$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b25b9da-3b81-4b8b-b998-b54c07fafd69.cer File: 9b25b9da-3b81-4b8b-b998-b54c07fafd69.cer (raw, json) Hash identifier: Zi5hUcZgdffAXvOJLRIgxfCVNsjGYyey32ARUQMkoow= Subject key identifier: 28:52:19:C1:DF:57:75:11:23:D9:73:75:69:48:D0:3B:17:BB:F1:8C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B3F46EFCB81F3980F7B797C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b25b9da-3b81-4b8b-b998-b54c07fafd69/9b25b9da-3b81-4b8b-b998-b54c07fafd69.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b25b9da-3b81-4b8b-b998-b54c07fafd69/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Sep 2025 14:26:33 +0000 Certificate not after: Thu 23 Dec 2027 15:26:33 +0000 Subordinate resources: AS: 26159 IP: 192.206.105.0/24 IP: 198.135.226.0/24 IP: 198.136.201.0/24 IP: 198.148.206.0/24 IP: 198.153.253.0/24 IP: 198.176.137.0/24 IP: 198.176.221.0/24 IP: 198.176.247.0/24 IP: 198.179.203.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:46:ef:cb:81:f3:98:0f:7b:79:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 19 14:26:33 2025 GMT Not After : Dec 23 15:26:33 2027 GMT Subject: CN=9b25b9da-3b81-4b8b-b998-b54c07fafd69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:27:6b:59:82:a3:1c:cf:db:f7:c3:6d:f9: 40:f8:59:e7:24:f8:82:61:d7:9d:58:14:86:24:07: 37:c2:45:c9:64:58:07:d2:b8:6b:27:0a:56:1a:40: 31:2b:e4:c2:58:b4:8f:ca:b0:b9:3a:47:b3:0d:bb: 9f:56:17:6d:bb:9b:e1:2b:a8:eb:de:3a:56:3e:11: 82:da:f2:34:8d:81:ba:74:fc:fc:1e:30:e4:8b:dc: 77:e8:21:81:a1:85:4f:14:87:f1:94:f4:55:64:2a: 06:a1:b1:36:c5:f8:50:e2:26:19:09:1d:7a:7a:06: e1:1f:50:1d:4e:2a:48:c7:1b:d5:73:e9:21:34:bf: c9:85:f0:4c:98:dc:3c:92:e0:75:cd:78:a5:ee:5d: c0:65:05:5e:15:73:3a:ad:51:9c:3e:e2:95:b9:c6: 6d:de:1c:4f:45:9a:38:ea:ed:fa:6a:51:42:85:c4: 44:35:0b:14:5b:2d:98:ce:5a:69:d1:41:78:17:59: 42:14:e4:a3:fb:d1:02:21:ef:f0:76:21:76:ea:7a: 6b:ce:5f:00:79:a5:63:93:7d:9e:3e:ed:eb:e9:ab: 4f:f9:68:4d:e1:62:4a:9d:1a:fe:fd:31:a2:04:31: 2c:72:b9:da:65:41:2a:a0:e5:66:c2:4a:68:16:c8: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:52:19:C1:DF:57:75:11:23:D9:73:75:69:48:D0:3B:17:BB:F1:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b25b9da-3b81-4b8b-b998-b54c07fafd69/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b25b9da-3b81-4b8b-b998-b54c07fafd69/9b25b9da-3b81-4b8b-b998-b54c07fafd69.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.206.105.0/24 198.135.226.0/24 198.136.201.0/24 198.148.206.0/24 198.153.253.0/24 198.176.137.0/24 198.176.221.0/24 198.176.247.0/24 198.179.203.