$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f.cer File: e4579364-52ff-4f59-afc0-cd179b0ddb0f.cer (raw, json) Hash identifier: MiNv5FgUsMHcR3r3Sf0OkRR85DY0LYJ5DlNCVjYp6Oo= Subject key identifier: 5D:B7:A4:0D:79:6C:9C:C1:03:19:F5:3E:5C:0B:96:68:8E:A1:75:ED Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A86DC2879E3ECC73443B32680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/e4579364-52ff-4f59-afc0-cd179b0ddb0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Jul 2025 13:02:40 +0000 Certificate not after: Mon 18 Oct 2027 13:02:40 +0000 Subordinate resources: AS: 23443 IP: 192.64.215.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:28:79:e3:ec:c7:34:43:b3:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 15 13:02:40 2025 GMT Not After : Oct 18 13:02:40 2027 GMT Subject: CN=e4579364-52ff-4f59-afc0-cd179b0ddb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2d:63:3d:66:06:7c:f1:fe:53:46:b0:ef:72: fc:7d:e1:06:0d:f3:52:d5:bb:b5:ed:07:eb:29:41: 1a:ce:60:ae:d0:03:ef:6d:d4:ea:ba:21:2e:0b:4d: f0:32:65:1f:a7:84:6c:e1:d5:1c:7b:f9:27:97:b0: 7d:eb:77:e0:60:9c:c8:00:30:ec:c2:9e:7e:a2:f6: d5:03:45:73:35:b8:d2:ee:13:1a:6c:7a:73:db:93: 99:85:78:00:4b:57:45:92:1d:52:7e:32:92:1a:8e: 92:0a:f3:e3:3d:6c:9d:b3:74:05:83:c9:98:9c:e8: 2d:5e:04:db:90:fb:20:62:a0:da:90:8c:ba:91:ac: b6:98:d2:9c:19:a4:30:ae:3c:1e:84:14:67:41:80: 26:6d:f0:e5:58:71:12:82:56:4e:e6:c3:56:c7:27: fb:f7:e7:8f:26:54:5f:cf:da:80:5c:a8:62:70:10: 5d:a2:a9:80:2a:b5:31:3b:88:cf:63:4a:ef:76:8e: 28:b6:1e:b9:07:5d:2f:6f:2f:e1:69:47:27:8f:c8: 57:33:78:77:6b:88:3f:5c:c0:36:65:2b:d1:32:96: bd:69:44:27:d0:d4:03:4d:89:5c:af:6d:e3:77:8b: bd:4a:dd:d5:74:c8:70:b6:c0:b6:8f:90:71:cf:7b: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B7:A4:0D:79:6C:9C:C1:03:19:F5:3E:5C:0B:96:68:8E:A1:75:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e4579364-52ff-4f59-afc0-cd179b0ddb0f/e4579364-52ff-4f59-afc0-cd179b0ddb0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.64.215.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23443 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ea:2c:ee:ae:5f:13:00:72:54:45:05:6e:3c:36:af:10:fa: dc:e4:31:14:5f:c8:2e:dc:bc:20:bb:5c:e4:93:3a:c7:9e:8e: 3a:be:a7:b7:76:ce:58:b2:13:0c:5d:69:e6:4a:7b:df:58:44: c2:f7:c7:f0:84:f3:5e:b8:8d:80:ed:ac:d3:ce:18:16:2c:87: 89:a8:25:e5:70:4d:da:29:82:2d:9d:c1:b5:5a:43:3b:49:5e: 76:e4:57:a7:ab:2f:5f:50:52:2c:e0:e1:01:46:c7:af:36:cd: 47:4b:f6:bb:57:35:cd:c9:4d:a0:cf:83:27:86:bc:0b:db:1c: d1:f4:69:04:fd:9c:c3:c1:b5:05:cd:40:d6:e1:00:a8:0a:bf: a7:e8:43:3d:25:9c:05:36:e1:0a:12:ea:5b:a0:53:19:0e:83: 06:64:83:a6:5d:ef:c4:b8:8b:e1:54:b4:61:25:07:fc:99:18: 9e:02:e4:18:23:05:4d:3f:ee:66:cd:8a:1c:9e:99:23:16:b0: 23:87:2a:26:a7:63:fe:1c:ba:b8:47:f2:2c:10:8a:56:fb:a8: 2f:a8:84:fd:55:5a:fe:de:15:e8:9b:ff:dc:57:03:79:2c:5d: 7c:57:32:cb:d2:14:68:6f:ee:e2:49:e9:72:69:3b:dd:b5:75: c6:0d:dc:d1 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEqG3Ch54+zHNEOzJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNTEzMDI0MFoXDTI3MTAxODEzMDI0MFowLzEtMCsGA1UEAxMk ZTQ1NzkzNjQtNTJmZi00ZjU5LWFmYzAtY2QxNzliMGRkYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S1jPWYGfPH+U0aw73L8feEGDfNS1bu17Qfr KUEazmCu0APvbdTquiEuC03wMmUfp4Rs4dUce/knl7B963fgYJzIADDswp5+ovbV A0VzNbjS7hMabHpz25OZhXgAS1dFkh1SfjKSGo6SCvPjPWyds3QFg8mYnOgtXgTb kPsgYqDakIy6kay2mNKcGaQwrjwehBRnQYAmbfDlWHESglZO5sNWxyf79+ePJlRf z9qAXKhicBBdoqmAKrUxO4jPY0rvdo4oth65B10vby/haUcnj8hXM3h3a4g/XMA2 ZSvRMpa9aUQn0NQDTYlcr23jd4u9St3VdMhwtsC2j5Bxz3tg0wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFF23pA15bJzBAxn1PlwLlmiOoXXtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l NDU3OTM2NC01MmZmLTRmNTktYWZjMC1jZDE3OWIwZGRiMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2U0NTc5MzY0LTUyZmYtNGY1OS1h ZmMwLWNkMTc5YjBkZGIwZi9lNDU3OTM2NC01MmZmLTRmNTktYWZjMC1jZDE3OWIw ZGRiMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAQNcwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC W5MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYOos7q5fEwByVEUFbjw2rxD63OQxFF/ILty8ILtc5JM6x56O Or6nt3bOWLITDF1p5kp731hEwvfH8ITzXriNgO2s084YFiyHiagl5XBN2imCLZ3B tVpDO0leduRXp6svX1BSLODhAUbHrzbNR0v2u1c1zclNoM+DJ4a8C9sc0fRpBP2c w8G1Bc1A1uEAqAq/p+hDPSWcBTbhChLqW6BTGQ6DBmSDpl3vxLiL4VS0YSUH/JkY ngLkGCMFTT/uZs2KHJ6ZIxawI4cqJqdj/hy6uEfyLBCKVvuoL6iE/VVa/t4V6Jv/ 3FcDeSxdfFcyy9IUaG/u4knpcmk73bV1xg3c0Q== -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:25 2025 by rpki-client