$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.cer File: ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.cer (raw, json) Hash identifier: GNLl1ALVdfzX4JYDHDLAiT/zIpzXW7nCjhti1hzauhY= Subject key identifier: CF:3C:DB:07:CE:D5:8F:61:44:B1:ED:7D:83:47:62:A2:81:BE:F1:6C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A4D98AB07436CC40AD9607A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 00:45:36 +0000 Certificate not after: Tue 28 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 40368 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:98:ab:07:43:6c:c4:0a:d9:60:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 25 00:45:36 2025 GMT Not After : Sep 28 00:45:36 2027 GMT Subject: CN=ec4fbd7f-bcba-4531-913e-7ecb3b470c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:75:12:7a:80:40:fa:76:80:82:07:ac:5a: 68:ad:36:13:bf:e1:5f:f5:8c:8b:4c:8f:36:16:11: 33:7b:57:16:70:34:3c:82:e7:0e:1c:84:18:be:dc: f9:a5:7b:e2:34:00:53:57:8c:c9:d4:43:35:9d:6e: 80:de:91:98:98:38:a8:7a:14:6b:be:6b:41:e7:fc: c4:06:54:14:a2:df:bf:2c:ab:9d:a0:48:c6:cb:30: 91:0b:1c:6f:72:5a:2b:4c:d8:39:86:93:63:3a:18: 89:fc:ba:b2:4a:5c:bf:67:2d:4f:30:6b:bf:8e:b5: 37:79:84:28:9f:fa:6b:53:98:18:76:fd:90:95:e2: f8:c4:9b:da:fd:3e:ae:6b:4c:c1:3b:b3:d6:e9:9b: e2:ea:90:66:13:0a:bf:99:9e:57:5b:4f:14:fc:f4: 55:be:d6:b5:4e:54:f7:84:03:4c:3a:f9:3c:27:2f: dc:67:b9:18:38:9f:b7:ab:c9:83:79:3b:de:bc:ba: 11:62:ae:a7:ab:4e:46:72:7f:fb:ca:a5:b1:aa:6c: d0:a3:eb:77:f0:00:d3:01:7c:96:38:3e:70:82:f6: 3c:a2:ce:9a:2d:e9:dc:69:0e:0e:6f:25:7f:59:7e: 97:d5:91:55:b4:8f:21:54:69:14:8b:3b:47:fb:8e: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:DB:07:CE:D5:8F:61:44:B1:ED:7D:83:47:62:A2:81:BE:F1:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a/ec4fbd7f-bcba-4531-913e-7ecb3b470c5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 40368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:92:78:53:d0:30:8f:4e:3f:80:e0:77:7c:1e:3a:16:57:56: 45:0e:1f:e8:f8:04:ad:9b:55:0b:a0:29:66:e4:ed:1f:7b:ba: 8e:c8:4a:9a:d4:57:1f:4a:8d:92:bb:16:d9:34:e5:59:77:80: 8f:90:d7:aa:2b:92:e2:1a:4f:31:b9:31:df:5b:a9:57:0a:ab: 58:31:2c:6d:bb:83:d1:88:5d:37:05:21:2c:39:8a:24:54:ac: d5:31:68:e4:ec:46:0f:de:e0:56:d1:c7:7d:17:41:2d:0d:5f: be:7c:eb:21:39:5b:ab:4a:47:f3:f7:ea:96:10:3f:1e:20:e6: bc:e6:42:d5:bf:85:15:73:3d:a3:43:d5:ec:d3:42:c2:a0:cd: 1f:19:22:52:45:3a:17:63:e3:9e:8e:35:4c:87:04:61:f4:06: 8d:8a:22:96:73:df:2c:2a:49:dd:88:a4:d5:6a:9a:70:d8:71: f6:04:db:e3:be:0b:ae:81:b8:b0:a5:0a:6e:2b:d2:a6:4f:4c: b2:db:d5:94:ce:b3:96:18:ca:3d:69:32:17:5e:74:57:e6:25: 5d:d4:c8:2f:70:ff:51:58:09:89:2f:5a:8f:8c:ca:9d:9f:35: 98:03:93:ea:c1:cb:24:a1:51:1c:c9:41:e5:ec:6f:f7:b2:9b: b9:3f:65:e9 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEpNmKsHQ2zECtlgekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyNTAwNDUzNloXDTI3MDkyODAwNDUzNlowLzEtMCsGA1UEAxMk ZWM0ZmJkN2YtYmNiYS00NTMxLTkxM2UtN2VjYjNiNDcwYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSp1EnqAQPp2gIIHrFporTYTv+Ff9YyLTI82 FhEze1cWcDQ8gucOHIQYvtz5pXviNABTV4zJ1EM1nW6A3pGYmDioehRrvmtB5/zE BlQUot+/LKudoEjGyzCRCxxvclorTNg5hpNjOhiJ/LqySly/Zy1PMGu/jrU3eYQo n/prU5gYdv2QleL4xJva/T6ua0zBO7PW6Zvi6pBmEwq/mZ5XW08U/PRVvta1TlT3 hANMOvk8Jy/cZ7kYOJ+3q8mDeTvevLoRYq6nq05Gcn/7yqWxqmzQo+t38ADTAXyW OD5wgvY8os6aLencaQ4ObyV/WX6X1ZFVtI8hVGkUiztH+472dQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFM882wfO1Y9hRLHtfYNHYqKBvvFsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YzRmYmQ3Zi1iY2JhLTQ1MzEtOTEzZS03ZWNiM2I0NzBjNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2VjNGZiZDdmLWJjYmEtNDUzMS05 MTNlLTdlY2IzYjQ3MGM1YS9lYzRmYmQ3Zi1iY2JhLTQ1MzEtOTEzZS03ZWNiM2I0 NzBjNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJ2wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD6SeFPQMI9OP4Dgd3weOhZXVkUO H+j4BK2bVQugKWbk7R97uo7ISprUVx9KjZK7Ftk05Vl3gI+Q16orkuIaTzG5Md9b qVcKq1gxLG27g9GIXTcFISw5iiRUrNUxaOTsRg/e4FbRx30XQS0NX7586yE5W6tK R/P36pYQPx4g5rzmQtW/hRVzPaND1ezTQsKgzR8ZIlJFOhdj456ONUyHBGH0Bo2K IpZz3ywqSd2IpNVqmnDYcfYE2+O+C66BuLClCm4r0qZPTLLb1ZTOs5YYyj1pMhde dFfmJV3UyC9w/1FYCYkvWo+Myp2fNZgDk+rByyShURzJQeXsb/eym7k/Zek= -----END CERTIFICATE-----Generated at Sun Jun 29 13:34:10 2025 by rpki-client