$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer File: 88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer (raw, json) Hash identifier: UBEzheyQtiNjHK2R3uazx1d3m4sf0Q0tu12D7O2b+HQ= Subject key identifier: 64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A9E6E2B78ADC6783F90E48D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Jul 2025 23:40:28 +0000 Certificate not after: Tue 26 Oct 2027 23:40:28 +0000 Subordinate resources: AS: 395412 AS: 399638 IP: 204.8.234.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:6e:2b:78:ad:c6:78:3f:90:e4:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 23 23:40:28 2025 GMT Not After : Oct 26 23:40:28 2027 GMT Subject: CN=88bfa348-1db4-4c2b-8cd7-df6655cb7023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:7e:69:3e:29:6f:c8:f7:02:88:ff:a7:5d: 3e:37:d5:28:32:fa:6a:be:8c:9c:34:65:00:32:f4: dc:25:2e:fb:50:9c:3b:73:eb:cc:ad:e3:30:f2:3f: bb:fd:74:8e:ba:cd:7f:d9:19:bb:88:a8:d3:1d:32: d3:82:75:19:a0:cb:20:96:af:3d:15:b9:be:49:79: dd:b1:cc:92:0c:2f:33:94:21:db:a8:37:21:31:9b: 6d:8a:4d:ea:ad:15:cd:6f:ee:58:9c:d8:4b:92:16: 9d:d8:42:92:cb:0f:41:f1:1e:00:9c:8d:36:af:73: 28:28:2e:10:fa:b4:62:63:6f:54:bc:91:97:2c:ea: a1:75:56:e4:11:02:91:cd:e8:9c:d9:70:5f:c5:26: 56:76:cc:fe:96:b2:6c:c1:b0:96:1c:ec:56:bf:10: 8e:6e:be:19:d2:16:96:9d:0e:7f:ca:18:3c:70:ae: 7d:c8:56:0b:c2:ef:57:5d:8e:9c:50:e1:e5:d4:a9: 9e:4d:e5:78:a0:97:1d:75:b3:33:b4:88:18:83:67: 57:6d:20:dd:27:e8:4d:f6:74:90:90:e7:87:0d:3e: 2a:a3:0d:5d:4d:03:70:6f:4d:25:98:d2:c0:c0:35: 82:2b:27:a9:cb:91:b2:c1:70:6b:ae:da:05:26:e4: 2a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 204.8.234.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395412 399638 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:01:c5:69:fc:1b:f1:33:ee:a7:98:16:eb:d1:79:24:42:fc: 5b:f5:2f:85:49:bb:04:37:d5:56:ae:42:ad:43:23:70:25:79: 04:61:3a:b5:4c:f8:e2:c4:da:bc:50:c1:ac:c3:12:12:72:16: eb:52:96:d5:1e:b7:42:ba:9f:b8:5a:7e:b8:91:04:23:62:7d: c8:5e:85:a5:a2:25:8e:44:f2:a1:f7:3c:10:3d:a0:e2:b8:77: dc:3e:09:2e:0a:96:26:2a:84:c2:0b:ca:14:47:b0:20:65:7a: fb:e3:35:37:e4:90:d5:2a:7c:9e:de:be:d3:58:a4:32:20:87: 34:da:cf:53:0d:7e:7d:b2:32:64:09:95:0d:95:04:c4:a7:d2: e9:a6:63:57:3d:ad:b9:81:df:76:75:38:5d:c8:ec:b1:d9:a3: 58:f9:56:f9:e1:d3:1e:bb:3c:67:e0:db:d7:32:ab:36:49:b5: 9b:be:da:fd:e5:b1:d2:59:3e:04:54:a6:6b:7c:df:08:25:a5: 2f:d4:60:42:95:6b:1e:5a:3f:2a:8e:63:65:7f:28:72:94:56: 25:23:e1:c1:04:1d:41:69:b7:f0:66:80:3d:27:f6:8e:db:b4: a0:6e:49:3e:49:1f:a8:67:61:d4:d5:b4:ec:b1:a6:92:20:90: 89:6c:a9:27 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEqebit4rcZ4P5DkjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyMzIzNDAyOFoXDTI3MTAyNjIzNDAyOFowLzEtMCsGA1UEAxMk ODhiZmEzNDgtMWRiNC00YzJiLThjZDctZGY2NjU1Y2I3MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx1+aT4pb8j3Aoj/p10+N9UoMvpqvoycNGUA MvTcJS77UJw7c+vMreMw8j+7/XSOus1/2Rm7iKjTHTLTgnUZoMsglq89Fbm+SXnd scySDC8zlCHbqDchMZttik3qrRXNb+5YnNhLkhad2EKSyw9B8R4AnI02r3MoKC4Q +rRiY29UvJGXLOqhdVbkEQKRzeic2XBfxSZWdsz+lrJswbCWHOxWvxCObr4Z0haW nQ5/yhg8cK59yFYLwu9XXY6cUOHl1KmeTeV4oJcddbMztIgYg2dXbSDdJ+hN9nSQ kOeHDT4qow1dTQNwb00lmNLAwDWCKyepy5GywXBrrtoFJuQqvQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFGRzvKbqNSP4UPuYjfMHcHpRQVl6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 OGJmYTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2NTVjYjcwMjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzg4YmZhMzQ4LTFkYjQtNGMyYi04 Y2Q3LWRmNjY1NWNiNzAyMy84OGJmYTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2NTVj YjcwMjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMCOowHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID BgiUAgMGGRYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAQgHFafwb8TPup5gW69F5JEL8W/UvhUm7BDfVVq5C rUMjcCV5BGE6tUz44sTavFDBrMMSEnIW61KW1R63QrqfuFp+uJEEI2J9yF6FpaIl jkTyofc8ED2g4rh33D4JLgqWJiqEwgvKFEewIGV6++M1N+SQ1Sp8nt6+01ikMiCH NNrPUw1+fbIyZAmVDZUExKfS6aZjVz2tuYHfdnU4XcjssdmjWPlW+eHTHrs8Z+Db 1zKrNkm1m77a/eWx0lk+BFSma3zfCCWlL9RgQpVrHlo/Ko5jZX8ocpRWJSPhwQQd QWm38GaAPSf2jtu0oG5JPkkfqGdh1NW07LGmkiCQiWypJw== -----END CERTIFICATE-----Generated at Thu Aug 7 02:08:20 2025 by rpki-client