$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853.cer File: e6c8b293-20a5-43d7-a664-742958ffa853.cer (raw, json) Hash identifier: 2Q5BG37D5b3DxtIkGlWtdWP7uR9E7CtWgbqVHQbu2V8= Subject key identifier: 69:A3:B1:CF:9F:6C:CE:B3:D9:3F:7B:67:34:99:4C:4B:D1:3F:67:25 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584AC9B7B2AE8583589080FBAD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853/e6c8b293-20a5-43d7-a664-742958ffa853.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 11:48:22 +0000 Certificate not after: Sun 21 Mar 2027 19:19:17 +0000 Subordinate resources: AS: 17014 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:b7:b2:ae:85:83:58:90:80:fb:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 8 11:48:22 2025 GMT Not After : Mar 21 19:19:17 2027 GMT Subject: CN=e6c8b293-20a5-43d7-a664-742958ffa853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:05:be:b3:ad:8f:0a:0f:2c:ef:88:c3:18: 6d:ae:1f:fd:c0:d4:bf:ae:be:8b:8e:2c:12:61:77: 3c:1c:72:c4:69:05:79:9f:0b:0d:20:bb:d3:83:62: 20:3b:30:54:76:2c:29:04:54:9b:73:8c:a2:03:ed: 98:6e:3a:00:a8:73:ee:d1:3b:a0:32:3c:6a:b8:8d: 00:64:cb:ae:07:0d:5a:12:f2:23:0d:21:e5:44:d2: f0:18:a4:8a:17:17:db:66:0e:55:88:a5:cf:e1:ee: 38:63:75:ba:46:ab:79:01:26:c3:48:2a:ac:39:7c: ca:b6:a8:ff:1a:ee:5f:04:21:bd:72:db:26:a6:8f: 3a:7e:a8:67:4c:1a:49:6b:8e:a6:76:06:87:a6:5c: ee:04:5e:1b:09:e8:bb:5a:66:e0:8f:63:c7:a0:ac: dd:b5:d2:98:56:eb:0f:0d:82:9e:72:ac:94:a0:ca: 7c:91:28:d3:e0:77:74:a4:62:48:c7:b5:6a:a8:53: fc:b4:6e:b8:8e:e3:21:09:02:f0:5b:10:01:fb:3c: ba:a0:67:72:cf:24:a2:da:1d:e8:6c:89:cf:58:f1: 1f:2e:a9:19:87:3e:ca:ae:fb:86:52:f8:0b:ab:dc: 1c:5d:0f:aa:1e:2d:f7:cb:cb:df:dc:39:fe:43:c9: fc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A3:B1:CF:9F:6C:CE:B3:D9:3F:7B:67:34:99:4C:4B:D1:3F:67:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e6c8b293-20a5-43d7-a664-742958ffa853/e6c8b293-20a5-43d7-a664-742958ffa853.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 17014 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a5:7d:9b:22:79:18:b4:94:56:e6:d8:52:fe:1d:9c:de:c6: 5a:33:cd:c1:97:f0:a3:a6:36:fb:e4:4a:cc:08:21:b9:9b:24: 20:6f:a1:fc:81:2a:37:26:d0:9d:35:0b:e5:eb:b5:d5:be:b5: 24:5f:3f:db:0b:6b:9a:fb:c6:6d:ac:04:62:90:48:f3:43:45: b8:70:66:e8:28:30:6d:71:9b:f5:ec:b4:36:04:98:65:b3:ff: 78:f8:0e:0d:1a:d8:f3:4c:b8:93:e5:e7:dd:e6:b4:8e:c4:38: 97:6c:67:8b:3a:cb:be:dd:6a:2c:6c:c5:8b:71:1a:b3:67:25: b3:42:04:da:89:ba:13:d1:c7:72:57:0d:0e:16:0d:b8:f5:3f: dc:e8:d1:cc:83:57:a7:28:27:93:94:d1:da:a3:b7:d2:c3:57: 60:96:17:d4:ec:27:fd:a5:90:f9:1c:66:ef:63:fa:eb:99:07: 89:52:58:f2:65:03:2c:66:66:ec:ec:f1:c8:ec:d7:7c:df:c9: 71:07:7f:cb:42:dd:87:dd:d0:10:a4:30:64:e7:25:25:94:43: 14:e2:23:43:3a:4f:07:a7:74:21:d3:4c:f7:86:7e:d6:90:61: 43:1b:9c:08:ee:b5:e7:a4:d3:5c:07:3c:2d:47:ec:fe:f9:38: 4b:dc:bf:14 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWErJt7KuhYNYkID7rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDgwODExNDgyMloXDTI3MDMyMTE5MTkxN1owLzEtMCsGA1UEAxMk ZTZjOGIyOTMtMjBhNS00M2Q3LWE2NjQtNzQyOTU4ZmZhODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNUFvrOtjwoPLO+Iwxhtrh/9wNS/rr6LjiwS YXc8HHLEaQV5nwsNILvTg2IgOzBUdiwpBFSbc4yiA+2YbjoAqHPu0TugMjxquI0A ZMuuBw1aEvIjDSHlRNLwGKSKFxfbZg5ViKXP4e44Y3W6Rqt5ASbDSCqsOXzKtqj/ Gu5fBCG9ctsmpo86fqhnTBpJa46mdgaHplzuBF4bCei7Wmbgj2PHoKzdtdKYVusP DYKecqyUoMp8kSjT4Hd0pGJIx7VqqFP8tG64juMhCQLwWxAB+zy6oGdyzySi2h3o bInPWPEfLqkZhz7KrvuGUvgLq9wcXQ+qHi33y8vf3Dn+Q8n8gQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFGmjsc+fbM6z2T97ZzSZTEvRP2clMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l NmM4YjI5My0yMGE1LTQzZDctYTY2NC03NDI5NThmZmE4NTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2U2YzhiMjkzLTIwYTUtNDNkNy1h NjY0LTc0Mjk1OGZmYTg1My9lNmM4YjI5My0yMGE1LTQzZDctYTY2NC03NDI5NThm ZmE4NTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQnYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIqV9myJ5GLSUVubYUv4dnN7GWjPN wZfwo6Y2++RKzAghuZskIG+h/IEqNybQnTUL5eu11b61JF8/2wtrmvvGbawEYpBI 80NFuHBm6CgwbXGb9ey0NgSYZbP/ePgODRrY80y4k+Xn3ea0jsQ4l2xnizrLvt1q LGzFi3Eas2cls0IE2om6E9HHclcNDhYNuPU/3OjRzINXpygnk5TR2qO30sNXYJYX 1Own/aWQ+Rxm72P665kHiVJY8mUDLGZm7OzxyOzXfN/JcQd/y0Ldh93QEKQwZOcl JZRDFOIjQzpPB6d0IdNM94Z+1pBhQxucCO6156TTXAc8LUfs/vk4S9y/FA== -----END CERTIFICATE-----Generated at Sat Aug 23 17:28:42 2025 by rpki-client