$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer File: 45718731-be33-4e2d-a8ff-5c444109d0ad.cer (raw, json) Hash identifier: GSTDDT489kL7dT+Wo5cjemb/ZNaUos6xE6KceWreNcQ= Subject key identifier: DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B4ABE12FED2283587FF10A380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Sep 2025 17:00:30 +0000 Certificate not after: Thu 23 Dec 2027 21:06:02 +0000 Subordinate resources: AS: 36713 IP: 149.28.0.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:be:12:fe:d2:28:35:87:ff:10:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 23 17:00:30 2025 GMT Not After : Dec 23 21:06:02 2027 GMT Subject: CN=45718731-be33-4e2d-a8ff-5c444109d0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:8d:bf:16:2d:81:b4:bb:47:75:cf:64:d1: b2:44:fe:b8:cb:2e:17:9c:e6:a0:b1:50:34:86:93: 68:4b:1d:cf:51:e5:01:ec:1d:67:c5:03:9c:d7:d0: 51:78:f0:ee:52:2e:cb:1a:99:9c:2a:f3:61:f1:7f: 4a:24:38:93:e9:60:4e:8c:6b:3c:61:87:d6:ef:a1: 21:9f:de:95:b1:08:b0:59:22:06:8f:ac:0c:8b:cb: 4f:c3:87:22:35:f4:5f:11:d6:52:0f:d5:fb:15:77: 70:41:a4:43:41:26:4d:87:21:6f:d0:75:ad:86:12: d1:83:2d:0b:8d:d5:39:ed:10:2d:c4:4c:49:6c:d9: 10:a5:3b:8e:0e:e6:db:5b:d3:cb:7d:a3:3c:97:db: 5e:0b:bc:e5:e7:cc:20:27:fd:a0:98:e6:25:d1:19: 36:07:83:11:47:43:9b:15:81:80:08:fd:aa:fe:2f: f7:aa:14:da:13:bb:b2:44:08:a6:15:d8:a5:05:54: f1:02:15:03:49:78:10:bb:2f:56:0d:88:40:7f:ec: 0f:63:24:61:e0:66:dc:dc:4e:14:18:63:56:5a:5f: ec:2c:88:48:06:03:12:53:53:e7:d3:59:ad:04:f8: 49:f8:47:f4:40:26:62:da:25:0d:2c:2c:92:8e:57: 80:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 149.28.0.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36713 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:b6:cc:75:c0:bb:69:ac:35:b0:e6:2c:b9:0a:88:40:3e:e2: 94:26:9c:ba:d0:7a:dc:e2:e7:98:a3:91:e5:fb:35:fc:5c:bb: 02:c5:6e:8c:8f:23:86:fd:24:b7:dc:dc:37:2c:2e:b3:b2:50: 1b:0c:54:2d:ef:d5:fa:a8:7e:1f:4a:f6:a1:cd:b1:b8:7f:9c: 94:8a:9a:7e:4c:ad:17:4a:df:5c:ac:9b:86:43:99:e5:0d:ae: 37:4b:fb:1e:43:1e:d9:67:a8:dd:59:69:33:78:d7:51:89:63: f5:e8:00:5e:f3:16:e6:1c:d6:df:13:85:2b:19:46:3b:65:43: bb:a5:82:da:9b:4f:54:8c:9c:38:30:e5:f9:91:4f:e1:31:c4: 66:47:0e:5a:3f:9f:37:76:a7:44:eb:e9:ca:ee:05:bc:26:4e: ca:df:b5:2f:b6:29:7c:5b:bd:a7:b5:60:71:73:4a:a9:8e:43: c4:f9:5e:5d:55:98:1d:32:92:2e:b0:9d:ec:e5:90:9e:ed:b3: 64:5e:63:10:0c:18:62:c6:5e:1a:84:33:12:bc:fc:5b:6e:ab: 08:6d:d8:d5:8d:61:28:f8:bb:e4:bd:3d:fc:31:6e:74:9f:0c: cd:3b:5c:44:65:b6:28:b3:92:82:14:04:71:23:e5:55:55:1c: 9e:54:23:0d -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtKvhL+0ig1h/8Qo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyMzE3MDAzMFoXDTI3MTIyMzIxMDYwMlowLzEtMCsGA1UEAxMk NDU3MTg3MzEtYmUzMy00ZTJkLWE4ZmYtNWM0NDQxMDlkMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygiNvxYtgbS7R3XPZNGyRP64yy4XnOagsVA0 hpNoSx3PUeUB7B1nxQOc19BRePDuUi7LGpmcKvNh8X9KJDiT6WBOjGs8YYfW76Eh n96VsQiwWSIGj6wMi8tPw4ciNfRfEdZSD9X7FXdwQaRDQSZNhyFv0HWthhLRgy0L jdU57RAtxExJbNkQpTuODubbW9PLfaM8l9teC7zl58wgJ/2gmOYl0Rk2B4MRR0Ob FYGACP2q/i/3qhTaE7uyRAimFdilBVTxAhUDSXgQuy9WDYhAf+wPYyRh4Gbc3E4U GGNWWl/sLIhIBgMSU1Pn01mtBPhJ+Ef0QCZi2iUNLCySjleAcwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFN78o+Nw3iE4Yz4uEB+48buvWq9sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 NTcxODczMS1iZTMzLTRlMmQtYThmZi01YzQ0NDEwOWQwYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzQ1NzE4NzMxLWJlMzMtNGUyZC1h OGZmLTVjNDQ0MTA5ZDBhZC80NTcxODczMS1iZTMzLTRlMmQtYThmZi01YzQ0NDEw OWQwYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOVHAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI9pMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMC2zHXAu2msNbDmLLkKiEA+4pQmnLrQetzi55ijkeX7Nfxc uwLFboyPI4b9JLfc3DcsLrOyUBsMVC3v1fqofh9K9qHNsbh/nJSKmn5MrRdK31ys m4ZDmeUNrjdL+x5DHtlnqN1ZaTN411GJY/XoAF7zFuYc1t8ThSsZRjtlQ7ulgtqb T1SMnDgw5fmRT+ExxGZHDlo/nzd2p0Tr6cruBbwmTsrftS+2KXxbvae1YHFzSqmO Q8T5Xl1VmB0yki6wnezlkJ7ts2ReYxAMGGLGXhqEMxK8/Ftuqwht2NWNYSj4u+S9 PfwxbnSfDM07XERltiizkoIUBHEj5VVVHJ5UIw0= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:41 2025 by rpki-client