$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer File: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer (raw, json) Hash identifier: Qq9D+XZSVf4dLfLEJ+wi2YLB5tHDohoWV63c/N1wYx8= Subject key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B4BCF672D8E72B5645FDE8C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Sep 2025 02:11:13 +0000 Certificate not after: Tue 28 Dec 2027 03:11:13 +0000 Subordinate resources: AS: 396509 IP: 45.42.160.0/22 IP: 2602:fa0e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:cf:67:2d:8e:72:b5:64:5f:de:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 24 02:11:13 2025 GMT Not After : Dec 28 03:11:13 2027 GMT Subject: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:a4:fc:8a:b5:96:ae:c3:cb:39:62:42:bd: 5a:af:3a:d1:41:b1:df:16:09:0d:96:72:65:3f:3a: 67:d4:8a:56:95:b2:9f:35:85:08:b9:0d:91:51:19: dd:f7:f6:ce:5d:84:cd:4b:14:4e:92:35:2b:a2:7a: a7:57:a2:ed:1e:bf:de:3a:72:41:e2:7a:0a:47:a1: 30:26:91:df:b5:35:8d:e6:4a:fa:08:f4:4b:76:99: 36:cf:8f:2f:61:a1:59:26:79:32:f2:d5:4c:35:b2: 41:3c:ff:c6:8a:72:b3:f7:5f:d0:4a:5d:d2:3e:03: 91:c3:9f:81:dd:3b:f5:ec:89:ec:f6:68:67:93:95: 26:ae:47:36:a4:1a:cf:a7:8d:65:7e:ac:b5:2c:a2: ed:fb:9f:e5:6b:80:71:bf:1d:57:02:9f:44:b3:c3: 02:d4:e8:cb:c5:a2:f5:23:c9:01:c5:42:e6:42:8f: 2e:a9:b5:fe:be:33:6d:6b:a7:7a:2a:bc:50:46:f5: c7:3f:48:ec:25:53:fe:93:33:42:c0:74:c7:fa:30: 17:36:38:69:dd:94:3b:91:fd:8f:97:fc:2a:9e:92: e8:18:b3:50:5a:2c:5e:a3:b1:61:31:3c:28:f6:02: dc:c0:1a:d4:ec:0e:63:55:8e:c3:10:88:4c:60:f3: 79:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 45.42.160.0/22 IPv6: 2602:fa0e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396509 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:be:1e:18:4c:a7:33:af:7c:45:0c:c0:54:a8:46:33:b3:88: 73:f9:92:e6:26:26:4d:60:aa:b3:24:ca:6d:5c:87:32:3b:0c: ba:cb:64:01:34:ea:cb:d4:4c:1b:aa:12:ca:c2:0c:be:c0:1a: ae:10:aa:ef:f1:9d:d0:f5:d7:cd:c6:50:41:b2:bd:27:61:85: 35:bc:55:42:ae:d3:6e:cd:47:7c:fd:a8:bd:72:d7:44:e2:45: e5:c8:1a:d3:de:53:c4:50:16:b6:c9:d8:35:9c:fe:8b:6d:83: ad:38:e6:62:83:7d:da:40:4c:10:96:c3:1a:cf:26:de:4e:31: 90:c5:5a:01:2a:45:8f:56:09:fd:b3:70:b1:dd:42:da:a2:db: 86:33:c4:fd:1c:64:0f:24:e9:90:63:4b:f0:eb:96:75:ee:7d: 2c:63:26:f7:05:c9:f1:4f:56:6a:0a:72:cc:6a:2d:6e:43:aa: 3e:ff:d6:9e:d0:02:89:f8:c4:ac:96:ed:4e:03:c5:f7:d5:75: e0:62:82:78:8c:05:a7:1d:61:e5:ed:56:22:30:e1:c8:b2:94: bc:1a:3c:b1:be:51:c5:34:0d:e6:61:95:d7:d3:09:3c:8a:9a: b7:6d:e5:3e:86:ea:f0:44:4a:74:41:9d:45:3a:57:b5:04:53: 48:d4:f9:34 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtLz2ctjnK1ZF/ejAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyNDAyMTExM1oXDTI3MTIyODAzMTExM1owLzEtMCsGA1UEAxMk Mjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIzYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy2k/Iq1lq7DyzliQr1arzrRQbHfFgkNlnJl Pzpn1IpWlbKfNYUIuQ2RURnd9/bOXYTNSxROkjUronqnV6LtHr/eOnJB4noKR6Ew JpHftTWN5kr6CPRLdpk2z48vYaFZJnky8tVMNbJBPP/GinKz91/QSl3SPgORw5+B 3Tv17Ins9mhnk5Umrkc2pBrPp41lfqy1LKLt+5/la4Bxvx1XAp9Es8MC1OjLxaL1 I8kBxULmQo8uqbX+vjNta6d6KrxQRvXHP0jsJVP+kzNCwHTH+jAXNjhp3ZQ7kf2P l/wqnpLoGLNQWixeo7FhMTwo9gLcwBrU7A5jVY7DEIhMYPN5jwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFArVenrbbc3NA+vblfPRM64ZxwYLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y OTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzI5NTRiOGExLTY5ZGUtNDYzMC04 MDA2LTRkYzhmZmUyM2JkZC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZl MjNiZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAItKqAwDgQCAAIwCAMGBCYC+g4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYM3TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9vh4YTKczr3xFDMBUqEYzs4hz +ZLmJiZNYKqzJMptXIcyOwy6y2QBNOrL1EwbqhLKwgy+wBquEKrv8Z3Q9dfNxlBB sr0nYYU1vFVCrtNuzUd8/ai9ctdE4kXlyBrT3lPEUBa2ydg1nP6LbYOtOOZig33a QEwQlsMazybeTjGQxVoBKkWPVgn9s3Cx3ULaotuGM8T9HGQPJOmQY0vw65Z17n0s Yyb3BcnxT1ZqCnLMai1uQ6o+/9ae0AKJ+MSslu1OA8X31XXgYoJ4jAWnHWHl7VYi MOHIspS8GjyxvlHFNA3mYZXX0wk8ipq3beU+hurwREp0QZ1FOle1BFNI1Pk0 -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:13 2025 by rpki-client