$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac302bc4-4a3a-4fa7-ae57-a6dc9e6dbf77.cer File: ac302bc4-4a3a-4fa7-ae57-a6dc9e6dbf77.cer (raw, json) Hash identifier: ti/wBYlkrcLeEyJGNX+DdDKSbyteOddBgk7OIaK6Cv4= Subject key identifier: F8:E2:9A:D5:88:29:69:1D:5D:76:03:51:B7:54:28:B4:08:37:E9:5A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A6B31C5B122FBD129AF12CB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac302bc4-4a3a-4fa7-ae57-a6dc9e6dbf77/ac302bc4-4a3a-4fa7-ae57-a6dc9e6dbf77.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac302bc4-4a3a-4fa7-ae57-a6dc9e6dbf77/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 05 Jul 2025 15:12:32 +0000 Certificate not after: Fri 08 Oct 2027 15:12:32 +0000 Subordinate resources: AS: 13870 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6b:31:c5:b1:22:fb:d1:29:af:12:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 5 15:12:32 2025 GMT Not After : Oct 8 15:12:32 2027 GMT Subject: CN=ac302bc4-4a3a-4fa7-ae57-a6dc9e6dbf77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:59:bf:15:33:0e:84:b9:fa:27:02:6c:f8: 51:6c:69:8d:98:95:69:71:e8:d4:90:bc:50:6b:42: 4e:86:de:72:a5:34:ba:68:ae:a4:c2:cb:ce:eb:7d: f2:50:80:10:5f:7e:4d:7d:23:10:de:16:1c:19:1d: b9:44:66:9a:d0:69:92:10:c6:21:28:cd:da:29:ad: eb:4b:73:e2:db:6c:06:c3:8d:03:f4:67:82:6c:70: dd:1f:4d:12:56:7a:97:ba:49:7c:44:af:53:f4:6e: 0f:60:88:fd:e5:8d:01:a6:af:19:a8:2e:fd:e2:3e: 18:5c:e2:f0:a0:e1:28:7d:0c:37:63:a1:ca:e2:b1: df:40:06:c8:9e:7a:68:f8:51:06:5d:b6:00:dc:67: 8d:9f:db:31:18:73:e1:37:b1:f3:1f:08:1b:c3:10: df:e1:f6:94:73:fc:8b:cd:ae:33:60:98:f3:a9:82: 70:64:ce:74:74:25:6e:61:24:3c:3c:69:20:21:48: 9f:7d:85:f7:e8:8b:8c:90:be:28:15:0d:c5:c8:0a: c2:ae:86:49:84:a9:f5:49:fe:54:00:f6:ae:35:55: 5b:0f:14:0b:fc:e1:2f:66:2e:77:d6:56:20:76:90: ab:43:7d:27:39:5d:6d:fc:ac:41:20:84:86:a9:37: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E2:9A:D5:88:29:69:1D:5D:76:03:51:B7:54:28:B4:08:37:E9:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac302bc4-4a3a-4fa7-ae57-a6dc9e6dbf77/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac302bc4-4a3a-4fa7-ae57-a6dc9e6dbf77/ac302bc4-4a3a-4fa7-ae57-a6dc9e6dbf77.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 13870 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:42:a5:9b:eb:77:d5:68:7c:35:04:7b:67:8f:02:6c:14:7f: 8b:74:6f:9a:8a:a0:b3:4f:b7:26:3e:ba:32:df:69:a5:bf:10: f2:4a:b2:9e:6a:59:81:f7:2e:47:b8:52:62:91:a7:f4:ca:28: d7:fd:3d:f3:51:b2:a0:fc:a4:2d:0f:b8:28:8c:41:1e:81:16: 07:9e:72:a1:e8:7d:89:f9:a1:da:b9:ce:8f:96:03:c1:ed:3c: 59:59:36:63:a2:45:eb:3b:a4:9e:75:c1:f1:3e:0d:be:a9:e3: 47:b9:0c:e6:91:89:01:eb:c3:71:ae:98:4a:68:20:1f:3b:7c: 60:9c:72:0a:1e:d7:3b:f6:48:51:57:f3:a6:c3:6c:4e:68:8e: b7:a2:1b:23:32:e4:b6:dc:7f:b1:5e:23:8a:ba:5b:5b:77:96: 27:0a:20:bf:bb:6f:d3:39:f6:78:80:be:39:2b:ea:02:a4:10: 66:db:16:a6:f2:91:7c:df:2f:2f:8f:97:eb:7f:06:27:01:f0: b0:f8:45:30:fd:2b:77:f1:8c:de:cc:33:c6:ee:32:c8:cf:9c: f6:2d:cf:3a:7a:f3:0d:52:4f:b8:58:0a:db:1f:aa:73:b0:95: f9:43:8e:0c:11:2d:5f:9b:cc:6a:49:0a:03:2d:0f:01:f8:29: fc:ff:d5:cd -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEprMcWxIvvRKa8SywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcwNTE1MTIzMloXDTI3MTAwODE1MTIzMlowLzEtMCsGA1UEAxMk YWMzMDJiYzQtNGEzYS00ZmE3LWFlNTctYTZkYzllNmRiZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxZvxUzDoS5+icCbPhRbGmNmJVpcejUkLxQ a0JOht5ypTS6aK6kwsvO633yUIAQX35NfSMQ3hYcGR25RGaa0GmSEMYhKM3aKa3r S3Pi22wGw40D9GeCbHDdH00SVnqXukl8RK9T9G4PYIj95Y0Bpq8ZqC794j4YXOLw oOEofQw3Y6HK4rHfQAbInnpo+FEGXbYA3GeNn9sxGHPhN7HzHwgbwxDf4faUc/yL za4zYJjzqYJwZM50dCVuYSQ8PGkgIUiffYX36IuMkL4oFQ3FyArCroZJhKn1Sf5U APauNVVbDxQL/OEvZi531lYgdpCrQ30nOV1t/KxBIISGqTfazwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFPjimtWIKWkdXXYDUbdUKLQIN+laMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h YzMwMmJjNC00YTNhLTRmYTctYWU1Ny1hNmRjOWU2ZGJmNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FjMzAyYmM0LTRhM2EtNGZhNy1h ZTU3LWE2ZGM5ZTZkYmY3Ny9hYzMwMmJjNC00YTNhLTRmYTctYWU1Ny1hNmRjOWU2 ZGJmNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICNi4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFUKlm+t31Wh8NQR7Z48CbBR/i3Rv moqgs0+3Jj66Mt9ppb8Q8kqynmpZgfcuR7hSYpGn9Moo1/0981GyoPykLQ+4KIxB HoEWB55yoeh9ifmh2rnOj5YDwe08WVk2Y6JF6zuknnXB8T4NvqnjR7kM5pGJAevD ca6YSmggHzt8YJxyCh7XO/ZIUVfzpsNsTmiOt6IbIzLkttx/sV4jirpbW3eWJwog v7tv0zn2eIC+OSvqAqQQZtsWpvKRfN8vL4+X638GJwHwsPhFMP0rd/GM3swzxu4y yM+c9i3POnrzDVJPuFgK2x+qc7CV+UOODBEtX5vMakkKAy0PAfgp/P/VzQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:13 2025 by rpki-client