$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer File: 1a4498c7-70e2-4ca4-b18f-4a107d0a6313.cer (raw, json) Hash identifier: tmCnQ+Rx45oh/Sld86xumKJewHxga8HSjsQCHg+btNo= Subject key identifier: 8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A9AB939640FF9771AC772E100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 15:48:27 +0000 Certificate not after: Thu 21 Oct 2027 18:18:45 +0000 Subordinate resources: AS: 40159 IP: 192.152.5.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:b9:39:64:0f:f9:77:1a:c7:72:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 22 15:48:27 2025 GMT Not After : Oct 21 18:18:45 2027 GMT Subject: CN=1a4498c7-70e2-4ca4-b18f-4a107d0a6313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:9c:4d:39:d7:c3:0c:35:49:28:b3:8d:73: 32:ac:23:65:4f:6f:f1:db:09:b4:11:20:ca:eb:a0: 05:d0:e0:1e:00:6f:8e:a7:79:c6:30:e2:88:5f:63: cb:df:d1:1f:75:4f:ec:7a:13:ea:ca:7a:a4:5d:a7: 78:78:1a:66:38:11:9d:56:a4:a6:29:fb:d5:36:aa: 8f:cb:37:7e:6f:43:cf:6d:81:5d:e0:b1:87:f1:d6: da:20:9c:88:a9:c7:e4:0b:9b:1f:3e:f9:ec:95:fa: 5d:de:cb:42:46:c0:ec:7f:47:57:a7:7c:83:b6:17: d6:19:12:ad:77:13:3c:27:bc:f1:fb:4e:ee:b6:5e: a3:e5:b3:c3:59:74:f0:4e:52:32:06:14:5d:f9:a5: d1:aa:31:bb:70:c7:aa:73:7c:f5:1b:d9:86:9f:ef: a9:9a:4d:fe:8c:d9:19:06:78:69:60:ec:49:81:4d: 8e:53:23:a0:74:8c:56:bd:8e:2c:1e:de:70:f3:f3: f4:9d:64:9a:72:6b:5c:fa:e0:48:85:61:a6:9f:5a: 7f:d5:8b:eb:cf:82:bb:77:6b:de:98:0a:07:df:33: 87:b2:ba:48:38:09:c0:7f:91:32:d6:f8:99:ee:5d: 23:67:73:a9:21:cc:24:1d:02:2d:38:c1:9c:9f:9e: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F8:32:26:BB:C6:50:50:85:B1:33:17:D2:97:08:AA:77:A5:1E:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a4498c7-70e2-4ca4-b18f-4a107d0a6313/1a4498c7-70e2-4ca4-b18f-4a107d0a6313.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.152.5.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40159 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:c7:b5:c8:5d:5b:ee:5d:18:11:e9:a2:49:e8:00:c1:ca:52: 03:86:09:54:54:5a:18:a7:80:4a:89:81:55:45:b5:ae:62:82: 57:ca:3b:29:33:65:c3:49:04:3b:56:7d:5b:53:a5:1d:67:1c: 3c:8d:9f:fd:c1:67:d0:22:04:97:45:5d:5d:01:df:38:d7:78: c7:18:e7:59:94:f3:b8:be:c7:d0:61:2b:b2:03:52:b0:66:47: 55:bb:76:9a:5f:c2:d3:2e:b1:dc:91:18:db:6b:d4:db:09:17: 7d:2b:de:b5:8f:64:18:8d:72:9b:ef:02:9e:fb:72:ea:8b:ed: 3b:97:0a:b1:46:1b:cb:b5:e5:b3:06:52:70:8b:15:f9:66:b3: 87:2d:6b:f6:1c:00:eb:00:cd:21:e7:ed:d0:7c:a2:e5:a0:1d: 51:b3:33:42:ea:56:48:1b:36:a1:d0:2c:dc:f4:7e:7d:46:f9: 42:ea:90:44:22:38:8a:c3:b5:b9:ca:35:55:17:01:d3:6c:6b: cf:bd:fa:cb:ea:87:19:82:2b:c4:f2:39:27:a2:4a:1a:6b:c4: 48:ef:05:e1:41:cf:ea:cb:fa:84:f7:ee:22:47:c8:96:85:a0: 4f:a9:1a:e3:0b:88:e6:49:9e:97:9b:dc:1f:b6:fe:3f:70:6a: 82:02:7d:f4 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqauTlkD/l3Gsdy4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyMjE1NDgyN1oXDTI3MTAyMTE4MTg0NVowLzEtMCsGA1UEAxMk MWE0NDk4YzctNzBlMi00Y2E0LWIxOGYtNGExMDdkMGE2MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm6cTTnXwww1SSizjXMyrCNlT2/x2wm0ESDK 66AF0OAeAG+Op3nGMOKIX2PL39EfdU/sehPqynqkXad4eBpmOBGdVqSmKfvVNqqP yzd+b0PPbYFd4LGH8dbaIJyIqcfkC5sfPvnslfpd3stCRsDsf0dXp3yDthfWGRKt dxM8J7zx+07utl6j5bPDWXTwTlIyBhRd+aXRqjG7cMeqc3z1G9mGn++pmk3+jNkZ BnhpYOxJgU2OUyOgdIxWvY4sHt5w8/P0nWSacmtc+uBIhWGmn1p/1Yvrz4K7d2ve mAoH3zOHsrpIOAnAf5Ey1viZ7l0jZ3OpIcwkHQItOMGcn56zuwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIr4Mia7xlBQhbEzF9KXCKp3pR5BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8x YTQ0OThjNy03MGUyLTRjYTQtYjE4Zi00YTEwN2QwYTYzMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzFhNDQ5OGM3LTcwZTItNGNhNC1i MThmLTRhMTA3ZDBhNjMxMy8xYTQ0OThjNy03MGUyLTRjYTQtYjE4Zi00YTEwN2Qw YTYzMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAmAUwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJzfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALXHtchdW+5dGBHpoknoAMHKUgOGCVRUWhingEqJgVVFta5i glfKOykzZcNJBDtWfVtTpR1nHDyNn/3BZ9AiBJdFXV0B3zjXeMcY51mU87i+x9Bh K7IDUrBmR1W7dppfwtMusdyRGNtr1NsJF30r3rWPZBiNcpvvAp77cuqL7TuXCrFG G8u15bMGUnCLFflms4cta/YcAOsAzSHn7dB8ouWgHVGzM0LqVkgbNqHQLNz0fn1G +ULqkEQiOIrDtbnKNVUXAdNsa8+9+svqhxmCK8TyOSeiShprxEjvBeFBz+rL+oT3 7iJHyJaFoE+pGuMLiOZJnpeb3B+2/j9waoICffQ= -----END CERTIFICATE-----Generated at Wed Aug 6 16:03:43 2025 by rpki-client