$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer File: c799c313-5f2f-4c52-84c3-f723dee23f2a.cer (raw, json) Hash identifier: ti2Xsiy/wLtsnd2ANJhQ5rs4Gl1cUT+IH/+SHW2fv+8= Subject key identifier: 07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B5ABF778EFF8F162A572FC000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Sep 2025 10:36:14 +0000 Certificate not after: Sun 02 Jan 2028 11:36:14 +0000 Subordinate resources: AS: 53637 IP: 204.239.11.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5a:bf:77:8e:ff:8f:16:2a:57:2f:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 29 10:36:14 2025 GMT Not After : Jan 2 11:36:14 2028 GMT Subject: CN=c799c313-5f2f-4c52-84c3-f723dee23f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:67:a3:1d:81:c3:84:b2:f5:ce:4c:88:7b: 5b:3f:48:ec:3e:ea:b8:f4:79:24:2b:15:a9:f4:08: 5d:47:84:13:d9:36:22:c5:b4:39:db:b4:d4:85:86: bd:98:9a:a3:00:83:f3:5b:18:f0:f8:d8:21:b5:5e: be:ce:37:42:ca:f3:69:05:94:38:df:52:a5:88:e7: 3c:df:d6:d6:7f:a9:c9:c1:7d:7a:55:2c:2f:0d:d4: 82:a8:2c:bb:72:62:c5:75:be:4d:c1:43:ba:be:9f: 08:f6:3a:26:e8:35:5a:22:98:e2:10:04:23:3c:e4: e8:c0:e7:f5:f3:ed:9f:70:e3:5c:5a:c3:e2:00:99: 45:d7:38:a6:f8:87:08:67:c5:98:3d:f2:27:89:0b: 10:83:67:9e:4c:a4:fa:6b:26:90:8a:ce:52:f0:76: 19:70:ec:69:16:7f:e7:d3:a6:d3:b1:68:7a:bb:75: 54:be:3b:93:c8:8e:20:f1:75:5d:ff:25:f7:29:f8: 72:f5:a1:61:b4:e6:c6:8f:6b:48:eb:81:39:36:38: e3:dc:3e:32:e9:13:80:d6:13:83:4f:b6:2b:0e:a3: ee:3e:74:d9:d1:e8:c4:12:49:17:99:15:2e:7e:46: a9:25:65:9b:cd:da:e1:38:d1:2f:c7:d7:55:b6:94: dd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 204.239.11.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53637 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9d:98:68:26:03:05:11:82:75:59:17:48:55:27:06:97:d3: 76:e8:26:39:8c:d0:9c:d3:c6:12:ae:e6:b2:51:f0:97:02:9b: 19:29:45:19:d9:ec:8d:e9:70:fd:3c:97:d9:29:59:c0:5e:3a: d1:3e:ca:d4:98:ba:33:8a:5f:2e:ee:be:94:0d:b2:b0:5e:ba: d4:46:b6:7c:c6:c2:10:cc:d1:23:c1:55:7f:ab:fd:2a:a1:c6: b9:42:c2:28:db:4a:d5:bf:8f:a7:5f:37:2f:a5:51:dc:8c:dc: 2a:e4:83:32:24:28:1c:cd:07:8a:5c:31:f9:2b:9e:05:89:c5: d3:d7:df:db:dd:55:e9:55:26:43:f4:48:18:27:ea:de:41:a7: bf:a7:d7:9d:14:74:55:09:ed:13:b2:0e:a9:1b:49:b1:50:29: 60:96:b2:c4:3e:f8:c5:66:9e:ce:d4:7c:80:0e:22:b1:64:3d: f0:91:c8:4e:7e:74:8a:8d:88:34:77:c9:dd:d7:97:1d:1f:6f: f8:8c:46:4a:61:4c:4b:24:51:29:91:f3:df:7f:c9:cd:58:eb: bc:06:83:50:99:76:25:26:44:31:0a:68:a5:72:4e:31:f1:d3: 47:83:14:63:83:03:78:de:98:21:2c:e7:be:d3:ea:10:e5:e5: 06:ac:9a:eb -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtav3eO/48WKlcvwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyOTEwMzYxNFoXDTI4MDEwMjExMzYxNFowLzEtMCsGA1UEAxMk Yzc5OWMzMTMtNWYyZi00YzUyLTg0YzMtZjcyM2RlZTIzZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHtnox2Bw4Sy9c5MiHtbP0jsPuq49HkkKxWp 9AhdR4QT2TYixbQ527TUhYa9mJqjAIPzWxjw+NghtV6+zjdCyvNpBZQ431KliOc8 39bWf6nJwX16VSwvDdSCqCy7cmLFdb5NwUO6vp8I9jom6DVaIpjiEAQjPOTowOf1 8+2fcONcWsPiAJlF1zim+IcIZ8WYPfIniQsQg2eeTKT6ayaQis5S8HYZcOxpFn/n 06bTsWh6u3VUvjuTyI4g8XVd/yX3Kfhy9aFhtObGj2tI64E5Njjj3D4y6ROA1hOD T7YrDqPuPnTZ0ejEEkkXmRUufkapJWWbzdrhONEvx9dVtpTdrwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAeq4ouk7Pi0gZtOJdIMIchM6W4XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j Nzk5YzMxMy01ZjJmLTRjNTItODRjMy1mNzIzZGVlMjNmMmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2M3OTljMzEzLTVmMmYtNGM1Mi04 NGMzLWY3MjNkZWUyM2YyYS9jNzk5YzMxMy01ZjJmLTRjNTItODRjMy1mNzIzZGVl MjNmMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADM7wswGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANGFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIWdmGgmAwURgnVZF0hVJwaX03boJjmM0JzTxhKu5rJR8JcC mxkpRRnZ7I3pcP08l9kpWcBeOtE+ytSYujOKXy7uvpQNsrBeutRGtnzGwhDM0SPB VX+r/SqhxrlCwijbStW/j6dfNy+lUdyM3CrkgzIkKBzNB4pcMfkrngWJxdPX39vd VelVJkP0SBgn6t5Bp7+n150UdFUJ7ROyDqkbSbFQKWCWssQ++MVmns7UfIAOIrFk PfCRyE5+dIqNiDR3yd3Xlx0fb/iMRkphTEskUSmR899/yc1Y67wGg1CZdiUmRDEK aKVyTjHx00eDFGODA3jemCEs577T6hDl5Qasmus= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:03 2025 by rpki-client