7N2Ogq1PDISwk13Ldjjz oLeeerodZOgsLX/J7OEW6lFHEGCeb1ox4Vns+5w6sywGLStNKgICzo1rJFJ7IReg Uh3+5c5p27xg8K1juqKY+QCBYTCoyLAEuSLfSyP9CyJQuFtcy494OiVZyY+viugw pybFnYKl46RW9lFvUssawjLINY7lTk+dpjBDhRW6usODDjFlQ6hWc414Zw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:04:21 2026 by rpki-client