$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer File: 4a595a80-2106-455a-be91-2aa623280126.cer (raw, json) Hash identifier: p5gAj1qfBRArEFiRqH46WAknGYvLi3dnrk5G0XlhlLk= Subject key identifier: 52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AACAE46DD467E0FF94BC52E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Jul 2025 02:10:57 +0000 Certificate not after: Mon 01 Nov 2027 02:10:57 +0000 Subordinate resources: IP: 2604:11a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:ae:46:dd:46:7e:0f:f9:4b:c5:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 29 02:10:57 2025 GMT Not After : Nov 1 02:10:57 2027 GMT Subject: CN=4a595a80-2106-455a-be91-2aa623280126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:94:6c:26:d5:b9:f4:60:0e:04:01:9a:39: 03:36:64:7d:48:32:85:9c:8e:8f:47:86:0d:c5:2e: cf:a4:d8:77:cf:5e:37:9b:0f:87:eb:4d:fd:72:6a: 01:71:9a:80:67:16:3c:db:d9:d4:c2:8f:d0:48:15: 91:58:a5:9d:09:36:ca:d7:ed:fb:99:f1:35:a8:85: 0e:29:fb:9f:6b:f1:b8:96:cf:2f:24:62:79:0f:af: a6:6f:f7:68:38:46:f7:80:53:69:7b:6b:4a:01:fe: 9d:82:86:20:3d:87:a6:bf:99:63:de:bd:f6:b5:5b: 11:52:b6:68:db:dc:13:64:69:2d:5e:01:2b:5d:14: f7:c8:d0:09:5a:30:e3:a9:65:b2:13:df:2b:27:2c: b3:aa:75:b2:b8:c7:88:fa:8b:26:f3:ef:5c:ae:ff: 8b:d0:b9:05:ec:72:ca:e9:d3:49:ab:33:2c:7e:f8: 0e:5e:10:39:57:7e:f9:63:7b:dc:32:69:ba:1f:70: 11:eb:6a:c5:e8:d5:cf:2b:bb:16:22:8f:40:5e:02: 65:2d:ef:7b:42:07:64:1c:62:83:3e:33:20:10:cb: 6d:92:1c:60:51:4e:dc:df:a7:11:0f:0c:0a:cb:dd: e3:7f:d6:30:5a:58:e5:b9:98:fa:5e:25:64:ef:ff: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2604:11a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6e:02:86:d7:b5:d8:70:d5:00:89:84:dd:42:fd:72:bd:88: d5:39:88:09:f4:71:eb:0a:f9:e3:98:27:67:d8:92:63:ad:23: 88:e5:6b:fc:a0:a3:bf:70:88:af:67:a8:d1:f3:ea:5a:dc:86: 3e:cd:ff:4f:76:96:6c:5d:45:d4:a6:cb:3d:58:6d:d9:f3:6d: 3b:87:ab:cd:b7:e2:72:2f:61:79:b6:58:b3:86:23:fe:49:93: bf:81:c2:ec:ce:d2:4d:2d:8d:f0:75:2a:cf:09:1f:8a:40:b4: ca:1a:e0:ab:b0:9c:a2:a3:24:16:a5:3e:5e:11:a7:22:ca:dd: 7f:30:a6:14:36:e8:d1:e8:0e:31:df:5b:86:5d:89:c0:60:b9: 97:e0:2a:dd:1a:da:6f:11:55:49:54:b3:79:b3:76:a2:4d:fe: 69:27:d9:fb:40:3b:4f:d4:62:b0:7c:e8:e7:a3:01:9a:f7:a6: 07:31:47:8f:6e:ec:f2:da:85:3a:2d:52:b6:6e:f2:5f:59:24: a6:d8:c8:f8:6d:dc:5c:c2:b0:db:77:13:7b:c8:06:07:2b:85: 32:b8:d2:04:d7:b8:10:ba:b4:c3:56:8c:52:67:7b:ca:41:9e: 1c:b3:6e:6b:0d:33:93:3f:a4:7c:4d:c9:9d:dd:87:79:c6:61: d2:d3:55:0d -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEqsrkbdRn4P+UvFLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyOTAyMTA1N1oXDTI3MTEwMTAyMTA1N1owLzEtMCsGA1UEAxMk NGE1OTVhODAtMjEwNi00NTVhLWJlOTEtMmFhNjIzMjgwMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8OUbCbVufRgDgQBmjkDNmR9SDKFnI6PR4YN xS7PpNh3z143mw+H6039cmoBcZqAZxY829nUwo/QSBWRWKWdCTbK1+37mfE1qIUO Kfufa/G4ls8vJGJ5D6+mb/doOEb3gFNpe2tKAf6dgoYgPYemv5lj3r32tVsRUrZo 29wTZGktXgErXRT3yNAJWjDjqWWyE98rJyyzqnWyuMeI+osm8+9crv+L0LkF7HLK 6dNJqzMsfvgOXhA5V375Y3vcMmm6H3AR62rF6NXPK7sWIo9AXgJlLe97QgdkHGKD PjMgEMttkhxgUU7c36cRDwwKy93jf9YwWljluZj6XiVk7/+kFQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFFLW1eayEiAA2uSuj/xlIWu120+zMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 YTU5NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2MjMyODAxMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzRhNTk1YTgwLTIxMDYtNDU1YS1i ZTkxLTJhYTYyMzI4MDEyNi80YTU5NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2MjMy ODAxMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBBGgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIFuAobXtdhw1QCJhN1C /XK9iNU5iAn0cesK+eOYJ2fYkmOtI4jla/ygo79wiK9nqNHz6lrchj7N/092lmxd RdSmyz1YbdnzbTuHq8234nIvYXm2WLOGI/5Jk7+BwuzO0k0tjfB1Ks8JH4pAtMoa 4KuwnKKjJBalPl4RpyLK3X8wphQ26NHoDjHfW4ZdicBguZfgKt0a2m8RVUlUs3mz dqJN/mkn2ftAO0/UYrB86OejAZr3pgcxR49u7PLahTotUrZu8l9ZJKbYyPht3FzC sNt3E3vIBgcrhTK40gTXuBC6tMNWjFJne8pBnhyzbmsNM5M/pHxNyZ3dh3nGYdLT VQ0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:28:34 2025 by rpki-client