$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.cer File: 9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.cer (raw, json) Hash identifier: zgxSOlcdEA6+hicDxJcPhAQxoDyUyk9c7EEe3MGXweI= Subject key identifier: 36:42:41:2A:62:07:B8:AF:5D:59:E1:95:B2:7C:05:A2:A2:5A:E2:96 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B02193F6EA397552AAE4F7CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Aug 2025 16:30:11 +0000 Certificate not after: Wed 01 Dec 2027 17:30:11 +0000 Subordinate resources: AS: 401822 IP: 192.104.11.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:19:3f:6e:a3:97:55:2a:ae:4f:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 28 16:30:11 2025 GMT Not After : Dec 1 17:30:11 2027 GMT Subject: CN=9f3a9b3e-7348-40a4-9468-47a3d1edd5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:8c:68:9e:0c:bb:88:ea:96:17:a1:2c:45: 6e:0d:de:65:cc:ad:be:7b:4f:d4:0c:1d:13:ec:44: bc:4e:ba:44:f3:cc:6c:de:f3:8c:f8:d4:d1:86:50: 57:87:c8:6e:6e:c1:09:1c:64:7a:8e:5d:90:2c:d3: 9b:a9:35:3c:a1:73:5b:87:e9:a8:6d:f5:3e:84:ee: 3a:4a:71:f9:4e:25:32:59:10:ef:41:03:df:09:fa: c1:af:43:0f:85:95:4e:a9:83:1f:78:4c:f3:af:c7: 12:f0:54:cf:03:e3:2c:fd:9a:f7:36:14:31:9c:09: 3b:96:18:50:92:b7:b9:35:34:ec:fe:39:d1:26:1e: 66:f9:57:28:b2:77:52:12:74:f6:7c:18:0f:c2:ce: be:67:4d:4c:ec:13:ed:2a:9c:1c:e1:56:9a:91:c0: 35:a2:9e:4c:71:3a:af:0a:18:9e:af:46:cf:ac:31: 3c:3f:c7:5c:ef:ba:87:82:8f:e7:57:06:9d:d9:af: b3:55:a6:49:23:12:4b:db:2d:f1:df:d0:58:28:1b: ee:77:16:1e:15:29:ad:47:92:85:4e:b8:f1:f9:fa: fb:e2:4e:94:ee:f6:b0:0c:6d:fb:87:f9:33:f7:b0: 29:94:81:95:05:b6:fc:0f:6a:1a:bf:6e:62:89:9a: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:42:41:2A:62:07:B8:AF:5D:59:E1:95:B2:7C:05:A2:A2:5A:E2:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce/9f3a9b3e-7348-40a4-9468-47a3d1edd5ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.104.11.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401822 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cf:69:c2:d3:7d:73:1e:cb:46:9a:9e:86:33:dc:e2:82:27: 01:12:a3:df:71:68:48:ca:9e:d2:2b:8f:1b:fd:ba:c5:36:e3: 5b:50:ee:7f:8e:8e:c3:5a:c1:73:e9:34:b6:d7:fc:3e:ca:08: 99:1c:66:25:16:04:57:7d:a1:00:72:dc:d5:b2:f1:ae:a5:52: b3:a7:b4:00:11:3c:16:be:ce:b5:48:35:8e:27:79:ad:3c:e8: 6e:10:bb:63:91:df:5b:55:fa:b1:a9:16:01:b8:4a:e3:57:c1: 33:e6:7f:47:f9:cf:28:db:11:f6:ca:d0:0a:6b:7e:47:57:dc: 45:95:6d:a9:47:69:92:d6:62:51:53:5a:0d:0a:a0:b1:dd:b6: 27:f8:0a:40:a5:c0:67:a3:93:17:43:e4:b7:3c:93:a9:58:5d: ac:c7:20:5f:1c:19:64:98:99:11:ee:7a:42:42:f6:9b:79:31: 7f:a5:06:2a:e0:f8:a4:50:86:00:51:e9:22:7c:b0:a2:c1:38: a6:f9:fe:9b:2d:4b:bc:58:d7:e9:1e:42:57:a1:52:5f:d9:d7: 57:74:db:54:05:1d:79:ce:cb:14:c8:ac:97:dc:95:df:a4:2c: f0:4c:1d:5f:e0:48:90:29:41:b4:89:92:9f:9f:6b:e2:a1:69: e2:bd:24:fa -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsCGT9uo5dVKq5PfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyODE2MzAxMVoXDTI3MTIwMTE3MzAxMVowLzEtMCsGA1UEAxMk OWYzYTliM2UtNzM0OC00MGE0LTk0NjgtNDdhM2QxZWRkNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhKMaJ4Mu4jqlhehLEVuDd5lzK2+e0/UDB0T 7ES8TrpE88xs3vOM+NTRhlBXh8hubsEJHGR6jl2QLNObqTU8oXNbh+mobfU+hO46 SnH5TiUyWRDvQQPfCfrBr0MPhZVOqYMfeEzzr8cS8FTPA+Ms/Zr3NhQxnAk7lhhQ kre5NTTs/jnRJh5m+VcosndSEnT2fBgPws6+Z01M7BPtKpwc4VaakcA1op5McTqv Chier0bPrDE8P8dc77qHgo/nVwad2a+zVaZJIxJL2y3x39BYKBvudxYeFSmtR5KF Trjx+fr74k6U7vawDG37h/kz97AplIGVBbb8D2oav25iiZqWLQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDZCQSpiB7ivXVnhlbJ8BaKiWuKWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 ZjNhOWIzZS03MzQ4LTQwYTQtOTQ2OC00N2EzZDFlZGQ1Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzlmM2E5YjNlLTczNDgtNDBhNC05 NDY4LTQ3YTNkMWVkZDVjZS85ZjNhOWIzZS03MzQ4LTQwYTQtOTQ2OC00N2EzZDFl ZGQ1Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAaAswGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiGeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD3PacLTfXMey0aanoYz3OKCJwESo99xaEjKntIrjxv9usU2 41tQ7n+OjsNawXPpNLbX/D7KCJkcZiUWBFd9oQBy3NWy8a6lUrOntAARPBa+zrVI NY4nea086G4Qu2OR31tV+rGpFgG4SuNXwTPmf0f5zyjbEfbK0AprfkdX3EWVbalH aZLWYlFTWg0KoLHdtif4CkClwGejkxdD5Lc8k6lYXazHIF8cGWSYmRHuekJC9pt5 MX+lBirg+KRQhgBR6SJ8sKLBOKb5/pstS7xY1+keQlehUl/Z11d021QFHXnOyxTI rJfcld+kLPBMHV/gSJApQbSJkp+fa+KhaeK9JPo= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:01 2025 by rpki-client