$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer File: 3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer (raw, json) Hash identifier: Xgd3M9SbMllayP46B+DPi11pPMan7DkjUPuTcTAqO0M= Subject key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AF9518561FEE2B9690A1762C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Aug 2025 13:01:18 +0000 Certificate not after: Sun 28 Nov 2027 14:01:18 +0000 Subordinate resources: AS: 7023 IP: 207.180.0.0/18 IP: 216.75.128.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:85:61:fe:e2:b9:69:0a:17:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 25 13:01:18 2025 GMT Not After : Nov 28 14:01:18 2027 GMT Subject: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e7:e6:f0:6f:3e:9d:97:0c:2d:38:68:36:c6: 3c:fd:05:b6:bb:b7:76:72:b5:29:77:4f:ad:08:07: b2:12:54:18:d5:08:74:9a:97:b7:e2:d2:aa:36:7f: 45:e7:5f:9e:89:3d:a2:66:74:cf:41:41:4b:44:17: 83:45:d1:a0:aa:3e:3d:03:fc:0a:ac:de:54:e4:a0: c0:24:72:d7:b5:30:fb:23:74:d3:80:2b:fc:45:8e: 75:32:6c:e7:48:d4:d7:aa:9c:84:e1:bc:80:ba:03: 50:73:54:ff:5e:fc:cd:84:94:32:9b:c6:85:66:46: 4d:56:9f:b8:1b:61:76:e0:cd:cf:47:92:c6:54:f1: b2:dd:68:ca:3c:ab:8e:be:b1:fb:7b:79:c2:ff:74: 68:15:82:98:f7:4e:be:d4:22:b8:39:47:ca:75:c5: c5:9a:fc:02:c8:f0:4c:b6:90:74:87:bc:7a:af:c9: 4c:15:98:e1:fa:ea:e9:51:71:66:cb:5a:68:04:0b: 11:fb:dc:54:0c:ba:66:4b:b9:35:5b:04:a9:b4:c9: 65:f7:d7:86:ef:32:5a:bb:70:77:aa:ee:5d:b3:6b: 61:ff:43:2c:78:44:32:39:cc:a0:6a:e4:84:f8:b0: eb:e9:5f:98:c1:bc:e1:36:9d:bb:b8:e1:93:35:a5: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 207.180.0.0/18 216.75.128.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7023 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:32:b5:42:b4:a5:3d:b3:53:6d:dd:5a:b8:14:cd:e3:a5:d6: fc:4f:8b:7e:35:e8:1a:cc:59:62:84:d3:c0:8c:35:68:c8:22: 91:fe:44:12:4b:d2:e3:25:65:78:f7:c1:de:74:24:a4:37:12: 58:fb:21:ea:9f:a1:95:4a:42:33:97:7e:1d:d6:ff:ba:39:47: 5c:01:e1:e4:f1:a1:2e:2f:ef:3f:f3:a8:8d:1a:d7:47:3f:1c: be:db:e5:08:11:95:3d:da:dc:98:b0:5c:49:ba:0d:9e:aa:53: 6e:62:cc:c7:1c:1e:3d:0b:5e:0e:69:76:17:d4:42:ce:7c:44: 3e:db:60:67:c2:c1:b2:36:ba:46:63:a5:78:ba:17:cb:44:8c: 8c:eb:10:ef:e0:b1:0e:19:7d:19:ce:37:8a:f3:70:16:3e:65: db:d8:cd:49:68:ea:57:23:f2:b4:f6:7d:27:b1:09:6a:21:c2: 99:66:7f:a4:08:6a:2b:05:4d:ea:53:03:9c:bf:8c:a3:58:d6: c5:d3:83:7a:2a:90:f6:ab:be:78:c2:82:36:73:ff:9f:cd:d5: 66:e7:18:14:fa:41:1d:7d:79:98:11:2b:fd:62:fe:ed:ac:1f: 41:7e:e6:5d:8c:72:aa:71:23:04:a0:2c:da:b4:2b:48:0f:da: 58:90:24:ae -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEr5UYVh/uK5aQoXYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyNTEzMDExOFoXDTI3MTEyODE0MDExOFowLzEtMCsGA1UEAxMk M2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVlYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhufm8G8+nZcMLThoNsY8/QW2u7d2crUpd0+t CAeyElQY1Qh0mpe34tKqNn9F51+eiT2iZnTPQUFLRBeDRdGgqj49A/wKrN5U5KDA JHLXtTD7I3TTgCv8RY51MmznSNTXqpyE4byAugNQc1T/XvzNhJQym8aFZkZNVp+4 G2F24M3PR5LGVPGy3WjKPKuOvrH7e3nC/3RoFYKY906+1CK4OUfKdcXFmvwCyPBM tpB0h7x6r8lMFZjh+urpUXFmy1poBAsR+9xUDLpmS7k1WwSptMll99eG7zJau3B3 qu5ds2th/0MseEQyOcygauSE+LDr6V+YwbzhNp27uOGTNaWEqwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFH8FSFORfZC7fA1Ss1AjQo19cOftMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z YmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzNiZjIxMDllLTYxZjctNDQ2ZC04 ODMzLWM3YmQxYzM1ZWEwOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMz NWVhMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAbPtAADBAXYS4AwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICG28wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAJTK1QrSlPbNTbd1auBTN46XW/E+LfjXoGsxZYoTT wIw1aMgikf5EEkvS4yVlePfB3nQkpDcSWPsh6p+hlUpCM5d+Hdb/ujlHXAHh5PGh Li/vP/OojRrXRz8cvtvlCBGVPdrcmLBcSboNnqpTbmLMxxwePQteDml2F9RCznxE PttgZ8LBsja6RmOleLoXy0SMjOsQ7+CxDhl9Gc43ivNwFj5l29jNSWjqVyPytPZ9 J7EJaiHCmWZ/pAhqKwVN6lMDnL+Mo1jWxdODeiqQ9qu+eMKCNnP/n83VZucYFPpB HX15mBEr/WL+7awfQX7mXYxyqnEjBKAs2rQrSA/aWJAkrg== -----END CERTIFICATE-----Generated at Sat Sep 6 15:02:39 2025 by rpki-client