$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233.cer File: 7fb9744d-259e-4620-9ef5-f94a76d16233.cer (raw, json) Hash identifier: r7K+VxxIjkuG0D3/PrgqCBF8OpUGN9TRPTTbpbPCklA= Subject key identifier: 23:0B:5F:0F:D8:67:AC:10:98:9D:D6:A3:42:17:71:FB:51:83:D3:E7 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B33E290F8BB1E979F0A84A700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/7fb9744d-259e-4620-9ef5-f94a76d16233.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Sep 2025 12:30:26 +0000 Certificate not after: Wed 15 Dec 2027 21:18:43 +0000 Subordinate resources: AS: 394059 IP: 64.40.10.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:e2:90:f8:bb:1e:97:9f:0a:84:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 15 12:30:26 2025 GMT Not After : Dec 15 21:18:43 2027 GMT Subject: CN=7fb9744d-259e-4620-9ef5-f94a76d16233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5f:40:ee:82:55:ec:80:fe:ae:7e:ff:07:01: 12:04:b4:fc:74:2a:a8:09:a1:85:ff:bc:36:08:fe: 48:b3:88:52:9a:ef:be:b8:10:aa:b6:86:39:7a:dc: 74:d2:a0:87:ad:e5:6c:ca:e1:95:cc:70:40:6a:e3: f1:f3:7d:98:2e:19:7f:64:fa:0b:b3:40:99:54:04: bf:39:df:0e:47:b5:0e:10:b8:b3:0c:7d:9e:d7:5f: cc:0e:ed:a1:7b:4e:85:54:34:91:d4:c7:8d:7b:d7: 2a:de:ac:34:40:74:ab:17:c6:82:64:7e:e2:03:e4: e7:52:f8:cb:ce:2b:69:c9:1f:09:a8:26:56:e8:31: 61:18:42:5a:78:cb:84:e7:78:42:1e:31:e2:71:44: 17:3f:de:0e:14:f3:4c:96:21:e7:19:b1:20:df:85: f7:bd:bc:80:c5:84:99:85:58:cc:07:58:fb:37:39: 86:bd:a6:54:11:b9:3e:a3:c3:82:19:c0:96:69:04: c4:e3:54:aa:34:7a:4b:bf:97:6e:76:fd:92:3a:17: 56:91:c4:6a:81:ff:52:f3:d5:d3:49:c2:9f:c1:13: a6:82:ea:25:52:2c:25:d4:16:40:18:8d:21:c5:9a: 54:0d:ab:07:63:7b:93:c2:cf:eb:04:93:38:f7:37: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0B:5F:0F:D8:67:AC:10:98:9D:D6:A3:42:17:71:FB:51:83:D3:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fb9744d-259e-4620-9ef5-f94a76d16233/7fb9744d-259e-4620-9ef5-f94a76d16233.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.40.10.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394059 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:90:78:c4:50:7a:38:55:17:7e:dc:d3:ba:a2:a4:4d:62:dd: 40:32:d6:9b:11:1c:57:44:42:02:1c:ee:50:a5:05:0d:29:7a: b0:f4:2a:f8:1c:c9:d4:ce:42:66:25:d4:47:9b:27:33:b1:fc: 26:d6:aa:bb:c6:ca:53:d7:e5:e4:80:6c:4b:f0:d7:fe:99:5d: aa:ab:1d:c2:37:4f:23:4a:6e:9a:1f:60:75:33:0d:cf:2b:3d: e2:02:08:a2:51:65:3a:64:a1:e3:e7:a8:3d:18:f0:d5:34:57: 2d:4e:b6:54:e4:3f:46:3f:68:8d:34:fb:35:91:25:b2:d0:7c: 95:a4:84:ca:dd:ad:ff:26:e8:a9:4a:2f:9d:35:c5:1e:93:62: 3a:92:ff:a2:77:49:19:53:17:5f:95:75:40:09:e5:e4:54:45: ce:41:20:e2:41:ee:7f:d4:c1:6e:50:70:21:9b:8c:a6:a4:10: 1b:66:a8:28:52:2f:e8:f3:7f:63:a7:d2:f5:a3:c4:c1:b5:5e: 06:b3:9f:c0:15:64:de:f5:dd:f1:61:99:06:a9:14:c9:91:32: 10:52:b5:90:4a:7f:26:fd:7b:4c:01:d9:2c:c0:c4:a4:87:78: 5e:97:13:87:b8:0e:95:64:8c:cf:7f:b1:c7:5f:9b:be:d7:9f: eb:65:e2:1e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsz4pD4ux6XnwqEpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxNTEyMzAyNloXDTI3MTIxNTIxMTg0M1owLzEtMCsGA1UEAxMk N2ZiOTc0NGQtMjU5ZS00NjIwLTllZjUtZjk0YTc2ZDE2MjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV9A7oJV7ID+rn7/BwESBLT8dCqoCaGF/7w2 CP5Is4hSmu++uBCqtoY5etx00qCHreVsyuGVzHBAauPx832YLhl/ZPoLs0CZVAS/ Od8OR7UOELizDH2e11/MDu2he06FVDSR1MeNe9cq3qw0QHSrF8aCZH7iA+TnUvjL zitpyR8JqCZW6DFhGEJaeMuE53hCHjHicUQXP94OFPNMliHnGbEg34X3vbyAxYSZ hVjMB1j7NzmGvaZUEbk+o8OCGcCWaQTE41SqNHpLv5dudv2SOhdWkcRqgf9S89XT ScKfwROmguolUiwl1BZAGI0hxZpUDasHY3uTws/rBJM49zfd0wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCMLXw/YZ6wQmJ3Wo0IXcftRg9PnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 ZmI5NzQ0ZC0yNTllLTQ2MjAtOWVmNS1mOTRhNzZkMTYyMzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdmYjk3NDRkLTI1OWUtNDYyMC05 ZWY1LWY5NGE3NmQxNjIzMy83ZmI5NzQ0ZC0yNTllLTQ2MjAtOWVmNS1mOTRhNzZk MTYyMzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABAKAowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgNLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALyQeMRQejhVF37c07qipE1i3UAy1psRHFdEQgIc7lClBQ0p erD0KvgcydTOQmYl1EebJzOx/CbWqrvGylPX5eSAbEvw1/6ZXaqrHcI3TyNKbpof YHUzDc8rPeICCKJRZTpkoePnqD0Y8NU0Vy1OtlTkP0Y/aI00+zWRJbLQfJWkhMrd rf8m6KlKL501xR6TYjqS/6J3SRlTF1+VdUAJ5eRURc5BIOJB7n/UwW5QcCGbjKak EBtmqChSL+jzf2On0vWjxMG1Xgazn8AVZN713fFhmQapFMmRMhBStZBKfyb9e0wB 2SzAxKSHeF6XE4e4DpVkjM9/scdfm77Xn+tl4h4= -----END CERTIFICATE-----Generated at Wed Oct 8 17:16:43 2025 by rpki-client