$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer File: aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer (raw, json) Hash identifier: oCuJt+OF6oSAqfcn5pB5+yqUOwkWvAZS7c39pw/UdxQ= Subject key identifier: CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AEB6AEB491F8365977DA0B600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Aug 2025 13:31:09 +0000 Certificate not after: Tue 23 Nov 2027 14:31:09 +0000 Subordinate resources: AS: 36267 IP: 172.83.52.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:6a:eb:49:1f:83:65:97:7d:a0:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 20 13:31:09 2025 GMT Not After : Nov 23 14:31:09 2027 GMT Subject: CN=aa6485a3-0dd1-4bb3-989b-ac000d54ce27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:0d:4e:99:d7:01:cf:25:7c:e2:aa:52:bd: de:25:32:c3:57:80:97:c2:05:34:0d:ef:bb:05:bb: ea:90:35:5a:a4:ff:f0:95:e4:54:d8:5e:cd:72:de: 7d:d3:04:7a:16:b7:b6:89:7a:d7:a9:c0:2b:98:cd: 11:29:c6:2c:fd:43:8b:87:8e:92:26:e0:1e:df:2f: 5e:03:d1:5a:14:f1:b6:8e:3d:ee:09:27:8a:aa:e6: 7d:45:8a:2d:d4:19:c5:3b:21:c2:50:78:d8:63:4c: 41:b0:9e:72:7a:c8:30:46:0f:c8:90:11:09:6f:39: bd:0d:54:7c:00:18:20:2a:73:11:cd:ab:0d:5f:81: a8:ee:fc:14:a5:cb:2b:91:2b:df:87:88:ae:c6:9c: 3a:c9:58:ba:4e:48:ea:42:61:cd:4a:7d:57:61:d2: bd:52:91:c5:34:00:a7:06:0d:37:53:4c:9c:65:94: 52:78:8f:ee:85:21:cc:3a:c1:ae:72:f6:c4:f0:ac: fe:d6:9b:92:ed:c3:1e:e4:03:76:e9:13:92:ab:a1: 4b:42:11:27:a9:25:df:cd:55:db:15:a6:bf:54:4b: c8:11:a5:55:57:45:d9:21:73:6e:49:65:c0:7e:df: 2b:78:a8:04:39:63:a9:66:38:36:c9:09:2d:26:c9: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 172.83.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36267 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f7:e9:ff:65:1b:8e:c3:c8:6d:2a:1c:b4:e8:b2:3f:0a:00: e5:0a:df:0f:6d:3c:4b:25:26:85:43:ea:b9:c3:0a:26:cf:98: 8d:c7:b6:67:a8:15:13:a8:c2:82:35:7d:34:7f:ca:50:69:77: 15:74:e5:e9:4a:16:33:9f:78:1a:fd:82:1b:46:15:1e:ac:ca: f4:3b:80:d6:82:32:d8:f6:93:fc:34:05:52:69:9d:b1:48:59: 9f:d7:5a:8f:a7:9f:34:fc:8d:e1:38:35:75:a4:ef:64:91:a4: 49:12:e5:5a:67:81:23:2e:fc:6d:e5:ae:56:83:33:0a:b8:21: dc:b9:ba:1e:db:73:6c:63:e1:81:ac:34:41:4b:1a:17:7a:40: f2:e8:32:56:bf:49:43:08:4d:24:0d:96:94:b5:5c:b8:bd:c6: 3c:b2:6b:67:ca:2a:23:cc:65:52:9d:ff:5a:47:4d:e1:2e:3c: 72:06:bf:a3:b7:3d:30:4d:bb:9b:a9:80:89:6f:8e:c2:56:e3: 78:e1:7b:e2:83:d7:92:98:50:d5:75:9d:7b:22:5e:28:23:6f: 7e:f4:9b:27:3d:15:c3:9b:1b:f6:04:e6:fe:64:11:dd:02:83: 38:fe:54:8c:c2:f0:2b:f7:34:f9:27:33:bb:89:01:16:8e:84: 45:d7:94:75 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErrautJH4Nll32gtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyMDEzMzEwOVoXDTI3MTEyMzE0MzEwOVowLzEtMCsGA1UEAxMk YWE2NDg1YTMtMGRkMS00YmIzLTk4OWItYWMwMDBkNTRjZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrINTpnXAc8lfOKqUr3eJTLDV4CXwgU0De+7 BbvqkDVapP/wleRU2F7Nct590wR6Fre2iXrXqcArmM0RKcYs/UOLh46SJuAe3y9e A9FaFPG2jj3uCSeKquZ9RYot1BnFOyHCUHjYY0xBsJ5yesgwRg/IkBEJbzm9DVR8 ABggKnMRzasNX4Go7vwUpcsrkSvfh4iuxpw6yVi6TkjqQmHNSn1XYdK9UpHFNACn Bg03U0ycZZRSeI/uhSHMOsGucvbE8Kz+1puS7cMe5AN26ROSq6FLQhEnqSXfzVXb Faa/VEvIEaVVV0XZIXNuSWXAft8reKgEOWOpZjg2yQktJslAKwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMz2gQyr1nTArLfrTqvF3tU66kxRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h YTY0ODVhMy0wZGQxLTRiYjMtOTg5Yi1hYzAwMGQ1NGNlMjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FhNjQ4NWEzLTBkZDEtNGJiMy05 ODliLWFjMDAwZDU0Y2UyNy9hYTY0ODVhMy0wZGQxLTRiYjMtOTg5Yi1hYzAwMGQ1 NGNlMjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKsUzQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI2rMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABj36f9lG47DyG0qHLTosj8KAOUK3w9tPEslJoVD6rnDCibP mI3HtmeoFROowoI1fTR/ylBpdxV05elKFjOfeBr9ghtGFR6syvQ7gNaCMtj2k/w0 BVJpnbFIWZ/XWo+nnzT8jeE4NXWk72SRpEkS5VpngSMu/G3lrlaDMwq4Idy5uh7b c2xj4YGsNEFLGhd6QPLoMla/SUMITSQNlpS1XLi9xjyya2fKKiPMZVKd/1pHTeEu PHIGv6O3PTBNu5upgIlvjsJW43jhe+KD15KYUNV1nXsiXigjb370myc9FcObG/YE 5v5kEd0Cgzj+VIzC8Cv3NPknM7uJARaOhEXXlHU= -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:54 2025 by rpki-client