$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer File: 3d17c017-30b5-444a-aa30-048cc30971e3.cer (raw, json) Hash identifier: P8MhZ8tTaBoAQXH/U98h5zn9JWTG+S/u3DNJVf06LIA= Subject key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AF9E8EEF62739A3D082A2D1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Aug 2025 18:06:22 +0000 Certificate not after: Wed 24 Nov 2027 18:58:12 +0000 Subordinate resources: AS: 401927 IP: 104.204.192.0/21 IP: 2604:1d20::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:e8:ee:f6:27:39:a3:d0:82:a2:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 25 18:06:22 2025 GMT Not After : Nov 24 18:58:12 2027 GMT Subject: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:2e:f9:f9:10:68:ed:07:33:9d:c3:6f:95: 0d:8f:e6:c8:38:17:4f:f9:58:f3:55:fe:8f:98:ed: ea:a7:45:fc:4c:91:db:88:66:bc:d9:7e:40:d0:f4: f8:da:f1:09:93:00:fb:09:84:93:28:57:ae:a5:34: 48:5c:98:a1:7b:0e:e1:46:6c:68:a2:bd:90:d0:b6: 6c:ee:d5:d7:c3:1e:ac:f8:97:15:70:18:3b:a6:8b: 4e:ee:a2:8c:ae:ac:05:a4:fc:45:7b:3d:ec:ed:24: 62:c0:26:86:37:f9:7d:25:5a:33:c3:be:78:44:9e: ec:aa:8f:be:c0:b5:a8:6e:a9:34:cf:33:1b:51:74: ae:47:46:1f:c2:50:78:04:21:d0:70:c8:8f:ef:96: 8f:0c:45:8c:a7:76:1e:47:9a:ae:0b:20:90:bc:f3: b1:0d:5b:cd:c5:df:8f:94:2a:ae:eb:2c:44:e5:44: c1:df:66:d7:18:cd:97:7f:4f:87:a1:eb:d6:e3:8e: 4e:07:3b:48:b5:f3:42:80:e3:07:99:51:21:48:16: 73:70:cf:39:e9:fd:0a:90:e7:81:0e:4f:65:bc:bb: 08:69:fd:c2:55:c1:b1:7e:2e:7c:06:9f:fb:73:71: 41:08:43:06:05:c3:fb:7f:52:cb:43:00:dd:63:d7: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 104.204.192.0/21 IPv6: 2604:1d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401927 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c3:f1:90:f5:21:8f:73:28:f2:b3:d9:01:6d:cc:44:99:75: 0b:15:1c:a7:16:a1:b0:7e:eb:b4:8b:d2:bd:95:f7:62:25:9c: 02:84:78:f4:89:0d:4a:59:7a:4d:3c:7a:aa:c1:18:f8:e6:ac: ae:90:11:e5:bf:f5:5d:21:8f:d6:a0:1f:5f:7d:26:9e:a8:1b: 57:e3:da:d9:9d:6c:a5:54:ca:6c:23:47:76:c4:fe:14:94:aa: 55:ac:e5:12:57:91:37:46:b9:33:13:94:f0:45:9c:08:3f:b7: 04:e3:c2:a7:2d:f5:61:88:c0:3b:1c:69:79:f4:fa:66:f7:45: 94:36:46:ac:d6:fa:89:0b:ef:3e:e0:20:9f:20:25:c6:8f:d2: 21:7f:02:db:c0:34:48:74:fb:7c:2f:ca:e5:ef:f2:86:5a:cc: 24:43:5b:0c:28:27:b5:49:bb:b6:a1:0a:e7:6d:b6:35:28:6a: 73:91:59:2b:a6:42:b7:a6:49:87:c4:78:3b:b6:6c:b7:53:a3: 2c:c4:ec:60:ab:1b:00:b9:c0:8b:fe:68:68:c2:92:10:ee:9a: c2:5c:85:49:13:96:87:01:b5:f1:01:7a:77:03:b8:97:74:49: bd:66:41:05:64:8b:c2:e6:59:8e:b1:ae:0d:fd:a7:70:cc:22: 46:98:82:d4 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEr56O72Jzmj0IKi0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyNTE4MDYyMloXDTI3MTEyNDE4NTgxMlowLzEtMCsGA1UEAxMk M2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcku+fkQaO0HM53Db5UNj+bIOBdP+VjzVf6P mO3qp0X8TJHbiGa82X5A0PT42vEJkwD7CYSTKFeupTRIXJihew7hRmxoor2Q0LZs 7tXXwx6s+JcVcBg7potO7qKMrqwFpPxFez3s7SRiwCaGN/l9JVozw754RJ7sqo++ wLWobqk0zzMbUXSuR0YfwlB4BCHQcMiP75aPDEWMp3YeR5quCyCQvPOxDVvNxd+P lCqu6yxE5UTB32bXGM2Xf0+HoevW445OBztItfNCgOMHmVEhSBZzcM856f0KkOeB Dk9lvLsIaf3CVcGxfi58Bp/7c3FBCEMGBcP7f1LLQwDdY9dl4QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGyzNSItudws05hi8U0iaDQa3CseMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z ZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzNkMTdjMDE3LTMwYjUtNDQ0YS1h YTMwLTA0OGNjMzA5NzFlMy8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMw OTcxZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBANozMAwDQQCAAIwBwMFACYEHSAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiIHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGXD8ZD1IY9zKPKz2QFtzESZdQsV HKcWobB+67SL0r2V92IlnAKEePSJDUpZek08eqrBGPjmrK6QEeW/9V0hj9agH199 Jp6oG1fj2tmdbKVUymwjR3bE/hSUqlWs5RJXkTdGuTMTlPBFnAg/twTjwqct9WGI wDscaXn0+mb3RZQ2RqzW+okL7z7gIJ8gJcaP0iF/AtvANEh0+3wvyuXv8oZazCRD WwwoJ7VJu7ahCudttjUoanORWSumQremSYfEeDu2bLdToyzE7GCrGwC5wIv+aGjC khDumsJchUkTlocBtfEBencDuJd0Sb1mQQVki8LmWY6xrg39p3DMIkaYgtQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:50 2025 by rpki-client