$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca.cer File: 7482621e-c6dd-432b-9b07-f4defcbe44ca.cer (raw, json) Hash identifier: xczXMNwDzl5WsPXldlO8QyuCvKS8b7Hu8B0xrvXrKLw= Subject key identifier: DC:3B:FE:51:67:1D:13:2A:76:98:33:0E:BF:5A:10:32:7D:11:2B:76 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC86720F96131619FC3C46480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 00:30:13 +0000 Certificate not after: Thu 11 Nov 2027 01:30:13 +0000 Subordinate resources: IP: 147.226.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:67:20:f9:61:31:61:9f:c3:c4:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 8 00:30:13 2025 GMT Not After : Nov 11 01:30:13 2027 GMT Subject: CN=7482621e-c6dd-432b-9b07-f4defcbe44ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ae:8a:e0:19:d5:42:49:bb:de:56:de:de:6c: 6a:7c:37:ff:34:43:8b:e9:5e:23:fe:27:60:ed:05: 9d:a4:7d:0d:c6:fc:97:b7:8e:1d:8c:0d:5b:93:63: 5f:8e:39:8a:1c:7c:8d:02:1b:bc:95:0b:de:79:12: 01:0d:f4:0d:1f:44:bb:72:57:f3:ed:3e:e6:50:52: 21:e7:13:54:3e:fe:df:de:35:9c:33:ce:d5:23:37: 0a:46:0e:b6:85:a0:87:08:ac:80:16:12:fb:6e:9b: ac:cc:54:44:4b:70:43:80:ba:03:c2:63:40:96:49: 68:99:de:bb:b9:d6:06:3d:7e:1d:7b:46:01:33:76: f7:95:db:af:4b:49:69:ae:8d:d2:ff:cb:56:8a:3b: 93:bb:ba:63:c1:ec:a4:2a:58:92:6e:8a:c9:d4:60: 30:13:ac:8c:b8:cd:99:8e:5b:9d:f7:69:8d:06:5c: 58:6f:30:15:80:c6:ee:8f:7b:f4:43:df:6d:6f:39: 4b:c7:1f:23:47:61:5f:d2:f4:ca:25:0e:61:4f:ea: 4f:71:99:12:03:3b:a1:73:26:37:71:e6:4b:b2:a7: 37:9d:e5:66:f1:21:22:ab:07:76:2b:2f:5f:01:5c: a4:d4:1c:65:37:d9:f5:58:f7:84:b8:3b:53:9a:7a: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3B:FE:51:67:1D:13:2A:76:98:33:0E:BF:5A:10:32:7D:11:2B:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7482621e-c6dd-432b-9b07-f4defcbe44ca/7482621e-c6dd-432b-9b07-f4defcbe44ca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 147.226.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:d5:61:d4:b9:db:eb:34:fb:bd:98:64:8b:62:45:64:64:93: a2:1d:88:6c:fd:06:14:0d:db:ab:80:2c:19:60:5b:f3:55:d6: c1:96:e2:8b:e3:3a:c2:58:81:57:cb:ba:1c:4d:00:ec:21:62: 65:ec:d6:3d:9a:fe:ad:00:f9:8d:a9:29:fb:1b:fa:f4:b9:5f: 20:b0:7c:91:58:a1:09:ae:96:87:1a:59:ff:51:07:36:1e:a2: 47:a7:39:0d:2d:03:97:86:c3:37:9c:c4:63:12:77:94:45:ee: 72:71:3a:40:37:3a:06:2c:96:bd:59:67:fe:76:e2:fe:5b:f5: 94:32:46:d1:d3:9d:4b:7d:96:3c:2e:79:70:2c:e4:67:ca:20: c7:09:24:20:27:b1:9c:9a:98:d4:b1:d2:12:a9:9e:d3:40:d0: 16:fe:a0:bb:00:d1:73:23:1c:5e:7e:8c:3a:f0:6e:09:aa:e6: 99:a0:46:e0:60:8d:90:a8:8d:9f:1d:fb:86:e8:17:07:0a:e2: 6d:39:55:1a:8f:e4:0a:39:9f:13:58:5e:53:11:ec:4c:ee:ee: 11:2d:71:c5:89:41:17:e3:00:30:8e:00:ed:ec:c0:1e:0e:19: 0e:94:4a:14:0f:44:9e:2f:6e:f0:41:d8:d4:66:ec:86:0a:2b: 26:de:06:2e -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWErIZyD5YTFhn8PEZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwODAwMzAxM1oXDTI3MTExMTAxMzAxM1owLzEtMCsGA1UEAxMk NzQ4MjYyMWUtYzZkZC00MzJiLTliMDctZjRkZWZjYmU0NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq6K4BnVQkm73lbe3mxqfDf/NEOL6V4j/idg 7QWdpH0NxvyXt44djA1bk2NfjjmKHHyNAhu8lQveeRIBDfQNH0S7clfz7T7mUFIh 5xNUPv7f3jWcM87VIzcKRg62haCHCKyAFhL7bpuszFRES3BDgLoDwmNAlklomd67 udYGPX4de0YBM3b3lduvS0lpro3S/8tWijuTu7pjweykKliSborJ1GAwE6yMuM2Z jlud92mNBlxYbzAVgMbuj3v0Q99tbzlLxx8jR2Ff0vTKJQ5hT+pPcZkSAzuhcyY3 ceZLsqc3neVm8SEiqwd2Ky9fAVyk1BxlN9n1WPeEuDtTmnr5cQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFNw7/lFnHRMqdpgzDr9aEDJ9ESt2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 NDgyNjIxZS1jNmRkLTQzMmItOWIwNy1mNGRlZmNiZTQ0Y2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzc0ODI2MjFlLWM2ZGQtNDMyYi05 YjA3LWY0ZGVmY2JlNDRjYS83NDgyNjIxZS1jNmRkLTQzMmItOWIwNy1mNGRlZmNi ZTQ0Y2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCT4jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCt1WHUudvrNPu9mGSLYkVk ZJOiHYhs/QYUDdurgCwZYFvzVdbBluKL4zrCWIFXy7ocTQDsIWJl7NY9mv6tAPmN qSn7G/r0uV8gsHyRWKEJrpaHGln/UQc2HqJHpzkNLQOXhsM3nMRjEneURe5ycTpA NzoGLJa9WWf+duL+W/WUMkbR051LfZY8LnlwLORnyiDHCSQgJ7GcmpjUsdISqZ7T QNAW/qC7ANFzIxxefow68G4JquaZoEbgYI2QqI2fHfuG6BcHCuJtOVUaj+QKOZ8T WF5TEexM7u4RLXHFiUEX4wAwjgDt7MAeDhkOlEoUD0SeL27wQdjUZuyGCism3gYu -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:35 2025 by rpki-client