$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d634d2d5-047b-4dc9-90dc-c174be598f93.cer File: d634d2d5-047b-4dc9-90dc-c174be598f93.cer (raw, json) Hash identifier: MV/zTG5I85nffXev1OIlXQgtd6dt48RcS15ANePcnNM= Subject key identifier: 94:43:0C:5D:DF:84:E6:11:A5:61:0E:0F:E1:51:55:4F:42:73:D0:80 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B74EA54BBD63A12CDA0F0AFE8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d634d2d5-047b-4dc9-90dc-c174be598f93/d634d2d5-047b-4dc9-90dc-c174be598f93.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d634d2d5-047b-4dc9-90dc-c174be598f93/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 19:33:37 +0000 Certificate not after: Tue 11 Jan 2028 20:33:37 +0000 Subordinate resources: AS: 7170 AS: 394872 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:ea:54:bb:d6:3a:12:cd:a0:f0:af:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 8 19:33:37 2025 GMT Not After : Jan 11 20:33:37 2028 GMT Subject: CN=d634d2d5-047b-4dc9-90dc-c174be598f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:8e:1b:e6:51:ca:25:bb:6d:90:10:e1:53: 2f:ed:66:bb:21:46:6b:78:b9:c1:9e:ae:ec:34:90: 19:eb:5f:cc:99:ec:62:3d:f3:51:7b:b1:fe:39:db: d7:2f:5c:96:6b:ae:4c:7c:2c:3d:ea:83:0e:f2:5a: 70:df:20:a8:fc:98:fa:28:b8:21:45:87:92:33:e7: 3b:4a:5f:ce:63:28:06:38:72:a0:94:8d:98:e4:26: 7f:63:63:72:30:74:11:ba:62:90:2c:72:31:8d:9b: 6d:a5:1c:48:f9:64:27:ee:08:d0:29:38:b1:3e:be: bd:af:1d:72:29:12:63:21:57:13:06:e1:cb:c5:de: 79:33:ba:3f:20:9a:49:c5:c7:7b:9f:04:4c:b0:1a: be:d3:f4:23:79:12:5c:7b:97:18:08:49:f5:7d:a2: dc:77:46:2d:2a:45:30:25:75:93:4a:4b:d5:b9:4b: 20:82:c3:ad:72:aa:07:9a:c7:0b:38:bd:47:1f:d8: c7:c1:7e:f5:aa:f6:be:4a:e5:4a:d3:b0:14:05:56: 23:cd:fc:e8:ba:a6:22:a4:93:28:12:d6:ba:f9:71: 96:e3:85:72:62:ff:d5:ad:df:a1:50:80:c5:54:b9: e7:42:55:0e:57:95:0b:82:9c:38:66:c2:38:f2:98: b4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:43:0C:5D:DF:84:E6:11:A5:61:0E:0F:E1:51:55:4F:42:73:D0:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d634d2d5-047b-4dc9-90dc-c174be598f93/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d634d2d5-047b-4dc9-90dc-c174be598f93/d634d2d5-047b-4dc9-90dc-c174be598f93.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 7170 394872 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:3a:2a:31:cf:86:24:41:5d:1e:4b:82:34:d5:e0:b3:21:b7: 8b:75:4c:83:51:ca:dc:39:d4:5f:a7:2a:c9:ed:d9:06:60:93: 0e:46:c5:b3:83:5d:8d:26:48:07:1e:c7:09:5f:71:8c:27:2a: f7:06:54:17:d8:ce:57:4c:65:27:02:92:49:e2:3c:64:89:e4: 67:08:1c:8f:4f:53:73:94:e4:62:1c:32:8a:b2:cd:e4:38:43: 97:a4:9c:db:05:3d:96:1c:0e:f7:39:83:9a:fd:51:d3:69:81: 65:e9:1b:7b:5c:fc:e5:6f:0a:12:cc:1a:e1:68:35:68:35:4b: fd:8d:e3:67:b1:8e:e0:f2:da:4c:16:5a:63:af:f8:5b:f8:4f: da:00:4f:54:3e:50:db:66:ca:a5:67:2e:ab:78:06:21:d9:09: a3:b8:63:e5:70:09:a7:12:c3:58:f2:7e:30:67:9b:e4:d1:89: 1b:e3:9c:18:87:42:53:89:2b:9a:ef:a5:57:94:5d:0f:a9:26: a2:73:99:15:74:4d:ae:88:f3:05:87:39:00:41:d7:ea:fa:40: a9:af:3b:30:77:8a:5e:f3:9f:3a:9c:54:e8:02:04:f9:81:85: 4a:65:2d:41:53:1c:f3:e1:4d:0b:d2:d2:7d:67:e9:bf:68:36: 88:02:bd:73 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEt06lS71joSzaDwr+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwODE5MzMzN1oXDTI4MDExMTIwMzMzN1owLzEtMCsGA1UEAxMk ZDYzNGQyZDUtMDQ3Yi00ZGM5LTkwZGMtYzE3NGJlNTk4ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdeOG+ZRyiW7bZAQ4VMv7Wa7IUZreLnBnq7s NJAZ61/MmexiPfNRe7H+OdvXL1yWa65MfCw96oMO8lpw3yCo/Jj6KLghRYeSM+c7 Sl/OYygGOHKglI2Y5CZ/Y2NyMHQRumKQLHIxjZttpRxI+WQn7gjQKTixPr69rx1y KRJjIVcTBuHLxd55M7o/IJpJxcd7nwRMsBq+0/QjeRJce5cYCEn1faLcd0YtKkUw JXWTSkvVuUsggsOtcqoHmscLOL1HH9jHwX71qva+SuVK07AUBVYjzfzouqYipJMo Eta6+XGW44VyYv/Vrd+hUIDFVLnnQlUOV5ULgpw4ZsI48pi02wIDAQABo4ID/jCC A/owHQYDVR0OBBYEFJRDDF3fhOYRpWEOD+FRVU9Cc9CAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k NjM0ZDJkNS0wNDdiLTRkYzktOTBkYy1jMTc0YmU1OThmOTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2Q2MzRkMmQ1LTA0N2ItNGRjOS05 MGRjLWMxNzRiZTU5OGY5My9kNjM0ZDJkNS0wNDdiLTRkYzktOTBkYy1jMTc0YmU1 OThmOTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQgBAf8EDzANoAswCQICHAICAwYGeDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6Oioxz4YkQV0eS4I01eCz IbeLdUyDUcrcOdRfpyrJ7dkGYJMORsWzg12NJkgHHscJX3GMJyr3BlQX2M5XTGUn ApJJ4jxkieRnCByPT1NzlORiHDKKss3kOEOXpJzbBT2WHA73OYOa/VHTaYFl6Rt7 XPzlbwoSzBrhaDVoNUv9jeNnsY7g8tpMFlpjr/hb+E/aAE9UPlDbZsqlZy6reAYh 2QmjuGPlcAmnEsNY8n4wZ5vk0Ykb45wYh0JTiSua76VXlF0PqSaic5kVdE2uiPMF hzkAQdfq+kCprzswd4pe8586nFToAgT5gYVKZS1BUxzz4U0L0tJ9Z+m/aDaIAr1z -----END CERTIFICATE-----Generated at Mon Oct 20 09:08:57 2025 by rpki-client