$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7f38251-30d1-4146-a1c1-ace2749fb9f5.cer File: b7f38251-30d1-4146-a1c1-ace2749fb9f5.cer (raw, json) Hash identifier: FFNl8/7YZ8cTWXHWrAzuPhBVcfr6OrAvoj37NnfCRsA= Subject key identifier: E8:B2:BB:A9:C7:6D:1D:14:0F:55:FD:77:49:85:26:C1:A5:5A:A0:2C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B627398D5CB8877428B1F9300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7f38251-30d1-4146-a1c1-ace2749fb9f5/b7f38251-30d1-4146-a1c1-ace2749fb9f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7f38251-30d1-4146-a1c1-ace2749fb9f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Oct 2025 04:49:50 +0000 Certificate not after: Wed 05 Jan 2028 05:49:50 +0000 Subordinate resources: AS: 393964 IP: 68.169.108.0/22 IP: 147.160.2.0/23 IP: 148.59.230.0/23 IP: 149.19.182.0/23 IP: 209.222.70.0/24 IP: 216.21.8.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:73:98:d5:cb:88:77:42:8b:1f:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 2 04:49:50 2025 GMT Not After : Jan 5 05:49:50 2028 GMT Subject: CN=b7f38251-30d1-4146-a1c1-ace2749fb9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:44:bc:37:25:f4:c4:c6:82:fa:37:f3:51: 30:5d:bc:40:bb:73:6d:4f:1a:0a:c3:fe:63:02:c2: a8:25:a8:cf:ce:ce:10:06:16:90:a8:ee:06:8d:87: d5:df:e6:8a:f4:5e:5a:46:c4:39:da:e9:21:6a:e8: d3:94:81:61:fb:cb:29:65:9b:cd:b7:a9:6f:1f:09: fa:eb:6f:46:17:fd:4d:bf:8f:39:9c:96:f1:f3:8f: 83:3b:fe:5f:9a:f7:fa:74:df:b3:73:43:a6:6d:75: 18:1f:16:35:b4:d0:4b:ea:aa:b9:b7:d7:30:1d:e0: c0:f6:71:5b:1d:d4:8c:ca:59:66:29:63:9f:c0:84: 3b:60:ff:a4:92:19:9e:a8:5b:fc:30:7f:0a:90:85: 10:2c:3c:e6:9a:d0:cd:2f:e1:fd:0b:7b:e3:58:65: 60:50:0a:8a:bf:55:48:c0:a6:42:16:25:06:a6:c5: ee:17:42:36:d6:0f:c8:cf:2e:6b:63:05:02:88:66: 7f:bb:88:2d:54:6b:c1:85:5f:60:5c:a6:46:13:71: 33:c5:0b:8d:57:48:08:76:ce:88:53:96:1f:79:07: 0e:bd:65:7c:76:40:61:a9:75:5d:e8:b1:36:e4:df: 69:d1:ad:48:9b:b0:47:0a:20:fe:d6:0a:fb:fd:da: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:BB:A9:C7:6D:1D:14:0F:55:FD:77:49:85:26:C1:A5:5A:A0:2C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7f38251-30d1-4146-a1c1-ace2749fb9f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7f38251-30d1-4146-a1c1-ace2749fb9f5/b7f38251-30d1-4146-a1c1-ace2749fb9f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 68.169.108.0/22 147.160.2.0/23 148.59.230.0/23 149.19.182.0/23 209.222.70.0/24 216.21.8.