$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1.cer File: debe33c0-a52c-4362-ae80-4f1fc15922a1.cer (raw, json) Hash identifier: yPpES5PMQKW75k57Saa70VGHG2kCC5uUPK3sP9lDmGM= Subject key identifier: 02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B52C051A113CD121683932000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Sep 2025 13:51:29 +0000 Certificate not after: Thu 30 Dec 2027 14:51:29 +0000 Subordinate resources: AS: 21941 AS: 54034 IP: 198.17.178.0/24 IP: 198.62.239.0/24 IP: 2620:10d:b000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:c0:51:a1:13:cd:12:16:83:93:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 26 13:51:29 2025 GMT Not After : Dec 30 14:51:29 2027 GMT Subject: CN=debe33c0-a52c-4362-ae80-4f1fc15922a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:97:03:30:e1:32:f0:68:9d:40:ab:35:a3: 14:e6:ea:df:50:ee:b0:0d:59:4e:ee:c4:63:45:dd: 7e:4d:1e:f4:cb:8f:cf:08:dd:4e:8c:61:4b:16:3c: ea:31:c7:8f:95:c5:1c:de:94:83:46:93:a6:98:5b: 32:fe:eb:12:d7:0d:a6:a7:a1:9a:2f:66:60:ab:44: 20:78:72:b4:21:94:f1:40:5a:58:be:ba:78:a2:1f: 7c:aa:95:a5:38:60:07:64:2b:88:51:26:48:36:c2: 31:29:f5:9f:f9:3d:2c:f9:ed:03:18:fb:91:3e:c9: 57:8f:a9:85:7f:cf:ad:0a:26:a3:10:76:ad:0d:ee: 0f:df:b0:23:2a:e3:d8:78:f3:17:6d:8e:68:7d:94: d0:28:6b:64:8e:3b:ba:74:05:13:63:cb:87:18:50: f3:4a:6f:49:62:86:98:75:c4:a9:15:67:ff:32:c2: 6f:15:20:77:38:f0:fc:9d:a9:eb:9d:17:4e:e7:bb: b2:5c:72:81:5f:53:1d:fc:79:5b:e1:db:6e:77:22: b4:5e:75:c4:af:25:b5:17:48:a0:07:3e:8d:ec:87: 7e:ae:42:65:13:f5:b5:6d:f6:55:5c:b4:65:44:44: af:9f:c6:3d:a3:60:0a:95:d3:19:e3:f0:c2:2f:c2: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:82:39:17:60:8D:38:84:E7:DE:6C:0E:F1:9F:63:3E:50:CA:6C:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/debe33c0-a52c-4362-ae80-4f1fc15922a1/debe33c0-a52c-4362-ae80-4f1fc15922a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 198.17.178.0/24 198.62.239.0/24 IPv6: 2620:10d:b000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21941 54034 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ae:b8:58:9c:36:36:36:43:9f:2b:b2:6a:12:03:b2:cd:6a: b1:f1:00:dd:46:b9:a0:a6:c7:09:77:2c:fd:05:fe:a5:3d:b1: 59:8b:e2:44:e9:15:5f:db:9c:aa:31:13:58:99:ba:62:92:91: 96:d9:63:fc:91:e8:ed:72:17:1e:3e:66:5b:8c:2e:52:a7:2c: 65:a7:53:0b:d3:b7:96:f5:45:95:5d:d0:29:29:75:84:cd:ab: f1:aa:85:36:61:c7:fd:8f:e8:37:5d:c6:b4:cd:a9:23:7f:4c: e5:e6:57:31:2e:09:f0:32:a3:6d:60:52:bb:9c:87:a9:87:c1: 4f:2e:0e:a0:9b:f3:99:15:af:2a:2b:08:de:3f:96:39:03:ae: fb:52:00:ba:74:dc:e3:bc:d7:57:5f:6c:8b:27:de:60:88:05: 7c:4f:e2:17:9f:84:80:c7:2f:03:3d:b1:63:f5:a9:65:80:bf: 48:8a:22:be:ff:c6:85:71:48:84:8c:22:e1:0b:e4:65:0a:00: b8:c2:69:d1:3e:e5:49:03:55:18:62:ff:c0:98:1a:9d:2f:49: 61:40:07:70:9f:3a:b3:b4:ea:aa:35:7c:63:fc:36:a9:4d:5c: f5:13:1c:d2:65:c4:4e:44:d1:75:9a:1e:92:78:18:0d:3f:57: c2:43:17:80 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEtSwFGhE80SFoOTIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyNjEzNTEyOVoXDTI3MTIzMDE0NTEyOVowLzEtMCsGA1UEAxMk ZGViZTMzYzAtYTUyYy00MzYyLWFlODAtNGYxZmMxNTkyMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFSXAzDhMvBonUCrNaMU5urfUO6wDVlO7sRj Rd1+TR70y4/PCN1OjGFLFjzqMcePlcUc3pSDRpOmmFsy/usS1w2mp6GaL2Zgq0Qg eHK0IZTxQFpYvrp4oh98qpWlOGAHZCuIUSZINsIxKfWf+T0s+e0DGPuRPslXj6mF f8+tCiajEHatDe4P37AjKuPYePMXbY5ofZTQKGtkjju6dAUTY8uHGFDzSm9JYoaY dcSpFWf/MsJvFSB3OPD8nanrnRdO57uyXHKBX1Md/Hlb4dtudyK0XnXEryW1F0ig Bz6N7Id+rkJlE/W1bfZVXLRlRESvn8Y9o2AKldMZ4/DCL8LlVQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFAKCORdgjTiE595sDvGfYz5QymxVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k ZWJlMzNjMC1hNTJjLTQzNjItYWU4MC00ZjFmYzE1OTIyYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2RlYmUzM2MwLWE1MmMtNDM2Mi1h ZTgwLTRmMWZjMTU5MjJhMS9kZWJlMzNjMC1hNTJjLTQzNjItYWU4MC00ZjFmYzE1 OTIyYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBADGEbIDBADGPu8wDgQCAAIwCAMGACYgAQ2wMB4G CCsGAQUFBwEIAQH/BA8wDaALMAkCAlW1AgMA0xIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIa64WJw2NjZD nyuyahIDss1qsfEA3Ua5oKbHCXcs/QX+pT2xWYviROkVX9ucqjETWJm6YpKRltlj /JHo7XIXHj5mW4wuUqcsZadTC9O3lvVFlV3QKSl1hM2r8aqFNmHH/Y/oN13GtM2p I39M5eZXMS4J8DKjbWBSu5yHqYfBTy4OoJvzmRWvKisI3j+WOQOu+1IAunTc47zX V19siyfeYIgFfE/iF5+EgMcvAz2xY/WpZYC/SIoivv/GhXFIhIwi4QvkZQoAuMJp 0T7lSQNVGGL/wJganS9JYUAHcJ86s7TqqjV8Y/w2qU1c9RMc0mXETkTRdZoekngY DT9XwkMXgA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:06:28 2025 by rpki-client