$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.cer File: a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.cer (raw, json) Hash identifier: eW7Qzq3z++kyEHOWLfI8sC4HCd7I23DqjSrnjt/iaaE= Subject key identifier: E8:F9:11:E0:D1:1D:B7:2B:5F:D9:7D:81:24:1E:ED:03:C6:E7:33:F0 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B20FD08A0FB81BB56B50F1FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 18:03:24 +0000 Certificate not after: Sun 12 Dec 2027 19:03:24 +0000 Subordinate resources: AS: 53604 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:fd:08:a0:fb:81:bb:56:b5:0f:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 8 18:03:24 2025 GMT Not After : Dec 12 19:03:24 2027 GMT Subject: CN=a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:71:b6:14:42:ac:6e:47:75:b7:53:f0:76: 62:80:ae:d6:d6:0f:91:e4:73:76:e9:eb:45:16:8a: 81:12:78:68:32:95:6a:6e:6d:3a:90:43:f2:71:b7: c6:59:79:c8:7a:2f:11:5d:1d:47:3e:b9:6f:cf:b2: 53:f1:9f:c1:f8:bf:f6:d3:b2:57:33:d7:41:44:4a: 4b:90:e0:df:27:e3:53:fc:05:39:57:9d:da:2d:31: ba:9a:2c:ea:bd:ac:24:35:4c:10:46:3b:c0:82:1f: ee:90:9d:2d:da:ea:a2:0f:ec:be:f3:a2:d7:fc:ca: 8f:da:6c:5b:c6:50:54:e9:ce:ba:c9:01:7d:b6:b1: 2e:18:a1:48:1f:10:ed:74:4d:c0:98:4f:1d:91:e9: b0:e1:c7:d8:82:35:a6:b3:4b:44:a9:f7:4c:dd:fa: 34:50:b7:8a:03:3d:6b:72:ad:b8:dd:70:80:20:d7: 6c:eb:8d:b9:48:63:c8:68:b0:fa:c2:c2:fc:b7:67: 2e:fb:47:30:71:40:9e:12:3b:f0:b5:1e:ba:0c:ec: 5d:39:96:22:e4:ba:5b:2a:8b:88:f9:e3:f6:4e:d5: 72:7f:4a:bd:8a:bc:85:9a:2c:48:e0:b0:c0:7d:d3: a8:7e:d6:8f:e6:b7:e6:4f:0b:82:a0:07:e7:d5:c0: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F9:11:E0:D1:1D:B7:2B:5F:D9:7D:81:24:1E:ED:03:C6:E7:33:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7/a72db4bd-7e1c-4cd8-8b01-8ad3f913f4d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 53604 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:cb:be:96:c8:e7:d9:96:91:6a:77:8f:9a:3e:32:e7:87:45: a2:0c:9b:6d:72:31:e5:e0:93:e3:98:4f:ef:da:7b:8b:71:c5: b6:a8:fd:56:7b:98:21:8e:05:f5:3d:07:a3:b5:3c:52:f4:ba: 05:0e:26:24:db:bb:c8:27:32:a4:57:01:d9:2b:d0:c0:58:84: 5a:e2:6d:ca:5d:c4:b9:a5:f3:7c:ea:df:c8:08:4f:22:ca:66: 2e:ec:2b:f0:5c:c0:fb:9c:ad:c6:45:81:3c:0d:27:ce:92:2e: d4:1d:67:41:8f:0a:f8:01:93:94:8f:12:73:90:27:1b:69:e6: c5:48:dc:83:ca:cf:46:c9:0f:3f:87:9c:b5:76:a8:d5:9a:3e: a4:dd:36:97:a2:bb:88:b7:3a:2b:09:52:ac:71:1c:24:13:1a: 56:1c:9f:f9:9d:af:80:d3:2a:43:c4:a7:fc:4f:af:2b:9a:3a: 36:b7:71:a3:58:97:56:c5:48:79:9a:b3:6f:61:4a:e5:bf:31: 49:8c:3e:09:e3:eb:c8:10:74:1a:80:17:a1:be:30:b9:51:4c: 89:c7:5f:d0:2c:4d:00:e8:7d:9e:55:7e:61:f6:6a:cc:e5:5b: 1d:c8:9c:e3:fc:60:18:0d:ac:00:51:7c:ed:4b:ae:24:c0:74: c1:38:8a:bd -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEsg/Qig+4G7VrUPH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwODE4MDMyNFoXDTI3MTIxMjE5MDMyNFowLzEtMCsGA1UEAxMk YTcyZGI0YmQtN2UxYy00Y2Q4LThiMDEtOGFkM2Y5MTNmNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ChxthRCrG5HdbdT8HZigK7W1g+R5HN26etF FoqBEnhoMpVqbm06kEPycbfGWXnIei8RXR1HPrlvz7JT8Z/B+L/207JXM9dBREpL kODfJ+NT/AU5V53aLTG6mizqvawkNUwQRjvAgh/ukJ0t2uqiD+y+86LX/MqP2mxb xlBU6c66yQF9trEuGKFIHxDtdE3AmE8dkemw4cfYgjWms0tEqfdM3fo0ULeKAz1r cq243XCAINds6425SGPIaLD6wsL8t2cu+0cwcUCeEjvwtR66DOxdOZYi5LpbKouI +eP2TtVyf0q9iryFmixI4LDAfdOoftaP5rfmTwuCoAfn1cB3iQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFOj5EeDRHbcrX9l9gSQe7QPG5zPwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h NzJkYjRiZC03ZTFjLTRjZDgtOGIwMS04YWQzZjkxM2Y0ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2E3MmRiNGJkLTdlMWMtNGNkOC04 YjAxLThhZDNmOTEzZjRkNy9hNzJkYjRiZC03ZTFjLTRjZDgtOGIwMS04YWQzZjkx M2Y0ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANFkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALXLvpbI59mWkWp3j5o+MueHRaIM m21yMeXgk+OYT+/ae4txxbao/VZ7mCGOBfU9B6O1PFL0ugUOJiTbu8gnMqRXAdkr 0MBYhFribcpdxLml83zq38gITyLKZi7sK/BcwPucrcZFgTwNJ86SLtQdZ0GPCvgB k5SPEnOQJxtp5sVI3IPKz0bJDz+HnLV2qNWaPqTdNpeiu4i3OisJUqxxHCQTGlYc n/mdr4DTKkPEp/xPryuaOja3caNYl1bFSHmas29hSuW/MUmMPgnj68gQdBqAF6G+ MLlRTInHX9AsTQDofZ5VfmH2aszlWx3InOP8YBgNrABRfO1LriTAdME4ir0= -----END CERTIFICATE-----Generated at Wed Oct 8 17:05:14 2025 by rpki-client