$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01.cer File: 47ab474f-e86e-457c-8e4f-525e473f9e01.cer (raw, json) Hash identifier: mcRsdZhi/cEaS2a0WD/w7nEXO9CYZ0esRLRaw+CQ6W8= Subject key identifier: 98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AD5256E64668DF823194BDA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Aug 2025 14:03:22 +0000 Certificate not after: Sun 14 Nov 2027 14:26:17 +0000 Subordinate resources: AS: 33527 IP: 170.190.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:25:6e:64:66:8d:f8:23:19:4b:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 12 14:03:22 2025 GMT Not After : Nov 14 14:26:17 2027 GMT Subject: CN=47ab474f-e86e-457c-8e4f-525e473f9e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:a9:d7:11:bc:69:4d:9c:d0:1d:8f:18:ea: f2:7a:db:ca:0d:c4:f1:7d:01:2d:6b:eb:78:6e:03: cc:3c:be:13:f9:57:5b:23:09:0a:5b:5e:b2:44:c3: d8:6e:3e:a5:29:85:13:53:ca:56:08:81:2c:a9:65: fb:1a:88:d5:2e:02:2a:f6:a6:f6:0e:cc:4c:65:bb: c1:79:48:18:26:25:72:50:77:b7:33:2a:e1:05:25: 2a:94:99:6a:d3:02:0e:1d:14:40:24:bb:36:28:9f: 93:22:f0:c7:0e:62:fb:9f:85:c4:b1:1a:55:cc:0e: 15:03:5e:75:da:da:fd:fb:aa:29:59:1c:01:d5:7e: 0f:6a:09:34:e4:ca:5f:33:ca:1c:2c:9a:aa:d6:4f: 48:91:48:54:e7:eb:f5:94:55:3d:60:4d:35:a6:15: a5:98:39:2c:24:cc:fb:a5:6d:e0:26:0d:4f:41:a1: 88:c1:a9:eb:b7:c0:96:4e:d5:e8:3d:87:e5:ca:01: dd:86:af:18:2f:d2:c1:ec:12:e9:45:83:b7:ee:cf: 89:94:2c:68:5a:61:5a:10:53:80:22:bc:15:29:14: 9c:fc:47:55:6f:5f:07:ef:aa:ef:8f:16:7c:ab:f1: fc:2b:67:88:9e:90:c1:f0:45:af:df:65:48:2e:b8: 81:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B8:E2:2B:13:C2:3E:C3:38:DC:BA:3A:53:55:18:4D:31:52:F0:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/47ab474f-e86e-457c-8e4f-525e473f9e01/47ab474f-e86e-457c-8e4f-525e473f9e01.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 170.190.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33527 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b3:fe:ea:9d:e8:79:d1:1f:8f:f3:21:b1:9f:c4:45:2e:bc: 02:2e:e1:1c:78:7a:db:98:e9:b7:97:66:33:0c:b0:9b:84:07: c1:75:ea:e6:bd:2c:91:2d:5c:2a:5d:d9:7f:09:9f:ef:af:2a: fb:a2:99:16:21:44:43:db:5a:ad:63:e8:ff:24:1d:96:83:18: be:f0:ae:c7:ee:c6:42:fe:2d:b9:12:b0:1c:b7:4b:b5:32:80: c9:f5:91:d4:6d:7c:53:52:39:e2:6b:ba:9f:55:93:32:c5:b0: f8:bd:41:ff:7d:e0:41:0f:e6:4f:55:e6:fb:bb:d8:45:96:95: 0a:b3:6a:a8:c1:82:e2:56:c8:06:ff:01:eb:2d:63:7b:aa:fe: c7:ad:6c:50:3f:8d:06:c5:fb:f6:4f:35:4c:c7:42:fc:3f:e5: 33:03:2f:cc:d2:db:de:5a:28:df:ac:cc:1b:d2:ad:97:d9:76: 47:c2:d4:43:b5:a0:a6:dd:8e:bd:62:da:92:13:9c:db:e7:e5: f5:b8:9e:eb:12:55:03:c3:e5:ec:1d:c0:c1:c3:d7:16:61:54: 7d:e8:56:94:03:d3:25:43:f3:4c:72:c4:ea:b4:19:aa:46:e2: 11:66:2c:f1:d3:ec:bc:f9:80:1d:20:b8:14:92:dc:57:24:77: 91:97:16:8e -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWErVJW5kZo34IxlL2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxMjE0MDMyMloXDTI3MTExNDE0MjYxN1owLzEtMCsGA1UEAxMk NDdhYjQ3NGYtZTg2ZS00NTdjLThlNGYtNTI1ZTQ3M2Y5ZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nep1xG8aU2c0B2PGOryetvKDcTxfQEta+t4 bgPMPL4T+VdbIwkKW16yRMPYbj6lKYUTU8pWCIEsqWX7GojVLgIq9qb2DsxMZbvB eUgYJiVyUHe3MyrhBSUqlJlq0wIOHRRAJLs2KJ+TIvDHDmL7n4XEsRpVzA4VA151 2tr9+6opWRwB1X4Pagk05MpfM8ocLJqq1k9IkUhU5+v1lFU9YE01phWlmDksJMz7 pW3gJg1PQaGIwanrt8CWTtXoPYflygHdhq8YL9LB7BLpRYO37s+JlCxoWmFaEFOA IrwVKRSc/EdVb18H76rvjxZ8q/H8K2eInpDB8EWv32VILriB0wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJi44isTwj7DONy6OlNVGE0xUvAxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 N2FiNDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVlNDczZjllMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzQ3YWI0NzRmLWU4NmUtNDU3Yy04 ZTRmLTUyNWU0NzNmOWUwMS80N2FiNDc0Zi1lODZlLTQ1N2MtOGU0Zi01MjVlNDcz ZjllMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCqvjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA gvcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAe7P+6p3oedEfj/MhsZ/ERS68Ai7hHHh625jpt5dmMwywm4QH wXXq5r0skS1cKl3Zfwmf768q+6KZFiFEQ9tarWPo/yQdloMYvvCux+7GQv4tuRKw HLdLtTKAyfWR1G18U1I54mu6n1WTMsWw+L1B/33gQQ/mT1Xm+7vYRZaVCrNqqMGC 4lbIBv8B6y1je6r+x61sUD+NBsX79k81TMdC/D/lMwMvzNLb3loo36zMG9Ktl9l2 R8LUQ7Wgpt2OvWLakhOc2+fl9bie6xJVA8Pl7B3AwcPXFmFUfehWlAPTJUPzTHLE 6rQZqkbiEWYs8dPsvPmAHSC4FJLcVyR3kZcWjg== -----END CERTIFICATE-----Generated at Sat Aug 23 13:51:55 2025 by rpki-client