$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer File: a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer (raw, json) Hash identifier: W35zFsZ8I4OJDW7LQq0sXNEX7Jfq1Gq5ulZwfTSB4Fs= Subject key identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ACA7543D199000BADC3154F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 18:10:19 +0000 Certificate not after: Thu 11 Nov 2027 19:10:19 +0000 Subordinate resources: AS: 397978 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:75:43:d1:99:00:0b:ad:c3:15:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 8 18:10:19 2025 GMT Not After : Nov 11 19:10:19 2027 GMT Subject: CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:da:f8:58:15:50:69:4c:dd:eb:6e:bc:0f: 56:66:e9:79:ed:ef:ab:6b:48:b6:37:28:a9:b8:1c: 27:38:3e:65:6b:34:2d:bb:ff:e8:ea:5c:f9:8e:81: ea:70:84:68:b2:8b:f5:3d:46:8e:76:2f:b3:2e:9a: 85:9e:a8:8a:f7:0b:97:0a:87:6d:24:7b:cf:66:1e: 03:32:90:d0:28:1d:92:3c:6f:ba:66:db:73:ca:1d: 82:f7:fb:19:c9:75:32:51:06:04:d1:11:89:5e:a4: 1d:57:81:f9:05:a6:c2:cd:07:8b:6e:e5:f9:0f:06: f3:08:b5:b8:12:f1:cb:cb:23:3c:1b:55:87:c8:26: 0e:13:09:92:60:fb:2b:cf:7b:d3:e2:d0:44:3a:4a: 96:90:05:2e:ce:be:b9:2f:d6:4b:7e:72:fd:07:d2: 4d:4a:3f:71:41:4c:ae:f4:c8:ba:53:78:f0:3f:36: cb:fe:d5:fd:e8:d1:a3:70:c0:96:c9:9f:d0:8f:5e: f0:2e:14:1b:a4:ca:25:77:60:22:04:f9:3b:15:fe: f1:b2:8a:57:7f:2e:0c:0c:5d:43:fe:62:50:0f:e2: 5b:5e:46:cf:06:70:cc:b6:1a:4f:22:d1:85:2a:4a: 15:54:ce:b0:89:d4:34:f8:35:80:91:ca:bb:c0:17: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 397978 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ba:3d:88:3f:a8:bd:92:ae:13:7d:2e:4c:b4:47:c2:a0:00: 74:9d:0f:3d:41:b5:4f:de:42:c5:b7:35:f1:59:f5:57:9b:02: 5c:95:bb:96:6a:c4:c5:3c:0c:8b:82:2b:47:6f:0c:c9:f2:24: 1f:b2:63:38:f2:bf:7c:ae:a5:c7:20:d9:e2:a6:65:e8:26:d2: c8:b5:50:90:af:ef:6c:26:83:3e:80:9e:4e:17:87:5b:aa:6a: de:04:8c:98:93:66:32:d3:43:39:c4:06:9f:54:1b:eb:4e:ba: 1b:a0:9e:26:3a:8b:49:b9:36:a2:4f:1f:7b:d0:02:69:4b:d5: 36:af:7e:13:91:af:7c:e2:a4:d4:ba:c8:e9:fc:eb:32:16:98: e2:fc:f3:03:aa:49:26:06:66:10:f5:cc:5e:07:92:30:61:40: 61:47:79:7e:7c:ae:6b:0f:cd:54:16:90:79:eb:7f:3a:8b:f7: 19:bf:d8:28:86:3d:69:29:dc:26:e6:a6:f5:87:17:de:06:69: 7f:41:11:09:75:07:44:91:1f:90:29:7c:ca:16:55:9b:a2:45: 5e:63:41:03:0a:d3:99:d8:4b:05:47:64:c4:2d:bc:e8:f8:b3: 5c:ae:fd:fd:9e:cf:3a:19:33:71:ad:10:71:04:40:ae:35:4f: b8:80:87:4a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWErKdUPRmQALrcMVTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwODE4MTAxOVoXDTI3MTExMTE5MTAxOVowLzEtMCsGA1UEAxMk YTlkN2Y5MDItY2MwMC00MTc1LTk1MWEtZmUzYTUwYzBjZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubna+FgVUGlM3etuvA9WZul57e+ra0i2Nyip uBwnOD5lazQtu//o6lz5joHqcIRosov1PUaOdi+zLpqFnqiK9wuXCodtJHvPZh4D MpDQKB2SPG+6Zttzyh2C9/sZyXUyUQYE0RGJXqQdV4H5BabCzQeLbuX5DwbzCLW4 EvHLyyM8G1WHyCYOEwmSYPsrz3vT4tBEOkqWkAUuzr65L9ZLfnL9B9JNSj9xQUyu 9Mi6U3jwPzbL/tX96NGjcMCWyZ/Qj17wLhQbpMold2AiBPk7Ff7xsopXfy4MDF1D /mJQD+JbXkbPBnDMthpPItGFKkoVVM6widQ0+DWAkcq7wBePVwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFB1zoTUiBNGuFZk3yMUAynmRrDtdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h OWQ3ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNhNTBjMGNlYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2E5ZDdmOTAyLWNjMDAtNDE3NS05 NTFhLWZlM2E1MGMwY2VhYi9hOWQ3ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNhNTBj MGNlYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhKaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALG6PYg/qL2SrhN9Lky0R8KgAHSd Dz1BtU/eQsW3NfFZ9VebAlyVu5ZqxMU8DIuCK0dvDMnyJB+yYzjyv3yupccg2eKm Zegm0si1UJCv72wmgz6Ank4Xh1uqat4EjJiTZjLTQznEBp9UG+tOuhugniY6i0m5 NqJPH3vQAmlL1TavfhORr3zipNS6yOn86zIWmOL88wOqSSYGZhD1zF4HkjBhQGFH eX58rmsPzVQWkHnrfzqL9xm/2CiGPWkp3CbmpvWHF94GaX9BEQl1B0SRH5ApfMoW VZuiRV5jQQMK05nYSwVHZMQtvOj4s1yu/f2ezzoZM3GtEHEEQK41T7iAh0o= -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:14 2025 by rpki-client