$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/77923f37-bb5f-4f99-90dc-eab9fd2bb913.cer File: 77923f37-bb5f-4f99-90dc-eab9fd2bb913.cer (raw, json) Hash identifier: QzIFZKo0i6hQob+by2fgXPDsLQLDd1PTa4VVDbTrUA8= Subject key identifier: AF:89:7D:D2:E4:DB:93:43:EE:C8:7D:58:15:24:CE:B2:7E:74:51:62 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B3E974C077D2DFBF5D07FF180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/77923f37-bb5f-4f99-90dc-eab9fd2bb913/77923f37-bb5f-4f99-90dc-eab9fd2bb913.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/77923f37-bb5f-4f99-90dc-eab9fd2bb913/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Sep 2025 08:32:40 +0000 Certificate not after: Thu 23 Dec 2027 09:32:40 +0000 Subordinate resources: AS: 14123 IP: 167.150.2.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3e:97:4c:07:7d:2d:fb:f5:d0:7f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 19 08:32:40 2025 GMT Not After : Dec 23 09:32:40 2027 GMT Subject: CN=77923f37-bb5f-4f99-90dc-eab9fd2bb913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:c9:40:fe:14:fd:86:40:1b:45:88:5c:69: e4:96:3b:ce:d2:42:07:ec:df:bf:01:52:26:8e:80: 19:b2:18:ea:d8:6e:69:64:65:20:55:19:57:6f:02: 79:ea:37:72:e5:ae:df:a5:56:e3:9a:5b:2c:ba:fe: a0:2e:96:f1:1e:72:17:21:c1:4b:54:d8:91:e9:6a: 4a:86:59:99:be:b9:0f:ed:c8:85:20:4b:9c:37:a6: d7:dd:ef:a7:3c:0d:05:d7:c8:2f:2c:d0:fc:aa:5b: f1:c8:6f:45:fc:35:6f:0e:dc:86:3f:2e:43:d1:43: b8:8c:13:dd:87:3a:28:61:c5:f6:6c:36:19:55:d6: a4:e5:a5:df:7c:92:d7:41:84:f8:b2:08:98:d4:64: 23:e6:33:f8:c1:18:85:03:bf:f6:4e:fb:44:6f:dd: d1:7b:fb:cc:77:25:37:75:e9:94:54:d6:03:76:70: d1:22:2c:cc:e2:7f:64:10:14:aa:40:92:d5:b2:0c: 75:42:d6:b0:ba:50:6d:b0:4f:20:d7:64:4f:c8:f8: 5c:1c:8b:00:e4:d1:74:d3:e9:6d:85:95:1d:a5:64: 69:b3:81:fc:70:b3:16:08:2e:2b:68:99:0c:28:51: 9a:56:0f:48:b2:46:9f:da:eb:a2:52:bd:50:6a:c3: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:89:7D:D2:E4:DB:93:43:EE:C8:7D:58:15:24:CE:B2:7E:74:51:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/77923f37-bb5f-4f99-90dc-eab9fd2bb913/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/77923f37-bb5f-4f99-90dc-eab9fd2bb913/77923f37-bb5f-4f99-90dc-eab9fd2bb913.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 167.150.2.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14123 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3b:45:40:c2:e6:f2:95:f9:33:b9:e1:f1:db:8a:a9:61:f8: f0:a0:06:d2:f3:0f:6a:d7:11:6b:e5:e4:d5:5f:26:59:96:18: 82:d2:fb:b0:07:41:73:f3:8f:1e:ca:fa:3d:86:c5:2c:b8:db: 04:3b:8b:ae:64:2f:c5:3f:81:e5:43:fa:5a:5e:6b:22:0e:d3: 58:da:18:7d:68:b9:5b:88:d7:70:13:30:e7:e4:29:f7:97:53: df:3e:42:e9:86:0a:d5:b4:09:a8:c2:6d:06:05:6e:c7:99:33: f9:3c:68:36:53:0d:14:d2:c8:52:21:b4:64:6e:42:1e:56:af: a5:5f:8a:99:76:b8:32:66:03:a5:4e:d8:20:bf:44:e9:02:97: 43:88:64:5c:e6:f6:fe:67:38:1e:8d:c8:1e:be:3f:e1:8b:77: 5b:33:50:08:fe:e0:17:07:23:37:e4:e2:23:72:d0:80:64:13: 2c:cb:98:52:18:59:bc:09:8f:6d:ce:df:19:71:30:d4:04:4f: f2:a6:f9:0e:d8:7c:8e:0c:a0:00:da:57:3e:c5:eb:bc:6d:6b: a9:45:9d:41:6a:92:e9:0d:dd:28:57:69:26:81:c9:d7:be:35: 3d:c7:21:dd:df:dd:d5:11:28:ee:d0:6f:fe:c9:fb:a1:1d:ee: b7:47:f5:ac -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEs+l0wHfS379dB/8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxOTA4MzI0MFoXDTI3MTIyMzA5MzI0MFowLzEtMCsGA1UEAxMk Nzc5MjNmMzctYmI1Zi00Zjk5LTkwZGMtZWFiOWZkMmJiOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlDJQP4U/YZAG0WIXGnkljvO0kIH7N+/AVIm joAZshjq2G5pZGUgVRlXbwJ56jdy5a7fpVbjmlssuv6gLpbxHnIXIcFLVNiR6WpK hlmZvrkP7ciFIEucN6bX3e+nPA0F18gvLND8qlvxyG9F/DVvDtyGPy5D0UO4jBPd hzooYcX2bDYZVdak5aXffJLXQYT4sgiY1GQj5jP4wRiFA7/2TvtEb93Re/vMdyU3 demUVNYDdnDRIizM4n9kEBSqQJLVsgx1QtawulBtsE8g12RPyPhcHIsA5NF00+lt hZUdpWRps4H8cLMWCC4raJkMKFGaVg9Iskaf2uuiUr1QasMPOQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFK+JfdLk25ND7sh9WBUkzrJ+dFFiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 NzkyM2YzNy1iYjVmLTRmOTktOTBkYy1lYWI5ZmQyYmI5MTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzc3OTIzZjM3LWJiNWYtNGY5OS05 MGRjLWVhYjlmZDJiYjkxMy83NzkyM2YzNy1iYjVmLTRmOTktOTBkYy1lYWI5ZmQy YmI5MTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGnlgIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC NyswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEANDtFQMLm8pX5M7nh8duKqWH48KAG0vMPatcRa+Xk1V8mWZYY gtL7sAdBc/OPHsr6PYbFLLjbBDuLrmQvxT+B5UP6Wl5rIg7TWNoYfWi5W4jXcBMw 5+Qp95dT3z5C6YYK1bQJqMJtBgVux5kz+TxoNlMNFNLIUiG0ZG5CHlavpV+KmXa4 MmYDpU7YIL9E6QKXQ4hkXOb2/mc4Ho3IHr4/4Yt3WzNQCP7gFwcjN+TiI3LQgGQT LMuYUhhZvAmPbc7fGXEw1ARP8qb5Dth8jgygANpXPsXrvG1rqUWdQWqS6Q3dKFdp JoHJ1741Pcch3d/d1REo7tBv/sn7oR3ut0f1rA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:06:21 2025 by rpki-client