$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/946dc4e8-697f-4823-b610-4660c483b8af.cer File: 946dc4e8-697f-4823-b610-4660c483b8af.cer (raw, json) Hash identifier: C0EiQGNtXyAQlxnCG5TYgD/wa8QOd9CFwVPZgjnemXo= Subject key identifier: 47:DD:A0:CF:66:B5:B4:27:62:1C:04:2C:99:2B:C6:70:DF:DC:98:AF Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B3F84B55C25A698C5328CAB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/946dc4e8-697f-4823-b610-4660c483b8af/946dc4e8-697f-4823-b610-4660c483b8af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/946dc4e8-697f-4823-b610-4660c483b8af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Sep 2025 16:31:01 +0000 Certificate not after: Thu 23 Dec 2027 17:31:01 +0000 Subordinate resources: AS: 393689 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:84:b5:5c:25:a6:98:c5:32:8c:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 19 16:31:01 2025 GMT Not After : Dec 23 17:31:01 2027 GMT Subject: CN=946dc4e8-697f-4823-b610-4660c483b8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:b8:49:06:9e:10:b2:25:d3:0c:f2:2b:91: a2:53:16:1f:ff:1b:96:f0:42:6e:25:4d:55:af:38: d3:15:f0:ce:20:f7:62:99:0e:9b:70:97:5e:71:75: cf:43:99:a1:34:4f:4d:8d:b8:84:3e:e0:51:79:16: 1c:60:a5:1e:d0:19:89:94:1b:a9:c5:78:5f:45:23: 3a:36:f3:21:17:fa:d1:5d:24:5a:ad:2b:bb:37:c7: 79:03:1a:57:f6:57:42:df:1b:af:48:25:99:8c:e8: ab:08:c7:d6:43:a6:a9:1b:13:49:2a:9b:a2:c5:a3: cb:97:84:01:6e:af:4f:15:76:83:94:d5:04:31:2c: 02:2f:e9:e4:b8:6a:ce:2a:41:31:34:2f:03:f4:d2: c0:d5:da:94:2a:83:b8:81:0b:d8:f6:46:54:a0:61: 52:9a:ee:37:0a:6d:cb:1e:44:40:4f:57:2d:3a:98: d0:09:a6:26:9f:3e:b4:1f:55:de:dc:71:e3:ff:25: a6:54:a8:00:a0:50:23:8b:20:5c:fd:37:6f:ee:5f: 22:7d:2c:cb:bf:a1:e8:4d:97:6c:bb:46:6e:c3:0e: 46:57:cf:29:3d:a3:18:e7:e6:a1:c5:38:34:76:1f: c4:c2:48:5d:85:56:c3:f8:0d:f2:20:76:55:ec:ab: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DD:A0:CF:66:B5:B4:27:62:1C:04:2C:99:2B:C6:70:DF:DC:98:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/946dc4e8-697f-4823-b610-4660c483b8af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/946dc4e8-697f-4823-b610-4660c483b8af/946dc4e8-697f-4823-b610-4660c483b8af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 393689 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fb:38:1a:ba:c2:1f:14:0a:63:ba:f1:60:09:ca:a9:cd:ac: f3:cc:6c:01:89:1b:b8:fe:98:08:0a:5d:45:46:30:70:7d:1b: 40:f0:bc:59:cc:a7:1c:17:b4:f9:17:4a:0d:9e:30:61:8c:db: c2:cf:b5:89:59:f5:93:60:c5:a5:2e:c6:8b:5f:f8:55:af:7a: 3b:05:4b:68:a3:26:11:72:f4:52:43:b9:86:ab:7f:65:bf:d9: f1:b1:60:e2:76:21:76:a5:27:85:78:51:6a:14:17:e4:43:19: 23:62:66:0b:e9:c8:41:02:6b:79:cc:85:ae:4f:01:00:3d:f3: 20:c1:64:4c:d0:51:5b:79:db:ce:b2:51:34:29:ea:66:5c:25: a1:a0:50:ed:ea:be:2e:02:30:8d:d8:df:c7:8c:14:b2:92:19: 43:8a:13:c2:24:a9:a6:3f:ea:1d:35:4a:72:32:0b:c1:36:c4: 1b:22:05:18:84:f0:19:fd:94:3c:01:58:e3:75:b8:05:3e:c9: e0:9c:63:27:e0:79:22:6b:0b:c6:f3:e3:33:77:16:bd:09:ac: 9b:f6:fa:5c:a9:eb:b3:98:aa:39:8c:5f:6a:a7:9d:9a:07:21: a7:ef:3d:21:b9:37:53:4f:18:b4:bf:b5:ba:df:25:32:35:53: ed:00:7b:62 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEs/hLVcJaaYxTKMqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxOTE2MzEwMVoXDTI3MTIyMzE3MzEwMVowLzEtMCsGA1UEAxMk OTQ2ZGM0ZTgtNjk3Zi00ODIzLWI2MTAtNDY2MGM0ODNiOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVG4SQaeELIl0wzyK5GiUxYf/xuW8EJuJU1V rzjTFfDOIPdimQ6bcJdecXXPQ5mhNE9NjbiEPuBReRYcYKUe0BmJlBupxXhfRSM6 NvMhF/rRXSRarSu7N8d5AxpX9ldC3xuvSCWZjOirCMfWQ6apGxNJKpuixaPLl4QB bq9PFXaDlNUEMSwCL+nkuGrOKkExNC8D9NLA1dqUKoO4gQvY9kZUoGFSmu43Cm3L HkRAT1ctOpjQCaYmnz60H1Xe3HHj/yWmVKgAoFAjiyBc/Tdv7l8ifSzLv6HoTZds u0Zuww5GV88pPaMY5+ahxTg0dh/EwkhdhVbD+A3yIHZV7KsuYwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFEfdoM9mtbQnYhwELJkrxnDf3JivMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 NDZkYzRlOC02OTdmLTQ4MjMtYjYxMC00NjYwYzQ4M2I4YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzk0NmRjNGU4LTY5N2YtNDgyMy1i NjEwLTQ2NjBjNDgzYjhhZi85NDZkYzRlOC02OTdmLTQ4MjMtYjYxMC00NjYwYzQ4 M2I4YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgHZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACP7OBq6wh8UCmO68WAJyqnNrPPM bAGJG7j+mAgKXUVGMHB9G0DwvFnMpxwXtPkXSg2eMGGM28LPtYlZ9ZNgxaUuxotf +FWvejsFS2ijJhFy9FJDuYarf2W/2fGxYOJ2IXalJ4V4UWoUF+RDGSNiZgvpyEEC a3nMha5PAQA98yDBZEzQUVt5286yUTQp6mZcJaGgUO3qvi4CMI3Y38eMFLKSGUOK E8IkqaY/6h01SnIyC8E2xBsiBRiE8Bn9lDwBWON1uAU+yeCcYyfgeSJrC8bz4zN3 Fr0JrJv2+lyp67OYqjmMX2qnnZoHIafvPSG5N1NPGLS/tbrfJTI1U+0Ae2I= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:40 2025 by rpki-client