$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6492d6c7-50b4-4b02-87d6-21c6b56290b1.cer File: 6492d6c7-50b4-4b02-87d6-21c6b56290b1.cer (raw, json) Hash identifier: j0Gp3yPKr3oYVLJnWpCwRuYLIyqUjlKt7M3Ic2EUHa8= Subject key identifier: 93:BE:45:57:1A:BA:67:D2:FA:6B:AA:73:0A:8F:F0:70:5F:0A:7D:4F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC1E6478B3559D08F13900800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6492d6c7-50b4-4b02-87d6-21c6b56290b1/6492d6c7-50b4-4b02-87d6-21c6b56290b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6492d6c7-50b4-4b02-87d6-21c6b56290b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Aug 2025 16:35:46 +0000 Certificate not after: Mon 08 Nov 2027 17:35:46 +0000 Subordinate resources: AS: 20423 IP: 108.174.69.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:e6:47:8b:35:59:d0:8f:13:90:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 5 16:35:46 2025 GMT Not After : Nov 8 17:35:46 2027 GMT Subject: CN=6492d6c7-50b4-4b02-87d6-21c6b56290b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:b6:b6:c8:2b:ee:2b:15:22:d2:23:8e:d6: 49:9d:78:b0:1b:b0:35:63:c2:06:45:e2:e3:be:66: 36:8a:82:59:54:17:c4:28:3e:1d:7e:60:89:ce:a7: fb:e4:f4:84:ed:23:b4:f7:4c:6a:d8:a3:75:5c:c0: 8b:0f:f6:08:da:fb:a6:8f:e6:9a:f9:ca:3d:15:31: e5:ae:e1:f4:50:44:1f:8a:49:ee:77:fa:04:83:40: 3c:f2:42:0f:16:08:40:1b:65:72:07:19:04:3b:2e: 85:2b:ea:31:37:f1:9e:ad:25:80:56:69:32:e0:4c: ca:f5:b2:13:3f:f6:34:31:e5:0d:15:4b:af:53:0e: 8f:c7:51:87:82:bc:35:14:67:dd:4c:ef:9c:e7:aa: e3:a9:3f:c7:b7:2f:9a:01:39:46:45:a7:01:d2:69: c1:f5:3d:0b:5f:06:b8:2d:e9:6d:ad:8e:4b:27:8c: 6b:23:63:ad:2b:71:d9:2d:79:ea:6b:d3:be:4f:64: f7:49:95:36:9e:f2:ad:58:96:36:f2:7c:61:1f:9e: ff:04:07:09:50:5c:af:d1:ec:2a:4f:05:14:6a:e0: 89:a4:e5:79:31:f6:b5:c5:71:75:50:d6:16:25:e8: 0d:da:40:fb:34:0e:a2:c2:7f:f4:a9:57:4e:67:54: 3f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:45:57:1A:BA:67:D2:FA:6B:AA:73:0A:8F:F0:70:5F:0A:7D:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6492d6c7-50b4-4b02-87d6-21c6b56290b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6492d6c7-50b4-4b02-87d6-21c6b56290b1/6492d6c7-50b4-4b02-87d6-21c6b56290b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 108.174.69.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20423 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7d:de:2a:49:f0:41:d6:c1:c5:c9:8b:a5:2f:4c:05:dc:bc: cc:64:66:d3:7e:cb:06:60:81:9a:a0:ce:8e:63:5e:3c:5a:b8: cb:7c:6b:5a:bb:4a:aa:4f:b8:10:56:c1:91:11:a9:ae:03:b1: c6:6a:34:26:c5:29:9f:c0:73:8e:ae:a6:b7:b1:44:2e:11:08: ab:a5:81:81:20:4d:e4:59:11:e1:d9:2c:7b:b9:5f:ce:2f:04: 11:12:a3:ce:b4:07:15:64:cd:fd:11:82:bb:0d:53:6c:3a:2a: 80:90:98:4d:50:35:35:b8:92:05:53:78:8a:18:bd:e9:ad:93: cc:d3:b5:83:3d:d1:05:9b:0a:85:21:0a:a0:66:c7:b5:13:25: 26:84:13:35:53:70:50:d8:28:4f:d7:e5:c4:83:8c:68:f3:35: fd:af:69:58:cc:dc:d2:53:b3:f6:84:36:d7:d9:a9:c6:3d:5c: 07:0a:4b:65:c9:f2:d9:61:a9:13:62:46:6c:d0:86:41:d3:fd: 85:b0:1e:9d:ad:2a:42:17:2b:ed:4c:61:96:1d:b1:b7:a6:88: 44:00:e0:21:be:5a:db:e4:69:8c:a8:78:cd:d7:93:fd:f8:4c: 16:8c:57:43:24:bf:65:92:00:c7:0c:90:20:54:dd:1c:4d:4d: d8:00:39:5e -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWErB5keLNVnQjxOQCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNTE2MzU0NloXDTI3MTEwODE3MzU0NlowLzEtMCsGA1UEAxMk NjQ5MmQ2YzctNTBiNC00YjAyLTg3ZDYtMjFjNmI1NjI5MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkO2tsgr7isVItIjjtZJnXiwG7A1Y8IGReLj vmY2ioJZVBfEKD4dfmCJzqf75PSE7SO090xq2KN1XMCLD/YI2vumj+aa+co9FTHl ruH0UEQfiknud/oEg0A88kIPFghAG2VyBxkEOy6FK+oxN/GerSWAVmky4EzK9bIT P/Y0MeUNFUuvUw6Px1GHgrw1FGfdTO+c56rjqT/Hty+aATlGRacB0mnB9T0LXwa4 LeltrY5LJ4xrI2OtK3HZLXnqa9O+T2T3SZU2nvKtWJY28nxhH57/BAcJUFyv0ewq TwUUauCJpOV5Mfa1xXF1UNYWJegN2kD7NA6iwn/0qVdOZ1Q/aQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJO+RVcaumfS+muqcwqP8HBfCn1PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82 NDkyZDZjNy01MGI0LTRiMDItODdkNi0yMWM2YjU2MjkwYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzY0OTJkNmM3LTUwYjQtNGIwMi04 N2Q2LTIxYzZiNTYyOTBiMS82NDkyZDZjNy01MGI0LTRiMDItODdkNi0yMWM2YjU2 MjkwYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABsrkUwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC T8cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAgn3eKknwQdbBxcmLpS9MBdy8zGRm037LBmCBmqDOjmNePFq4 y3xrWrtKqk+4EFbBkRGprgOxxmo0JsUpn8Bzjq6mt7FELhEIq6WBgSBN5FkR4dks e7lfzi8EERKjzrQHFWTN/RGCuw1TbDoqgJCYTVA1NbiSBVN4ihi96a2TzNO1gz3R BZsKhSEKoGbHtRMlJoQTNVNwUNgoT9flxIOMaPM1/a9pWMzc0lOz9oQ219mpxj1c BwpLZcny2WGpE2JGbNCGQdP9hbAena0qQhcr7Uxhlh2xt6aIRADgIb5a2+RpjKh4 zdeT/fhMFoxXQyS/ZZIAxwyQIFTdHE1N2AA5Xg== -----END CERTIFICATE-----Generated at Wed Aug 6 18:40:33 2025 by rpki-client