$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9.cer File: db1075eb-0323-4b19-ad5a-e1b79845b9b9.cer (raw, json) Hash identifier: di+nRkaredhAVlhsuwP7L+x20/sdqiyGmD7izDlNXXU= Subject key identifier: B7:30:4F:A0:99:D4:2E:5D:26:35:E2:17:B9:92:CA:D5:DD:A2:A6:60 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AFA3A5CC17895141258C464C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/db1075eb-0323-4b19-ad5a-e1b79845b9b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Aug 2025 20:50:27 +0000 Certificate not after: Sun 28 Nov 2027 21:50:27 +0000 Subordinate resources: AS: 396838 IP: 209.127.190.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:3a:5c:c1:78:95:14:12:58:c4:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 25 20:50:27 2025 GMT Not After : Nov 28 21:50:27 2027 GMT Subject: CN=db1075eb-0323-4b19-ad5a-e1b79845b9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:9f:b2:f3:6d:18:c2:63:e5:6d:03:d1:b1: c1:ba:64:42:5f:e4:09:88:48:d6:91:37:72:4c:98: cf:38:4f:95:5c:20:13:66:4f:09:eb:13:1c:54:3e: 41:f2:13:28:b1:ea:7c:1a:c0:53:c9:82:f3:08:5d: 09:a6:aa:95:40:d4:b0:81:ed:0b:9a:7b:0b:b9:46: 07:56:24:9e:32:09:ba:00:23:59:7f:aa:b9:38:9a: 9e:7e:ca:56:b4:fc:63:df:d1:1d:97:2f:ff:c6:49: 45:a5:6c:7f:59:eb:c4:c5:71:67:38:64:d1:59:16: 43:4e:5a:d1:57:5c:37:bd:77:f8:d1:bd:ed:5c:e9: e2:6a:8c:3a:3a:16:83:22:7d:78:a6:1b:7a:17:ed: 86:a2:8c:7d:b6:ab:9f:e4:0f:70:ca:86:9a:33:8d: d8:ef:09:b4:5e:7c:9d:01:9b:71:1a:d6:85:31:02: 3b:2e:7e:a2:ab:f2:e7:1a:6a:3c:30:d2:f7:e9:ef: d0:d9:cb:e0:05:b7:94:10:04:06:1e:57:aa:23:70: 42:54:6e:b3:4c:d3:c6:4a:bc:61:e1:c8:3e:4b:4c: 76:78:09:ab:3a:ea:5e:28:63:70:4d:5b:ed:d1:bc: 9d:a1:6a:b9:51:c3:0b:2c:6f:62:67:67:81:b7:7e: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:30:4F:A0:99:D4:2E:5D:26:35:E2:17:B9:92:CA:D5:DD:A2:A6:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/db1075eb-0323-4b19-ad5a-e1b79845b9b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 209.127.190.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396838 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e9:0d:7d:f3:d8:cf:cd:6a:5b:bc:c6:d3:b7:0c:92:59:07: 7b:11:47:b4:85:df:5c:39:91:12:14:06:7a:93:51:e3:ed:fb: 47:b0:e4:6f:ee:2f:ae:0b:c3:8c:72:4f:36:05:ec:b6:d2:1d: 32:46:e3:47:2d:15:93:0a:ed:a9:c9:0a:3c:64:1e:d8:01:ae: 7d:f8:53:11:27:9d:bf:97:23:1a:80:29:90:e1:91:bf:27:00: 0f:23:15:82:c4:5e:1d:d4:a5:4c:95:bf:a9:d1:f6:0d:f9:48: 5b:ca:44:04:2e:4d:ba:fc:b0:85:bb:47:8f:76:9e:bd:bf:8b: 45:a6:8a:5f:7f:08:0a:00:0d:dc:ea:ee:40:27:77:5a:8f:ff: 4c:b2:b4:85:1e:25:ac:44:21:bc:56:5b:e4:8f:6e:7b:25:2b: 46:39:e7:6d:a4:71:4f:60:91:b4:fc:ef:b4:b5:9f:95:60:5e: 9d:2c:62:ab:35:0c:30:40:e8:72:ea:ff:e3:2d:fe:98:88:db: c2:71:b0:a4:46:2c:ef:dd:85:0f:10:13:8e:74:94:dc:b2:01: 30:9b:bc:5b:b6:89:49:33:6e:7b:92:27:d2:f3:e8:ce:5b:9e: 3c:89:41:4e:85:e6:35:d5:9d:7d:dd:52:f9:a7:45:56:c7:ae: 1f:a7:92:5f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEr6OlzBeJUUEljEZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyNTIwNTAyN1oXDTI3MTEyODIxNTAyN1owLzEtMCsGA1UEAxMk ZGIxMDc1ZWItMDMyMy00YjE5LWFkNWEtZTFiNzk4NDViOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1WfsvNtGMJj5W0D0bHBumRCX+QJiEjWkTdy TJjPOE+VXCATZk8J6xMcVD5B8hMosep8GsBTyYLzCF0JpqqVQNSwge0LmnsLuUYH ViSeMgm6ACNZf6q5OJqefspWtPxj39Edly//xklFpWx/WevExXFnOGTRWRZDTlrR V1w3vXf40b3tXOniaow6OhaDIn14pht6F+2Goox9tquf5A9wyoaaM43Y7wm0Xnyd AZtxGtaFMQI7Ln6iq/LnGmo8MNL36e/Q2cvgBbeUEAQGHleqI3BCVG6zTNPGSrxh 4cg+S0x2eAmrOupeKGNwTVvt0bydoWq5UcMLLG9iZ2eBt35e2QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLcwT6CZ1C5dJjXiF7mSytXdoqZgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k YjEwNzVlYi0wMzIzLTRiMTktYWQ1YS1lMWI3OTg0NWI5YjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2RiMTA3NWViLTAzMjMtNGIxOS1h ZDVhLWUxYjc5ODQ1YjliOS9kYjEwNzVlYi0wMzIzLTRiMTktYWQ1YS1lMWI3OTg0 NWI5YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRf74wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bg4mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJDpDX3z2M/Nalu8xtO3DJJZB3sRR7SF31w5kRIUBnqTUePt +0ew5G/uL64Lw4xyTzYF7LbSHTJG40ctFZMK7anJCjxkHtgBrn34UxEnnb+XIxqA KZDhkb8nAA8jFYLEXh3UpUyVv6nR9g35SFvKRAQuTbr8sIW7R492nr2/i0Wmil9/ CAoADdzq7kAnd1qP/0yytIUeJaxEIbxWW+SPbnslK0Y5522kcU9gkbT877S1n5Vg Xp0sYqs1DDBA6HLq/+Mt/piI28JxsKRGLO/dhQ8QE450lNyyATCbvFu2iUkzbnuS J9Lz6M5bnjyJQU6F5jXVnX3dUvmnRVbHrh+nkl8= -----END CERTIFICATE-----Generated at Thu Sep 4 02:00:58 2025 by rpki-client