$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b6191a44-a4b0-46b8-a823-a69dc4e8b859.cer File: b6191a44-a4b0-46b8-a823-a69dc4e8b859.cer (raw, json) Hash identifier: 2+cIJhA3AnHAWqSKNLeu88sf+C+MwofrV3pWVIzFvNU= Subject key identifier: 83:44:27:66:CF:0A:BA:7C:AA:CD:BA:C5:64:E1:C2:D9:F1:44:A8:04 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A8DCE9996591AC4EA7E02B430 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b6191a44-a4b0-46b8-a823-a69dc4e8b859/b6191a44-a4b0-46b8-a823-a69dc4e8b859.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b6191a44-a4b0-46b8-a823-a69dc4e8b859/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Jul 2025 00:46:01 +0000 Certificate not after: Thu 21 Oct 2027 00:46:01 +0000 Subordinate resources: AS: 32118 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:ce:99:96:59:1a:c4:ea:7e:02:b4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 18 00:46:01 2025 GMT Not After : Oct 21 00:46:01 2027 GMT Subject: CN=b6191a44-a4b0-46b8-a823-a69dc4e8b859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:38:d1:d8:30:27:97:4e:af:92:93:67:da: e8:38:b3:ef:6b:63:7c:ac:fa:da:0e:63:c1:12:06: 62:f9:ed:20:9d:ef:46:70:a8:17:98:e6:a4:aa:27: bf:8f:70:b0:22:b1:58:00:9c:6c:05:af:57:67:a7: cc:72:fe:c5:a2:a2:6c:83:e3:29:09:00:6f:96:c4: e0:50:6d:0b:30:f2:d6:fd:61:f6:05:f9:74:06:f3: a4:f4:b3:7d:55:c7:08:77:84:a4:f4:16:84:bc:72: 74:99:67:bc:69:6c:e4:df:bf:0c:62:61:03:84:88: 48:b3:27:7d:8e:f8:50:8e:d8:0d:4c:dc:31:cf:a7: b8:e2:2c:56:6f:fb:3f:cd:92:6c:01:41:fc:0a:e5: 08:88:f8:17:a7:29:c5:45:40:67:53:7e:de:10:d9: 14:76:2c:e2:59:8e:c2:fa:c3:82:22:71:f9:5c:72: 64:ed:be:ae:7c:8a:21:ae:bc:e2:d3:aa:4f:fb:e4: 49:1d:20:40:6f:46:f3:3d:07:0b:e7:cc:12:f6:25: 13:2c:c4:a7:28:5b:b8:7e:15:4b:af:68:6b:19:12: 68:0c:0f:01:ad:77:66:3f:08:57:d7:cf:8e:54:cf: 74:41:8f:12:67:64:68:e1:e3:97:b7:95:e6:a2:60: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:44:27:66:CF:0A:BA:7C:AA:CD:BA:C5:64:E1:C2:D9:F1:44:A8:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b6191a44-a4b0-46b8-a823-a69dc4e8b859/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b6191a44-a4b0-46b8-a823-a69dc4e8b859/b6191a44-a4b0-46b8-a823-a69dc4e8b859.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32118 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3a:bc:4c:5c:46:e0:c9:80:c7:85:cc:d3:15:c9:ae:02:1b: d5:b1:e1:b4:05:71:a8:37:54:95:70:5b:d1:f7:88:cf:b5:64: 1c:23:38:ac:cf:fd:66:35:a7:02:05:30:0c:a4:d6:ae:82:26: d5:52:47:1d:08:42:4b:7d:e8:c6:ae:29:12:36:b2:0a:d4:ed: 31:4a:da:ae:8f:24:c4:62:07:ed:d8:d1:a5:49:15:8f:c2:e0: b2:04:2c:a7:ba:ec:b2:6e:d8:e5:67:d0:bd:f7:3d:84:70:37: 5d:0e:17:ea:da:a8:15:87:3d:93:9c:11:a5:57:04:f2:0e:cd: bc:96:ef:ae:7e:8a:37:3a:12:b5:46:fe:0d:43:9c:fd:35:49: fc:32:64:87:53:ff:d7:3e:ab:6b:2c:5f:ad:5e:d9:4d:4c:7b: 12:d4:2b:34:fa:49:73:fa:20:f3:bd:4d:39:4a:69:8a:8e:fe: 4f:38:46:89:7c:79:ca:8f:79:05:eb:85:3b:30:6f:03:62:d0: 4d:c0:03:72:e5:e2:0a:6b:30:cb:08:94:f9:f5:0e:bd:ec:82: e4:7a:c3:01:0b:4d:87:96:e1:f4:60:1b:4a:42:cd:4e:f9:c0: e1:fb:0b:bc:88:1c:f5:87:f6:bc:dc:99:98:88:cd:08:49:93: 8b:d0:cb:3a -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEqNzpmWWRrE6n4CtDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxODAwNDYwMVoXDTI3MTAyMTAwNDYwMVowLzEtMCsGA1UEAxMk YjYxOTFhNDQtYTRiMC00NmI4LWE4MjMtYTY5ZGM0ZThiODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYo40dgwJ5dOr5KTZ9roOLPva2N8rPraDmPB EgZi+e0gne9GcKgXmOakqie/j3CwIrFYAJxsBa9XZ6fMcv7FoqJsg+MpCQBvlsTg UG0LMPLW/WH2Bfl0BvOk9LN9VccId4Sk9BaEvHJ0mWe8aWzk378MYmEDhIhIsyd9 jvhQjtgNTNwxz6e44ixWb/s/zZJsAUH8CuUIiPgXpynFRUBnU37eENkUdiziWY7C +sOCInH5XHJk7b6ufIohrrzi06pP++RJHSBAb0bzPQcL58wS9iUTLMSnKFu4fhVL r2hrGRJoDA8BrXdmPwhX18+OVM90QY8SZ2Ro4eOXt5XmomDW/QIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFINEJ2bPCrp8qs26xWThwtnxRKgEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i NjE5MWE0NC1hNGIwLTQ2YjgtYTgyMy1hNjlkYzRlOGI4NTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2I2MTkxYTQ0LWE0YjAtNDZiOC1h ODIzLWE2OWRjNGU4Yjg1OS9iNjE5MWE0NC1hNGIwLTQ2YjgtYTgyMy1hNjlkYzRl OGI4NTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfXYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYjq8TFxG4MmAx4XM0xXJrgIb1bHh tAVxqDdUlXBb0feIz7VkHCM4rM/9ZjWnAgUwDKTWroIm1VJHHQhCS33oxq4pEjay CtTtMUraro8kxGIH7djRpUkVj8LgsgQsp7rssm7Y5WfQvfc9hHA3XQ4X6tqoFYc9 k5wRpVcE8g7NvJbvrn6KNzoStUb+DUOc/TVJ/DJkh1P/1z6rayxfrV7ZTUx7EtQr NPpJc/og871NOUppio7+TzhGiXx5yo95BeuFOzBvA2LQTcADcuXiCmswywiU+fUO veyC5HrDAQtNh5bh9GAbSkLNTvnA4fsLvIgc9Yf2vNyZmIjNCEmTi9DLOg== -----END CERTIFICATE-----Generated at Wed Nov 5 01:20:25 2025 by rpki-client