$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ab31ee4d-90d4-4e8e-975e-9a100f8daa83.cer File: ab31ee4d-90d4-4e8e-975e-9a100f8daa83.cer (raw, json) Hash identifier: fhj93t70UlL3l+vydzuSa2SnhKgaacbG6rWGVC0v+cA= Subject key identifier: 95:62:D2:A2:4D:B5:5C:94:E2:4C:30:22:42:C2:9D:A9:5A:96:BF:1D Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B18E666A3B5A258D1C1054500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ab31ee4d-90d4-4e8e-975e-9a100f8daa83/ab31ee4d-90d4-4e8e-975e-9a100f8daa83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ab31ee4d-90d4-4e8e-975e-9a100f8daa83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Sep 2025 20:31:20 +0000 Certificate not after: Thu 09 Dec 2027 21:31:20 +0000 Subordinate resources: AS: 36596 IP: 199.127.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:e6:66:a3:b5:a2:58:d1:c1:05:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 5 20:31:20 2025 GMT Not After : Dec 9 21:31:20 2027 GMT Subject: CN=ab31ee4d-90d4-4e8e-975e-9a100f8daa83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:0a:e9:8a:26:3a:63:ae:d5:ac:5d:5a:94: 09:ff:07:36:02:73:82:34:98:25:4f:f7:2f:ce:8e: 19:11:1f:a7:b0:69:2d:96:a5:f9:c6:66:a3:14:c4: 9e:a1:16:86:70:91:7f:60:a9:c7:d0:93:a4:c1:f8: f9:06:35:6d:1d:88:dd:b3:8b:0a:2c:53:54:3a:c6: 43:0f:0b:30:31:45:24:86:e2:6a:6b:53:25:5b:52: 0f:29:d7:24:99:59:fd:93:77:69:08:70:55:e5:86: 5c:d9:9e:5d:aa:8c:ef:22:96:15:9f:e4:aa:43:77: 4c:49:aa:a2:1a:c2:fe:2d:cd:41:b0:22:8e:fa:22: 7d:9a:61:71:78:0c:07:8a:7b:43:7d:74:f9:f8:61: 92:5c:be:3b:1b:86:c4:d3:2c:10:49:db:88:89:86: 16:7f:9b:21:d3:c2:d5:d2:61:26:df:9e:49:a2:bd: 6e:00:23:8e:c5:c2:e5:93:81:0f:a6:f9:02:d2:d4: 0a:b0:f5:90:70:d0:ef:16:07:51:77:1a:f2:70:0a: 1b:df:f0:d6:1d:d6:77:7b:ec:b4:e2:c5:48:25:16: 59:e8:1c:eb:1d:56:78:b1:3f:37:7f:4a:44:34:d4: 73:90:15:ba:1f:e1:17:93:02:25:a5:17:24:56:af: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:D2:A2:4D:B5:5C:94:E2:4C:30:22:42:C2:9D:A9:5A:96:BF:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ab31ee4d-90d4-4e8e-975e-9a100f8daa83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ab31ee4d-90d4-4e8e-975e-9a100f8daa83/ab31ee4d-90d4-4e8e-975e-9a100f8daa83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 199.127.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36596 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d4:b7:d3:76:1c:61:84:79:fd:b9:db:85:bd:67:b0:94:79: 62:10:e1:79:5a:38:67:47:97:f5:a2:fd:fc:e2:06:97:0e:3b: fb:e0:44:1e:96:4e:01:fb:8d:8e:73:7d:e1:20:d7:66:32:0a: 1c:7f:d5:4f:aa:b1:bc:ae:2a:26:fb:af:70:db:cd:2b:0c:26: 68:96:ff:da:43:8a:89:0a:34:0f:f3:04:84:a1:ba:b3:b7:6f: 88:5e:54:8e:60:bd:c0:3f:f7:73:0f:c0:57:c9:f3:28:20:8b: 2a:d7:01:f5:de:58:dd:d4:98:f2:25:29:47:f7:52:57:b0:76: d8:af:f9:cf:fc:71:9e:65:87:f0:dc:30:6d:58:18:10:f3:2d: 03:cc:45:1f:a3:d1:a9:9b:18:b5:bc:b0:50:90:a9:85:45:f7: f7:09:da:f4:af:73:1b:37:a5:03:d5:07:0a:c2:32:bd:2d:e3: f9:dc:b7:6d:df:e8:56:75:ba:ce:9a:66:41:7c:77:a5:f2:26: 2a:73:84:6a:15:d9:2f:b2:e7:a3:14:06:be:0f:cb:05:2a:7a: 52:0f:e6:c3:dd:99:ec:ac:63:e1:24:02:74:0a:51:48:8f:3b: 4d:c5:2f:3f:fd:89:9d:29:f8:82:84:77:d9:80:17:c7:00:40: e0:fd:af:fc -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsY5majtaJY0cEFRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwNTIwMzEyMFoXDTI3MTIwOTIxMzEyMFowLzEtMCsGA1UEAxMk YWIzMWVlNGQtOTBkNC00ZThlLTk3NWUtOWExMDBmOGRhYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqMK6YomOmOu1axdWpQJ/wc2AnOCNJglT/cv zo4ZER+nsGktlqX5xmajFMSeoRaGcJF/YKnH0JOkwfj5BjVtHYjds4sKLFNUOsZD DwswMUUkhuJqa1MlW1IPKdckmVn9k3dpCHBV5YZc2Z5dqozvIpYVn+SqQ3dMSaqi GsL+Lc1BsCKO+iJ9mmFxeAwHintDfXT5+GGSXL47G4bE0ywQSduIiYYWf5sh08LV 0mEm355Jor1uACOOxcLlk4EPpvkC0tQKsPWQcNDvFgdRdxrycAob3/DWHdZ3e+y0 4sVIJRZZ6BzrHVZ4sT83f0pENNRzkBW6H+EXkwIlpRckVq9fzwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJVi0qJNtVyU4kwwIkLCnalalr8dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h YjMxZWU0ZC05MGQ0LTRlOGUtOTc1ZS05YTEwMGY4ZGFhODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FiMzFlZTRkLTkwZDQtNGU4ZS05 NzVlLTlhMTAwZjhkYWE4My9hYjMxZWU0ZC05MGQ0LTRlOGUtOTc1ZS05YTEwMGY4 ZGFhODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHf1wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI70MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGXUt9N2HGGEef2524W9Z7CUeWIQ4XlaOGdHl/Wi/fziBpcO O/vgRB6WTgH7jY5zfeEg12YyChx/1U+qsbyuKib7r3DbzSsMJmiW/9pDiokKNA/z BIShurO3b4heVI5gvcA/93MPwFfJ8yggiyrXAfXeWN3UmPIlKUf3Ulewdtiv+c/8 cZ5lh/DcMG1YGBDzLQPMRR+j0ambGLW8sFCQqYVF9/cJ2vSvcxs3pQPVBwrCMr0t 4/nct23f6FZ1us6aZkF8d6XyJipzhGoV2S+y56MUBr4PywUqelIP5sPdmeysY+Ek AnQKUUiPO03FLz/9iZ0p+IKEd9mAF8cAQOD9r/w= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:07 2025 by rpki-client