$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.cer File: 505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.cer (raw, json) Hash identifier: mUEzkzQ7nqPGLeIDbCAFcg/Ct48dHgZh7d61O44ptAk= Subject key identifier: 4D:9F:07:E6:E2:4F:19:6B:26:BE:2C:23:56:16:87:39:62:EC:64:79 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A920D6106865E7F09BEB47340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Jul 2025 13:15:44 +0000 Certificate not after: Fri 22 Oct 2027 13:15:44 +0000 Subordinate resources: AS: 397081 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:0d:61:06:86:5e:7f:09:be:b4:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 19 13:15:44 2025 GMT Not After : Oct 22 13:15:44 2027 GMT Subject: CN=505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:f6:08:36:20:16:0f:69:40:0b:41:55:76: 45:fb:bf:e6:95:c2:8e:52:a4:97:e7:48:52:87:ee: 2c:95:31:fe:da:c3:23:05:bc:a7:b7:ec:dd:5a:06: ff:23:81:69:3f:c7:12:de:34:0c:30:eb:cf:b5:f5: 89:43:8c:28:9c:be:d9:db:d8:04:04:61:6c:b3:31: 5d:f4:b3:af:c1:ed:2a:7e:2b:6d:ac:9e:10:ee:60: 6d:32:ed:e3:4a:ed:d8:f1:f0:d3:a5:63:ac:9d:96: e6:ff:5a:19:01:77:cc:c8:ab:16:7c:3a:bf:75:37: 65:06:9f:d8:3d:1b:98:ce:6f:3a:55:25:65:7a:53: 0a:30:e3:10:24:ba:4a:27:25:aa:6b:67:f9:25:9b: 80:84:8a:60:41:93:63:b3:e9:ce:ea:27:b6:f5:f5: ed:0d:3a:54:ed:9a:1e:1c:be:9d:1e:22:f3:20:fe: b5:30:f3:a4:36:90:78:e5:19:45:68:15:77:66:d7: 14:ca:fe:cc:51:d1:44:c6:74:61:e3:7c:78:dc:4b: fc:0b:a4:5e:55:b5:3a:66:86:e7:6d:b7:76:13:20: ac:e6:a6:cf:4c:84:d5:42:63:0d:78:45:35:7e:34: 0e:2b:aa:89:1d:89:56:2e:7c:82:6e:b5:7d:9c:0c: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9F:07:E6:E2:4F:19:6B:26:BE:2C:23:56:16:87:39:62:EC:64:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa/505ddd2b-b6ca-4d66-8e1e-74c6fd7aabaa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 397081 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:57:f1:1b:e4:47:ec:4a:97:99:46:28:13:a7:76:c1:78:d5: f4:2c:d6:2a:40:a7:68:1f:c7:f3:02:80:c9:4e:ee:15:15:5b: 78:27:67:07:ac:14:6b:10:98:04:38:9e:8b:f3:bd:37:08:ac: 05:16:c3:40:4e:f4:da:14:9b:36:a9:78:1d:62:21:2c:d2:25: 76:ed:cf:41:69:b1:94:90:e6:85:d2:c2:e4:08:64:d8:4c:76: f9:9b:49:25:6e:f6:83:84:5c:ba:af:3b:a7:01:27:1d:a3:a0: 88:03:c1:e1:b5:84:5e:cd:4c:af:ac:d8:39:ce:64:89:30:7a: c3:1f:0d:05:2b:d5:40:b0:29:ad:a6:10:1c:d9:9f:07:1b:8d: 52:69:9e:57:b2:7a:60:48:b2:ce:5e:fb:80:fd:c4:02:b9:06: 6d:9d:9a:a1:c2:f7:84:a0:84:d0:19:cf:60:de:67:67:37:0c: 75:8f:96:05:99:5e:6d:55:a7:f6:1c:10:7e:b7:62:dc:f1:43: d0:38:bb:70:c2:2a:ef:d0:76:b8:c4:0c:16:43:b2:5a:04:b6: 19:0d:13:d0:80:e9:4b:2f:e9:fc:d2:5b:ae:4a:e6:b1:b7:9b: d7:93:28:88:7d:9d:e1:14:88:58:61:ac:d9:02:79:e0:ac:41: ca:33:28:7a -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEqSDWEGhl5/Cb60c0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxOTEzMTU0NFoXDTI3MTAyMjEzMTU0NFowLzEtMCsGA1UEAxMk NTA1ZGRkMmItYjZjYS00ZDY2LThlMWUtNzRjNmZkN2FhYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0P2CDYgFg9pQAtBVXZF+7/mlcKOUqSX50hS h+4slTH+2sMjBbynt+zdWgb/I4FpP8cS3jQMMOvPtfWJQ4wonL7Z29gEBGFsszFd 9LOvwe0qfittrJ4Q7mBtMu3jSu3Y8fDTpWOsnZbm/1oZAXfMyKsWfDq/dTdlBp/Y PRuYzm86VSVlelMKMOMQJLpKJyWqa2f5JZuAhIpgQZNjs+nO6ie29fXtDTpU7Zoe HL6dHiLzIP61MPOkNpB45RlFaBV3ZtcUyv7MUdFExnRh43x43Ev8C6ReVbU6Zobn bbd2EyCs5qbPTITVQmMNeEU1fjQOK6qJHYlWLnyCbrV9nAxmWQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFE2fB+biTxlrJr4sI1YWhzli7GR5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 MDVkZGQyYi1iNmNhLTRkNjYtOGUxZS03NGM2ZmQ3YWFiYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzUwNWRkZDJiLWI2Y2EtNGQ2Ni04 ZTFlLTc0YzZmZDdhYWJhYS81MDVkZGQyYi1iNmNhLTRkNjYtOGUxZS03NGM2ZmQ3 YWFiYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg8ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACVX8RvkR+xKl5lGKBOndsF41fQs 1ipAp2gfx/MCgMlO7hUVW3gnZwesFGsQmAQ4novzvTcIrAUWw0BO9NoUmzapeB1i ISzSJXbtz0FpsZSQ5oXSwuQIZNhMdvmbSSVu9oOEXLqvO6cBJx2joIgDweG1hF7N TK+s2DnOZIkwesMfDQUr1UCwKa2mEBzZnwcbjVJpnleyemBIss5e+4D9xAK5Bm2d mqHC94SghNAZz2DeZ2c3DHWPlgWZXm1Vp/YcEH63YtzxQ9A4u3DCKu/QdrjEDBZD sloEthkNE9CA6Usv6fzSW65K5rG3m9eTKIh9neEUiFhhrNkCeeCsQcozKHo= -----END CERTIFICATE-----Generated at Fri Aug 8 13:03:29 2025 by rpki-client