$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58.cer File: 1570553e-ffe3-43f8-8e8d-a4ca57490e58.cer (raw, json) Hash identifier: fPn/VrmcloC1Tkw9VJvmSug9cUWguJlrm6/Ushg9Sq0= Subject key identifier: 29:65:CD:57:5D:86:19:B5:3E:B4:C7:1E:87:57:FC:52:BC:08:A9:A2 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B5B9922B519CB737C407E5180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/1570553e-ffe3-43f8-8e8d-a4ca57490e58.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Sep 2025 17:54:49 +0000 Certificate not after: Sun 02 Jan 2028 18:54:49 +0000 Subordinate resources: IP: 2602:f542::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:99:22:b5:19:cb:73:7c:40:7e:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 29 17:54:49 2025 GMT Not After : Jan 2 18:54:49 2028 GMT Subject: CN=1570553e-ffe3-43f8-8e8d-a4ca57490e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:22:47:45:e9:d4:9f:03:39:65:45:31:a4: c3:be:72:c0:ef:20:01:ce:0d:1c:34:10:46:5f:8d: a9:3d:56:3e:9e:b4:e2:c4:a3:8a:0c:83:6a:69:33: 36:40:7d:a6:22:19:9d:b3:10:2f:2d:79:97:cf:6d: 43:7f:12:de:a6:c4:01:0a:c8:d1:ca:02:e4:33:71: 59:0c:c6:81:aa:52:19:df:eb:24:f6:6d:b3:82:e5: f7:dc:19:5e:d8:ad:b6:6c:ca:20:e4:52:c9:16:2a: dc:89:5d:25:32:17:d0:0c:1d:4e:a8:10:13:66:fe: c1:99:ae:08:b5:e1:d5:2d:5a:1b:9b:31:28:3c:a2: e0:7d:6f:44:ac:df:75:ce:58:b5:5a:87:85:9c:92: 1b:ca:9b:99:5b:cc:e3:80:c3:40:84:24:f5:7d:69: 42:0e:33:14:e8:c5:ae:0c:78:e4:31:6d:87:47:66: f1:71:00:6b:7b:04:69:09:37:d9:12:1b:7b:0e:81: 3a:da:ca:01:b7:75:49:bc:79:69:d8:47:9a:b7:b2: df:fb:c9:2e:ff:20:90:00:0d:3e:41:58:66:a6:fb: 00:70:2f:c3:19:f0:af:e7:6a:dc:2d:cc:a7:5e:1a: a4:54:28:ac:f7:df:ae:95:54:cb:61:6e:65:c4:91: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:65:CD:57:5D:86:19:B5:3E:B4:C7:1E:87:57:FC:52:BC:08:A9:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/1570553e-ffe3-43f8-8e8d-a4ca57490e58.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f542::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c7:4f:19:ba:08:a8:ad:86:60:cd:6c:4b:96:df:95:0e:03: e6:51:78:d4:4f:9a:1c:7e:30:aa:9d:3f:d3:e5:f9:d9:7d:22: 73:d1:e2:de:6b:4a:87:48:d1:e8:e4:25:9a:cb:e7:2c:96:e7: ca:d4:20:cb:40:22:83:d8:62:3b:60:95:ba:e4:22:e7:67:a0: 2b:32:2b:dd:16:96:5a:dd:1b:c5:3e:51:8a:7c:e5:10:43:f4: cd:39:cc:29:aa:e7:35:32:35:1a:ef:a9:67:11:e8:cb:67:d2: ea:fa:b2:f7:16:c4:f1:08:95:a3:4a:a5:48:c0:65:d0:b5:e2: 7b:f5:a3:86:27:0f:29:b8:75:35:00:e5:dc:a1:d5:36:6c:81: 4d:a1:62:a3:3a:e7:36:4a:4b:30:6e:85:b2:0a:0e:e8:75:b2: 50:51:58:3b:76:a8:9c:36:69:d9:63:44:96:42:22:30:db:a5: 99:bb:79:c1:fa:40:ed:f4:ea:7c:b8:4c:ae:d0:7a:37:b5:b7: e9:ef:ba:8f:89:4f:20:14:e6:80:1d:70:de:fd:ed:33:34:92: b4:22:3a:b0:eb:cf:49:5f:40:5b:3c:6e:1e:9f:bb:d5:48:bc: 13:53:90:e2:74:26:c6:ff:70:3f:7e:e2:d1:ad:61:f5:2d:61: 72:8f:6c:2c -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEtbmSK1GctzfEB+UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyOTE3NTQ0OVoXDTI4MDEwMjE4NTQ0OVowLzEtMCsGA1UEAxMk MTU3MDU1M2UtZmZlMy00M2Y4LThlOGQtYTRjYTU3NDkwZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbQiR0Xp1J8DOWVFMaTDvnLA7yABzg0cNBBG X42pPVY+nrTixKOKDINqaTM2QH2mIhmdsxAvLXmXz21DfxLepsQBCsjRygLkM3FZ DMaBqlIZ3+sk9m2zguX33Ble2K22bMog5FLJFirciV0lMhfQDB1OqBATZv7Bma4I teHVLVobmzEoPKLgfW9ErN91zli1WoeFnJIbypuZW8zjgMNAhCT1fWlCDjMU6MWu DHjkMW2HR2bxcQBrewRpCTfZEht7DoE62soBt3VJvHlp2Eeat7Lf+8ku/yCQAA0+ QVhmpvsAcC/DGfCv52rcLcynXhqkVCis99+ulVTLYW5lxJFSbQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFCllzVddhhm1PrTHHodX/FK8CKmiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8x NTcwNTUzZS1mZmUzLTQzZjgtOGU4ZC1hNGNhNTc0OTBlNTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzE1NzA1NTNlLWZmZTMtNDNmOC04 ZThkLWE0Y2E1NzQ5MGU1OC8xNTcwNTUzZS1mZmUzLTQzZjgtOGU4ZC1hNGNhNTc0 OTBlNTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvVCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2x08ZugiorYZgzWxL lt+VDgPmUXjUT5ocfjCqnT/T5fnZfSJz0eLea0qHSNHo5CWay+cslufK1CDLQCKD 2GI7YJW65CLnZ6ArMivdFpZa3RvFPlGKfOUQQ/TNOcwpquc1MjUa76lnEejLZ9Lq +rL3FsTxCJWjSqVIwGXQteJ79aOGJw8puHU1AOXcodU2bIFNoWKjOuc2SkswboWy Cg7odbJQUVg7dqicNmnZY0SWQiIw26WZu3nB+kDt9Op8uEyu0Ho3tbfp77qPiU8g FOaAHXDe/e0zNJK0Ijqw689JX0BbPG4en7vVSLwTU5DidCbG/3A/fuLRrWH1LWFy j2ws -----END CERTIFICATE-----Generated at Wed Nov 5 04:36:24 2025 by rpki-client