$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.cer (raw, json) Hash identifier: qHc7oPW1cUzmymU9kiysAhlUf1/PQhvzt23zv96ALOk= Subject key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A7A02E1FA4BE350AAFA7C3F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Jul 2025 22:35:11 +0000 Certificate not after: Wed 13 Oct 2027 22:35:11 +0000 Subordinate resources: AS: 39943 IP: 198.206.180.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:02:e1:fa:4b:e3:50:aa:fa:7c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 10 22:35:11 2025 GMT Not After : Oct 13 22:35:11 2027 GMT Subject: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1d:74:40:4e:90:ff:52:05:17:fe:43:97:8c: 47:d6:03:f7:42:e4:4a:40:7f:8c:96:41:7b:83:3a: 3b:a5:e9:bc:bb:24:5a:9f:c5:2c:1b:30:a9:b7:ee: 54:76:0f:60:0d:74:8e:a6:b4:66:f7:b5:a3:1c:1e: 39:ef:08:94:96:54:5d:b7:40:4b:b5:50:8e:1f:c6: 1f:31:75:b1:cd:67:ca:8a:24:83:2a:d4:b8:a7:21: c7:f4:32:8b:9b:3e:6f:aa:c0:72:a5:9d:99:f1:4f: 76:c2:7a:34:71:23:fd:3c:7d:6c:01:27:2e:2c:1b: 15:29:ec:61:26:c6:d9:62:1b:16:f0:f3:4b:41:b3: e1:2b:f2:2f:67:79:8e:f9:5e:1d:a6:dc:95:95:ab: c4:bc:e3:e5:3c:0e:16:c8:57:c1:ba:64:2d:12:14: b1:69:d8:9c:88:75:25:cd:43:8d:f3:39:39:95:43: 11:35:4b:da:cd:a9:5c:b0:c6:cc:58:01:e9:29:6c: 69:ea:1a:86:19:dd:75:33:48:5a:a6:4c:17:82:f8: 80:bb:24:18:2a:75:0c:8c:49:ae:e9:20:43:fb:f9: 88:94:e6:2c:ac:29:00:2e:81:f3:5f:b0:77:a4:e0: c6:5b:81:24:21:c2:c8:52:18:3d:e7:14:a0:00:c5: 2f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 198.206.180.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39943 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bb:cf:73:33:3d:49:a2:80:14:33:7e:d7:5e:ae:aa:97:0e: 2e:95:a0:1f:97:6f:ec:6b:8d:5a:66:24:b9:57:d8:ab:73:84: 6b:1e:34:fd:e5:14:b0:80:3d:71:7c:ce:f2:18:81:84:59:72: 9a:2b:d5:41:ae:5e:89:5a:b5:0d:0f:a6:40:03:5f:c7:48:48: b1:3a:dc:d8:bd:b3:29:8f:4a:45:aa:1e:7c:8a:49:8b:1e:50: f6:24:ee:01:f0:d7:56:2f:de:d2:bc:05:12:18:e1:f6:d3:52: 8e:39:d9:0a:58:80:5c:6b:f9:1b:4c:9e:f4:af:a3:22:aa:2c: b9:85:02:a1:0e:37:38:ac:0f:16:a4:02:3e:54:39:b4:e9:a4: ff:11:75:bd:51:bf:36:b6:54:22:71:66:5d:52:61:e7:ce:79: c3:a7:1a:31:87:9a:b3:c7:38:a3:f3:97:2a:94:c3:5c:77:ad: 25:a7:2a:94:fa:35:31:3c:72:63:80:e7:62:9d:ff:7f:a2:4f: 5f:bc:4d:e3:8f:8b:d6:76:98:f5:7d:82:0f:d9:2b:be:56:ca: d0:80:e6:07:8a:03:35:62:78:d6:48:e4:0f:25:a6:15:ae:97: 44:55:20:a4:a1:de:a5:15:79:98:ab:f6:bb:29:ad:53:65:10: cf:12:32:bb -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEp6AuH6S+NQqvp8PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxMDIyMzUxMVoXDTI3MTAxMzIyMzUxMVowLzEtMCsGA1UEAxMk OWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVjYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih10QE6Q/1IFF/5Dl4xH1gP3QuRKQH+MlkF7 gzo7pem8uyRan8UsGzCpt+5Udg9gDXSOprRm97WjHB457wiUllRdt0BLtVCOH8Yf MXWxzWfKiiSDKtS4pyHH9DKLmz5vqsBypZ2Z8U92wno0cSP9PH1sAScuLBsVKexh JsbZYhsW8PNLQbPhK/IvZ3mO+V4dptyVlavEvOPlPA4WyFfBumQtEhSxadiciHUl zUON8zk5lUMRNUvazalcsMbMWAHpKWxp6hqGGd11M0hapkwXgviAuyQYKnUMjEmu 6SBD+/mIlOYsrCkALoHzX7B3pODGW4EkIcLIUhg95xSgAMUvHwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMaIH5I2TeeW1KlAg8ViVnfunm8mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzlhM2JjZjQzLTcwMzMtNDhlOC05 NzVlLWY5MDkxM2I1Y2JhYi85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNi NWNiYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGzrQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJwHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABm7z3MzPUmigBQzftderqqXDi6VoB+Xb+xrjVpmJLlX2Ktz hGseNP3lFLCAPXF8zvIYgYRZcpor1UGuXolatQ0PpkADX8dISLE63Ni9symPSkWq HnyKSYseUPYk7gHw11Yv3tK8BRIY4fbTUo452QpYgFxr+RtMnvSvoyKqLLmFAqEO NzisDxakAj5UObTppP8Rdb1Rvza2VCJxZl1SYefOecOnGjGHmrPHOKPzlyqUw1x3 rSWnKpT6NTE8cmOA52Kd/3+iT1+8TeOPi9Z2mPV9gg/ZK75WytCA5geKAzVieNZI 5A8lphWul0RVIKSh3qUVeZir9rsprVNlEM8SMrs= -----END CERTIFICATE-----Generated at Wed Aug 6 19:35:29 2025 by rpki-client