$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29.cer File: 5a348919-c6b5-4a17-a245-3c048005ec29.cer (raw, json) Hash identifier: r+F262AE8Y7bv6TVH7sgC5N9CdZ1l6Au4Ilc9pp+gHs= Subject key identifier: 2B:E3:84:02:17:C9:76:95:79:FA:F4:81:CD:87:DA:0C:29:34:9B:0F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B48BC06DB843E16318EB8F520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/5a348919-c6b5-4a17-a245-3c048005ec29.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Sep 2025 23:44:45 +0000 Certificate not after: Mon 27 Dec 2027 00:44:45 +0000 Subordinate resources: AS: 26080 AS: 46174 AS: 55070 -- 55071 AS: 394636 IP: 162.211.240.0/21 IP: 198.169.96.0/22 IP: 2620:115:9000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:bc:06:db:84:3e:16:31:8e:b8:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 22 23:44:45 2025 GMT Not After : Dec 27 00:44:45 2027 GMT Subject: CN=5a348919-c6b5-4a17-a245-3c048005ec29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:9e:c6:33:68:69:8a:23:07:89:f5:cb:0a: 9f:c4:67:89:e9:e2:ca:ff:81:c8:37:3e:e4:03:59: 34:14:68:b2:35:eb:cd:d4:36:bc:28:a0:b2:7f:70: f1:9c:f5:61:da:d1:03:d2:e5:4a:f5:92:8f:8f:f0: 63:d6:10:b2:7d:c8:eb:05:b2:f6:9e:92:b8:d1:33: 2d:4d:6f:db:bc:d5:60:c3:e6:95:77:49:2b:fc:a1: 1b:7c:64:47:65:98:e5:89:48:e6:9d:81:06:8a:4d: 83:fb:52:88:1a:b0:64:c7:b9:02:cf:3a:6e:f5:c5: 51:4e:f2:62:71:8d:be:38:17:03:88:f0:b1:76:a8: e0:27:48:13:93:9f:66:7a:2b:82:b9:c4:22:d3:15: ba:61:2a:16:6a:c4:ba:56:4e:53:65:f2:78:15:13: 7e:34:c0:e9:a4:56:4e:cb:c7:af:a6:da:f5:70:b2: bf:af:80:be:ed:67:49:4e:69:74:97:8b:cf:db:4d: 0e:9d:17:eb:9b:61:7a:9c:3c:fb:9c:8f:19:81:95: 32:54:21:8b:6d:20:c8:2d:27:42:ce:45:84:d3:02: 8e:7c:39:fa:39:1f:10:33:e9:0f:27:40:98:bb:aa: d8:67:68:8d:3d:76:62:6a:71:5d:d2:0f:1f:9a:c1: 23:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:84:02:17:C9:76:95:79:FA:F4:81:CD:87:DA:0C:29:34:9B:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5a348919-c6b5-4a17-a245-3c048005ec29/5a348919-c6b5-4a17-a245-3c048005ec29.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 162.211.240.0/21 198.169.96.0/22 IPv6: 2620:115:9000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26080 46174 55070-55071 394636 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:87:43:fa:2e:c1:6e:19:7e:e8:a7:70:f1:87:b7:d0:c4:fa: 29:c9:a1:04:14:8b:57:9b:53:9f:0f:a6:bd:4c:24:fd:37:e5: c9:f7:13:a8:2c:89:f9:0b:7d:38:32:f9:5c:6e:07:17:df:18: 14:07:4a:fb:ee:32:72:96:e3:3a:6c:d3:b1:4e:39:f1:f8:d0: 07:5d:7a:3e:26:74:c3:bc:e6:b1:22:c6:d7:2d:ca:e4:41:b6: 19:0d:ff:75:eb:3c:a7:f3:6c:43:03:6d:3a:cc:de:bf:f6:fe: 4b:9a:69:5c:b0:dc:ca:95:d2:e9:38:92:62:28:b6:cd:18:75: 4a:bf:d9:5e:0c:80:a2:0a:0b:64:b4:58:9d:e5:73:4d:ad:c7: 9d:53:7d:3b:fe:9a:d9:2d:c8:e4:5d:ac:13:aa:f9:db:3d:b9: de:b7:11:17:f3:c9:ef:c7:98:0d:b1:99:6d:6a:be:c5:0d:9b: c9:4f:7e:eb:67:a4:2d:b8:fe:92:8d:a9:9f:41:4f:e9:21:f7: ba:3d:ca:a0:20:98:02:77:c0:64:7b:69:84:a2:7c:75:c4:c1: 7c:c0:37:c8:16:81:e1:e8:3f:f0:17:6c:44:3b:2f:cc:21:cc: 92:c2:98:5d:76:39:5a:60:bb:6b:b9:71:e3:ce:f5:90:28:f1: c3:31:40:c2 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEtIvAbbhD4WMY649SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyMjIzNDQ0NVoXDTI3MTIyNzAwNDQ0NVowLzEtMCsGA1UEAxMk NWEzNDg5MTktYzZiNS00YTE3LWEyNDUtM2MwNDgwMDVlYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwSexjNoaYojB4n1ywqfxGeJ6eLK/4HINz7k A1k0FGiyNevN1Da8KKCyf3DxnPVh2tED0uVK9ZKPj/Bj1hCyfcjrBbL2npK40TMt TW/bvNVgw+aVd0kr/KEbfGRHZZjliUjmnYEGik2D+1KIGrBkx7kCzzpu9cVRTvJi cY2+OBcDiPCxdqjgJ0gTk59meiuCucQi0xW6YSoWasS6Vk5TZfJ4FRN+NMDppFZO y8evptr1cLK/r4C+7WdJTml0l4vP200OnRfrm2F6nDz7nI8ZgZUyVCGLbSDILSdC zkWE0wKOfDn6OR8QM+kPJ0CYu6rYZ2iNPXZianFd0g8fmsEjvQIDAQABo4IERzCC BEMwHQYDVR0OBBYEFCvjhAIXyXaVefr0gc2H2gwpNJsPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 YTM0ODkxOS1jNmI1LTRhMTctYTI0NS0zYzA0ODAwNWVjMjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzVhMzQ4OTE5LWM2YjUtNGExNy1h MjQ1LTNjMDQ4MDA1ZWMyOS81YTM0ODkxOS1jNmI1LTRhMTctYTI0NS0zYzA0ODAw NWVjMjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAOi0/ADBALGqWAwDwQCAAIwCQMHBCYgARWQADAv BggrBgEFBQcBCAEB/wQgMB6gHDAaAgJl4AIDALReMAoCAwDXHgIDANcfAgMGBYww VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAa4dD+i7Bbhl+6Kdw8Ye30MT6KcmhBBSLV5tTnw+mvUwk/TflyfcT qCyJ+Qt9ODL5XG4HF98YFAdK++4ycpbjOmzTsU458fjQB116PiZ0w7zmsSLG1y3K 5EG2GQ3/des8p/NsQwNtOszev/b+S5ppXLDcypXS6TiSYii2zRh1Sr/ZXgyAogoL ZLRYneVzTa3HnVN9O/6a2S3I5F2sE6r52z253rcRF/PJ78eYDbGZbWq+xQ2byU9+ 62ekLbj+ko2pn0FP6SH3uj3KoCCYAnfAZHtphKJ8dcTBfMA3yBaB4eg/8BdsRDsv zCHMksKYXXY5WmC7a7lx4871kCjxwzFAwg== -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:02 2025 by rpki-client