$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bcd0b372-69a6-4453-8d54-424e667f0789.cer File: bcd0b372-69a6-4453-8d54-424e667f0789.cer (raw, json) Hash identifier: sZtvKKnxkh923o61qfGxpJn8gtSg16UMGi/ob2Z964A= Subject key identifier: 46:E9:68:CD:FC:C4:C4:1F:10:0A:50:79:D7:22:A9:B4:6C:4D:0B:BB Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC867E09C760865B2B28F7600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bcd0b372-69a6-4453-8d54-424e667f0789/bcd0b372-69a6-4453-8d54-424e667f0789.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bcd0b372-69a6-4453-8d54-424e667f0789/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 00:31:44 +0000 Certificate not after: Thu 11 Nov 2027 01:31:44 +0000 Subordinate resources: AS: 20452 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:67:e0:9c:76:08:65:b2:b2:8f:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 8 00:31:44 2025 GMT Not After : Nov 11 01:31:44 2027 GMT Subject: CN=bcd0b372-69a6-4453-8d54-424e667f0789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:37:31:96:f2:a4:00:cc:fb:c7:80:ad:b5: b0:d4:fa:0b:36:d2:91:ec:bb:f1:15:6e:a2:91:b8: 1a:5b:ce:1b:3a:95:e0:9e:2e:9c:03:42:36:ba:40: cb:eb:5a:4d:78:b8:b1:14:6a:3c:7c:46:1f:00:e4: 3c:02:11:68:38:35:1d:b8:ea:c3:38:79:1f:2b:8f: 84:4d:a1:d2:71:9e:1d:6f:4e:49:ec:3b:0a:5b:48: a9:46:34:b2:15:04:d8:fe:d2:14:78:3f:44:dd:0c: 66:88:c6:54:15:bd:ae:93:02:c4:e5:ab:6f:25:a5: 46:e4:9b:75:13:40:f6:76:0c:36:dd:d5:6c:10:65: cb:6c:30:24:c5:4a:16:6c:3f:30:61:35:12:c4:44: 12:1e:7d:b9:04:2b:3b:8b:8a:e8:ba:d6:a4:f0:a2: cd:15:98:40:d4:f0:db:41:d9:2f:8e:e6:0a:a8:5a: 77:64:21:dc:ea:ec:eb:24:df:a7:27:3d:c7:ac:18: a6:c7:21:fd:3f:fd:17:bb:da:a8:38:a8:d4:99:56: 0f:93:6c:bd:f4:aa:d3:5e:d7:aa:97:e8:f7:82:01: bc:22:4b:fc:2e:94:77:e1:44:7d:7b:5b:4a:61:8e: 2c:2d:9b:7c:ef:e8:3c:97:ff:8e:2a:b5:f7:7d:49: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:68:CD:FC:C4:C4:1F:10:0A:50:79:D7:22:A9:B4:6C:4D:0B:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bcd0b372-69a6-4453-8d54-424e667f0789/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bcd0b372-69a6-4453-8d54-424e667f0789/bcd0b372-69a6-4453-8d54-424e667f0789.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 20452 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1f:a2:07:8a:ed:eb:4c:fc:4e:60:ca:e9:5e:f3:34:84:49: 55:8b:52:c0:a9:05:27:00:37:f0:13:99:4b:80:91:c6:a1:3a: 27:89:40:cc:35:1b:a6:86:50:24:36:31:b8:6c:a0:23:2b:66: f9:71:ed:0c:c5:5a:8f:cf:f8:0a:f2:70:5e:9b:f7:f9:3e:09: 0f:03:19:8a:55:8e:8c:f2:77:bf:cc:38:ef:de:e9:57:9a:66: 7d:4a:96:52:40:51:d2:94:19:20:24:57:9f:93:8c:6b:0a:4b: 0f:8f:cd:df:b9:20:f5:ce:ac:69:ff:db:3a:e9:42:1f:ef:3f: f7:8b:aa:e8:1e:70:cd:c7:cc:c8:0f:5a:35:48:7a:80:b6:31: 20:0a:c1:b5:3e:15:e5:b0:0f:0a:b0:d2:2d:8d:39:00:ae:c1: 92:88:58:e3:c6:50:56:15:f6:76:ce:65:c1:3e:7b:49:1f:89: fe:95:93:b1:47:97:1c:bc:26:fa:7d:eb:d2:9d:8d:8e:17:4d: f9:79:79:8e:cf:5b:ff:40:c9:20:c5:83:cc:de:d8:5d:d6:71: e1:1e:af:64:99:cb:37:b9:7e:db:20:d7:fc:9d:44:58:75:60: cd:ef:3d:83:4f:65:c9:56:9f:bd:09:b0:ea:6b:8c:66:b7:de: f5:71:73:c0 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWErIZ+CcdghlsrKPdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwODAwMzE0NFoXDTI3MTExMTAxMzE0NFowLzEtMCsGA1UEAxMk YmNkMGIzNzItNjlhNi00NDUzLThkNTQtNDI0ZTY2N2YwNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuss3MZbypADM+8eArbWw1PoLNtKR7LvxFW6i kbgaW84bOpXgni6cA0I2ukDL61pNeLixFGo8fEYfAOQ8AhFoODUduOrDOHkfK4+E TaHScZ4db05J7DsKW0ipRjSyFQTY/tIUeD9E3QxmiMZUFb2ukwLE5atvJaVG5Jt1 E0D2dgw23dVsEGXLbDAkxUoWbD8wYTUSxEQSHn25BCs7i4routak8KLNFZhA1PDb QdkvjuYKqFp3ZCHc6uzrJN+nJz3HrBimxyH9P/0Xu9qoOKjUmVYPk2y99KrTXteq l+j3ggG8Ikv8LpR34UR9e1tKYY4sLZt87+g8l/+OKrX3fUn4ZwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFEbpaM38xMQfEApQedciqbRsTQu7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i Y2QwYjM3Mi02OWE2LTQ0NTMtOGQ1NC00MjRlNjY3ZjA3ODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2JjZDBiMzcyLTY5YTYtNDQ1My04 ZDU0LTQyNGU2NjdmMDc4OS9iY2QwYjM3Mi02OWE2LTQ0NTMtOGQ1NC00MjRlNjY3 ZjA3ODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICT+QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAax+iB4rt60z8TmDK6V7zNIRJVYtS wKkFJwA38BOZS4CRxqE6J4lAzDUbpoZQJDYxuGygIytm+XHtDMVaj8/4CvJwXpv3 +T4JDwMZilWOjPJ3v8w4797pV5pmfUqWUkBR0pQZICRXn5OMawpLD4/N37kg9c6s af/bOulCH+8/94uq6B5wzcfMyA9aNUh6gLYxIArBtT4V5bAPCrDSLY05AK7BkohY 48ZQVhX2ds5lwT57SR+J/pWTsUeXHLwm+n3r0p2NjhdN+Xl5js9b/0DJIMWDzN7Y XdZx4R6vZJnLN7l+2yDX/J1EWHVgze89g09lyVafvQmw6muMZrfe9XFzwA== -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:13 2025 by rpki-client