$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b9581132-f939-4bc4-95e5-142a1aa30f8a.cer File: b9581132-f939-4bc4-95e5-142a1aa30f8a.cer (raw, json) Hash identifier: TTdvQHbuV4yktUuovz90bnnYuyp7ynU2rMs1yUfb50I= Subject key identifier: 6E:1B:0F:7D:96:A1:FA:65:CC:92:40:5F:79:8F:2F:0C:94:12:B5:BB Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A792708E96274ECF2B5B879C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b9581132-f939-4bc4-95e5-142a1aa30f8a/b9581132-f939-4bc4-95e5-142a1aa30f8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b9581132-f939-4bc4-95e5-142a1aa30f8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Jul 2025 15:12:13 +0000 Certificate not after: Wed 13 Oct 2027 15:12:13 +0000 Subordinate resources: AS: 401812 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:27:08:e9:62:74:ec:f2:b5:b8:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 10 15:12:13 2025 GMT Not After : Oct 13 15:12:13 2027 GMT Subject: CN=b9581132-f939-4bc4-95e5-142a1aa30f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:60:9d:cc:30:44:2c:55:c7:1f:cb:65:54:a3: 32:bb:58:04:9c:34:81:69:57:d8:8d:b5:a7:66:4c: 4c:e9:06:22:cd:5e:97:fa:63:6a:e5:b4:11:51:e1: 45:65:9a:5f:b7:2d:76:5a:8e:ef:ab:14:ba:04:a6: 0c:91:22:4b:af:79:f3:b4:2c:1d:a4:72:f8:76:a8: 7f:04:4f:43:ee:39:de:97:c3:72:76:e1:8c:0c:d0: 35:38:56:7b:d6:d8:1e:19:d2:6f:c2:f3:98:98:b7: 67:7a:a6:d3:37:00:ae:19:f2:0b:08:1e:ed:ca:66: 3b:30:d8:ec:19:2c:80:d7:a1:63:3d:c1:47:30:17: a3:ed:32:c1:1f:39:18:30:61:20:71:b1:d1:ba:98: f9:6e:c4:0f:e8:01:f7:f2:76:d4:c6:42:f2:6f:1f: 02:2f:32:89:17:e8:1b:03:8d:55:67:13:0d:83:bb: d7:9a:52:7f:05:76:a7:6c:c9:54:24:83:8c:5e:bf: 50:2c:ed:9e:7d:09:25:c4:43:f3:db:62:8f:16:a3: 00:28:9a:58:91:6f:3b:28:cd:0d:d9:05:18:69:d5: e6:b9:8f:be:2e:3d:61:26:dc:37:7e:a6:35:d4:cc: 9d:e2:6b:1d:aa:b0:9d:22:74:10:3a:87:8a:0b:b5: 5b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1B:0F:7D:96:A1:FA:65:CC:92:40:5F:79:8F:2F:0C:94:12:B5:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b9581132-f939-4bc4-95e5-142a1aa30f8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b9581132-f939-4bc4-95e5-142a1aa30f8a/b9581132-f939-4bc4-95e5-142a1aa30f8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 401812 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:05:81:f6:34:65:c3:94:ea:37:82:3d:98:9f:1f:72:25:18: 9b:16:38:d4:3b:3d:ee:fc:f9:e6:45:ad:66:64:63:00:02:32: 9f:1e:c9:d4:84:7f:88:3c:87:bc:7f:f8:50:a1:71:a3:d2:2b: 2c:e4:f7:8c:90:69:d7:9a:a6:af:22:7d:f4:eb:1e:e7:ea:b6: d2:85:7b:af:6d:b9:98:48:74:b4:75:ae:f1:eb:0e:4b:03:0c: a4:b8:52:94:9f:1c:8e:c4:f1:6e:ed:03:4c:eb:67:d5:25:27: 50:74:e9:74:2b:79:e5:4d:a6:fc:ea:47:1e:d3:a9:22:3d:e1: 9c:9d:8b:e2:3b:00:8a:83:4c:7e:ee:23:4f:15:93:fb:fb:d0: 4d:17:92:9b:e8:20:e6:8c:cb:69:97:89:91:4f:46:9b:3e:7b: 0d:fa:e9:43:cc:d6:e1:4f:50:ec:c3:e6:ce:8c:d3:a8:21:07: c8:3a:c2:f7:e9:46:98:15:bd:0d:43:af:cc:43:5b:df:9d:73: b4:65:cc:54:1f:4e:7c:7f:0d:6d:ef:14:ed:c9:18:82:9e:cd: bf:59:2d:ea:05:bb:cb:95:9e:f9:f1:67:48:71:40:67:59:57: cc:c9:44:57:3e:8a:a2:db:03:b8:9d:e9:e7:0f:47:80:f4:4f: 2d:4f:e3:37 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEp5JwjpYnTs8rW4ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxMDE1MTIxM1oXDTI3MTAxMzE1MTIxM1owLzEtMCsGA1UEAxMk Yjk1ODExMzItZjkzOS00YmM0LTk1ZTUtMTQyYTFhYTMwZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2CdzDBELFXHH8tlVKMyu1gEnDSBaVfYjbWn ZkxM6QYizV6X+mNq5bQRUeFFZZpfty12Wo7vqxS6BKYMkSJLr3nztCwdpHL4dqh/ BE9D7jnel8NyduGMDNA1OFZ71tgeGdJvwvOYmLdneqbTNwCuGfILCB7tymY7MNjs GSyA16FjPcFHMBej7TLBHzkYMGEgcbHRupj5bsQP6AH38nbUxkLybx8CLzKJF+gb A41VZxMNg7vXmlJ/BXanbMlUJIOMXr9QLO2efQklxEPz22KPFqMAKJpYkW87KM0N 2QUYadXmuY++Lj1hJtw3fqY11Myd4msdqrCdInQQOoeKC7VbxwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFG4bD32WofplzJJAX3mPLwyUErW7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i OTU4MTEzMi1mOTM5LTRiYzQtOTVlNS0xNDJhMWFhMzBmOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2I5NTgxMTMyLWY5MzktNGJjNC05 NWU1LTE0MmExYWEzMGY4YS9iOTU4MTEzMi1mOTM5LTRiYzQtOTVlNS0xNDJhMWFh MzBmOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiGUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJQFgfY0ZcOU6jeCPZifH3IlGJsW ONQ7Pe78+eZFrWZkYwACMp8eydSEf4g8h7x/+FChcaPSKyzk94yQadeapq8iffTr HufqttKFe69tuZhIdLR1rvHrDksDDKS4UpSfHI7E8W7tA0zrZ9UlJ1B06XQreeVN pvzqRx7TqSI94Zydi+I7AIqDTH7uI08Vk/v70E0XkpvoIOaMy2mXiZFPRps+ew36 6UPM1uFPUOzD5s6M06ghB8g6wvfpRpgVvQ1Dr8xDW9+dc7RlzFQfTnx/DW3vFO3J GIKezb9ZLeoFu8uVnvnxZ0hxQGdZV8zJRFc+iqLbA7id6ecPR4D0Ty1P4zc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:51:43 2025 by rpki-client