$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/748c1670-b53c-4327-bc23-408f5bdf61de.cer File: 748c1670-b53c-4327-bc23-408f5bdf61de.cer (raw, json) Hash identifier: iYEjlHjcxPJdtxlg/9BR123GgD1QQCs6CIe7SMXEezc= Subject key identifier: E0:6D:DD:34:98:A7:F9:56:F7:92:6A:10:60:28:1D:0F:20:25:0D:17 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B5E3BD6190D638930C19053C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/748c1670-b53c-4327-bc23-408f5bdf61de/748c1670-b53c-4327-bc23-408f5bdf61de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/748c1670-b53c-4327-bc23-408f5bdf61de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 16:34:15 +0000 Certificate not after: Mon 03 Jan 2028 17:34:15 +0000 Subordinate resources: AS: 36796 IP: 198.190.198.0/24 IP: 207.89.53.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:3b:d6:19:0d:63:89:30:c1:90:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 30 16:34:15 2025 GMT Not After : Jan 3 17:34:15 2028 GMT Subject: CN=748c1670-b53c-4327-bc23-408f5bdf61de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:d4:90:b1:b5:08:ce:5f:76:f2:7c:f9:1b: 5d:db:74:08:df:cd:cd:09:2d:99:8f:cd:24:27:ef: e7:cc:b3:cd:c9:59:f9:27:8c:04:33:fd:e3:e4:7e: 1d:e3:47:0f:10:a6:2e:0a:eb:32:1a:3a:9e:1e:51: 60:4e:e6:80:dc:da:42:23:2a:eb:95:c4:78:cb:68: 6c:6b:9b:ef:50:59:42:2a:2f:8c:57:91:ac:90:f7: 13:ca:d9:34:16:c5:d4:2a:2f:b1:88:dc:3f:c3:b0: 4b:10:4c:a1:af:72:9f:99:37:ac:47:56:9c:81:68: ee:17:52:6a:76:74:34:da:e6:c3:eb:53:d6:f9:c1: 30:0f:62:90:74:38:f4:2c:7f:85:49:29:dd:4f:d3: f5:26:4e:d0:94:e1:72:a5:5d:57:2b:c6:37:af:9d: 47:7d:04:b3:54:aa:ef:61:81:38:f4:b5:0d:3b:3f: 41:f2:46:e6:c0:3d:49:7f:f0:8d:2e:b3:3b:ef:f7: cd:6e:f9:9d:5b:40:d0:e3:dc:b0:5c:d3:c9:8c:20: 4d:14:3e:d0:03:fe:c8:dd:5b:84:14:8f:13:e7:79: b5:81:a9:8a:3a:ea:c6:14:25:49:69:cb:fc:41:0e: 70:68:b8:97:a4:61:ea:9b:38:e9:70:ea:aa:6a:82: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6D:DD:34:98:A7:F9:56:F7:92:6A:10:60:28:1D:0F:20:25:0D:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/748c1670-b53c-4327-bc23-408f5bdf61de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/748c1670-b53c-4327-bc23-408f5bdf61de/748c1670-b53c-4327-bc23-408f5bdf61de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 198.190.198.0/24 207.89.53.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36796 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:15:a6:15:44:ba:88:e6:8a:1e:18:16:59:29:d2:03:57:f2: 6a:30:aa:d5:ab:30:9a:3e:c7:d6:cf:d2:1c:cb:ad:47:bd:21: e5:db:c9:e7:f0:17:b7:23:d8:61:fd:2b:58:07:71:55:79:5d: 2e:67:25:88:09:e3:5f:e0:9b:c7:af:51:91:79:16:8f:2f:ba: 73:27:60:ef:9d:2b:c5:52:e5:9f:1b:86:b6:a7:be:a3:f4:63: 9f:2f:43:08:97:c2:4d:0e:c9:12:7a:20:d0:ec:92:06:7a:39: 04:e4:db:48:c4:61:69:59:8c:21:b5:86:a1:44:63:f1:9e:2e: ba:e8:f5:92:a5:38:7f:43:f5:7c:6c:80:fb:68:f8:be:d7:a0: 66:c1:c1:57:76:a9:ed:01:9b:5a:2a:b8:d8:fe:bf:42:73:1d: 28:2e:24:00:30:e7:29:70:94:17:d2:75:8b:d8:69:0d:0f:8f: 54:18:bb:ca:2d:8e:47:53:0b:b9:53:58:09:18:54:32:13:df: ce:04:1f:bd:b4:70:b4:9a:47:e1:3a:72:b3:e3:4c:f5:d8:e1: df:68:da:65:e7:0e:6d:5c:08:4c:fb:36:92:50:23:d3:db:e5: ba:34:37:65:1a:1d:92:0e:55:9a:b1:71:df:87:ed:45:06:a1: e9:37:c9:e9 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEteO9YZDWOJMMGQU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkzMDE2MzQxNVoXDTI4MDEwMzE3MzQxNVowLzEtMCsGA1UEAxMk NzQ4YzE2NzAtYjUzYy00MzI3LWJjMjMtNDA4ZjViZGY2MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpDUkLG1CM5fdvJ8+Rtd23QI383NCS2Zj80k J+/nzLPNyVn5J4wEM/3j5H4d40cPEKYuCusyGjqeHlFgTuaA3NpCIyrrlcR4y2hs a5vvUFlCKi+MV5GskPcTytk0FsXUKi+xiNw/w7BLEEyhr3KfmTesR1acgWjuF1Jq dnQ02ubD61PW+cEwD2KQdDj0LH+FSSndT9P1Jk7QlOFypV1XK8Y3r51HfQSzVKrv YYE49LUNOz9B8kbmwD1Jf/CNLrM77/fNbvmdW0DQ49ywXNPJjCBNFD7QA/7I3VuE FI8T53m1gamKOurGFCVJacv8QQ5waLiXpGHqmzjpcOqqaoI/WQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFOBt3TSYp/lW95JqEGAoHQ8gJQ0XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 NDhjMTY3MC1iNTNjLTQzMjctYmMyMy00MDhmNWJkZjYxZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzc0OGMxNjcwLWI1M2MtNDMyNy1i YzIzLTQwOGY1YmRmNjFkZS83NDhjMTY3MC1iNTNjLTQzMjctYmMyMy00MDhmNWJk ZjYxZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGvsYDBADPWTUwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAI+8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKcVphVEuojmih4YFlkp0gNX8mowqtWrMJo+x9bP 0hzLrUe9IeXbyefwF7cj2GH9K1gHcVV5XS5nJYgJ41/gm8evUZF5Fo8vunMnYO+d K8VS5Z8bhranvqP0Y58vQwiXwk0OyRJ6INDskgZ6OQTk20jEYWlZjCG1hqFEY/Ge Lrro9ZKlOH9D9XxsgPto+L7XoGbBwVd2qe0Bm1oquNj+v0JzHSguJAAw5ylwlBfS dYvYaQ0Pj1QYu8otjkdTC7lTWAkYVDIT384EH720cLSaR+E6crPjTPXY4d9o2mXn Dm1cCEz7NpJQI9Pb5bo0N2UaHZIOVZqxcd+H7UUGoek3yek= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:40 2025 by rpki-client