$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.cer File: b07d4ad0-c782-4df0-8b2f-1442c683b9bb.cer (raw, json) Hash identifier: sLyYoHv0F4dPeGn1Jo7aDdB1YcXCAzJ/6FF/HiPrMh8= Subject key identifier: DD:2E:28:57:DD:67:C8:0D:9C:8B:C1:AF:8E:21:DB:8B:7B:97:32:87 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AF99234060CC42B516D877100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Aug 2025 15:11:37 +0000 Certificate not after: Sun 28 Nov 2027 16:11:37 +0000 Subordinate resources: AS: 22890 IP: 192.203.98.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:92:34:06:0c:c4:2b:51:6d:87:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 25 15:11:37 2025 GMT Not After : Nov 28 16:11:37 2027 GMT Subject: CN=b07d4ad0-c782-4df0-8b2f-1442c683b9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:d3:a5:21:37:36:0d:f5:cc:8c:00:da:a9: 24:6d:95:8d:e9:49:cd:44:73:af:90:18:15:5a:aa: 68:5d:d4:29:34:60:f9:a1:9e:ed:0c:65:d4:de:66: fc:4c:54:34:39:f7:46:bf:36:57:1b:4e:33:14:d6: 07:af:99:06:8a:ea:da:76:a4:e9:90:af:0d:dd:b1: 72:24:90:22:17:12:1e:91:44:d5:25:b7:ea:c9:4b: 3c:f5:8f:23:01:80:cc:9f:6f:ec:22:48:e3:83:4c: 8b:bc:1b:61:07:93:a7:f9:98:49:0f:b2:67:30:2d: d4:fc:73:42:ea:44:8e:01:4c:8e:26:b2:fe:45:f8: ea:7f:78:c0:b9:23:df:2f:57:08:6d:db:bf:1f:cd: f3:d0:03:89:48:88:87:5f:7c:8b:0d:84:b5:e6:b5: 45:3e:1a:00:77:58:18:3b:23:f3:92:24:93:c9:87: 4e:2a:29:0a:96:c6:fc:1d:e1:b7:66:dd:28:c7:a2: 3a:d0:9a:08:f9:f3:ae:7f:92:09:9d:d0:c9:fc:48: cc:89:ce:de:24:ef:ea:51:d0:2f:87:93:a7:26:38: eb:3b:53:8a:77:5d:4b:d2:ae:ee:5c:09:8f:75:ca: d2:2f:91:5f:02:0e:f4:f2:f4:c9:fd:e6:a8:6b:46: 65:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2E:28:57:DD:67:C8:0D:9C:8B:C1:AF:8E:21:DB:8B:7B:97:32:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.203.98.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22890 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3d:2f:1e:7d:f4:c6:77:c2:1d:e3:1b:6c:89:93:10:e6:b0: 4d:a0:3b:8d:b7:db:c9:65:71:8a:04:1a:da:26:c8:78:84:2a: 18:e4:af:c0:d3:0e:e1:1b:99:99:ae:f3:0e:c2:d2:78:7a:50: 91:c8:6d:db:85:e5:0d:26:a9:03:0b:72:04:c8:c8:d3:db:a6: bc:9e:00:6c:85:3d:5f:34:c6:0a:2c:f1:19:41:6c:b4:8b:72: 2d:bf:4e:77:5e:92:d1:fc:e7:1c:7c:b8:e5:4b:e7:65:af:0c: 61:35:b3:34:11:dc:89:64:cb:7c:28:0a:5b:31:d4:2f:9f:a9: 90:5c:92:d9:90:e7:d6:04:00:78:c1:d3:b4:ce:1e:39:54:af: 6b:3c:d5:6b:f8:74:31:44:53:81:92:7d:22:d3:03:0c:d5:f5: 17:a8:f8:44:ee:24:21:2b:db:7b:38:0e:e6:cf:2e:9d:4d:0e: a5:f2:b9:13:37:03:c5:85:14:ae:a8:0e:05:62:a2:9d:e3:55: 5e:e2:28:cc:db:75:70:5b:3b:34:96:68:fe:7c:7d:4d:63:60: bd:78:ce:f0:a0:4f:94:a7:53:62:10:e6:58:49:0a:93:4b:ea: 45:25:96:d9:ac:32:f5:10:09:3d:0f:22:3e:05:e9:ca:72:93: f3:85:ea:02 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEr5kjQGDMQrUW2HcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyNTE1MTEzN1oXDTI3MTEyODE2MTEzN1owLzEtMCsGA1UEAxMk YjA3ZDRhZDAtYzc4Mi00ZGYwLThiMmYtMTQ0MmM2ODNiOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihnTpSE3Ng31zIwA2qkkbZWN6UnNRHOvkBgV WqpoXdQpNGD5oZ7tDGXU3mb8TFQ0OfdGvzZXG04zFNYHr5kGiuradqTpkK8N3bFy JJAiFxIekUTVJbfqyUs89Y8jAYDMn2/sIkjjg0yLvBthB5On+ZhJD7JnMC3U/HNC 6kSOAUyOJrL+Rfjqf3jAuSPfL1cIbdu/H83z0AOJSIiHX3yLDYS15rVFPhoAd1gY OyPzkiSTyYdOKikKlsb8HeG3Zt0ox6I60JoI+fOuf5IJndDJ/EjMic7eJO/qUdAv h5OnJjjrO1OKd11L0q7uXAmPdcrSL5FfAg708vTJ/eaoa0ZlAQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFN0uKFfdZ8gNnIvBr44h24t7lzKHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i MDdkNGFkMC1jNzgyLTRkZjAtOGIyZi0xNDQyYzY4M2I5YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2IwN2Q0YWQwLWM3ODItNGRmMC04 YjJmLTE0NDJjNjgzYjliYi9iMDdkNGFkMC1jNzgyLTRkZjAtOGIyZi0xNDQyYzY4 M2I5YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAy2IwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WWowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAcD0vHn30xnfCHeMbbImTEOawTaA7jbfbyWVxigQa2ibIeIQq GOSvwNMO4RuZma7zDsLSeHpQkcht24XlDSapAwtyBMjI09umvJ4AbIU9XzTGCizx GUFstItyLb9Od16S0fznHHy45UvnZa8MYTWzNBHciWTLfCgKWzHUL5+pkFyS2ZDn 1gQAeMHTtM4eOVSvazzVa/h0MURTgZJ9ItMDDNX1F6j4RO4kISvbezgO5s8unU0O pfK5EzcDxYUUrqgOBWKineNVXuIozNt1cFs7NJZo/nx9TWNgvXjO8KBPlKdTYhDm WEkKk0vqRSWW2awy9RAJPQ8iPgXpynKT84XqAg== -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:03 2025 by rpki-client