$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer File: 0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer (raw, json) Hash identifier: dr7XGm+VP/wTb2yvnJMgC+NrTB7+g0FzZgBS6MeVuc0= Subject key identifier: A4:5B:B2:43:41:87:9F:58:0E:6B:44:13:BD:A7:08:16:72:2B:DA:55 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B6C3ABD72EBCC742FB38A5F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Oct 2025 16:53:21 +0000 Certificate not after: Sat 08 Jan 2028 17:53:21 +0000 Subordinate resources: AS: 400909 IP: 64.7.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6c:3a:bd:72:eb:cc:74:2f:b3:8a:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 5 16:53:21 2025 GMT Not After : Jan 8 17:53:21 2028 GMT Subject: CN=0b3e78b3-bf49-4038-b7a9-71936b1370d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c3:2f:56:91:61:71:5d:5e:1a:66:7e:d7:16: 17:49:e7:87:03:96:0f:fa:eb:0d:89:c5:84:99:be: a9:08:fc:d4:a9:54:3b:9a:f2:63:09:2e:f9:76:31: ff:a2:d6:e0:22:2d:34:5a:b4:8a:6b:f4:90:e3:f1: a3:e0:23:f3:21:23:97:22:52:5f:50:73:cd:21:57: 94:67:45:6a:a9:ec:50:2c:34:b6:d5:03:7b:2b:b9: cd:ec:f9:58:c9:ad:84:18:13:68:a7:90:ff:48:f8: cf:0b:85:24:0a:e3:08:11:6e:dd:8e:cf:2b:aa:60: fa:4f:4f:42:a2:61:47:83:57:7c:6e:04:da:e1:eb: 7b:76:de:e0:a1:6c:d7:96:95:f2:15:29:04:92:00: 5f:54:8b:9b:58:d6:c4:82:79:b4:cc:76:36:cd:ae: 56:0d:84:16:ad:70:c8:c3:ee:15:bd:f5:bf:80:44: ee:f5:ab:23:05:6e:49:37:d3:ed:aa:70:ae:5c:4b: 95:16:d5:2e:d5:79:4e:24:e4:e6:8f:98:42:f1:38: 27:d7:12:3d:69:45:3b:6a:0d:d8:33:ee:54:ae:19: 62:37:7c:c7:ae:cc:f7:ec:c7:58:6a:ad:f3:1b:75: 5e:ea:f1:ce:7a:bc:a8:84:e2:72:ef:0f:f6:18:bb: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5B:B2:43:41:87:9F:58:0E:6B:44:13:BD:A7:08:16:72:2B:DA:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.7.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400909 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:33:c4:30:7a:13:7e:38:0f:74:f0:aa:17:aa:02:57:2d:ff: ca:4a:58:a2:f8:66:f2:b0:ef:75:0a:67:b2:d5:ad:44:c5:af: 93:05:d8:9e:48:0b:99:0b:04:02:92:bd:fd:8a:14:1f:55:08: 39:76:94:3a:90:ca:42:12:5c:4b:64:37:cf:4e:bd:82:52:a7: 5b:08:92:c4:52:b5:de:a1:47:13:5f:fc:91:7b:ef:37:5f:3f: a6:79:37:1b:75:eb:20:44:2b:63:7e:22:b5:3c:98:d0:d9:0d: fa:91:c2:92:17:7e:f3:d3:0c:ea:17:36:a8:10:94:a9:f0:e8: 46:f4:33:c6:50:28:c5:16:c5:c5:87:39:83:81:7e:83:63:e7: 91:39:87:11:0b:59:56:bc:ae:3a:19:5c:a2:da:69:80:ab:c7: 31:12:df:ac:a7:8a:c7:89:a7:fe:96:03:29:70:3b:42:5d:25: 76:c4:93:61:dc:38:88:8a:11:38:67:73:dc:27:c2:d6:7c:7e: 50:ef:d2:2f:bd:56:28:43:38:e9:19:1a:12:19:06:1a:f5:9e: d1:e5:f3:e7:13:1c:48:8c:9d:d6:5b:97:3f:36:69:54:60:56: 7a:b8:81:d4:cb:ad:04:f2:fb:40:94:8e:bb:85:74:71:48:6e: 5d:76:66:db -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtsOr1y68x0L7OKX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwNTE2NTMyMVoXDTI4MDEwODE3NTMyMVowLzEtMCsGA1UEAxMk MGIzZTc4YjMtYmY0OS00MDM4LWI3YTktNzE5MzZiMTM3MGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMMvVpFhcV1eGmZ+1xYXSeeHA5YP+usNicWE mb6pCPzUqVQ7mvJjCS75djH/otbgIi00WrSKa/SQ4/Gj4CPzISOXIlJfUHPNIVeU Z0VqqexQLDS21QN7K7nN7PlYya2EGBNop5D/SPjPC4UkCuMIEW7djs8rqmD6T09C omFHg1d8bgTa4et7dt7goWzXlpXyFSkEkgBfVIubWNbEgnm0zHY2za5WDYQWrXDI w+4VvfW/gETu9asjBW5JN9PtqnCuXEuVFtUu1XlOJOTmj5hC8Tgn1xI9aUU7ag3Y M+5UrhliN3zHrsz37MdYaq3zG3Ve6vHOeryohOJy7w/2GLv4XQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKRbskNBh59YDmtEE72nCBZyK9pVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w YjNlNzhiMy1iZjQ5LTQwMzgtYjdhOS03MTkzNmIxMzcwZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzBiM2U3OGIzLWJmNDktNDAzOC1i N2E5LTcxOTM2YjEzNzBkOC8wYjNlNzhiMy1iZjQ5LTQwMzgtYjdhOS03MTkzNmIx MzcwZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJAB/gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh4NMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAL4zxDB6E344D3TwqheqAlct/8pKWKL4ZvKw73UKZ7LVrUTF r5MF2J5IC5kLBAKSvf2KFB9VCDl2lDqQykISXEtkN89OvYJSp1sIksRStd6hRxNf /JF77zdfP6Z5Nxt16yBEK2N+IrU8mNDZDfqRwpIXfvPTDOoXNqgQlKnw6Eb0M8ZQ KMUWxcWHOYOBfoNj55E5hxELWVa8rjoZXKLaaYCrxzES36yniseJp/6WAylwO0Jd JXbEk2HcOIiKEThnc9wnwtZ8flDv0i+9VihDOOkZGhIZBhr1ntHl8+cTHEiMndZb lz82aVRgVnq4gdTLrQTy+0CUjruFdHFIbl12Zts= -----END CERTIFICATE-----Generated at Tue Nov 4 23:21:41 2025 by rpki-client