$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.cer File: 5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.cer (raw, json) Hash identifier: gqypk3t4Cf8ltpwv63tSfcQeQsdPnyW0WL8B5w5ilOA= Subject key identifier: 31:2C:01:67:14:5D:AD:FD:7B:CD:BB:D3:2D:23:FD:6E:61:91:78:A2 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ADB6BB1A4A8A1C7735F5AA300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 19:59:47 +0000 Certificate not after: Wed 17 Nov 2027 20:59:47 +0000 Subordinate resources: AS: 54520 IP: 192.30.98.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:6b:b1:a4:a8:a1:c7:73:5f:5a:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 14 19:59:47 2025 GMT Not After : Nov 17 20:59:47 2027 GMT Subject: CN=5c01ee74-e8b7-4457-94c3-87a79c9dfbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:be:98:ae:0f:3c:1c:b7:0d:0c:2f:27:7d: 04:c6:71:39:f6:9c:71:88:6c:cc:f2:88:47:12:88: bd:80:93:2d:3c:03:6b:44:fb:e9:ff:f7:8b:1e:06: 50:53:77:31:08:05:ee:b9:3e:f2:f0:18:81:83:aa: 92:81:24:56:ab:58:0b:83:c8:70:64:63:81:11:a8: 84:f9:66:7b:84:a8:c2:f8:f3:cf:8b:61:b7:2e:f7: 8e:db:fd:20:89:ad:39:4d:97:98:94:9e:18:97:86: 9d:e0:57:1f:09:ab:4c:a7:55:1d:65:be:87:05:3b: 95:13:cc:62:29:78:0f:95:08:83:7f:24:38:1b:65: 03:33:28:1b:3a:54:e8:6e:ab:ba:d3:7f:c2:01:a5: 08:fb:5d:e5:48:c4:23:f7:0b:98:a3:da:ee:53:4d: 14:0d:3e:5e:fc:1c:08:6e:73:cc:cc:ca:28:6d:c4: 47:92:37:1d:4e:b6:c7:63:2c:6f:9f:ab:65:69:71: de:e1:b2:cc:15:72:27:bc:92:4d:a7:cc:5b:de:5d: c9:98:d4:70:5a:0f:ee:53:71:0f:66:a9:95:69:ab: ac:af:b5:4f:39:25:85:04:9d:e0:17:24:d3:52:61: cb:97:1b:a3:dc:a1:c0:82:b1:43:4a:b2:3e:f4:aa: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2C:01:67:14:5D:AD:FD:7B:CD:BB:D3:2D:23:FD:6E:61:91:78:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.30.98.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54520 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:37:83:5e:ef:7b:2b:73:1c:2a:4c:a3:0d:a8:62:b0:3f:e2: 94:4e:55:64:4e:02:9b:34:48:8e:a1:dc:62:e5:b7:6c:eb:13: fa:49:3d:33:7f:f8:84:55:af:25:01:a3:28:94:83:91:e3:c7: 98:90:af:8a:f5:ef:93:8e:fc:2b:5d:6c:79:05:48:3b:89:fa: 4b:eb:67:1a:4e:b0:c3:73:2b:1f:34:45:8b:4c:0e:ff:98:67: 0c:64:f2:2a:75:e0:ef:6b:ac:6b:64:ee:9d:7e:c7:a5:12:ea: bb:6b:25:50:47:a5:c7:74:0c:b9:da:11:44:a9:d5:07:02:86: 6b:f2:cf:e1:00:8f:1c:78:45:3f:7a:bd:06:29:03:87:04:95: d6:cb:76:28:3c:c0:65:4a:5e:c3:62:9b:6e:99:ae:af:03:9f: 3c:10:88:06:46:73:90:8a:2b:37:c2:ef:5e:18:6a:86:46:61: 1c:d1:c9:a6:f7:3e:07:86:4a:5d:b0:88:31:96:aa:42:df:8e: 2d:5f:e4:84:86:8e:46:71:64:30:1d:d3:0d:9b:59:fa:f7:69: 55:f2:05:33:4c:5e:47:9b:e8:1f:32:1d:fb:f1:ad:0d:d6:f6: e0:33:70:82:bd:db:95:99:6c:bb:75:05:49:b0:3f:a0:6c:67: 9c:be:cc:5b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErba7GkqKHHc19aowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxNDE5NTk0N1oXDTI3MTExNzIwNTk0N1owLzEtMCsGA1UEAxMk NWMwMWVlNzQtZThiNy00NDU3LTk0YzMtODdhNzljOWRmYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLS+mK4PPBy3DQwvJ30ExnE59pxxiGzM8ohH Eoi9gJMtPANrRPvp//eLHgZQU3cxCAXuuT7y8BiBg6qSgSRWq1gLg8hwZGOBEaiE +WZ7hKjC+PPPi2G3LveO2/0gia05TZeYlJ4Yl4ad4FcfCatMp1UdZb6HBTuVE8xi KXgPlQiDfyQ4G2UDMygbOlTobqu603/CAaUI+13lSMQj9wuYo9ruU00UDT5e/BwI bnPMzMoobcRHkjcdTrbHYyxvn6tlaXHe4bLMFXInvJJNp8xb3l3JmNRwWg/uU3EP ZqmVaausr7VPOSWFBJ3gFyTTUmHLlxuj3KHAgrFDSrI+9KqDCwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDEsAWcUXa39e8270y0j/W5hkXiiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 YzAxZWU3NC1lOGI3LTQ0NTctOTRjMy04N2E3OWM5ZGZiZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzVjMDFlZTc0LWU4YjctNDQ1Ny05 NGMzLTg3YTc5YzlkZmJmMy81YzAxZWU3NC1lOGI3LTQ0NTctOTRjMy04N2E3OWM5 ZGZiZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAHmIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANT4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAo3g17veytzHCpMow2oYrA/4pROVWROAps0SI6h3GLlt2zr E/pJPTN/+IRVryUBoyiUg5Hjx5iQr4r175OO/CtdbHkFSDuJ+kvrZxpOsMNzKx80 RYtMDv+YZwxk8ip14O9rrGtk7p1+x6US6rtrJVBHpcd0DLnaEUSp1QcChmvyz+EA jxx4RT96vQYpA4cEldbLdig8wGVKXsNim26Zrq8DnzwQiAZGc5CKKzfC714YaoZG YRzRyab3PgeGSl2wiDGWqkLfji1f5ISGjkZxZDAd0w2bWfr3aVXyBTNMXkeb6B8y HfvxrQ3W9uAzcIK925WZbLt1BUmwP6BsZ5y+zFs= -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:13 2025 by rpki-client