$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878.cer File: 31eb74aa-03c1-4d0b-ad59-8e6af8a10878.cer (raw, json) Hash identifier: DaxVEPGRUQ567ZI7jZVLj/EUURG8BKp3r3+bcPlAa3M= Subject key identifier: 42:86:C2:FE:1F:E1:8E:A6:2D:D7:E3:99:33:0A:6F:51:7D:40:C8:0A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B2255036AC77D0A7EE844E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/31eb74aa-03c1-4d0b-ad59-8e6af8a10878.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Sep 2025 05:36:29 +0000 Certificate not after: Mon 13 Dec 2027 06:36:29 +0000 Subordinate resources: IP: 205.211.136.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:22:55:03:6a:c7:7d:0a:7e:e8:44:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 9 05:36:29 2025 GMT Not After : Dec 13 06:36:29 2027 GMT Subject: CN=31eb74aa-03c1-4d0b-ad59-8e6af8a10878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:13:ea:b7:a9:dc:90:34:a1:82:02:6e:6d: 22:c4:bf:85:58:9d:28:3e:d3:4c:ca:96:e6:a6:1d: 96:9c:ce:df:52:49:6b:a0:9f:61:ec:2e:13:c1:98: 5e:5b:59:0f:7d:22:63:15:10:00:e1:28:25:d2:a5: 75:9f:08:05:85:95:f6:ac:72:52:26:1c:ee:2d:7b: 83:70:40:1b:2a:43:07:fc:48:52:46:81:37:71:2b: 64:77:c6:bc:ea:81:8c:ce:49:2d:b7:be:62:85:e7: 5b:55:64:ed:35:6f:e0:70:7a:50:bf:25:39:96:ee: 33:6f:e9:ae:69:7a:90:96:e1:95:47:2d:29:ed:78: a5:cb:6c:d4:f0:97:78:29:21:af:c6:5b:89:a6:6a: 38:d8:83:51:51:b9:b3:55:b8:f9:9b:1b:1c:ff:8f: ad:8a:76:29:4c:fc:f3:2d:44:99:f4:86:d5:43:c6: dc:b6:3c:f8:fe:0d:9e:58:47:fb:57:85:1b:d2:0f: fb:e8:5c:dd:9b:a6:23:87:1e:0c:04:d5:a3:20:28: e9:6f:ec:98:4f:4a:a5:5c:7c:93:b4:00:ab:fc:0a: c2:b5:25:eb:f8:3b:99:34:70:2c:fb:60:1c:c2:ca: 15:15:49:16:25:84:a1:29:95:ce:a8:42:47:02:4f: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:86:C2:FE:1F:E1:8E:A6:2D:D7:E3:99:33:0A:6F:51:7D:40:C8:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/31eb74aa-03c1-4d0b-ad59-8e6af8a10878.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 205.211.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:02:c6:ba:64:1b:60:da:d0:92:35:d1:78:89:60:33:f7:5e: 34:dc:fc:82:55:b7:b9:19:54:ce:39:41:b8:c5:d9:78:5c:c9: dd:5e:9d:ef:7e:89:30:58:a8:30:7c:a5:21:bb:72:73:74:93: 6e:6b:bc:d6:f3:95:e6:0e:98:ac:12:eb:87:d0:be:67:19:71: 36:56:1f:05:b2:b8:fd:98:3d:3f:9f:c6:79:7d:e6:0a:b7:50: 8d:d8:28:a6:e0:c9:b2:ca:0e:73:f5:2b:43:d8:d4:1f:a9:45: 2c:7c:c7:16:59:21:72:95:82:9b:47:65:9e:a3:7f:8d:fa:b3: ee:43:85:cf:bf:40:1d:9b:e6:ea:ac:f4:ab:ea:5f:62:11:db: d8:68:77:e8:3a:29:2c:1b:c9:25:66:dc:8e:54:96:dc:62:73: 92:87:bc:c8:64:25:7b:68:3b:47:6e:c7:d9:46:81:17:2f:70: 58:3a:54:0c:0a:ba:14:f9:b2:7b:6a:4c:c6:60:d9:e5:ae:c2: c5:de:15:de:0f:3c:f4:43:63:8d:f3:36:28:52:3d:e5:8c:df: 1f:c0:7e:9f:62:72:30:7f:92:0b:66:41:14:96:bf:34:21:88: bd:60:c7:ed:f3:4e:81:b0:4f:03:a0:31:52:e8:ad:20:b8:f4: cf:2c:51:84 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEsiVQNqx30KfuhE5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwOTA1MzYyOVoXDTI3MTIxMzA2MzYyOVowLzEtMCsGA1UEAxMk MzFlYjc0YWEtMDNjMS00ZDBiLWFkNTktOGU2YWY4YTEwODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9wT6rep3JA0oYICbm0ixL+FWJ0oPtNMypbm ph2WnM7fUklroJ9h7C4TwZheW1kPfSJjFRAA4Sgl0qV1nwgFhZX2rHJSJhzuLXuD cEAbKkMH/EhSRoE3cStkd8a86oGMzkktt75ihedbVWTtNW/gcHpQvyU5lu4zb+mu aXqQluGVRy0p7Xily2zU8Jd4KSGvxluJpmo42INRUbmzVbj5mxsc/4+tinYpTPzz LUSZ9IbVQ8bctjz4/g2eWEf7V4Ub0g/76Fzdm6Yjhx4MBNWjICjpb+yYT0qlXHyT tACr/ArCtSXr+DuZNHAs+2AcwsoVFUkWJYShKZXOqEJHAk9sBwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFEKGwv4f4Y6mLdfjmTMKb1F9QMgKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z MWViNzRhYS0wM2MxLTRkMGItYWQ1OS04ZTZhZjhhMTA4NzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzMxZWI3NGFhLTAzYzEtNGQwYi1h ZDU5LThlNmFmOGExMDg3OC8zMWViNzRhYS0wM2MxLTRkMGItYWQ1OS04ZTZhZjhh MTA4NzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADN04gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIwLGumQbYNrQkjXReIlg M/deNNz8glW3uRlUzjlBuMXZeFzJ3V6d736JMFioMHylIbtyc3STbmu81vOV5g6Y rBLrh9C+ZxlxNlYfBbK4/Zg9P5/GeX3mCrdQjdgopuDJssoOc/UrQ9jUH6lFLHzH FlkhcpWCm0dlnqN/jfqz7kOFz79AHZvm6qz0q+pfYhHb2Gh36DopLBvJJWbcjlSW 3GJzkoe8yGQle2g7R27H2UaBFy9wWDpUDAq6FPmye2pMxmDZ5a7Cxd4V3g889ENj jfM2KFI95YzfH8B+n2JyMH+SC2ZBFJa/NCGIvWDH7fNOgbBPA6AxUuitILj0zyxR hA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:34:39 2025 by rpki-client