$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864.cer File: 509049fe-e6ce-45c8-b45a-8efc9d25e864.cer (raw, json) Hash identifier: ZtS6KsCJRQxzfbbnpqqcIpMKrR+F6+FxGyF2wMW8RLM= Subject key identifier: A3:06:43:C3:45:D0:FC:38:27:1D:0E:D7:CB:A5:B6:FB:93:7D:43:DC Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B762B72AFF6F825E1913E0F50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/509049fe-e6ce-45c8-b45a-8efc9d25e864.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 06:20:38 +0000 Certificate not after: Wed 12 Jan 2028 07:20:38 +0000 Subordinate resources: IP: 216.235.222.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:2b:72:af:f6:f8:25:e1:91:3e:0f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 9 06:20:38 2025 GMT Not After : Jan 12 07:20:38 2028 GMT Subject: CN=509049fe-e6ce-45c8-b45a-8efc9d25e864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:da:73:97:fd:61:63:87:c1:7e:cd:53:39:4e: d8:62:30:78:40:f4:41:fe:a1:ca:c0:80:ee:39:f0: c2:a2:b1:c2:aa:68:53:95:c7:e9:48:cd:29:2b:10: 0d:d4:fb:29:0c:cf:cb:a6:19:5f:c8:c4:d6:f2:cf: d7:a7:70:2f:49:56:6b:eb:02:7e:40:6e:69:e8:37: 9b:2f:6e:ed:27:fa:ee:74:bf:8d:37:da:4e:8c:3e: cd:07:08:d0:6b:70:d5:17:0c:73:1c:b4:6e:1e:dd: d8:72:f1:f8:76:aa:ef:e9:ca:9a:13:22:dc:e6:4a: 00:33:81:51:f4:fc:9e:35:21:b0:61:77:7e:98:4f: 95:b9:cf:d8:41:ba:75:43:dc:06:47:50:3e:e3:4a: 1b:96:ec:66:57:06:d3:ca:84:f3:1b:5b:66:cb:7a: ec:b6:62:fa:11:66:4a:bf:84:2c:5d:32:5f:70:0d: 4c:54:70:71:d9:49:6d:9b:9d:a8:ac:f5:6d:34:9a: b8:f6:c7:54:10:be:e0:3f:8e:48:9d:de:56:47:84: 30:56:58:c0:28:35:77:0e:e3:82:e5:1e:a3:58:f9: 62:b7:84:d4:27:4f:27:fb:d0:65:df:9d:39:10:ba: a5:ac:2a:16:d5:18:44:e4:79:9c:9d:b9:a6:5e:46: a0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:06:43:C3:45:D0:FC:38:27:1D:0E:D7:CB:A5:B6:FB:93:7D:43:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/509049fe-e6ce-45c8-b45a-8efc9d25e864.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 216.235.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:61:b5:c0:42:26:20:f7:8c:11:10:d6:a0:72:67:42:cc:e3: 1b:5d:cb:b7:a5:8e:3f:86:cf:49:c3:ab:60:b1:4a:32:93:95: 1c:a1:a8:79:a9:ca:87:2e:c6:bf:be:28:04:90:32:8c:bb:15: 86:6d:86:3e:18:7d:05:5a:68:a6:14:ab:1b:17:ac:58:6d:ae: 72:18:6e:c1:48:32:e8:8a:9e:00:bb:b3:be:45:9d:2f:b5:80: 62:76:1c:21:40:41:32:7c:22:33:c0:f1:fe:bf:61:0f:b4:27: 57:64:d4:95:82:60:0a:75:94:7a:e2:a7:d5:6b:42:3a:89:0f: d5:27:bc:53:c5:c5:b1:62:06:66:5f:35:b6:a7:e4:ef:52:45: 36:7a:fc:02:a2:35:f8:81:6e:a1:08:d6:f9:9b:de:65:57:ca: 7c:36:ca:2f:8c:b3:5d:85:a6:13:64:a9:4f:7c:5a:f4:cb:bd: a9:c8:94:23:e2:17:69:4e:c7:10:15:f3:13:48:dd:e6:65:54: 72:f1:ef:c7:82:b1:0d:8d:ac:aa:bb:cb:18:99:33:d1:3f:92: 39:79:6e:be:0a:eb:9f:6f:de:96:1c:30:00:9d:65:a3:79:0a: ff:0d:df:0a:fa:e5:84:b2:2a:78:e8:da:5f:fe:4b:e7:71:db: 13:c3:44:57 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt2K3Kv9vgl4ZE+D1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwOTA2MjAzOFoXDTI4MDExMjA3MjAzOFowLzEtMCsGA1UEAxMk NTA5MDQ5ZmUtZTZjZS00NWM4LWI0NWEtOGVmYzlkMjVlODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9pzl/1hY4fBfs1TOU7YYjB4QPRB/qHKwIDu OfDCorHCqmhTlcfpSM0pKxAN1PspDM/LphlfyMTW8s/Xp3AvSVZr6wJ+QG5p6Deb L27tJ/rudL+NN9pOjD7NBwjQa3DVFwxzHLRuHt3YcvH4dqrv6cqaEyLc5koAM4FR 9PyeNSGwYXd+mE+Vuc/YQbp1Q9wGR1A+40obluxmVwbTyoTzG1tmy3rstmL6EWZK v4QsXTJfcA1MVHBx2Ultm52orPVtNJq49sdUEL7gP45Ind5WR4QwVljAKDV3DuOC 5R6jWPlit4TUJ08n+9Bl3505ELqlrCoW1RhE5HmcnbmmXkaguQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKMGQ8NF0Pw4Jx0O18ultvuTfUPcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 MDkwNDlmZS1lNmNlLTQ1YzgtYjQ1YS04ZWZjOWQyNWU4NjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzUwOTA0OWZlLWU2Y2UtNDVjOC1i NDVhLThlZmM5ZDI1ZTg2NC81MDkwNDlmZS1lNmNlLTQ1YzgtYjQ1YS04ZWZjOWQy NWU4NjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADY694wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAm2G1wEImIPeMERDWoHJn QszjG13Lt6WOP4bPScOrYLFKMpOVHKGoeanKhy7Gv74oBJAyjLsVhm2GPhh9BVpo phSrGxesWG2uchhuwUgy6IqeALuzvkWdL7WAYnYcIUBBMnwiM8Dx/r9hD7QnV2TU lYJgCnWUeuKn1WtCOokP1Se8U8XFsWIGZl81tqfk71JFNnr8AqI1+IFuoQjW+Zve ZVfKfDbKL4yzXYWmE2SpT3xa9Mu9qciUI+IXaU7HEBXzE0jd5mVUcvHvx4KxDY2s qrvLGJkz0T+SOXluvgrrn2/elhwwAJ1lo3kK/w3fCvrlhLIqeOjaX/5L53HbE8NE Vw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:05:33 2025 by rpki-client