$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer File: d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer (raw, json) Hash identifier: 0TbxBnqoKW21Mwhhmkl/mBPoM3tG5C+UgdrBtxjX1Qg= Subject key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ABF6D32A21FE448E40DEA7700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Aug 2025 19:20:11 +0000 Certificate not after: Sun 07 Nov 2027 20:20:11 +0000 Subordinate resources: AS: 2581 IP: 161.203.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:6d:32:a2:1f:e4:48:e4:0d:ea:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 4 19:20:11 2025 GMT Not After : Nov 7 20:20:11 2027 GMT Subject: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:38:f7:cd:78:99:31:86:e3:c1:3f:dc:1d: 2c:34:8e:cf:ac:16:d3:c3:40:62:b1:f1:dd:0e:72: 86:92:9c:58:1a:78:9f:3e:75:ec:2d:7b:b7:73:75: 19:09:c8:4c:b2:30:7a:d7:ed:ea:0e:19:1b:f3:e3: 9c:8a:b4:af:01:5b:dd:04:87:3e:64:90:08:37:ab: 83:48:8d:7e:b2:43:ac:85:e6:c4:7c:ba:f0:ff:10: b0:ec:dc:9f:dd:89:fc:79:da:6b:4b:3c:11:11:37: 53:f5:a6:65:92:96:f0:7c:84:43:05:2b:ab:71:32: 90:fa:42:c6:61:8a:75:11:08:e3:ca:b8:2e:5f:a7: 78:f9:ad:b1:a3:1b:0d:f9:13:cf:a6:06:59:31:1b: f3:01:de:35:34:63:16:61:4f:3c:f4:e3:cb:eb:e1: 32:6f:93:38:0b:38:20:fe:66:a3:8f:7e:c1:0e:1c: d3:94:52:c0:9a:1e:f3:b3:8c:36:7a:e5:4f:34:4c: 87:ee:60:48:79:27:89:92:d2:f5:58:4b:4e:d1:4e: 4a:4b:91:4f:70:cd:00:86:3c:88:83:c3:3b:0c:a0: d5:e0:c2:01:97:b4:43:4f:00:57:53:3b:64:90:11: 7e:95:3d:ee:96:7d:da:16:d8:37:23:a7:e0:9e:af: b0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 161.203.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2581 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c2:bf:df:82:ef:1e:b7:7a:f1:d1:b5:f6:39:88:a2:0b:b0: 50:8e:d7:67:57:02:38:4d:dc:12:c3:5d:e1:53:f1:70:c3:23: b7:dd:d8:ca:fb:55:d0:aa:4d:4f:a6:55:82:6f:8b:b5:6a:da: c8:bb:53:3d:59:ac:d9:99:be:c4:04:54:14:ed:98:85:d5:70: af:a9:e2:0d:ef:3f:41:d8:54:dc:56:10:da:a4:bf:7d:1c:5d: 42:ab:5e:5e:0a:27:21:1f:1a:dc:6b:4b:dd:3f:ef:9f:81:75: 5d:d2:b9:ae:37:c5:30:1e:17:fa:a1:d8:e9:38:05:17:62:02: 7e:8e:b9:0d:cf:9c:55:66:c6:6e:fc:54:70:e2:b3:50:a1:b8: 35:3c:49:e2:54:26:f1:58:e3:cd:57:93:3f:39:29:f5:07:5e: a0:33:8a:e1:31:47:3d:bf:f7:b0:76:c7:96:9f:65:b4:61:1a: 7c:90:1d:20:a6:32:57:fd:e5:70:70:12:d4:6a:94:19:10:57: 8d:17:e9:1c:49:52:fc:98:bb:89:b5:d6:d1:92:82:d6:90:4d: cc:24:51:e4:3a:5a:77:41:df:98:ca:2e:c2:f5:e7:67:8f:23: 6e:14:3c:ab:81:cf:27:8c:79:97:36:07:3a:2e:3e:1a:11:2c: 8d:0b:45:6b -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEq/bTKiH+RI5A3qdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNDE5MjAxMVoXDTI3MTEwNzIwMjAxMVowLzEtMCsGA1UEAxMk ZDBmOWJmNDEtMzljZC00ZmM1LTk2N2MtZDJhNGFiMGQ5YzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwg49814mTGG48E/3B0sNI7PrBbTw0BisfHd DnKGkpxYGnifPnXsLXu3c3UZCchMsjB61+3qDhkb8+OcirSvAVvdBIc+ZJAIN6uD SI1+skOshebEfLrw/xCw7Nyf3Yn8edprSzwRETdT9aZlkpbwfIRDBSurcTKQ+kLG YYp1EQjjyrguX6d4+a2xoxsN+RPPpgZZMRvzAd41NGMWYU889OPL6+Eyb5M4Czgg /majj37BDhzTlFLAmh7zs4w2euVPNEyH7mBIeSeJktL1WEtO0U5KS5FPcM0AhjyI g8M7DKDV4MIBl7RDTwBXUztkkBF+lT3uln3aFtg3I6fgnq+wtQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFBQP6iYh6b/H7HY6IAoOTBR4a2oIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k MGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIwZDljODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2QwZjliZjQxLTM5Y2QtNGZjNS05 NjdjLWQyYTRhYjBkOWM4My9kMGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIw ZDljODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwChyzAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIK FTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBLwr/fgu8et3rx0bX2OYiiC7BQjtdnVwI4TdwSw13hU/FwwyO3 3djK+1XQqk1PplWCb4u1atrIu1M9WazZmb7EBFQU7ZiF1XCvqeIN7z9B2FTcVhDa pL99HF1Cq15eCichHxrca0vdP++fgXVd0rmuN8UwHhf6odjpOAUXYgJ+jrkNz5xV ZsZu/FRw4rNQobg1PEniVCbxWOPNV5M/OSn1B16gM4rhMUc9v/ewdseWn2W0YRp8 kB0gpjJX/eVwcBLUapQZEFeNF+kcSVL8mLuJtdbRkoLWkE3MJFHkOlp3Qd+Yyi7C 9ednjyNuFDyrgc8njHmXNgc6Lj4aESyNC0Vr -----END CERTIFICATE-----Generated at Wed Nov 5 01:11:17 2025 by rpki-client