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26159 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ee:18:aa:b9:ab:26:1f:89:f4:69:e7:bd:1a:0c:28:bb:57: ec:6e:b7:c6:8b:41:21:e7:50:bb:ce:34:a3:cb:25:06:a8:29: db:ee:f2:fc:e0:06:1a:a5:6e:30:c6:b9:71:f6:09:3d:8d:06: 75:7c:46:fb:b1:d2:c9:82:82:c5:72:9a:a6:cc:12:1e:41:ba: 59:91:b5:2e:1a:ac:fe:f9:01:71:fc:0e:4f:d9:c8:f5:05:2d: 57:57:f3:27:75:32:c4:9c:8f:b6:ad:df:93:52:d6:f1:ab:0f: fe:ee:b0:67:14:c5:48:cc:d8:2a:0e:14:d4:e7:dc:3f:b0:f2: 6b:6e:f2:5d:14:dc:a8:55:6c:3e:73:02:95:45:a4:01:f4:4e: 83:8b:52:af:f8:51:7b:b7:2b:ca:c5:da:af:a8:d3:f2:f1:cf: d1:5c:16:79:54:be:8c:e7:36:b1:b9:c3:36:bd:23:55:09:6f: 2a:ec:b2:70:c8:e4:0a:12:e0:7d:82:27:2c:7d:4b:9d:22:b0: 8f:26:86:7e:50:f1:08:f2:88:84:d2:b0:a3:70:a5:1b:1a:c6: df:a6:32:9c:6e:cb:41:7b:d1:08:a2:25:93:67:ec:94:8a:f3: 02:4a:12:39:a7:a8:5f:a6:8f:d2:f5:25:96:5d:72:e0:aa:a7: ff:ad:0e:63 -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWEs/Ru/LgfOYD3t5fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxOTE0MjYzM1oXDTI3MTIyMzE1MjYzM1owLzEtMCsGA1UEAxMk OWIyNWI5ZGEtM2I4MS00YjhiLWI5OTgtYjU0YzA3ZmFmZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBAna1mCoxzP2/fDbflA+FnnJPiCYdedWBSG JAc3wkXJZFgH0rhrJwpWGkAxK+TCWLSPyrC5OkezDbufVhdtu5vhK6jr3jpWPhGC 2vI0jYG6dPz8HjDki9x36CGBoYVPFIfxlPRVZCoGobE2xfhQ4iYZCR16egbhH1Ad TipIxxvVc+khNL/JhfBMmNw8kuB1zXil7l3AZQVeFXM6rVGcPuKVucZt3hxPRZo4 6u36alFChcRENQsUWy2Yzlpp0UF4F1lCFOSj+9ECIe/wdiF26nprzl8AeaVjk32e Pu3r6atP+WhN4WJKnRr+/TGiBDEscrnaZUEqoOVmwkpoFshwZQIDAQABo4IESjCC BEYwHQYDVR0OBBYEFChSGcHfV3URI9lzdWlI0DsXu/GMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 YjI1YjlkYS0zYjgxLTRiOGItYjk5OC1iNTRjMDdmYWZkNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzliMjViOWRhLTNiODEtNGI4Yi1i OTk4LWI1NGMwN2ZhZmQ2OS85YjI1YjlkYS0zYjgxLTRiOGItYjk5OC1iNTRjMDdm YWZkNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MDwEAgABMDYDBADAzmkDBADGh+IDBADGiMkDBADGlM4DBADGmf0D BADGsIkDBADGsN0DBADGsPcDBADGs8swGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Zi8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEATu4YqrmrJh+J9GnnvRoMKLtX7G63xotBIedQu840o8slBqgp 2+7y/OAGGqVuMMa5cfYJPY0GdXxG+7HSyYKCxXKapswSHkG6WZG1Lhqs/vkBcfwO T9nI9QUtV1fzJ3UyxJyPtq3fk1LW8asP/u6wZxTFSMzYKg4U1OfcP7Dya27yXRTc qFVsPnMClUWkAfROg4tSr/hRe7crysXar6jT8vHP0VwWeVS+jOc2sbnDNr0jVQlv KuyycMjkChLgfYInLH1LnSKwjyaGflDxCPKIhNKwo3ClGxrG36YynG7LQXvRCKIl k2fslIrzAkoSOaeoX6aP0vUlll1y4Kqn/60OYw== -----END CERTIFICATE-----Generated at Wed Oct 8 17:05:13 2025 by rpki-client