$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/249aa5db-1197-4209-ae47-64dc09b027f0.cer File: 249aa5db-1197-4209-ae47-64dc09b027f0.cer (raw, json) Hash identifier: 9P/ksftUo3MYbMRkmhrvtSCqirlYBV9MDRTcSC6AZdc= Subject key identifier: 95:60:AA:DD:83:D5:A2:68:9E:EF:C7:65:2F:01:43:0F:5F:E4:6B:84 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AD3A38F0E16463BB815BBEA10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/249aa5db-1197-4209-ae47-64dc09b027f0/249aa5db-1197-4209-ae47-64dc09b027f0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/249aa5db-1197-4209-ae47-64dc09b027f0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Aug 2025 01:05:52 +0000 Certificate not after: Mon 15 Nov 2027 02:05:52 +0000 Subordinate resources: AS: 400053 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a3:8f:0e:16:46:3b:b8:15:bb:ea:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 12 01:05:52 2025 GMT Not After : Nov 15 02:05:52 2027 GMT Subject: CN=249aa5db-1197-4209-ae47-64dc09b027f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:d1:31:90:91:ba:15:cd:92:75:3c:0a:96: 25:0a:43:79:99:fe:3b:53:1c:8a:3f:93:29:ff:72: e9:4a:fc:c5:d1:34:ec:a0:37:47:c8:4a:32:5e:4f: ff:b7:c7:b8:0d:b3:25:e9:ef:71:95:af:29:f8:1c: 75:ef:19:17:39:24:98:a3:30:85:f5:ea:ba:86:c4: 88:25:ac:ba:9e:1f:c6:79:e4:14:7c:48:ff:df:2b: 42:f4:eb:4a:6e:c4:40:90:6f:63:f1:1e:5f:df:b0: 1d:2b:a9:4a:20:12:47:cd:2c:91:54:37:07:62:6a: 49:69:33:c5:cd:08:01:44:1e:2c:dc:a2:07:3c:43: 76:e5:ab:e6:a6:5a:c4:d0:72:d0:84:6a:f9:4f:28: d5:3a:cb:b8:80:c7:24:24:10:47:9d:79:86:7e:55: 55:32:ae:34:58:53:fb:79:82:3b:51:79:bd:14:ca: 71:2c:3e:f7:83:70:88:65:ec:b2:4c:67:11:ed:12: ac:c9:29:bb:3a:78:49:7d:65:ea:dc:4f:13:06:6d: 9b:fa:1e:40:56:a3:b7:66:b6:12:d4:34:72:4a:b9: fa:fb:23:c5:a1:f3:c5:53:a6:f8:b4:f2:ba:72:39: 18:30:29:9f:fa:cf:c9:3b:19:b2:59:fd:c7:00:fd: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:60:AA:DD:83:D5:A2:68:9E:EF:C7:65:2F:01:43:0F:5F:E4:6B:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/249aa5db-1197-4209-ae47-64dc09b027f0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/249aa5db-1197-4209-ae47-64dc09b027f0/249aa5db-1197-4209-ae47-64dc09b027f0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 400053 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:20:bf:c0:eb:0e:4a:42:5b:5b:20:f9:ed:e6:4a:32:f2:56: ca:7f:ef:1a:08:6c:0a:b7:f8:f8:5f:a2:cc:e9:8f:b4:89:7e: fd:8c:cf:5e:a7:54:3b:55:c4:0d:45:62:53:ff:19:41:3e:59: c4:2e:04:7f:95:82:28:96:f2:7e:0e:66:1f:5f:90:cc:bc:a1: 08:b3:2a:e3:d5:30:4a:c4:71:60:cc:da:6c:d6:98:a8:00:99: 4a:8a:48:5c:6a:8f:f9:d8:58:32:7c:7b:dc:74:ec:f9:4e:56: 9d:58:0d:d2:98:8d:81:e5:ee:08:76:12:74:4b:c9:21:2f:d9: d9:1d:52:d2:91:db:e2:f1:be:69:03:c8:94:81:61:d5:3a:ce: 33:b1:23:c8:8b:21:65:8d:43:24:ba:68:e2:8d:2f:78:63:24: 93:5f:57:b1:5a:0c:02:cf:34:ac:a5:2e:95:cc:e6:af:c7:db: fb:2f:dd:b8:15:bb:91:ca:b2:f5:42:c0:0b:61:9a:43:31:ee: 9f:4f:35:98:a2:ad:42:5e:aa:c2:62:15:7e:d7:8f:74:9b:5c: a0:50:e5:ef:31:94:30:23:92:13:4b:0d:ed:ba:87:08:4c:e6: 9b:a8:3e:f4:fe:5c:89:ba:a2:1c:a4:8d:57:82:ba:80:1e:49: a6:ef:ae:33 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWErTo48OFkY7uBW76hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxMjAxMDU1MloXDTI3MTExNTAyMDU1MlowLzEtMCsGA1UEAxMk MjQ5YWE1ZGItMTE5Ny00MjA5LWFlNDctNjRkYzA5YjAyN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX/RMZCRuhXNknU8CpYlCkN5mf47UxyKP5Mp /3LpSvzF0TTsoDdHyEoyXk//t8e4DbMl6e9xla8p+Bx17xkXOSSYozCF9eq6hsSI Jay6nh/GeeQUfEj/3ytC9OtKbsRAkG9j8R5f37AdK6lKIBJHzSyRVDcHYmpJaTPF zQgBRB4s3KIHPEN25avmplrE0HLQhGr5TyjVOsu4gMckJBBHnXmGflVVMq40WFP7 eYI7UXm9FMpxLD73g3CIZeyyTGcR7RKsySm7OnhJfWXq3E8TBm2b+h5AVqO3ZrYS 1DRySrn6+yPFofPFU6b4tPK6cjkYMCmf+s/JOxmyWf3HAP1/1wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFJVgqt2D1aJonu/HZS8BQw9f5GuEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y NDlhYTVkYi0xMTk3LTQyMDktYWU0Ny02NGRjMDliMDI3ZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzI0OWFhNWRiLTExOTctNDIwOS1h ZTQ3LTY0ZGMwOWIwMjdmMC8yNDlhYTVkYi0xMTk3LTQyMDktYWU0Ny02NGRjMDli MDI3ZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhq1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALEgv8DrDkpCW1sg+e3mSjLyVsp/ 7xoIbAq3+Phfoszpj7SJfv2Mz16nVDtVxA1FYlP/GUE+WcQuBH+VgiiW8n4OZh9f kMy8oQizKuPVMErEcWDM2mzWmKgAmUqKSFxqj/nYWDJ8e9x07PlOVp1YDdKYjYHl 7gh2EnRLySEv2dkdUtKR2+LxvmkDyJSBYdU6zjOxI8iLIWWNQyS6aOKNL3hjJJNf V7FaDALPNKylLpXM5q/H2/sv3bgVu5HKsvVCwAthmkMx7p9PNZiirUJeqsJiFX7X j3SbXKBQ5e8xlDAjkhNLDe26hwhM5puoPvT+XIm6ohykjVeCuoAeSabvrjM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:41:15 2025 by rpki-client