$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer File: 48416e40-8d51-4528-a6af-36dd93cf14ee.cer (raw, json) Hash identifier: eW9dMiMuVRUbXfkT6k2KvUy/1htpgiPNcXk1kFJ5L+Y= Subject key identifier: 58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B3170E7E85232348D6F6C5D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 14 Sep 2025 15:29:48 +0000 Certificate not after: Sat 18 Dec 2027 16:29:48 +0000 Subordinate resources: AS: 30625 IP: 208.66.84.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:70:e7:e8:52:32:34:8d:6f:6c:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 14 15:29:48 2025 GMT Not After : Dec 18 16:29:48 2027 GMT Subject: CN=48416e40-8d51-4528-a6af-36dd93cf14ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:60:63:4a:86:7a:8a:47:f3:d7:b2:8a:c9: cd:89:13:62:24:88:78:52:b0:9d:7d:ee:a7:2a:9d: 15:37:6f:d0:91:98:33:e4:f8:a1:06:dc:91:e2:b7: 42:7a:41:50:36:0b:e7:36:b5:79:9b:aa:96:9e:d1: 23:5f:4f:8e:3c:1a:4e:2d:1f:73:3f:53:a8:ef:d9: 1d:4f:92:05:a8:d3:26:2c:4d:18:ce:21:cb:c8:ce: 5c:e9:43:67:20:56:b9:cf:f8:62:93:1a:32:14:22: f9:76:20:65:d9:52:2c:25:9b:f3:85:58:39:31:ee: 1d:3e:11:71:ab:ab:83:9d:d0:73:fa:61:37:64:27: 1b:e7:4e:fe:74:46:ee:6b:ee:65:de:76:36:ab:86: f8:41:d7:02:a0:7d:3d:c0:04:b9:9a:23:85:56:08: 25:0e:ed:f4:94:9a:0a:7e:e0:3d:86:fc:e6:9d:bc: d6:ec:86:b5:a6:8c:ab:08:d5:ff:b3:9d:c1:26:52: 82:2c:dc:25:64:4d:7f:e8:05:a4:04:ec:81:3a:3d: 21:d6:27:ab:6d:7c:22:f9:d0:3a:de:84:87:a1:22: 15:a5:f2:ad:87:e9:be:e5:85:53:54:7c:8d:44:25: a8:50:2d:83:36:38:bb:60:74:be:ff:d8:e2:e6:2b: b2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 208.66.84.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30625 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:ed:d4:a6:af:fe:0a:74:bf:bb:7d:ad:9b:51:90:ed:c7:2f: 08:a7:5f:7d:ab:67:c6:7d:d7:72:95:15:7a:ee:52:7b:5b:28: c4:7c:1c:00:5e:15:8f:4c:71:b1:99:f0:41:97:90:8e:4e:51: f9:8e:89:45:0e:45:5e:3b:ea:49:12:19:11:91:de:5d:38:1e: 83:05:51:e8:41:23:e1:66:28:ca:67:4b:df:6b:72:27:aa:53: 97:00:b3:97:ce:a8:f4:3f:f7:d2:32:ac:5e:dd:5f:4c:6c:cb: 4f:07:32:09:5e:3c:09:8d:e5:6b:4b:a0:1c:24:04:2e:df:27: 65:6b:cb:f7:a4:bd:0d:8c:fb:51:4c:8b:3a:dc:e6:21:1e:2b: 9b:88:91:16:38:ba:b9:e4:b4:ae:52:b6:e0:cf:62:bb:df:b3: 1b:9f:5d:8b:33:69:a6:8f:85:3d:fb:19:36:22:90:8d:13:23: 9a:f1:20:10:b5:a0:ff:8a:e7:6c:fa:da:17:3e:f7:59:49:a0: dc:6e:96:d1:3c:00:91:0b:e2:83:71:5b:49:37:00:c9:18:33: 10:6c:71:cc:44:9b:69:38:49:6b:3f:aa:42:b5:ab:0e:26:1c: be:9c:6e:f8:01:e8:03:97:b4:a3:8c:7a:60:12:54:df:35:1c: 81:1a:02:4c -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEsxcOfoUjI0jW9sXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxNDE1Mjk0OFoXDTI3MTIxODE2Mjk0OFowLzEtMCsGA1UEAxMk NDg0MTZlNDAtOGQ1MS00NTI4LWE2YWYtMzZkZDkzY2YxNGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxlgY0qGeopH89eyisnNiRNiJIh4UrCdfe6n Kp0VN2/QkZgz5PihBtyR4rdCekFQNgvnNrV5m6qWntEjX0+OPBpOLR9zP1Oo79kd T5IFqNMmLE0YziHLyM5c6UNnIFa5z/hikxoyFCL5diBl2VIsJZvzhVg5Me4dPhFx q6uDndBz+mE3ZCcb507+dEbua+5l3nY2q4b4QdcCoH09wAS5miOFVgglDu30lJoK fuA9hvzmnbzW7Ia1poyrCNX/s53BJlKCLNwlZE1/6AWkBOyBOj0h1ierbXwi+dA6 3oSHoSIVpfKth+m+5YVTVHyNRCWoUC2DNji7YHS+/9ji5iuy8QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFisYR25p6X6PVDPSFGb/BT6pMb9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 ODQxNmU0MC04ZDUxLTQ1MjgtYTZhZi0zNmRkOTNjZjE0ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzQ4NDE2ZTQwLThkNTEtNDUyOC1h NmFmLTM2ZGQ5M2NmMTRlZS80ODQxNmU0MC04ZDUxLTQ1MjgtYTZhZi0zNmRkOTNj ZjE0ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQQlQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC d6EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAuO3Upq/+CnS/u32tm1GQ7ccvCKdffatnxn3XcpUVeu5Se1so xHwcAF4Vj0xxsZnwQZeQjk5R+Y6JRQ5FXjvqSRIZEZHeXTgegwVR6EEj4WYoymdL 32tyJ6pTlwCzl86o9D/30jKsXt1fTGzLTwcyCV48CY3la0ugHCQELt8nZWvL96S9 DYz7UUyLOtzmIR4rm4iRFji6ueS0rlK24M9iu9+zG59dizNppo+FPfsZNiKQjRMj mvEgELWg/4rnbPraFz73WUmg3G6W0TwAkQvig3FbSTcAyRgzEGxxzESbaThJaz+q QrWrDiYcvpxu+AHoA5e0o4x6YBJU3zUcgRoCTA== -----END CERTIFICATE-----Generated at Wed Oct 8 15:35:52 2025 by rpki-client