$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer File: a9d7f902-cc00-4175-951a-fe3a50c0ceab.cer (raw, json) Hash identifier: GMF28scd/WpXOBBNdTa34X70Nzkm7bOWdVERR5gOf4g= Subject key identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B66C2276A59D9F4C88099F780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Oct 2025 17:51:21 +0000 Certificate not after: Thu 11 Nov 2027 19:10:19 +0000 Subordinate resources: AS: 397978 IP: 216.234.134.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:c2:27:6a:59:d9:f4:c8:80:99:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 3 17:51:21 2025 GMT Not After : Nov 11 19:10:19 2027 GMT Subject: CN=a9d7f902-cc00-4175-951a-fe3a50c0ceab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:da:f8:58:15:50:69:4c:dd:eb:6e:bc:0f: 56:66:e9:79:ed:ef:ab:6b:48:b6:37:28:a9:b8:1c: 27:38:3e:65:6b:34:2d:bb:ff:e8:ea:5c:f9:8e:81: ea:70:84:68:b2:8b:f5:3d:46:8e:76:2f:b3:2e:9a: 85:9e:a8:8a:f7:0b:97:0a:87:6d:24:7b:cf:66:1e: 03:32:90:d0:28:1d:92:3c:6f:ba:66:db:73:ca:1d: 82:f7:fb:19:c9:75:32:51:06:04:d1:11:89:5e:a4: 1d:57:81:f9:05:a6:c2:cd:07:8b:6e:e5:f9:0f:06: f3:08:b5:b8:12:f1:cb:cb:23:3c:1b:55:87:c8:26: 0e:13:09:92:60:fb:2b:cf:7b:d3:e2:d0:44:3a:4a: 96:90:05:2e:ce:be:b9:2f:d6:4b:7e:72:fd:07:d2: 4d:4a:3f:71:41:4c:ae:f4:c8:ba:53:78:f0:3f:36: cb:fe:d5:fd:e8:d1:a3:70:c0:96:c9:9f:d0:8f:5e: f0:2e:14:1b:a4:ca:25:77:60:22:04:f9:3b:15:fe: f1:b2:8a:57:7f:2e:0c:0c:5d:43:fe:62:50:0f:e2: 5b:5e:46:cf:06:70:cc:b6:1a:4f:22:d1:85:2a:4a: 15:54:ce:b0:89:d4:34:f8:35:80:91:ca:bb:c0:17: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:73:A1:35:22:04:D1:AE:15:99:37:C8:C5:00:CA:79:91:AC:3B:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a9d7f902-cc00-4175-951a-fe3a50c0ceab/a9d7f902-cc00-4175-951a-fe3a50c0ceab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 216.234.134.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397978 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:db:34:b7:b2:0c:40:38:46:cc:d2:cc:37:54:d4:83:11:c5: f1:7b:b5:3f:35:24:c4:3e:0f:ef:60:cd:0e:44:a2:05:11:54: 0b:9b:d8:03:25:86:2c:7c:09:8f:67:5b:da:7f:43:5a:9d:61: 0b:7f:24:21:6e:8f:55:bf:39:75:55:67:5f:b6:32:dd:cf:b5: c6:41:52:d0:0a:64:75:7e:7f:91:4d:12:12:f5:4e:ff:33:fd: e6:d2:52:bc:91:35:76:66:89:70:90:e4:a2:1e:f6:f0:1e:0c: 70:0a:6b:74:47:e8:69:46:21:48:e4:e0:ac:7b:c0:9a:b6:f4: 20:51:a7:4c:ad:66:39:d1:8d:96:25:c2:82:cf:97:dc:0c:74: 9f:43:5f:d8:97:ab:38:00:3a:97:da:6f:c9:5f:ec:d7:8b:61: 05:c9:67:ec:d9:70:d9:2a:6c:b0:a9:a3:df:9f:0b:de:ea:af: b3:7e:c0:ad:1a:a5:4f:6a:bb:41:56:19:ac:e9:98:63:6e:74: 7b:1f:2c:6b:47:5d:d3:14:7e:40:e7:4f:3f:0e:8c:a5:1f:b6: 51:37:b4:9a:01:00:91:ed:d9:39:4f:49:5e:8d:a6:21:26:18: 46:f2:a1:cf:b4:9a:2f:e8:9c:3c:c4:ce:d5:f3:26:ba:12:08: 22:cd:a3:87 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtmwidqWdn0yICZ94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMzE3NTEyMVoXDTI3MTExMTE5MTAxOVowLzEtMCsGA1UEAxMk YTlkN2Y5MDItY2MwMC00MTc1LTk1MWEtZmUzYTUwYzBjZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubna+FgVUGlM3etuvA9WZul57e+ra0i2Nyip uBwnOD5lazQtu//o6lz5joHqcIRosov1PUaOdi+zLpqFnqiK9wuXCodtJHvPZh4D MpDQKB2SPG+6Zttzyh2C9/sZyXUyUQYE0RGJXqQdV4H5BabCzQeLbuX5DwbzCLW4 EvHLyyM8G1WHyCYOEwmSYPsrz3vT4tBEOkqWkAUuzr65L9ZLfnL9B9JNSj9xQUyu 9Mi6U3jwPzbL/tX96NGjcMCWyZ/Qj17wLhQbpMold2AiBPk7Ff7xsopXfy4MDF1D /mJQD+JbXkbPBnDMthpPItGFKkoVVM6widQ0+DWAkcq7wBePVwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFB1zoTUiBNGuFZk3yMUAynmRrDtdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h OWQ3ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNhNTBjMGNlYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2E5ZDdmOTAyLWNjMDAtNDE3NS05 NTFhLWZlM2E1MGMwY2VhYi9hOWQ3ZjkwMi1jYzAwLTQxNzUtOTUxYS1mZTNhNTBj MGNlYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHY6oYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhKaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGfbNLeyDEA4RszSzDdU1IMRxfF7tT81JMQ+D+9gzQ5EogUR VAub2AMlhix8CY9nW9p/Q1qdYQt/JCFuj1W/OXVVZ1+2Mt3PtcZBUtAKZHV+f5FN EhL1Tv8z/ebSUryRNXZmiXCQ5KIe9vAeDHAKa3RH6GlGIUjk4Kx7wJq29CBRp0yt ZjnRjZYlwoLPl9wMdJ9DX9iXqzgAOpfab8lf7NeLYQXJZ+zZcNkqbLCpo9+fC97q r7N+wK0apU9qu0FWGazpmGNudHsfLGtHXdMUfkDnTz8OjKUftlE3tJoBAJHt2TlP SV6NpiEmGEbyoc+0mi/onDzEztXzJroSCCLNo4c= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:04 2025 by rpki-client