$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4.cer File: 57c8d964-67cd-41a7-a53f-67520998d5f4.cer (raw, json) Hash identifier: nTtw2G9+zRIA/zbiijAGLNnlhzXz2oTwCN+Pgzj3Qtk= Subject key identifier: 09:70:E1:92:E2:4C:38:47:21:7F:00:BA:BA:FC:E5:F3:5B:54:06:09 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B3F85143B5CB4759318742280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/57c8d964-67cd-41a7-a53f-67520998d5f4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Sep 2025 16:31:46 +0000 Certificate not after: Thu 23 Dec 2027 17:31:46 +0000 Subordinate resources: AS: 70 IP: 130.14.0.0/16 IP: 192.5.52.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:85:14:3b:5c:b4:75:93:18:74:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 19 16:31:46 2025 GMT Not After : Dec 23 17:31:46 2027 GMT Subject: CN=57c8d964-67cd-41a7-a53f-67520998d5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:ae:ca:06:13:09:2a:cc:8f:ff:45:8c:15: eb:cf:76:01:0d:7a:82:cc:49:98:69:d1:00:b3:2c: 2b:85:27:7d:1d:6a:cc:ad:bf:af:f7:89:46:7a:22: 71:7c:85:5b:f4:21:35:a8:eb:5f:76:43:40:f2:6f: 83:dc:0c:46:35:08:51:e3:9e:61:56:cb:b2:84:84: 73:e1:25:4c:5d:d8:54:71:79:d9:66:c5:5a:c8:6d: 73:c9:2a:af:94:87:ce:b8:5c:5a:57:ce:43:df:db: 0a:90:8a:ab:27:72:61:04:8e:f3:83:1d:bc:f4:d6: 3d:a0:8e:44:dd:2d:ee:51:b6:84:b7:56:63:36:ce: 39:b2:f8:58:79:9d:70:52:54:23:91:3b:ad:6e:ba: 55:c9:bf:53:2d:cf:5d:0e:d8:c4:65:a3:24:73:79: 84:a6:8a:66:85:7d:a2:a1:07:60:85:a1:1c:ae:35: a3:df:6b:e4:b7:c0:34:0c:6d:23:19:34:28:7a:28: e3:09:c5:e3:10:29:f8:9c:51:39:bc:f9:09:ce:fe: 89:97:be:2e:87:3f:79:22:64:6d:4e:18:c6:b3:ad: 52:0f:26:c1:6c:34:67:0a:87:99:f1:b0:2d:b4:5b: a9:89:6f:ae:5e:42:fc:06:a1:a6:55:f4:48:62:5f: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:70:E1:92:E2:4C:38:47:21:7F:00:BA:BA:FC:E5:F3:5B:54:06:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/57c8d964-67cd-41a7-a53f-67520998d5f4/57c8d964-67cd-41a7-a53f-67520998d5f4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 130.14.0.0/16 192.5.52.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 70 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9f:0a:b5:8f:59:7e:84:56:e9:fe:70:58:4e:72:63:dd:04: 17:ce:ff:43:1c:47:4a:53:7a:2f:c5:79:43:aa:87:6e:52:ba: ff:f5:a6:17:44:84:1c:f6:e5:bf:90:2e:ec:09:55:32:f7:fa: 7b:66:b7:0d:49:9c:c3:cf:2e:d8:e3:45:bd:fc:bc:3f:ba:b7: db:43:59:05:ca:43:33:73:0f:29:58:1a:ce:ec:35:b0:67:f7: ad:0e:0f:0f:1e:c7:1d:17:16:ec:30:a2:f8:e7:61:a2:e1:3f: 59:e4:d4:8b:cb:09:5c:51:69:de:3b:53:62:a6:f6:a5:3d:80: e1:a8:3b:13:dc:4d:54:59:57:6a:86:31:3d:ae:2e:35:9b:c4: 82:44:56:15:b3:09:d5:d2:d6:61:76:ab:69:65:27:c8:19:8b: 3f:f1:03:98:0b:74:17:29:4c:6f:37:ae:77:7c:eb:73:22:01: b0:08:c8:e3:97:db:39:21:8e:49:2d:ef:9d:d7:20:33:27:c7: ef:b7:fc:a7:a7:72:c0:22:4f:13:e2:43:93:9e:57:e1:54:78: dc:bc:e6:d7:83:26:88:0d:d7:4d:2b:70:97:56:01:d7:54:2c: 06:de:3a:b7:25:dc:c8:48:42:8e:af:10:06:bd:56:64:45:45: 84:fc:df:de -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEs/hRQ7XLR1kxh0IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxOTE2MzE0NloXDTI3MTIyMzE3MzE0NlowLzEtMCsGA1UEAxMk NTdjOGQ5NjQtNjdjZC00MWE3LWE1M2YtNjc1MjA5OThkNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DSuygYTCSrMj/9FjBXrz3YBDXqCzEmYadEA sywrhSd9HWrMrb+v94lGeiJxfIVb9CE1qOtfdkNA8m+D3AxGNQhR455hVsuyhIRz 4SVMXdhUcXnZZsVayG1zySqvlIfOuFxaV85D39sKkIqrJ3JhBI7zgx289NY9oI5E 3S3uUbaEt1ZjNs45svhYeZ1wUlQjkTutbrpVyb9TLc9dDtjEZaMkc3mEpopmhX2i oQdghaEcrjWj32vkt8A0DG0jGTQoeijjCcXjECn4nFE5vPkJzv6Jl74uhz95ImRt ThjGs61SDybBbDRnCoeZ8bAttFupiW+uXkL8BqGmVfRIYl/L7QIDAQABo4IEHjCC BBowHQYDVR0OBBYEFAlw4ZLiTDhHIX8Aurr85fNbVAYJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 N2M4ZDk2NC02N2NkLTQxYTctYTUzZi02NzUyMDk5OGQ1ZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzU3YzhkOTY0LTY3Y2QtNDFhNy1h NTNmLTY3NTIwOTk4ZDVmNC81N2M4ZDk2NC02N2NkLTQxYTctYTUzZi02NzUyMDk5 OGQ1ZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCCDgMEAMAFNDAYBggrBgEFBQcBCAEB/wQJMAeg BTADAgFGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAFKfCrWPWX6EVun+cFhOcmPdBBfO/0McR0pTei/FeUOq h25Suv/1phdEhBz25b+QLuwJVTL3+ntmtw1JnMPPLtjjRb38vD+6t9tDWQXKQzNz DylYGs7sNbBn960ODw8exx0XFuwwovjnYaLhP1nk1IvLCVxRad47U2Km9qU9gOGo OxPcTVRZV2qGMT2uLjWbxIJEVhWzCdXS1mF2q2llJ8gZiz/xA5gLdBcpTG83rnd8 63MiAbAIyOOX2zkhjkkt753XIDMnx++3/KencsAiTxPiQ5OeV+FUeNy85teDJogN 100rcJdWAddULAbeOrcl3MhIQo6vEAa9VmRFRYT8394= -----END CERTIFICATE-----Generated at Wed Nov 5 13:41:21 2025 by rpki-client