$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer File: 2fa99450-94b8-4a0e-be53-8ce7f88d51db.cer (raw, json) Hash identifier: THgo2L833qKaSz02PJHQLI086/cSB784lcXvmbR23Yg= Subject key identifier: 0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A8CC3C3FEAEA69EB552F40240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 15:48:22 +0000 Certificate not after: Wed 20 Oct 2027 15:48:22 +0000 Subordinate resources: IP: 199.185.123.0 -- 199.185.125.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:c3:c3:fe:ae:a6:9e:b5:52:f4:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 17 15:48:22 2025 GMT Not After : Oct 20 15:48:22 2027 GMT Subject: CN=2fa99450-94b8-4a0e-be53-8ce7f88d51db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:de:a0:cd:54:39:03:63:84:83:42:e4:ad: 20:eb:37:0a:d4:64:a3:b8:fd:4c:7a:ff:47:6d:3b: 93:f9:a8:15:ce:72:37:4e:6e:04:a9:25:69:c9:c5: 9f:a8:bd:6f:b4:b5:84:30:18:65:3c:68:9c:84:91: d9:cf:7d:ef:eb:f1:3e:38:bf:53:62:43:23:42:dc: cc:ed:3a:38:dc:7e:a7:12:a8:9f:ff:a8:a3:11:dc: d3:a4:31:cb:3c:1b:70:72:f0:78:27:0c:72:d1:d6: 08:d7:39:d4:9e:42:a9:cc:f0:d3:0f:ea:36:c2:c3: e2:a3:d0:54:00:53:9f:62:df:1d:a3:19:c7:17:c7: 7c:60:d4:e1:08:3e:02:72:55:19:7d:c7:7f:fd:90: b7:73:54:b7:7f:7f:d1:65:f3:bb:58:09:19:88:0b: 46:75:98:64:8e:93:09:eb:85:74:f5:19:15:7b:68: a0:01:c2:06:63:0b:e3:3a:6b:ce:26:ab:a7:ef:2b: 1e:76:e9:1d:2c:0c:d5:31:14:04:e7:b1:eb:6e:cd: 70:a4:76:5c:92:7c:3f:bf:e4:88:4b:dd:52:87:ec: de:a0:17:04:d2:ad:e7:d9:e7:4b:5a:43:c4:d6:ff: a4:dc:1c:b5:93:86:71:a4:22:b2:88:d7:7d:27:48: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E9:A2:3A:3C:19:17:08:EE:9B:09:41:29:66:81:70:CB:E2:0F:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2fa99450-94b8-4a0e-be53-8ce7f88d51db/2fa99450-94b8-4a0e-be53-8ce7f88d51db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 199.185.123.0-199.185.125.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:f5:4c:7b:5e:7b:11:09:23:3e:89:02:23:f6:94:17:bf:9e: 33:ee:b3:86:e1:a5:d2:15:2f:de:45:e1:cd:4c:9c:12:55:bd: b2:39:bb:9a:79:31:11:af:e4:a7:47:03:27:1e:7c:4f:35:b9: b7:dd:15:dc:d7:fb:46:48:39:c6:bc:c2:e7:6c:25:fc:90:da: 7a:b1:30:af:7e:73:87:31:bf:5d:af:f5:c2:56:4d:3a:d4:ae: 9f:1e:e6:50:89:04:81:50:87:b1:e2:df:02:fc:a3:fb:7d:de: a9:e7:23:58:b9:5e:a1:8a:52:3a:3d:8b:14:77:7e:79:07:da: f1:1b:54:2b:10:f9:42:57:8d:f0:a3:56:52:92:6f:b8:2a:a6: 2e:9f:da:3d:ef:73:25:51:35:25:0e:a5:ac:b9:ea:47:71:9e: e9:50:c4:0b:d0:4a:bc:35:3c:82:6d:5b:1b:6f:b8:44:88:b3: 36:ea:34:16:e1:9c:d6:3a:77:91:33:67:d1:8d:7f:fd:3c:42: 7f:ad:d7:35:55:ab:c9:1c:d3:a4:92:d0:5e:43:6a:75:1e:c7: a4:cb:92:d2:1d:46:89:fc:70:f8:84:aa:1f:4a:80:5d:d8:f6: e5:f1:bc:99:01:b7:b5:a2:d3:56:72:62:51:95:59:b7:dc:9e: 36:5f:95:58 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEqMw8P+rqaetVL0AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNzE1NDgyMloXDTI3MTAyMDE1NDgyMlowLzEtMCsGA1UEAxMk MmZhOTk0NTAtOTRiOC00YTBlLWJlNTMtOGNlN2Y4OGQ1MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPLeoM1UOQNjhINC5K0g6zcK1GSjuP1Mev9H bTuT+agVznI3Tm4EqSVpycWfqL1vtLWEMBhlPGichJHZz33v6/E+OL9TYkMjQtzM 7To43H6nEqif/6ijEdzTpDHLPBtwcvB4Jwxy0dYI1znUnkKpzPDTD+o2wsPio9BU AFOfYt8doxnHF8d8YNThCD4CclUZfcd//ZC3c1S3f3/RZfO7WAkZiAtGdZhkjpMJ 64V09RkVe2igAcIGYwvjOmvOJqun7ysedukdLAzVMRQE57Hrbs1wpHZcknw/v+SI S91Sh+zeoBcE0q3n2edLWkPE1v+k3By1k4ZxpCKyiNd9J0gLWQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFA3pojo8GRcI7psJQSlmgXDL4g83MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y ZmE5OTQ1MC05NGI4LTRhMGUtYmU1My04Y2U3Zjg4ZDUxZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzJmYTk5NDUwLTk0YjgtNGEwZS1i ZTUzLThjZTdmODhkNTFkYi8yZmE5OTQ1MC05NGI4LTRhMGUtYmU1My04Y2U3Zjg4 ZDUxZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMe5ewMEAce5fDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCt9Ux7XnsR CSM+iQIj9pQXv54z7rOG4aXSFS/eReHNTJwSVb2yObuaeTERr+SnRwMnHnxPNbm3 3RXc1/tGSDnGvMLnbCX8kNp6sTCvfnOHMb9dr/XCVk061K6fHuZQiQSBUIex4t8C /KP7fd6p5yNYuV6hilI6PYsUd355B9rxG1QrEPlCV43wo1ZSkm+4KqYun9o973Ml UTUlDqWsuepHcZ7pUMQL0Eq8NTyCbVsbb7hEiLM26jQW4ZzWOneRM2fRjX/9PEJ/ rdc1VavJHNOkktBeQ2p1Hseky5LSHUaJ/HD4hKofSoBd2Pbl8byZAbe1otNWcmJR lVm33J42X5VY -----END CERTIFICATE-----Generated at Wed Nov 5 10:26:52 2025 by rpki-client