$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82.cer File: 9030418a-18ab-40d5-a327-337add5a0b82.cer (raw, json) Hash identifier: w3VhlQo7hJVhn9DVXjJkSQsSrvVUZNTFa5sYJdT5PnE= Subject key identifier: 7B:31:7D:2B:17:6E:93:E2:1A:7A:01:F3:CD:79:70:0F:59:E1:6C:F3 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A8BCF799E7CC88088401BA980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/9030418a-18ab-40d5-a327-337add5a0b82.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 07:36:10 +0000 Certificate not after: Wed 20 Oct 2027 07:36:10 +0000 Subordinate resources: IP: 23.141.156.0/24 IP: 2602:f5e1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:cf:79:9e:7c:c8:80:88:40:1b:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 17 07:36:10 2025 GMT Not After : Oct 20 07:36:10 2027 GMT Subject: CN=9030418a-18ab-40d5-a327-337add5a0b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:43:13:f6:94:cb:50:0a:5b:e6:24:a0:a8: b1:e3:ed:33:12:bd:fd:a0:24:b4:20:9c:02:2e:9d: a1:a9:f0:51:11:8f:3a:c1:73:f5:9f:f2:74:16:a8: c5:7f:ba:d6:bb:4a:20:a0:6b:0c:6c:33:b4:5c:89: d0:11:8f:52:4f:0d:f5:d8:43:28:da:97:ea:b4:3b: c5:1e:cd:6e:00:6e:a6:7d:34:dc:cc:b1:40:99:33: 69:75:0a:fc:d1:d3:09:ee:bd:bf:03:ee:ac:25:98: 10:ba:90:e3:ff:8e:13:3f:e2:9b:b0:81:c0:fc:59: f5:9a:d4:89:46:89:af:9a:8a:4d:23:d5:fc:4e:b0: 5f:c1:9a:de:7f:b1:0d:18:64:d5:7d:c5:1f:b4:47: 32:a9:7f:db:60:55:14:4c:32:e3:d4:1e:98:d4:d2: de:79:c4:f9:37:99:8b:ef:db:33:30:d8:fc:a7:da: bf:3d:7a:01:3d:f7:74:ae:bc:0c:d5:39:8a:19:b9: 8c:ef:e5:74:90:4b:53:8f:06:f9:6d:b4:e3:fd:2e: d2:52:2d:dc:ce:e1:39:92:58:c5:50:81:f5:54:bd: a3:1e:3a:f4:96:17:30:11:27:e6:3f:59:31:f3:20: 55:b2:4f:aa:83:cf:27:91:09:53:55:a1:3e:a8:d2: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:31:7D:2B:17:6E:93:E2:1A:7A:01:F3:CD:79:70:0F:59:E1:6C:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9030418a-18ab-40d5-a327-337add5a0b82/9030418a-18ab-40d5-a327-337add5a0b82.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.156.0/24 IPv6: 2602:f5e1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:3e:d3:ee:6b:36:1b:36:be:39:f5:23:89:43:da:67:cd:eb: 98:0b:05:fb:dd:8e:2e:f8:fb:e8:e0:6b:a6:e1:e7:bb:1c:d3: 71:78:86:45:c6:42:5c:67:1a:98:4f:26:8b:af:73:ef:ee:30: 3d:31:6a:fd:ef:29:40:56:c7:f6:95:f2:05:cb:09:f6:26:56: 73:98:61:fe:bf:47:6a:6d:53:ba:e8:ef:17:d3:bb:3a:7f:82: f8:00:9c:d5:c2:bb:b7:53:20:bd:28:83:bd:e0:50:99:f4:50: d5:d1:21:7a:88:9e:70:aa:e5:b3:a6:ff:66:ce:a1:90:db:86: 3b:92:d2:a6:54:76:f9:36:19:48:2a:66:c3:a5:e2:fd:75:49: d2:61:e9:09:a4:0d:30:de:e5:1e:24:76:33:28:b2:f3:84:61: 10:b3:b0:8f:19:c3:86:b1:80:30:f1:af:2d:88:a1:3a:2c:e4: 27:b8:6d:8f:ae:6a:6a:d0:a1:32:6b:7f:f0:10:e5:02:e4:40: 25:a8:51:88:80:59:2c:bc:1c:69:d2:c3:3c:f5:16:db:c2:72: 72:77:3d:54:c9:9b:e7:91:58:45:aa:2e:15:10:71:63:2a:2b: 34:de:a8:52:bd:d6:47:3c:14:c1:b5:0b:a4:82:f5:84:b9:fa: 81:42:4f:bd -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqLz3mefMiAiEAbqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNzA3MzYxMFoXDTI3MTAyMDA3MzYxMFowLzEtMCsGA1UEAxMk OTAzMDQxOGEtMThhYi00MGQ1LWEzMjctMzM3YWRkNWEwYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon5DE/aUy1AKW+YkoKix4+0zEr39oCS0IJwC Lp2hqfBREY86wXP1n/J0FqjFf7rWu0ogoGsMbDO0XInQEY9STw312EMo2pfqtDvF Hs1uAG6mfTTczLFAmTNpdQr80dMJ7r2/A+6sJZgQupDj/44TP+KbsIHA/Fn1mtSJ RomvmopNI9X8TrBfwZref7ENGGTVfcUftEcyqX/bYFUUTDLj1B6Y1NLeecT5N5mL 79szMNj8p9q/PXoBPfd0rrwM1TmKGbmM7+V0kEtTjwb5bbTj/S7SUi3czuE5kljF UIH1VL2jHjr0lhcwESfmP1kx8yBVsk+qg88nkQlTVaE+qNIhDwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHsxfSsXbpPiGnoB8815cA9Z4WzzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 MDMwNDE4YS0xOGFiLTQwZDUtYTMyNy0zMzdhZGQ1YTBiODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzkwMzA0MThhLTE4YWItNDBkNS1h MzI3LTMzN2FkZDVhMGI4Mi85MDMwNDE4YS0xOGFiLTQwZDUtYTMyNy0zMzdhZGQ1 YTBiODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjZwwDgQCAAIwCAMGACYC9eEAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKQ+0+5rNhs2vjn1I4lD2mfN65gLBfvdji74++jga6bh57sc03F4hkXGQlxnGphP Jouvc+/uMD0xav3vKUBWx/aV8gXLCfYmVnOYYf6/R2ptU7ro7xfTuzp/gvgAnNXC u7dTIL0og73gUJn0UNXRIXqInnCq5bOm/2bOoZDbhjuS0qZUdvk2GUgqZsOl4v11 SdJh6QmkDTDe5R4kdjMosvOEYRCzsI8Zw4axgDDxry2IoTos5Ce4bY+uamrQoTJr f/AQ5QLkQCWoUYiAWSy8HGnSwzz1FtvCcnJ3PVTJm+eRWEWqLhUQcWMqKzTeqFK9 1kc8FMG1C6SC9YS5+oFCT70= -----END CERTIFICATE-----Generated at Wed Nov 5 10:10:01 2025 by rpki-client