$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer File: 8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer (raw, json) Hash identifier: 6mJA25HRfZIqQ4hURccDqSjlLtySQvbR2EDqnzMDtE0= Subject key identifier: 5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B76FB89882AD8DD062081F500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 13:19:54 +0000 Certificate not after: Wed 12 Jan 2028 14:19:54 +0000 Subordinate resources: AS: 33553 IP: 199.191.49.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:fb:89:88:2a:d8:dd:06:20:81:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 9 13:19:54 2025 GMT Not After : Jan 12 14:19:54 2028 GMT Subject: CN=8f35530c-97c7-4e60-9a44-86cf5b7715a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:6f:a5:43:b0:2c:d1:03:dc:f6:24:e6:85: 91:29:55:06:73:29:0b:2f:b4:5f:ac:6a:46:d7:68: 3f:0d:e7:f9:d4:5c:cd:9c:a5:5b:d4:4d:cb:9b:00: ee:be:1a:30:3c:9a:d6:ac:07:a3:2a:dc:73:10:c6: 8d:c2:90:d1:ff:71:68:9f:07:fd:8f:b3:c0:3d:c3: 82:17:30:59:07:15:1b:1c:83:9a:c7:0d:39:92:9a: af:63:ab:36:f8:d3:c2:56:cf:8f:a8:e6:a7:87:5f: 0e:6e:7b:ce:d9:56:02:db:6f:7e:e0:0c:5b:dd:53: 1c:2f:55:5d:25:cb:fe:a6:10:2e:e3:a5:60:83:2f: 05:fb:6b:37:fc:59:31:32:ed:ab:02:3c:a6:b6:71: 4d:d9:a9:82:41:cf:a0:51:9a:1f:99:df:27:ab:60: d8:be:b5:62:46:22:01:48:69:a3:d8:0c:88:7f:20: 39:eb:6b:28:90:f4:ab:f5:5c:6d:c5:94:c2:d2:41: 94:54:d1:14:93:92:1d:85:76:f6:f4:c2:9f:a2:1d: 03:c2:d1:fb:19:d2:a1:6f:66:0d:27:6f:4d:09:61: 3c:46:2e:8d:57:82:9b:fc:a1:e4:d2:f9:f4:d5:b7: f7:d0:29:cb:c9:ea:c8:f1:4a:32:83:48:f4:07:31: 37:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 199.191.49.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33553 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e0:22:f0:88:21:5f:4f:fa:3d:ba:32:ed:76:d6:f6:7a:ba: 10:ad:59:fa:77:1d:a9:60:11:92:0b:c2:de:4a:0c:db:bf:7e: 6e:c3:d4:ab:ea:7c:c9:5a:8f:72:0d:61:26:05:30:c6:32:f4: ba:2b:c4:bd:6c:d4:2d:04:42:25:56:c3:2a:87:0c:04:79:17: 20:ed:74:7d:e2:93:54:4e:86:22:1b:4c:45:7c:0b:75:2f:1a: c1:df:b1:8a:8d:25:8e:c8:6c:be:5f:b0:d6:81:7e:25:80:b8: de:ea:ca:7e:40:e5:af:00:be:79:cf:04:88:51:ae:ec:47:f3: aa:af:4f:9d:5d:d9:18:ec:8e:ef:f5:08:2d:5d:17:e2:17:3a: 34:5b:4a:3c:f9:a2:d4:dc:50:a2:a7:d7:42:5f:15:4c:44:23: e2:0c:80:99:05:d1:b9:5c:ec:39:44:ae:bd:a1:9a:5d:40:d0: 95:40:db:4c:7e:4e:48:ee:e9:81:cb:2f:fe:6f:e2:40:5c:46: 28:0c:76:f6:f9:e6:f5:3c:c5:88:98:3a:6d:0e:1d:71:98:c7: f3:a4:9b:b6:16:65:08:b3:37:ed:05:85:1a:72:57:a4:74:43: bd:22:c1:cf:29:45:c1:99:bc:d6:e8:dc:6b:ef:00:49:04:1b: 06:fc:4f:72 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEt2+4mIKtjdBiCB9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwOTEzMTk1NFoXDTI4MDExMjE0MTk1NFowLzEtMCsGA1UEAxMk OGYzNTUzMGMtOTdjNy00ZTYwLTlhNDQtODZjZjViNzcxNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2NvpUOwLNED3PYk5oWRKVUGcykLL7RfrGpG 12g/Def51FzNnKVb1E3LmwDuvhowPJrWrAejKtxzEMaNwpDR/3Fonwf9j7PAPcOC FzBZBxUbHIOaxw05kpqvY6s2+NPCVs+PqOanh18ObnvO2VYC229+4Axb3VMcL1Vd Jcv+phAu46Vggy8F+2s3/FkxMu2rAjymtnFN2amCQc+gUZofmd8nq2DYvrViRiIB SGmj2AyIfyA562sokPSr9VxtxZTC0kGUVNEUk5IdhXb29MKfoh0DwtH7GdKhb2YN J29NCWE8Ri6NV4Kb/KHk0vn01bf30CnLyerI8Uoyg0j0BzE3YQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFF+AereOxdf+QVM+Z11/KW5f7huMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 ZjM1NTMwYy05N2M3LTRlNjAtOWE0NC04NmNmNWI3NzE1YTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzhmMzU1MzBjLTk3YzctNGU2MC05 YTQ0LTg2Y2Y1Yjc3MTVhMi84ZjM1NTMwYy05N2M3LTRlNjAtOWE0NC04NmNmNWI3 NzE1YTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHvzEwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIMRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF/gIvCIIV9P+j26Mu121vZ6uhCtWfp3HalgEZILwt5KDNu/ fm7D1KvqfMlaj3INYSYFMMYy9LorxL1s1C0EQiVWwyqHDAR5FyDtdH3ik1ROhiIb TEV8C3UvGsHfsYqNJY7IbL5fsNaBfiWAuN7qyn5A5a8AvnnPBIhRruxH86qvT51d 2Rjsju/1CC1dF+IXOjRbSjz5otTcUKKn10JfFUxEI+IMgJkF0blc7DlErr2hml1A 0JVA20x+Tkju6YHLL/5v4kBcRigMdvb55vU8xYiYOm0OHXGYx/Okm7YWZQizN+0F hRpyV6R0Q70iwc8pRcGZvNbo3GvvAEkEGwb8T3I= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:19 2025 by rpki-client