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393964 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e2:f9:37:78:78:ea:3a:80:77:5d:9f:1f:a9:ec:32:7a:95: 9e:8b:6c:d5:3c:2f:01:41:b1:24:ae:90:02:21:06:2f:1c:7c: 86:85:6d:f7:68:3e:ce:9f:40:bd:ec:4f:8c:14:3b:84:8f:cd: ac:d7:6d:1b:b1:a0:59:66:a8:7f:6f:8d:25:7b:7f:be:42:e7: ca:6a:47:e0:b9:b1:87:7c:85:cf:7a:0c:fe:05:0f:5e:cc:e0: c0:9f:c8:c1:6c:7c:2e:44:4c:5e:da:e3:7b:bb:66:7d:6a:18: 3e:43:84:52:8f:ca:68:e7:df:85:17:f7:9a:2c:0a:fc:05:95: 2f:c3:74:26:a3:04:20:82:85:96:ad:ad:f1:16:c6:cc:2b:bc: b0:2d:8a:3a:0c:93:d7:cd:5d:b3:1c:fb:4e:e8:0c:b9:7f:66: c6:01:02:41:5f:f8:f0:16:e8:18:9c:2c:3a:07:de:06:32:58: 9d:74:59:65:97:90:58:fb:b4:55:51:2b:5e:55:26:2a:a1:28: ee:4c:a6:b1:a5:1d:f4:c2:26:be:78:b5:b9:15:c9:cc:93:48: ee:83:1b:9e:92:83:34:ab:07:88:d1:b4:41:5f:09:f7:15:32: a2:d7:05:a6:bd:a1:91:87:ca:c0:4b:45:b2:98:01:3d:7c:7e: 7c:5e:85:ec -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEtic5jVy4h3QosfkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMjA0NDk1MFoXDTI4MDEwNTA1NDk1MFowLzEtMCsGA1UEAxMk YjdmMzgyNTEtMzBkMS00MTQ2LWExYzEtYWNlMjc0OWZiOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+tEvDcl9MTGgvo381EwXbxAu3NtTxoKw/5j AsKoJajPzs4QBhaQqO4GjYfV3+aK9F5aRsQ52ukhaujTlIFh+8spZZvNt6lvHwn6 629GF/1Nv485nJbx84+DO/5fmvf6dN+zc0OmbXUYHxY1tNBL6qq5t9cwHeDA9nFb HdSMyllmKWOfwIQ7YP+kkhmeqFv8MH8KkIUQLDzmmtDNL+H9C3vjWGVgUAqKv1VI wKZCFiUGpsXuF0I21g/Izy5rYwUCiGZ/u4gtVGvBhV9gXKZGE3EzxQuNV0gIds6I U5YfeQcOvWV8dkBhqXVd6LE25N9p0a1Im7BHCiD+1gr7/do9pwIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFOiyu6nHbR0UD1X9d0mFJsGlWqAsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i N2YzODI1MS0zMGQxLTQxNDYtYTFjMS1hY2UyNzQ5ZmI5ZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2I3ZjM4MjUxLTMwZDEtNDE0Ni1h MWMxLWFjZTI3NDlmYjlmNS9iN2YzODI1MS0zMGQxLTQxNDYtYTFjMS1hY2UyNzQ5 ZmI5ZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQDBAJEqWwDBAGToAIDBAGUO+YDBAGVE7YDBADR3kYD BALYFQgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgLsMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA7i+Td4 eOo6gHddnx+p7DJ6lZ6LbNU8LwFBsSSukAIhBi8cfIaFbfdoPs6fQL3sT4wUO4SP zazXbRuxoFlmqH9vjSV7f75C58pqR+C5sYd8hc96DP4FD17M4MCfyMFsfC5ETF7a 43u7Zn1qGD5DhFKPymjn34UX95osCvwFlS/DdCajBCCChZatrfEWxswrvLAtijoM k9fNXbMc+07oDLl/ZsYBAkFf+PAW6BicLDoH3gYyWJ10WWWXkFj7tFVRK15VJiqh KO5MprGlHfTCJr54tbkVycyTSO6DG56SgzSrB4jRtEFfCfcVMqLXBaa9oZGHysBL RbKYAT18fnxehew= -----END CERTIFICATE-----Generated at Wed Oct 8 15:35:56 2025 by rpki-client