$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer File: bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer (raw, json) Hash identifier: 4TlccztfhBvwfdiZjpwHg8QsP7oGAE1D4WYYYOmTylw= Subject key identifier: B7:B0:8A:4C:E3:E0:AA:1A:06:48:C7:D4:A1:EE:3C:B4:4B:A8:A0:7B Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B78A676209CB80CD3E45C3D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 03:40:06 +0000 Certificate not after: Thu 13 Jan 2028 04:40:06 +0000 Subordinate resources: AS: 401409 IP: 142.249.95.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:a6:76:20:9c:b8:0c:d3:e4:5c:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 10 03:40:06 2025 GMT Not After : Jan 13 04:40:06 2028 GMT Subject: CN=bc8c9e11-62a7-43d6-880c-f7147230bfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:28:d6:df:70:32:79:0d:c8:84:bf:3f:15:0a: 84:6c:d2:d6:80:b0:73:77:a5:91:6c:ed:a1:ef:fc: c4:6f:09:d2:fb:b8:d0:fe:d8:9d:9e:ca:87:af:92: c3:e3:e2:f3:10:4e:80:a6:0a:25:90:fd:ff:b3:d7: 39:11:e1:83:89:1c:0d:2c:7d:db:3e:1d:4a:d6:f6: 18:d9:43:c5:56:a0:cc:a6:7e:9c:10:5f:df:1f:5d: f0:95:a2:1d:46:77:d4:26:8e:99:2a:64:ab:df:2d: bb:74:9f:21:c9:2c:24:9b:48:7e:2a:90:aa:b5:40: 70:c3:51:80:ce:e7:78:60:bb:f9:c5:c9:79:f9:2e: 9c:1c:f2:2e:94:c6:51:92:cf:5d:46:14:09:58:a2: ab:19:76:1f:0c:c3:34:16:b2:37:27:76:16:81:38: e5:58:72:18:21:8e:69:aa:a8:5b:ea:38:aa:36:2c: d7:9d:6c:8c:78:4d:7b:80:f8:81:f7:2b:7e:95:58: ef:02:4d:97:27:c7:85:bc:02:45:78:a4:42:0d:99: 72:4d:3e:81:31:10:af:c3:7e:c6:ef:e0:16:59:3a: 7b:ff:fd:92:a8:40:54:44:d4:34:2d:f5:fb:26:ba: d4:98:0c:df:c1:be:72:20:a2:ca:ad:b7:2c:5e:80: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B0:8A:4C:E3:E0:AA:1A:06:48:C7:D4:A1:EE:3C:B4:4B:A8:A0:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 142.249.95.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401409 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:20:1e:75:c0:2d:51:f7:5f:1d:4b:aa:a0:16:f9:49:59:28: 46:c9:9a:de:ac:bf:d2:67:6a:b1:99:64:32:12:fb:99:78:2f: 87:c2:b0:63:6b:20:da:43:c2:77:84:41:1d:94:22:14:2b:11: 43:d4:ce:1e:04:40:dd:82:c2:15:f9:3c:87:30:37:67:05:41: 8e:57:d5:a1:ed:3c:94:aa:65:d7:c9:76:94:dd:7c:75:65:9e: ab:fc:b2:d5:4c:d1:db:64:d0:62:b9:2d:27:b2:b3:3d:3c:6f: ef:a8:9b:a3:75:4e:a2:36:31:15:24:13:19:4e:d6:21:e3:0a: cf:d1:9c:cc:ea:c3:2e:7a:49:a1:06:7c:18:f1:f4:68:7c:88: ae:3f:62:f1:06:ac:86:49:a4:a1:11:80:0c:0d:49:ee:e2:69: a2:98:de:1f:7f:aa:57:7e:fc:e5:1b:4a:31:ec:88:e8:57:81: b6:bc:b1:89:07:b6:0b:b7:a3:f9:aa:b0:e6:19:9d:f3:35:01: 97:c3:c0:53:d3:75:55:67:0b:29:42:a3:14:5e:76:e6:42:38: ee:15:b0:c6:89:b9:f2:9d:d2:06:a8:29:3a:99:fb:87:bc:e1: 55:11:b4:29:f4:e7:7d:4e:74:15:f2:10:9a:a9:fb:a5:5d:47: 03:27:e2:4c -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEt4pnYgnLgM0+RcPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAxMDAzNDAwNloXDTI4MDExMzA0NDAwNlowLzEtMCsGA1UEAxMk YmM4YzllMTEtNjJhNy00M2Q2LTg4MGMtZjcxNDcyMzBiZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgijW33AyeQ3IhL8/FQqEbNLWgLBzd6WRbO2h 7/zEbwnS+7jQ/tidnsqHr5LD4+LzEE6ApgolkP3/s9c5EeGDiRwNLH3bPh1K1vYY 2UPFVqDMpn6cEF/fH13wlaIdRnfUJo6ZKmSr3y27dJ8hySwkm0h+KpCqtUBww1GA zud4YLv5xcl5+S6cHPIulMZRks9dRhQJWKKrGXYfDMM0FrI3J3YWgTjlWHIYIY5p qqhb6jiqNizXnWyMeE17gPiB9yt+lVjvAk2XJ8eFvAJFeKRCDZlyTT6BMRCvw37G 7+AWWTp7//2SqEBURNQ0LfX7JrrUmAzfwb5yIKLKrbcsXoB9swIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLewikzj4KoaBkjH1KHuPLRLqKB7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i YzhjOWUxMS02MmE3LTQzZDYtODgwYy1mNzE0NzIzMGJmYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2JjOGM5ZTExLTYyYTctNDNkNi04 ODBjLWY3MTQ3MjMwYmZhMC9iYzhjOWUxMS02MmE3LTQzZDYtODgwYy1mNzE0NzIz MGJmYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+V8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiABMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG0gHnXALVH3Xx1LqqAW+UlZKEbJmt6sv9JnarGZZDIS+5l4 L4fCsGNrINpDwneEQR2UIhQrEUPUzh4EQN2CwhX5PIcwN2cFQY5X1aHtPJSqZdfJ dpTdfHVlnqv8stVM0dtk0GK5LSeysz08b++om6N1TqI2MRUkExlO1iHjCs/RnMzq wy56SaEGfBjx9Gh8iK4/YvEGrIZJpKERgAwNSe7iaaKY3h9/qld+/OUbSjHsiOhX gba8sYkHtgu3o/mqsOYZnfM1AZfDwFPTdVVnCylCoxReduZCOO4VsMaJufKd0gao KTqZ+4e84VURtCn0531OdBXyEJqp+6VdRwMn4kw= -----END CERTIFICATE-----Generated at Sun Oct 19 20:04:10 2025 by rpki-client