$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5876c942-5d1f-47ab-94ac-a7fb6a075a5b.cer File: 5876c942-5d1f-47ab-94ac-a7fb6a075a5b.cer (raw, json) Hash identifier: lVCbqzyBVCRYKAsxXg1A6CkLM20cFpZNlaL1ASozR+c= Subject key identifier: 39:86:B6:8F:27:05:8C:E5:AF:C5:4B:E9:25:88:D2:79:C6:57:AA:D3 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AE67F8493F042925B2F4128C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5876c942-5d1f-47ab-94ac-a7fb6a075a5b/5876c942-5d1f-47ab-94ac-a7fb6a075a5b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5876c942-5d1f-47ab-94ac-a7fb6a075a5b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 19:13:37 +0000 Certificate not after: Sun 21 Nov 2027 20:13:37 +0000 Subordinate resources: AS: 54860 IP: 199.103.96.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:7f:84:93:f0:42:92:5b:2f:41:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 18 19:13:37 2025 GMT Not After : Nov 21 20:13:37 2027 GMT Subject: CN=5876c942-5d1f-47ab-94ac-a7fb6a075a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:4b:1e:50:f7:bd:6a:62:73:f3:65:f0:e0: c1:1d:f3:bd:fe:97:4d:e5:25:e0:f9:e0:72:4f:94: c9:37:05:75:f2:b3:f8:fb:c7:dd:ac:9a:1e:b1:1a: 86:00:16:e6:f1:07:a4:0d:57:1c:51:43:ed:4e:89: 73:4c:2f:f1:f4:8f:43:94:ca:85:d6:80:fe:14:34: 16:1b:69:c2:8a:4a:c6:c9:5e:f4:eb:d8:fb:11:f1: 61:52:2b:d1:10:c0:96:57:14:01:cf:7a:a9:3b:93: b6:11:27:d2:e9:30:ef:71:f2:f0:bd:2a:cd:a2:57: 4c:7c:4a:c8:d1:93:5b:62:2f:4b:5c:89:71:51:bf: 57:63:5e:99:d2:b0:79:56:2d:3e:1d:30:a8:ce:f9: a0:b3:37:c9:da:c4:5f:e8:bd:36:05:8e:1e:bf:e3: 2a:34:f9:fa:08:49:4c:58:13:ff:85:83:3e:96:97: 17:88:02:a5:f8:9e:0f:52:ac:ea:dd:7e:eb:75:18: 24:4c:10:e9:5b:96:af:28:91:23:c7:08:2b:f2:80: 0b:ef:97:ff:39:ae:50:fd:87:16:e0:5e:72:9f:46: 43:12:4e:ed:28:84:d5:ba:8f:08:25:4e:34:80:76: 3a:35:92:9d:fe:e7:cb:e5:e3:e2:2b:ca:2c:ea:70: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:86:B6:8F:27:05:8C:E5:AF:C5:4B:E9:25:88:D2:79:C6:57:AA:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5876c942-5d1f-47ab-94ac-a7fb6a075a5b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5876c942-5d1f-47ab-94ac-a7fb6a075a5b/5876c942-5d1f-47ab-94ac-a7fb6a075a5b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 199.103.96.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54860 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2f:4f:f6:64:bd:87:4c:7c:74:b5:f1:38:ea:cb:95:99:85: c7:60:89:26:d7:82:30:47:41:99:f7:a0:77:72:6a:e8:76:1d: 67:40:c6:ab:57:d9:f9:29:7b:5f:0b:45:b9:2c:ea:46:80:bf: 70:a2:21:10:f0:f2:59:65:09:9c:93:db:5d:4e:12:0f:99:5b: 96:13:ad:8e:fe:6f:0d:81:4f:b7:f7:00:40:b5:c7:71:ab:17: e3:0b:b3:48:25:f0:57:4a:f4:5c:76:93:7f:59:b4:15:c6:3b: 11:86:33:3a:73:e1:c2:17:41:04:ad:6e:32:71:ba:99:30:c0: f6:ac:a7:56:2d:27:ec:90:68:ce:bd:9a:32:ca:7d:83:57:bd: f1:06:35:de:20:70:50:aa:6e:97:a7:a3:94:5e:63:8b:2e:f8: d4:b4:89:63:0e:45:66:f3:16:9e:23:33:e0:44:3f:06:8c:23: 98:f7:e4:ae:73:71:68:07:d5:ee:1d:4a:2f:82:68:d0:3d:19: a3:f0:36:c6:08:da:a4:28:0a:66:ae:f3:bf:56:a2:83:4a:23: 55:47:9a:33:c3:be:b5:03:39:83:84:9b:9f:a9:91:14:b9:43: 3e:51:a1:6a:e0:f0:9a:73:21:cf:f0:3c:fd:d9:00:5e:e6:22: ae:63:62:40 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErmf4ST8EKSWy9BKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxODE5MTMzN1oXDTI3MTEyMTIwMTMzN1owLzEtMCsGA1UEAxMk NTg3NmM5NDItNWQxZi00N2FiLTk0YWMtYTdmYjZhMDc1YTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2VLHlD3vWpic/Nl8ODBHfO9/pdN5SXg+eBy T5TJNwV18rP4+8fdrJoesRqGABbm8QekDVccUUPtTolzTC/x9I9DlMqF1oD+FDQW G2nCikrGyV7069j7EfFhUivREMCWVxQBz3qpO5O2ESfS6TDvcfLwvSrNoldMfErI 0ZNbYi9LXIlxUb9XY16Z0rB5Vi0+HTCozvmgszfJ2sRf6L02BY4ev+MqNPn6CElM WBP/hYM+lpcXiAKl+J4PUqzq3X7rdRgkTBDpW5avKJEjxwgr8oAL75f/Oa5Q/YcW 4F5yn0ZDEk7tKITVuo8IJU40gHY6NZKd/ufL5ePiK8os6nCwKwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDmGto8nBYzlr8VL6SWI0nnGV6rTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 ODc2Yzk0Mi01ZDFmLTQ3YWItOTRhYy1hN2ZiNmEwNzVhNWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzU4NzZjOTQyLTVkMWYtNDdhYi05 NGFjLWE3ZmI2YTA3NWE1Yi81ODc2Yzk0Mi01ZDFmLTQ3YWItOTRhYy1hN2ZiNmEw NzVhNWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHZ2AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANZMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKsvT/ZkvYdMfHS18Tjqy5WZhcdgiSbXgjBHQZn3oHdyauh2 HWdAxqtX2fkpe18LRbks6kaAv3CiIRDw8lllCZyT211OEg+ZW5YTrY7+bw2BT7f3 AEC1x3GrF+MLs0gl8FdK9Fx2k39ZtBXGOxGGMzpz4cIXQQStbjJxupkwwPasp1Yt J+yQaM69mjLKfYNXvfEGNd4gcFCqbpeno5ReY4su+NS0iWMORWbzFp4jM+BEPwaM I5j35K5zcWgH1e4dSi+CaNA9GaPwNsYI2qQoCmau879WooNKI1VHmjPDvrUDOYOE m5+pkRS5Qz5RoWrg8JpzIc/wPP3ZAF7mIq5jYkA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:59 2025 by rpki-client