$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer File: 3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer (raw, json) Hash identifier: HopAsP6DbFkK11wrZ0759v3QcLPj02RTa8AcTaN/Ja4= Subject key identifier: 71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A79481061CBCC5555622C3460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Jul 2025 16:18:46 +0000 Certificate not after: Wed 13 Oct 2027 16:18:46 +0000 Subordinate resources: IP: 192.139.34.0/24 IP: 204.209.40.0 -- 204.209.42.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:48:10:61:cb:cc:55:55:62:2c:34:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 10 16:18:46 2025 GMT Not After : Oct 13 16:18:46 2027 GMT Subject: CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:87:28:7a:bd:dc:bb:a8:38:0d:96:d2:4e: 89:ac:a8:61:2d:cd:2e:43:5a:1b:25:27:11:cf:14: 72:12:f5:d5:78:b1:7a:fd:bd:3d:57:4b:40:c4:40: 39:72:1c:86:ac:df:4b:5b:67:1f:47:61:08:96:9c: 87:ec:eb:61:ea:38:69:51:93:fb:04:88:f1:84:ac: 4a:c1:7a:59:40:6f:6e:ba:46:e7:8b:27:0c:40:ce: f8:06:dd:a0:dc:a0:e2:a7:a2:70:41:40:c0:89:1e: 42:76:8c:e3:53:8b:ae:33:25:1f:cb:57:83:e1:dc: 47:ea:e3:ee:02:a9:c2:f3:b6:9b:94:6d:39:0b:ac: 10:2c:fa:1a:6c:8d:98:70:1a:90:7d:ce:4a:03:c3: 06:b2:93:14:36:78:79:f8:b0:87:a8:6a:28:4b:38: 33:c4:5d:9e:1b:8e:b0:5c:af:2a:c5:c8:76:f1:a5: b9:f0:0b:25:a7:b8:dc:ba:fa:32:38:5d:d3:3d:1b: be:14:22:a2:51:e3:39:b8:10:69:82:bc:c7:49:ba: 06:d6:8c:18:2b:b7:5d:62:23:86:95:c0:3c:4f:36: 38:7c:9e:f8:b4:a5:35:ce:cb:a5:8c:c3:4a:08:a8: 8c:42:8e:86:3f:d6:a1:cc:34:52:bf:a7:98:6f:fd: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.139.34.0/24 204.209.40.0-204.209.42.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4e:d2:0c:ee:93:c4:88:a7:ad:93:1e:03:4c:a6:ce:c1:24: fa:5b:ea:ed:20:5b:b4:4b:41:dd:34:74:a6:ee:47:94:e9:7e: 69:86:a3:90:18:25:65:c7:fa:f3:9b:0e:1b:65:7c:bc:db:fa: 06:bf:ed:63:bc:d0:4a:90:b1:f2:35:ec:3b:aa:dc:c3:b7:a3: 70:33:a9:f6:d2:87:cd:5c:dc:e1:e3:d9:bf:ac:54:e2:83:90: 99:c8:a8:20:4d:53:42:bd:b4:91:7d:5b:90:7e:c1:51:eb:e9: 29:8c:d8:67:03:80:3f:55:09:db:71:f1:0c:7a:2c:43:36:3e: b4:3d:44:2d:f5:90:14:1a:c7:f8:c8:0c:2d:42:72:ec:d6:41: 4b:c9:a2:e1:3b:73:1c:1c:cd:a4:ac:3d:aa:18:f0:de:05:5a: aa:b3:8f:32:a8:1d:7f:18:b9:1e:37:0b:14:ee:60:83:fe:1b: c1:7d:f0:9a:45:c4:a4:04:dc:05:7e:b4:12:00:b7:d6:b5:16: 4c:78:e9:43:ee:1b:69:d9:b1:33:c1:67:16:eb:38:d6:59:4f: 76:e6:79:a3:a7:05:ec:7a:b8:be:03:c9:4c:91:68:23:32:44: 1d:e4:80:12:9f:26:a0:bd:6d:c1:18:08:07:1a:0d:42:7c:70: f9:14:33:9d -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEp5SBBhy8xVVWIsNGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxMDE2MTg0NloXDTI3MTAxMzE2MTg0NlowLzEtMCsGA1UEAxMk M2UzOWJmYTctZWQ1MS00ZDE3LTljZTUtNTM2YTRiOTBhNjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT2HKHq93LuoOA2W0k6JrKhhLc0uQ1obJScR zxRyEvXVeLF6/b09V0tAxEA5chyGrN9LW2cfR2EIlpyH7Oth6jhpUZP7BIjxhKxK wXpZQG9uukbniycMQM74Bt2g3KDip6JwQUDAiR5CdozjU4uuMyUfy1eD4dxH6uPu AqnC87ablG05C6wQLPoabI2YcBqQfc5KA8MGspMUNnh5+LCHqGooSzgzxF2eG46w XK8qxch28aW58Aslp7jcuvoyOF3TPRu+FCKiUeM5uBBpgrzHSboG1owYK7ddYiOG lcA8TzY4fJ74tKU1zsuljMNKCKiMQo6GP9ahzDRSv6eYb/1hZwIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFHFrovmgzyyTWczcVINxQATaDMwsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z ZTM5YmZhNy1lZDUxLTRkMTctOWNlNS01MzZhNGI5MGE2MmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzNlMzliZmE3LWVkNTEtNGQxNy05 Y2U1LTUzNmE0YjkwYTYyZi8zZTM5YmZhNy1lZDUxLTRkMTctOWNlNS01MzZhNGI5 MGE2MmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADAiyIwDAMEA8zRKAMEAMzRKjBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBl TtIM7pPEiKetkx4DTKbOwST6W+rtIFu0S0HdNHSm7keU6X5phqOQGCVlx/rzmw4b ZXy82/oGv+1jvNBKkLHyNew7qtzDt6NwM6n20ofNXNzh49m/rFTig5CZyKggTVNC vbSRfVuQfsFR6+kpjNhnA4A/VQnbcfEMeixDNj60PUQt9ZAUGsf4yAwtQnLs1kFL yaLhO3McHM2krD2qGPDeBVqqs48yqB1/GLkeNwsU7mCD/hvBffCaRcSkBNwFfrQS ALfWtRZMeOlD7htp2bEzwWcW6zjWWU925nmjpwXseri+A8lMkWgjMkQd5IASnyag vW3BGAgHGg1CfHD5FDOd -----END CERTIFICATE-----Generated at Wed Nov 5 01:37:08 2025 by rpki-client