$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52a50c02-9780-43fa-8744-4885b8f4f8c4.cer File: 52a50c02-9780-43fa-8744-4885b8f4f8c4.cer (raw, json) Hash identifier: KfOzC1zGumnVd/MmT4zPw+koudK3tt3UliVsSiBSkLM= Subject key identifier: 2D:A5:BA:9E:4B:41:DA:0A:D7:66:7D:A6:FF:CB:C3:A5:1A:66:F2:98 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B20BE7BA84ABBBF6058C6E700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52a50c02-9780-43fa-8744-4885b8f4f8c4/52a50c02-9780-43fa-8744-4885b8f4f8c4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52a50c02-9780-43fa-8744-4885b8f4f8c4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 15:57:22 +0000 Certificate not after: Thu 09 Dec 2027 20:26:48 +0000 Subordinate resources: AS: 396015 IP: 2602:81c:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:be:7b:a8:4a:bb:bf:60:58:c6:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 8 15:57:22 2025 GMT Not After : Dec 9 20:26:48 2027 GMT Subject: CN=52a50c02-9780-43fa-8744-4885b8f4f8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b0:1d:6e:4c:c2:bd:ca:53:a5:69:1d:e1:82: 49:13:78:75:db:17:38:a5:37:c2:3a:57:f8:e0:5c: e0:49:db:4b:f7:c9:83:6b:f9:69:5d:28:93:3d:77: 12:5b:1f:9e:c2:cb:b9:68:25:dd:1a:a1:44:3b:b8: 9f:56:b9:fb:04:c3:ae:1b:d3:71:67:d2:e3:f0:26: 1d:9a:d1:f0:d1:55:ea:63:5e:23:e7:2e:92:58:d0: b2:ec:d8:fc:b5:4f:88:67:f5:ee:cf:8e:2d:77:de: ce:42:ee:d7:b0:ca:57:c0:fd:4c:ec:f3:9b:9a:23: f9:88:23:c5:7b:88:d5:48:9b:b6:c6:bc:9c:8e:f6: fd:83:42:35:4a:21:0f:e7:56:19:23:f7:8e:e4:17: 06:77:e2:f1:ee:ea:66:15:50:94:ca:c4:2d:85:a2: 10:43:ef:c8:d6:68:a4:20:3e:29:4b:e3:07:d8:c0: 14:a9:1d:91:59:0d:e5:fd:fb:15:d2:3d:ea:de:d3: e1:e4:cd:ea:ce:09:79:ea:76:d8:68:0c:1a:a2:31: 8a:bd:db:36:9b:f3:34:2a:ab:47:1c:36:d3:fd:52: 5f:a4:b0:34:99:d6:ba:6a:32:8f:14:1f:e6:e8:fb: ca:1e:4d:a5:9e:4f:64:5d:42:53:47:67:0c:5e:db: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A5:BA:9E:4B:41:DA:0A:D7:66:7D:A6:FF:CB:C3:A5:1A:66:F2:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52a50c02-9780-43fa-8744-4885b8f4f8c4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52a50c02-9780-43fa-8744-4885b8f4f8c4/52a50c02-9780-43fa-8744-4885b8f4f8c4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:81c:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396015 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:2b:27:89:ef:b5:49:b2:33:32:09:3f:52:27:40:e9:d3:d7: 8a:61:d3:10:53:e0:8e:1a:34:0a:e5:3a:01:b0:f6:49:dc:d3: cf:e5:5a:60:2d:6b:47:af:cf:b8:30:27:81:04:94:79:b0:1b: 7a:87:52:34:cb:a6:79:fd:d3:92:bf:0f:f9:50:17:9e:96:fe: 7d:fa:6b:0a:47:19:64:c1:a7:f0:9f:0f:12:43:0a:72:60:bf: 14:9d:83:c0:ef:02:43:b1:4e:4a:21:86:94:94:1d:c1:be:34: 23:93:ef:c9:79:ec:05:83:b7:bc:28:e0:91:18:92:fe:59:f7: e6:e1:32:2b:6b:82:a9:83:22:8a:db:28:c0:22:f4:83:27:d7: ec:6a:5e:3e:78:d5:61:5d:86:cc:39:f6:d4:9b:30:ba:5b:91: 70:6f:5b:58:0f:fa:9d:24:22:52:9c:4f:98:4c:96:b4:cf:a4: a9:9e:b5:08:33:82:a4:7d:1f:1a:19:4f:35:68:c8:33:ab:2d: 90:47:bf:0b:2c:28:0c:e6:75:83:c1:77:e9:45:8d:e8:62:73: 62:11:16:6f:22:cf:aa:7c:6c:e0:03:a0:f1:fa:a4:04:39:ab: e7:7d:b0:75:df:1c:5e:8a:9d:b3:c1:cc:73:98:50:83:56:a3: 60:00:74:f4 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEsgvnuoSru/YFjG5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwODE1NTcyMloXDTI3MTIwOTIwMjY0OFowLzEtMCsGA1UEAxMk NTJhNTBjMDItOTc4MC00M2ZhLTg3NDQtNDg4NWI4ZjRmOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLAdbkzCvcpTpWkd4YJJE3h12xc4pTfCOlf4 4FzgSdtL98mDa/lpXSiTPXcSWx+ewsu5aCXdGqFEO7ifVrn7BMOuG9NxZ9Lj8CYd mtHw0VXqY14j5y6SWNCy7Nj8tU+IZ/Xuz44td97OQu7XsMpXwP1M7PObmiP5iCPF e4jVSJu2xrycjvb9g0I1SiEP51YZI/eO5BcGd+Lx7upmFVCUysQthaIQQ+/I1mik ID4pS+MH2MAUqR2RWQ3l/fsV0j3q3tPh5M3qzgl56nbYaAwaojGKvds2m/M0KqtH HDbT/VJfpLA0mda6ajKPFB/m6PvKHk2lnk9kXUJTR2cMXtsqGQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFC2lup5LQdoK12Z9pv/Lw6UaZvKYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 MmE1MGMwMi05NzgwLTQzZmEtODc0NC00ODg1YjhmNGY4YzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzUyYTUwYzAyLTk3ODAtNDNmYS04 NzQ0LTQ4ODViOGY0ZjhjNC81MmE1MGMwMi05NzgwLTQzZmEtODc0NC00ODg1Yjhm NGY4YzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggcQAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBgrvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBALYrJ4nvtUmyMzIJP1InQOnT14ph0xBT4I4aNArlOgGw 9knc08/lWmAta0evz7gwJ4EElHmwG3qHUjTLpnn905K/D/lQF56W/n36awpHGWTB p/CfDxJDCnJgvxSdg8DvAkOxTkohhpSUHcG+NCOT78l57AWDt7wo4JEYkv5Z9+bh MitrgqmDIorbKMAi9IMn1+xqXj541WFdhsw59tSbMLpbkXBvW1gP+p0kIlKcT5hM lrTPpKmetQgzgqR9HxoZTzVoyDOrLZBHvwssKAzmdYPBd+lFjehic2IRFm8iz6p8 bOADoPH6pAQ5q+d9sHXfHF6KnbPBzHOYUINWo2AAdPQ= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:00 2025 by rpki-client