$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer File: 2ce98e57-da60-49a3-b167-e6998e0d2945.cer (raw, json) Hash identifier: q39hLQtjUW1aurQOioTWs30sB719wTfGcKi/3vB+iSY= Subject key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B6F370C0DEE9AA4B553564000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 18:33:20 +0000 Certificate not after: Wed 05 Jan 2028 23:23:15 +0000 Subordinate resources: AS: 13716 IP: 192.251.177.0/24 IP: 204.152.232.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:37:0c:0d:ee:9a:a4:b5:53:56:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 6 18:33:20 2025 GMT Not After : Jan 5 23:23:15 2028 GMT Subject: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:e5:59:8c:53:ed:cf:5f:29:1b:a6:71:05: 87:ec:57:65:aa:b1:0d:9f:9e:9e:5d:91:13:45:5d: 5e:df:5b:00:6e:04:4f:df:ed:68:35:2d:2b:11:81: 9b:ec:6a:de:4c:70:27:c9:d3:26:fa:f1:7d:41:b3: de:8d:69:b8:be:08:c7:4f:97:78:14:32:f8:97:6f: cf:cb:cf:26:98:2b:14:88:88:a4:5f:a0:71:f8:6d: 6c:ab:ac:66:e9:17:48:9f:d5:11:d7:16:16:d7:ac: 48:2d:f7:05:ea:85:6f:b8:43:d1:c9:b7:85:71:fd: 47:a9:e3:9f:de:52:20:25:7c:70:b4:8e:dc:ff:41: 6e:30:80:eb:2e:0f:33:32:79:bc:73:8c:6c:ab:33: 62:ea:d4:ef:af:a3:cc:f4:43:93:2b:9f:9c:d4:38: 85:eb:17:0b:1f:fb:07:7f:87:3e:39:d5:4e:af:66: a7:66:f3:ff:e6:ce:8d:51:21:06:98:f5:45:6e:df: 1a:2a:3c:d6:3c:12:50:30:e9:21:72:1e:fe:a1:d6: 11:90:fa:43:17:5f:68:cf:63:70:3f:e3:1c:de:15: 8e:ae:b5:9e:fc:d0:c2:88:d3:92:3e:ea:f7:79:de: c3:f1:6b:bc:2f:f7:a6:95:a4:c3:7f:f1:22:2d:81: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.251.177.0/24 204.152.232.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13716 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e5:09:32:d3:06:07:45:17:0c:9a:76:d4:e3:30:e1:a9:a3: a2:16:db:64:da:7c:6f:7c:c5:4a:92:90:fb:24:7b:82:4e:2e: a8:9e:5b:d4:d4:4c:7c:44:a4:8f:30:ad:10:47:2a:fe:70:91: f7:da:97:5f:cb:33:72:a5:30:e5:3e:b3:12:7e:d1:e4:02:c4: 79:5e:74:7f:a7:78:76:20:7a:db:65:5a:23:b2:6d:3f:82:8e: 07:3d:a7:bb:46:42:4b:75:38:1d:34:06:35:ef:f8:e2:67:a5: fc:d8:ea:a1:77:9b:a7:55:82:56:c8:50:75:ac:ad:c9:cc:9e: 2f:5f:ee:ba:5c:f6:13:a5:7b:0d:ce:00:e8:c4:54:40:ce:42: 5e:cd:ee:39:06:69:66:2e:32:4d:01:7c:8c:08:cc:9d:c4:7f: 11:08:b4:e8:b8:01:cc:36:98:1a:b9:e1:90:55:a7:b5:e8:f8: b2:e4:45:cf:ca:ce:48:fc:9f:5f:7e:36:89:3c:b5:14:a8:2e: 04:bc:cc:0c:e9:a6:61:e1:2d:49:75:57:61:fe:e1:b8:d2:94: 1b:3c:b5:0d:4f:d0:1c:79:2e:cf:bd:66:73:36:fc:53:f4:50: 7c:9b:83:d4:6e:cf:1a:49:72:6c:f9:b8:d0:c1:4b:73:7f:66: d7:34:6a:cd -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEtvNwwN7pqktVNWQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwNjE4MzMyMFoXDTI4MDEwNTIzMjMxNVowLzEtMCsGA1UEAxMk MmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQyOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zflWYxT7c9fKRumcQWH7FdlqrENn56eXZET RV1e31sAbgRP3+1oNS0rEYGb7GreTHAnydMm+vF9QbPejWm4vgjHT5d4FDL4l2/P y88mmCsUiIikX6Bx+G1sq6xm6RdIn9UR1xYW16xILfcF6oVvuEPRybeFcf1HqeOf 3lIgJXxwtI7c/0FuMIDrLg8zMnm8c4xsqzNi6tTvr6PM9EOTK5+c1DiF6xcLH/sH f4c+OdVOr2anZvP/5s6NUSEGmPVFbt8aKjzWPBJQMOkhch7+odYRkPpDF19oz2Nw P+Mc3hWOrrWe/NDCiNOSPur3ed7D8Wu8L/emlaTDf/EiLYGpoQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFEG6WZkHbx4H0O/m2MiIoNtAtT15MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y Y2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzJjZTk4ZTU3LWRhNjAtNDlhMy1i MTY3LWU2OTk4ZTBkMjk0NS8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUw ZDI5NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADA+7EDBAPMmOgwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICNZQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEADeUJMtMGB0UXDJp21OMw4amjohbbZNp8b3zFSpKQ +yR7gk4uqJ5b1NRMfESkjzCtEEcq/nCR99qXX8szcqUw5T6zEn7R5ALEeV50f6d4 diB622VaI7JtP4KOBz2nu0ZCS3U4HTQGNe/44mel/NjqoXebp1WCVshQdaytycye L1/uulz2E6V7Dc4A6MRUQM5CXs3uOQZpZi4yTQF8jAjMncR/EQi06LgBzDaYGrnh kFWntej4suRFz8rOSPyfX342iTy1FKguBLzMDOmmYeEtSXVXYf7huNKUGzy1DU/Q HHkuz71mczb8U/RQfJuD1G7PGklybPm40MFLc39m1zRqzQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:36 2025 by rpki-client