$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bd948c7-a2d8-47c0-a24c-a2d08f5fcbe7.cer File: 9bd948c7-a2d8-47c0-a24c-a2d08f5fcbe7.cer (raw, json) Hash identifier: 7UAICnU3oU+zF+b63cGnjMxMn/RZjGnokypVmj53yiM= Subject key identifier: BF:C4:8E:A7:ED:CC:B3:26:EF:6E:E0:83:11:3F:CA:2B:29:A2:9B:41 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B77FB837BEFEDB37861AED000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bd948c7-a2d8-47c0-a24c-a2d08f5fcbe7/9bd948c7-a2d8-47c0-a24c-a2d08f5fcbe7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bd948c7-a2d8-47c0-a24c-a2d08f5fcbe7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 21:55:40 +0000 Certificate not after: Wed 12 Jan 2028 22:55:40 +0000 Subordinate resources: AS: 17053 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:fb:83:7b:ef:ed:b3:78:61:ae:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 9 21:55:40 2025 GMT Not After : Jan 12 22:55:40 2028 GMT Subject: CN=9bd948c7-a2d8-47c0-a24c-a2d08f5fcbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:c3:23:57:8a:21:cf:7c:a7:a3:72:c4:72: 31:e0:df:59:76:e8:f5:ec:da:93:ca:be:e1:4b:d1: 0d:65:7b:af:b1:ce:e8:e5:97:31:97:33:4c:78:7e: 38:99:73:b8:bd:9d:7b:aa:a8:df:ed:7e:95:fe:80: d1:5a:73:ff:77:eb:f0:3f:8a:ab:46:18:aa:87:5d: fb:25:ee:b9:9f:3d:9b:3b:bc:c9:7b:8b:da:12:64: cb:41:75:f3:89:db:08:fa:96:4e:24:f3:86:a5:d4: db:bd:ee:ff:4b:f2:fe:63:57:9d:dd:04:a6:3a:aa: 90:89:10:7f:83:b3:a6:6d:64:78:25:24:5d:29:6a: 3b:60:65:1d:17:a4:ae:ca:94:8a:07:a3:ea:5e:bf: b5:55:b4:00:d1:6b:7a:0d:82:40:e2:7e:ac:35:b0: 7f:d0:36:17:13:1a:8d:9a:38:7e:2f:76:dd:5b:2d: 3a:e2:60:d5:6a:11:a4:a4:be:36:ff:21:31:fb:26: 53:7b:e9:6c:8a:d1:6f:c1:43:c3:60:0a:96:92:9d: 75:9b:61:ca:f4:15:b5:9c:42:18:de:f7:64:ce:c3: 02:c1:7b:df:04:df:d4:c1:1d:60:24:c3:37:e4:15: 02:16:0b:bd:96:03:fa:aa:2f:7d:a3:78:ad:b8:9e: 51:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C4:8E:A7:ED:CC:B3:26:EF:6E:E0:83:11:3F:CA:2B:29:A2:9B:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bd948c7-a2d8-47c0-a24c-a2d08f5fcbe7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bd948c7-a2d8-47c0-a24c-a2d08f5fcbe7/9bd948c7-a2d8-47c0-a24c-a2d08f5fcbe7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 17053 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6f:ab:72:fa:37:32:01:6d:f7:08:83:68:42:f5:5c:99:8e: f7:97:f4:1f:4b:f3:3d:3e:5c:36:54:e5:f1:d6:2a:25:02:01: a5:51:fd:26:30:5d:4c:de:76:08:27:d1:28:b7:d3:8b:50:7c: 34:6e:cf:fa:13:d5:3b:10:aa:8b:ca:e9:b1:29:52:26:94:f3: fa:f5:e0:aa:96:c5:21:34:46:d4:e8:a0:2f:cb:75:98:b3:82: 58:38:52:ea:bd:54:ec:54:c9:c4:98:db:d4:5b:72:10:1a:7c: a5:a5:6f:99:d5:c7:03:24:cf:5d:35:3a:b6:1f:e8:de:46:cf: b4:d9:8e:1a:7e:3e:3f:98:00:b9:ea:a2:a8:70:9f:1d:61:8a: 17:1c:86:3c:61:9d:cb:93:29:78:67:42:48:ba:3a:24:bd:21: db:88:8c:ad:61:9e:2a:b8:a3:92:9b:98:45:e9:2c:ea:0c:90: 62:9a:62:2e:70:1d:61:30:18:63:4c:f8:a8:8c:be:9c:22:64: e7:d9:3e:b2:d5:40:9d:61:7a:b2:37:d6:40:a1:a3:ec:4b:9d: f9:02:88:61:1c:0a:85:6f:6f:5c:f9:61:4a:f9:a3:f0:9b:67: 01:f8:da:3e:58:68:4e:15:41:f7:0d:8d:fd:76:aa:9a:49:1d: 24:aa:32:04 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEt3+4N77+2zeGGu0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwOTIxNTU0MFoXDTI4MDExMjIyNTU0MFowLzEtMCsGA1UEAxMk OWJkOTQ4YzctYTJkOC00N2MwLWEyNGMtYTJkMDhmNWZjYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPjDI1eKIc98p6NyxHIx4N9Zduj17NqTyr7h S9ENZXuvsc7o5ZcxlzNMeH44mXO4vZ17qqjf7X6V/oDRWnP/d+vwP4qrRhiqh137 Je65nz2bO7zJe4vaEmTLQXXzidsI+pZOJPOGpdTbve7/S/L+Y1ed3QSmOqqQiRB/ g7OmbWR4JSRdKWo7YGUdF6SuypSKB6PqXr+1VbQA0Wt6DYJA4n6sNbB/0DYXExqN mjh+L3bdWy064mDVahGkpL42/yEx+yZTe+lsitFvwUPDYAqWkp11m2HK9BW1nEIY 3vdkzsMCwXvfBN/UwR1gJMM35BUCFgu9lgP6qi99o3ituJ5RewIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFL/EjqftzLMm727ggxE/yispoptBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 YmQ5NDhjNy1hMmQ4LTQ3YzAtYTI0Yy1hMmQwOGY1ZmNiZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzliZDk0OGM3LWEyZDgtNDdjMC1h MjRjLWEyZDA4ZjVmY2JlNy85YmQ5NDhjNy1hMmQ4LTQ3YzAtYTI0Yy1hMmQwOGY1 ZmNiZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICQp0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmW+rcvo3MgFt9wiDaEL1XJmO95f0 H0vzPT5cNlTl8dYqJQIBpVH9JjBdTN52CCfRKLfTi1B8NG7P+hPVOxCqi8rpsSlS JpTz+vXgqpbFITRG1OigL8t1mLOCWDhS6r1U7FTJxJjb1FtyEBp8paVvmdXHAyTP XTU6th/o3kbPtNmOGn4+P5gAueqiqHCfHWGKFxyGPGGdy5MpeGdCSLo6JL0h24iM rWGeKrijkpuYReks6gyQYppiLnAdYTAYY0z4qIy+nCJk59k+stVAnWF6sjfWQKGj 7Eud+QKIYRwKhW9vXPlhSvmj8JtnAfjaPlhoThVB9w2N/XaqmkkdJKoyBA== -----END CERTIFICATE-----Generated at Mon Oct 20 03:18:17 2025 by rpki-client