$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416.cer File: fa5ebc0b-1665-43a2-aa74-ae198d605416.cer (raw, json) Hash identifier: pENckPxoFMkm5IjiODRDoiqXcCMNEUGdjXk1GZye6Ys= Subject key identifier: 15:8E:19:16:B4:A7:32:B7:4D:B4:0C:50:55:3D:BE:46:58:25:D0:80 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AB2192FDDF3B3B23680746F60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416/fa5ebc0b-1665-43a2-aa74-ae198d605416.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Jul 2025 00:45:23 +0000 Certificate not after: Wed 03 Nov 2027 00:45:23 +0000 Subordinate resources: AS: 32343 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:19:2f:dd:f3:b3:b2:36:80:74:6f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 31 00:45:23 2025 GMT Not After : Nov 3 00:45:23 2027 GMT Subject: CN=fa5ebc0b-1665-43a2-aa74-ae198d605416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:17:2a:81:39:b3:94:05:c5:6c:2f:7e:07: 9e:a9:6d:ee:74:37:c2:0c:5c:fe:ee:2e:71:43:2c: 62:74:e7:df:6f:97:6d:71:e8:38:57:89:a4:6a:b3: a1:b1:ea:6b:9b:fe:2f:5f:ad:0a:65:6a:85:a5:6c: 4d:c1:37:50:60:27:69:2b:df:a1:22:64:0f:d2:ff: d1:58:42:88:d9:0e:6a:ed:25:aa:30:8b:8e:fa:00: a8:25:64:b7:a9:88:93:63:d6:75:6b:f1:58:d0:21: 45:9c:4e:35:2a:8c:6b:43:2d:24:5a:cf:fa:92:aa: 8c:82:3a:fe:b7:23:bc:57:11:68:76:38:3f:de:3d: 6b:55:6d:29:eb:0b:00:b9:3f:fd:e7:7d:65:1f:16: c4:51:08:3f:51:5d:84:32:0f:10:25:d3:8d:e7:44: 47:2d:88:70:6f:e0:8c:61:d6:3c:c7:bb:2f:1b:b3: 37:3b:a7:6e:ac:b3:83:bf:cc:eb:21:ef:1f:83:1e: a9:27:ef:c5:9b:12:5b:79:86:1d:ec:92:c7:49:29: 97:da:ca:95:31:80:5c:6a:74:6a:8b:b3:52:25:ba: 70:3f:4b:c8:e9:bf:0f:f0:05:a6:39:04:45:e2:61: 31:e3:10:ed:f2:3b:43:41:92:83:c9:e2:04:b3:00: fb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8E:19:16:B4:A7:32:B7:4D:B4:0C:50:55:3D:BE:46:58:25:D0:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416/fa5ebc0b-1665-43a2-aa74-ae198d605416.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32343 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:77:90:5d:e9:43:ce:af:7d:58:85:09:77:5c:cd:9e:78:ff: 6f:8d:76:e0:7c:ed:25:4b:5c:ac:03:9a:b9:4c:59:22:bc:09: 0c:bb:e9:6a:fc:c2:7b:49:ee:95:e3:79:6a:1a:56:ec:9a:41: 42:bc:d9:ea:29:43:1d:d7:20:c4:47:d4:5b:47:88:bc:2c:1d: c4:9a:15:a7:ab:e4:2f:f0:72:48:2f:88:90:08:e4:45:32:78: f0:8d:d2:8a:98:a5:7d:62:77:96:15:a0:f7:c0:37:3a:5d:01: 24:d2:6f:7b:7d:a1:6c:4c:c3:a5:1c:88:d5:2c:fa:2b:84:3c: 3f:c3:64:ff:de:c8:c1:48:cf:2a:d2:56:59:41:2c:10:e2:3d: f6:f9:9a:8e:9b:96:f0:2f:c8:42:b8:c9:fe:04:93:2a:db:ff: ef:07:81:34:19:56:80:35:d1:7a:9a:c1:9c:3e:16:1d:e1:48: 6c:4b:96:b2:59:8c:29:d6:56:09:d7:77:80:43:02:94:3e:a0: 6b:d0:7c:a8:c3:e6:eb:b5:88:25:65:a4:24:2e:1d:db:55:67: 77:99:f9:15:91:d4:4d:ca:97:10:45:24:ff:12:03:aa:e4:3e: e5:13:49:40:0f:a1:0d:e5:37:6b:ed:3c:93:e9:1e:86:6e:b5: 35:f1:b6:3f -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEqyGS/d87OyNoB0b2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDczMTAwNDUyM1oXDTI3MTEwMzAwNDUyM1owLzEtMCsGA1UEAxMk ZmE1ZWJjMGItMTY2NS00M2EyLWFhNzQtYWUxOThkNjA1NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmagXKoE5s5QFxWwvfgeeqW3udDfCDFz+7i5x QyxidOffb5dtceg4V4mkarOhseprm/4vX60KZWqFpWxNwTdQYCdpK9+hImQP0v/R WEKI2Q5q7SWqMIuO+gCoJWS3qYiTY9Z1a/FY0CFFnE41KoxrQy0kWs/6kqqMgjr+ tyO8VxFodjg/3j1rVW0p6wsAuT/9531lHxbEUQg/UV2EMg8QJdON50RHLYhwb+CM YdY8x7svG7M3O6durLODv8zrIe8fgx6pJ+/FmxJbeYYd7JLHSSmX2sqVMYBcanRq i7NSJbpwP0vI6b8P8AWmOQRF4mEx4xDt8jtDQZKDyeIEswD7lwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFBWOGRa0pzK3TbQMUFU9vkZYJdCAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m YTVlYmMwYi0xNjY1LTQzYTItYWE3NC1hZTE5OGQ2MDU0MTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZhNWViYzBiLTE2NjUtNDNhMi1h YTc0LWFlMTk4ZDYwNTQxNi9mYTVlYmMwYi0xNjY1LTQzYTItYWE3NC1hZTE5OGQ2 MDU0MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICflcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIHeQXelDzq99WIUJd1zNnnj/b412 4HztJUtcrAOauUxZIrwJDLvpavzCe0nuleN5ahpW7JpBQrzZ6ilDHdcgxEfUW0eI vCwdxJoVp6vkL/BySC+IkAjkRTJ48I3SipilfWJ3lhWg98A3Ol0BJNJve32hbEzD pRyI1Sz6K4Q8P8Nk/97IwUjPKtJWWUEsEOI99vmajpuW8C/IQrjJ/gSTKtv/7weB NBlWgDXReprBnD4WHeFIbEuWslmMKdZWCdd3gEMClD6ga9B8qMPm67WIJWWkJC4d 21Vnd5n5FZHUTcqXEEUk/xIDquQ+5RNJQA+hDeU3a+08k+kehm61NfG2Pw== -----END CERTIFICATE-----Generated at Tue Aug 5 17:10:19 2025 by rpki-client