$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609.cer File: 3e7444b5-1f39-42b3-8603-6480a7a61609.cer (raw, json) Hash identifier: lpkyEOPyGq8skNcaDL/p3XRLJyjHAC1sLtaURGulEHQ= Subject key identifier: 10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B66710F1A0FCCCC61658A6880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Oct 2025 15:07:57 +0000 Certificate not after: Thu 06 Jan 2028 16:07:57 +0000 Subordinate resources: IP: 2602:f533::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:71:0f:1a:0f:cc:cc:61:65:8a:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 3 15:07:57 2025 GMT Not After : Jan 6 16:07:57 2028 GMT Subject: CN=3e7444b5-1f39-42b3-8603-6480a7a61609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:6d:ab:8a:62:4e:9c:7b:0a:44:cf:85:7b: 01:d1:28:81:82:e1:38:e3:f8:0d:95:e5:13:ec:3a: 7e:8c:28:26:a6:cb:37:34:6d:96:9c:86:b5:67:29: b6:40:04:53:1c:13:bb:63:d6:59:0c:c0:d8:03:5c: 42:58:b2:65:ce:8d:32:bf:7c:49:bc:8f:3e:ab:35: f5:47:d9:9a:2c:37:55:93:3b:6f:07:e1:63:3f:e7: 20:95:ca:f0:de:26:c8:21:f0:a0:f4:b1:f1:86:8f: 9c:ba:3b:ea:0e:01:55:78:5b:45:84:d9:f4:db:dc: 5f:4e:4e:18:0e:f9:fe:18:fa:58:6d:c8:4b:33:fe: 42:18:f2:2f:30:8c:1b:cc:56:43:f0:89:5c:9c:17: 24:18:3c:31:6f:85:10:29:e0:35:e3:cb:02:a2:fb: 93:e5:dc:a9:8a:25:ff:89:0c:a7:d8:52:13:0e:a4: 54:65:85:c7:71:0a:ac:a1:d8:05:b1:07:92:1d:13: da:c3:ff:d6:a5:7e:d8:0d:18:e7:4c:74:96:2b:99: 3b:6d:50:00:6e:54:38:ef:a9:1b:f7:72:e5:8f:7c: 2d:7a:2a:20:df:69:2e:a0:07:3e:ee:9c:43:2c:4e: 86:a5:f0:17:98:d7:68:b5:9c:a3:11:09:71:17:ad: 22:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E0:C2:B7:DA:AB:E8:42:D0:C6:55:49:1B:F7:AB:D2:29:FE:BD:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e7444b5-1f39-42b3-8603-6480a7a61609/3e7444b5-1f39-42b3-8603-6480a7a61609.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f533::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:69:ec:dd:c1:2e:ee:85:6f:6b:16:38:61:4f:8a:d5:9f:ea: 07:cb:af:e4:81:19:ad:56:7d:0c:28:9a:29:60:d9:0f:4f:d3: 12:20:df:d6:77:31:7f:62:b3:78:dd:fe:fb:e7:33:88:a7:6e: df:b9:ff:e4:c8:8a:ca:00:12:1f:cb:7b:a7:7b:85:af:49:8a: 83:bb:30:1d:64:28:b6:61:69:f5:d6:83:78:7f:fc:32:19:7c: a0:20:b0:1c:40:cc:04:be:d8:18:84:12:31:fc:fa:f7:56:66: 8f:a6:23:c2:8b:f0:64:ad:f9:07:cc:0e:d4:b9:73:f5:d6:7d: 5f:95:35:cc:fa:68:6c:76:89:f3:1f:c4:6d:35:81:41:bb:fc: 98:fe:42:53:3b:6d:aa:a3:1b:1d:48:9a:b0:81:60:af:e7:f0: a6:6e:a7:3e:e5:44:c9:36:f6:c3:4e:94:81:00:a2:5e:6b:7a: a5:8f:0d:c6:77:f6:f6:bf:ef:21:08:83:95:b1:f6:9f:32:62: 88:12:aa:ef:91:c4:8e:d4:95:db:d3:09:e1:f0:70:b1:11:0b: 41:bb:3a:c1:44:f0:d8:68:d3:4e:96:ef:11:ac:65:f4:5c:9d: c8:82:f7:6b:8d:9d:42:04:28:40:a1:37:5b:fa:1f:98:ac:ea: ee:6d:bd:97 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEtmcQ8aD8zMYWWKaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMzE1MDc1N1oXDTI4MDEwNjE2MDc1N1owLzEtMCsGA1UEAxMk M2U3NDQ0YjUtMWYzOS00MmIzLTg2MDMtNjQ4MGE3YTYxNjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNNtq4piTpx7CkTPhXsB0SiBguE44/gNleUT 7Dp+jCgmpss3NG2WnIa1Zym2QARTHBO7Y9ZZDMDYA1xCWLJlzo0yv3xJvI8+qzX1 R9maLDdVkztvB+FjP+cglcrw3ibIIfCg9LHxho+cujvqDgFVeFtFhNn029xfTk4Y Dvn+GPpYbchLM/5CGPIvMIwbzFZD8IlcnBckGDwxb4UQKeA148sCovuT5dypiiX/ iQyn2FITDqRUZYXHcQqsodgFsQeSHRPaw//WpX7YDRjnTHSWK5k7bVAAblQ476kb 93Llj3wteiog32kuoAc+7pxDLE6GpfAXmNdotZyjEQlxF60iuwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFBDgwrfaq+hC0MZVSRv3q9Ip/r0YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z ZTc0NDRiNS0xZjM5LTQyYjMtODYwMy02NDgwYTdhNjE2MDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzNlNzQ0NGI1LTFmMzktNDJiMy04 NjAzLTY0ODBhN2E2MTYwOS8zZTc0NDRiNS0xZjM5LTQyYjMtODYwMy02NDgwYTdh NjE2MDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvUzADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlaezdwS7uhW9rFjhh T4rVn+oHy6/kgRmtVn0MKJopYNkPT9MSIN/WdzF/YrN43f775zOIp27fuf/kyIrK ABIfy3une4WvSYqDuzAdZCi2YWn11oN4f/wyGXygILAcQMwEvtgYhBIx/Pr3VmaP piPCi/BkrfkHzA7UuXP11n1flTXM+mhsdonzH8RtNYFBu/yY/kJTO22qoxsdSJqw gWCv5/Cmbqc+5UTJNvbDTpSBAKJea3qljw3Gd/b2v+8hCIOVsfafMmKIEqrvkcSO 1JXb0wnh8HCxEQtBuzrBRPDYaNNOlu8RrGX0XJ3IgvdrjZ1CBChAoTdb+h+YrOru bb2X -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:07 2025 by rpki-client