$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.cer File: 369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.cer (raw, json) Hash identifier: AqAV2kdtvXWAf/8424HAV3fte4f+n8J1D0lrvkP54eM= Subject key identifier: 43:47:1E:08:C0:5B:20:4E:40:CA:36:87:74:0F:05:65:E2:58:58:0E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB72BF49805A18178013A2A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 20:22:15 +0000 Certificate not after: Thu 04 Nov 2027 20:22:15 +0000 Subordinate resources: IP: 2620:101:1000::/42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:2b:f4:98:05:a1:81:78:01:3a:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 1 20:22:15 2025 GMT Not After : Nov 4 20:22:15 2027 GMT Subject: CN=369b937a-2420-4fd7-b5a1-0b6c4ee6c1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:01:d2:25:2b:e8:65:c4:04:59:e1:42:55: f6:1a:86:55:ee:e4:5a:f2:ab:1f:be:7a:21:33:e1: 40:a3:9c:52:68:a1:c3:de:6a:ae:9d:d4:d8:de:0b: 83:af:54:db:15:16:fe:4e:73:a7:83:20:cc:d7:f9: 7d:01:14:e4:45:33:dd:a7:74:8a:ea:4f:f9:b8:2f: 94:ff:49:ae:10:fe:b7:b3:bc:c9:fa:f8:b1:ae:f4: db:fc:23:b4:05:a0:0e:dd:cb:45:f7:d5:44:78:89: 74:bf:b7:8d:10:37:4e:07:fd:88:5d:ca:57:88:82: d5:87:a2:d4:8f:b3:5c:b1:d0:47:43:b3:d6:f7:27: 67:c0:f5:be:4f:ba:6b:7f:1d:2f:66:97:5a:7f:1f: 9b:85:ee:e0:97:5a:04:d4:41:f6:20:89:2f:00:20: a8:44:90:d9:5a:af:90:0a:6f:64:53:46:58:c6:7b: 7c:ba:ca:bd:02:a8:3c:d9:5a:cd:37:2c:28:51:41: c4:a7:f0:f0:a9:bb:ed:3e:4e:84:09:bd:3b:a5:e0: 33:71:4d:5b:b1:fb:3d:23:57:93:72:26:0a:34:52: 5b:10:81:d9:ef:c2:95:a8:66:c1:e7:3b:da:ce:b3: 11:1d:7f:de:61:ec:c0:df:a8:a7:3c:f2:53:cf:f5: 4c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:47:1E:08:C0:5B:20:4E:40:CA:36:87:74:0F:05:65:E2:58:58:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2620:101:1000::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f0:5a:f3:fd:75:c2:63:68:bd:46:56:96:cd:c3:fe:8e:17: 7d:5b:61:56:27:ba:68:ec:ed:36:74:6c:50:87:b7:4c:67:3d: a2:dc:23:b0:1a:19:ab:7d:37:6d:45:99:83:9a:3a:95:73:f6: c4:9a:7a:2b:2f:0b:cb:70:69:4c:83:be:13:24:e8:cb:70:98: 39:03:00:80:6c:ca:85:03:37:19:df:b2:11:65:17:e5:25:95: a3:f2:13:d4:1a:29:00:65:b1:8f:eb:d8:a0:f8:75:9d:12:eb: 3e:01:e2:02:d5:ec:60:21:e0:c4:f4:25:3a:8b:d1:3a:d9:75: 1b:23:b0:e0:36:60:83:a5:ca:80:bd:91:ff:2c:87:cc:a3:83: 3d:50:f0:74:2e:64:ea:f2:53:90:de:77:96:38:33:1b:01:41: dd:ce:3a:12:81:2e:12:f4:76:0e:fe:24:b4:e8:2f:52:2c:a8: 90:9c:fc:21:7a:f9:c9:8a:8a:f5:8f:20:d6:af:ae:14:50:9c: e3:1f:f3:82:ed:eb:94:a9:cb:e5:47:d2:a3:0b:f5:1d:bc:1b: 7b:f1:a2:0a:aa:16:84:0d:12:5b:c4:87:72:a7:b8:1a:89:b1: 75:cd:94:6c:17:c8:9f:60:43:b3:d9:9b:44:dc:cc:a8:44:42: 82:f8:f4:08 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEq3K/SYBaGBeAE6KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwMTIwMjIxNVoXDTI3MTEwNDIwMjIxNVowLzEtMCsGA1UEAxMk MzY5YjkzN2EtMjQyMC00ZmQ3LWI1YTEtMGI2YzRlZTZjMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVsB0iUr6GXEBFnhQlX2GoZV7uRa8qsfvnoh M+FAo5xSaKHD3mqundTY3guDr1TbFRb+TnOngyDM1/l9ARTkRTPdp3SK6k/5uC+U /0muEP63s7zJ+vixrvTb/CO0BaAO3ctF99VEeIl0v7eNEDdOB/2IXcpXiILVh6LU j7NcsdBHQ7PW9ydnwPW+T7prfx0vZpdafx+bhe7gl1oE1EH2IIkvACCoRJDZWq+Q Cm9kU0ZYxnt8usq9Aqg82VrNNywoUUHEp/DwqbvtPk6ECb07peAzcU1bsfs9I1eT ciYKNFJbEIHZ78KVqGbB5zvazrMRHX/eYezA36inPPJTz/VMGwIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFENHHgjAWyBOQMo2h3QPBWXiWFgOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z NjliOTM3YS0yNDIwLTRmZDctYjVhMS0wYjZjNGVlNmMxZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzM2OWI5MzdhLTI0MjAtNGZkNy1i NWExLTBiNmM0ZWU2YzFkZi8zNjliOTM3YS0yNDIwLTRmZDctYjVhMS0wYjZjNGVl NmMxZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwYmIAEBEAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAivBa8/11wmNovUZW ls3D/o4XfVthVie6aOztNnRsUIe3TGc9otwjsBoZq303bUWZg5o6lXP2xJp6Ky8L y3BpTIO+EyToy3CYOQMAgGzKhQM3Gd+yEWUX5SWVo/IT1BopAGWxj+vYoPh1nRLr PgHiAtXsYCHgxPQlOovROtl1GyOw4DZgg6XKgL2R/yyHzKODPVDwdC5k6vJTkN53 ljgzGwFB3c46EoEuEvR2Dv4ktOgvUiyokJz8IXr5yYqK9Y8g1q+uFFCc4x/zgu3r lKnL5UfSowv1Hbwbe/GiCqoWhA0SW8SHcqe4Gomxdc2UbBfIn2BDs9mbRNzMqERC gvj0CA== -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:51 2025 by rpki-client