$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer File: cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer (raw, json) Hash identifier: n9TekP9QWJKPC0KwIQACvafEKVHme9sAbLxkMN4YjKA= Subject key identifier: 19:0C:6C:3F:E1:86:5B:83:98:63:2F:6F:87:7F:E8:5A:9A:3E:2B:42 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B1231AF25E1135E42FFF39018 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 10:52:21 +0000 Certificate not after: Tue 07 Dec 2027 11:52:21 +0000 Subordinate resources: AS: 400032 IP: 165.140.24.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:31:af:25:e1:13:5e:42:ff:f3:90:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 3 10:52:21 2025 GMT Not After : Dec 7 11:52:21 2027 GMT Subject: CN=cf90d7bf-dad6-4851-ac33-f1ca8b32ec68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:19:0d:2d:57:2a:e1:3f:da:34:36:a6:fe:46: 76:5f:81:fa:53:a5:50:68:7d:6f:ba:da:8c:62:a3: b4:d2:ec:d3:69:5e:92:56:96:fc:4a:c5:e5:64:d6: 5b:d9:49:cd:ca:dc:d2:d0:0d:da:63:ca:e5:64:72: e2:e7:f4:df:6f:ae:18:a0:a8:2f:84:69:eb:4b:37: f0:e3:3d:73:db:78:4e:92:4b:8e:53:4d:ee:cd:36: 7b:a0:88:65:33:50:96:d4:80:11:ad:a2:e5:e6:e4: 00:cf:f5:be:7a:71:b0:f9:68:0a:d4:0c:8a:18:42: f3:9a:82:61:a3:e3:d8:23:dc:d6:63:3c:a6:cf:b1: c1:61:5e:fa:f4:56:93:6f:b2:f9:bf:c5:c4:4a:fd: 44:56:58:98:7c:f3:2a:93:52:d1:7d:f0:bf:18:c6: b5:5c:5f:ae:64:a4:bc:02:a5:73:3a:f3:18:19:38: 51:5d:94:68:d1:a6:5b:33:38:5b:14:1f:16:fd:a6: 6e:bc:23:38:76:40:a8:38:03:e9:d0:01:3f:69:04: 2d:8e:ff:53:8f:1c:38:b9:41:79:9a:d1:99:8e:6c: cf:69:a3:e4:17:dc:06:91:b1:d9:d0:44:96:b8:60: e9:49:15:71:1a:79:5a:03:9f:d0:7b:57:27:7b:60: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0C:6C:3F:E1:86:5B:83:98:63:2F:6F:87:7F:E8:5A:9A:3E:2B:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 165.140.24.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400032 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:1e:e0:83:a1:29:eb:d4:5d:ca:48:c1:0c:38:49:82:cb:14: 7b:d8:29:51:b2:c9:10:72:63:cb:4c:98:6f:26:96:28:76:e6: b5:c2:4b:23:b7:ad:d5:3c:cd:26:0c:79:b2:6f:72:19:d8:46: ed:69:8e:79:4e:73:af:0f:5c:7a:c6:cf:9a:c7:35:74:3a:ea: 4a:60:db:cc:24:ab:b6:83:0c:85:6a:49:71:8d:b5:e9:8c:27: 45:b5:25:b5:33:7e:6a:a1:a1:fb:7d:2e:5f:e6:28:85:40:89: 94:3f:68:5a:59:c0:30:b4:f3:91:f5:23:06:11:8a:48:76:5b: eb:80:a7:7c:fa:e0:48:95:e6:59:cd:27:43:28:3f:34:eb:97: 78:f5:68:51:5e:e5:ca:92:88:5d:c2:72:71:ba:45:66:0b:41: 48:47:44:de:3e:93:15:55:47:1c:51:6a:0d:91:15:96:a8:75: 0b:d7:56:5d:c3:9e:4a:9c:a5:d7:a6:db:7d:d6:cc:f1:1c:a3: b5:75:90:d6:9e:11:b5:7a:4b:77:c9:c5:33:42:bc:b2:a5:6f: dd:df:09:f9:fd:b2:0f:97:2d:90:c4:76:c7:5b:91:99:47:bd: 0d:fb:78:62:39:ec:a8:bd:f1:37:cf:92:2d:70:08:4a:1e:4c: 9a:73:00:7d -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsSMa8l4RNeQv/zkBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwMzEwNTIyMVoXDTI3MTIwNzExNTIyMVowLzEtMCsGA1UEAxMk Y2Y5MGQ3YmYtZGFkNi00ODUxLWFjMzMtZjFjYThiMzJlYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhkNLVcq4T/aNDam/kZ2X4H6U6VQaH1vutqM YqO00uzTaV6SVpb8SsXlZNZb2UnNytzS0A3aY8rlZHLi5/Tfb64YoKgvhGnrSzfw 4z1z23hOkkuOU03uzTZ7oIhlM1CW1IARraLl5uQAz/W+enGw+WgK1AyKGELzmoJh o+PYI9zWYzymz7HBYV769FaTb7L5v8XESv1EVliYfPMqk1LRffC/GMa1XF+uZKS8 AqVzOvMYGThRXZRo0aZbMzhbFB8W/aZuvCM4dkCoOAPp0AE/aQQtjv9Tjxw4uUF5 mtGZjmzPaaPkF9wGkbHZ0ESWuGDpSRVxGnlaA5/Qe1cne2AC2wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBkMbD/hhluDmGMvb4d/6FqaPitCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j ZjkwZDdiZi1kYWQ2LTQ4NTEtYWMzMy1mMWNhOGIzMmVjNjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NmOTBkN2JmLWRhZDYtNDg1MS1h YzMzLWYxY2E4YjMyZWM2OC9jZjkwZDdiZi1kYWQ2LTQ4NTEtYWMzMy1mMWNhOGIz MmVjNjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKljBgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhqgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKce4IOhKevUXcpIwQw4SYLLFHvYKVGyyRByY8tMmG8mlih2 5rXCSyO3rdU8zSYMebJvchnYRu1pjnlOc68PXHrGz5rHNXQ66kpg28wkq7aDDIVq SXGNtemMJ0W1JbUzfmqhoft9Ll/mKIVAiZQ/aFpZwDC085H1IwYRikh2W+uAp3z6 4EiV5lnNJ0MoPzTrl3j1aFFe5cqSiF3CcnG6RWYLQUhHRN4+kxVVRxxRag2RFZao dQvXVl3Dnkqcpdem233WzPEco7V1kNaeEbV6S3fJxTNCvLKlb93fCfn9sg+XLZDE dsdbkZlHvQ37eGI57Ki98TfPki1wCEoeTJpzAH0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:41:38 2025 by rpki-client