$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer File: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer (raw, json) Hash identifier: uCZYHpNP6EeBbkS5Q/bPGJJCcOC/0l3Nsz34RSwIup4= Subject key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AA231F6CFB32A937558723700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Jul 2025 08:02:23 +0000 Certificate not after: Thu 28 Oct 2027 08:02:23 +0000 Subordinate resources: AS: 22641 IP: 216.169.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:31:f6:cf:b3:2a:93:75:58:72:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 25 08:02:23 2025 GMT Not After : Oct 28 08:02:23 2027 GMT Subject: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:62:8c:96:01:b9:95:f7:22:3e:2e:fe:37: de:c5:ea:e3:ca:5f:d8:32:11:f3:0d:1f:e0:d7:0b: 4a:5d:c5:fa:ad:8a:aa:2f:be:86:28:b2:ce:1c:50: c2:83:62:65:db:1d:7f:ee:94:13:93:a0:c9:d0:14: f1:32:73:3a:8a:4f:14:65:1e:7b:fe:48:91:24:76: 1a:a0:2a:67:58:82:7f:30:33:c1:50:23:00:bd:ac: 01:8c:5f:cf:3c:ef:e0:19:01:0f:9d:c7:fc:e0:e4: b1:0d:95:5c:20:70:73:af:2a:df:4a:ed:3e:ec:8f: 23:6a:cf:ae:36:7b:80:15:ec:9d:42:35:eb:af:6d: 07:f1:a0:6f:44:1b:bf:ac:fd:d7:45:55:60:e2:a0: b2:19:9b:2f:c0:f8:dc:71:58:d7:67:de:43:8e:9f: 4e:f4:6c:56:8d:80:6d:3c:45:de:c6:f6:fd:ba:00: 0d:da:f1:91:cb:b1:67:b8:9e:4a:f2:9b:d4:a9:34: ba:b6:0d:c5:e1:87:3e:68:3f:a8:52:91:46:27:b1: 7e:cf:64:fd:8d:d4:de:ce:24:73:3f:af:75:75:a2: be:0a:96:1c:f4:52:30:fd:11:86:f4:32:44:5f:f1: 94:94:a6:82:f1:c6:6a:8e:2b:21:b1:e3:a2:8d:d5: 03:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 216.169.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22641 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:26:c7:01:74:6e:0e:e5:39:db:66:6e:44:4e:1e:a3:6a:29: 4e:91:2b:b8:d4:94:cc:58:c3:50:64:75:ba:95:ef:e4:54:74: d7:83:f3:68:c9:d9:6e:61:cc:40:ab:c4:d0:b7:36:fa:1c:da: e5:6b:c7:b0:c1:3d:e6:ac:b0:50:9d:ab:a3:e1:a3:31:fb:58: b2:d3:b5:8d:5a:2a:25:4a:a7:e1:f1:5c:ad:ab:ff:26:2f:37: f2:db:3f:e3:7e:b0:84:6f:50:c0:30:5b:ad:46:87:9f:6e:1b: cb:59:13:4d:d2:33:30:c3:c5:0c:b6:f2:b0:88:40:e6:1a:5c: 1a:53:91:56:d8:e3:42:cc:6f:67:55:86:4d:f8:c5:c1:64:5d: 1e:8d:35:63:84:c3:19:23:6a:11:e1:c9:2b:de:ff:53:54:3f: b3:e1:41:e6:dc:21:5d:66:8b:53:dc:e7:3b:e3:b1:84:7c:bd: 57:04:61:91:0f:6e:cb:fe:a2:8b:18:3f:d9:54:ac:36:47:55: f4:f8:dd:2b:6d:81:ac:b2:96:51:4a:04:ac:c7:1d:34:e5:a1: c0:5c:95:85:8e:8b:8b:69:50:d8:2c:64:f3:66:69:8c:26:8d: dc:9f:cc:b6:79:a7:64:d8:76:a1:c5:09:f9:aa:14:e2:8a:9b: 65:4d:c6:af -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEqiMfbPsyqTdVhyNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyNTA4MDIyM1oXDTI3MTAyODA4MDIyM1owLzEtMCsGA1UEAxMk MjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4YWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF1ijJYBuZX3Ij4u/jfexerjyl/YMhHzDR/g 1wtKXcX6rYqqL76GKLLOHFDCg2Jl2x1/7pQTk6DJ0BTxMnM6ik8UZR57/kiRJHYa oCpnWIJ/MDPBUCMAvawBjF/PPO/gGQEPncf84OSxDZVcIHBzryrfSu0+7I8jas+u NnuAFeydQjXrr20H8aBvRBu/rP3XRVVg4qCyGZsvwPjccVjXZ95Djp9O9GxWjYBt PEXexvb9ugAN2vGRy7FnuJ5K8pvUqTS6tg3F4Yc+aD+oUpFGJ7F+z2T9jdTeziRz P691daK+CpYc9FIw/RGG9DJEX/GUlKaC8cZqjishseOijdUD9wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPGv4MY/Qdt1XLIe/fHR+PfQqfvgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y ODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzI4MDM1ZWEyLWMxZDUtNGIyOS1h OGM0LTFiMzEzNzljOGFmZi8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5 YzhhZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATYqdAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WHEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAtSbHAXRuDuU522ZuRE4eo2opTpEruNSUzFjDUGR1upXv5FR0 14PzaMnZbmHMQKvE0Lc2+hza5WvHsME95qywUJ2ro+GjMftYstO1jVoqJUqn4fFc rav/Ji838ts/436whG9QwDBbrUaHn24by1kTTdIzMMPFDLbysIhA5hpcGlORVtjj QsxvZ1WGTfjFwWRdHo01Y4TDGSNqEeHJK97/U1Q/s+FB5twhXWaLU9znO+OxhHy9 VwRhkQ9uy/6iixg/2VSsNkdV9PjdK22BrLKWUUoErMcdNOWhwFyVhY6Li2lQ2Cxk 82ZpjCaN3J/MtnmnZNh2ocUJ+aoU4oqbZU3Grw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:46 2025 by rpki-client