$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.cer File: 913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.cer (raw, json) Hash identifier: aYoksqGwUJ/hlWzugazlL0iIyhGPHFFdeGVvw16BuXo= Subject key identifier: 2F:7D:82:BF:12:DE:FC:8F:8E:1B:5A:BC:FD:EE:F3:28:26:7E:7A:23 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584BBD52029FC323364128CD37C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 18:00:43 +0000 Certificate not after: Sun 06 Feb 2028 18:00:43 +0000 Subordinate resources: IP: 130.12.104.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:52:02:9f:c3:23:36:41:28:cd:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Nov 3 18:00:43 2025 GMT Not After : Feb 6 18:00:43 2028 GMT Subject: CN=913eb957-ee4b-4400-b9e4-67fc5e9e2a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:33:30:37:f2:a6:a5:b8:ec:b6:bd:cc:bb:2e: 14:34:0b:72:04:c0:15:bf:a6:15:0e:84:a8:a7:e5: 0d:09:f3:85:2a:7b:8e:e7:8b:35:1c:7b:33:cb:74: f7:65:aa:63:95:e6:c5:57:20:84:9f:f5:d4:d1:ef: c4:93:dd:93:0c:38:88:e8:5c:93:6b:c1:96:cf:99: 1f:a3:ec:81:00:bc:5c:6d:b4:98:19:4f:3a:b0:26: 0d:9f:c5:2b:31:f0:e7:91:75:cb:52:ec:8d:cf:ab: 94:a5:8a:20:ee:b0:15:3d:34:b7:3d:70:e0:5f:ec: 68:7f:9b:c0:38:a4:a0:d0:67:c3:d0:fa:68:7c:8b: cc:09:fb:99:ef:f8:10:d2:51:f6:f9:81:3d:13:35: ba:2c:fa:d7:d4:24:58:1d:cc:b2:e8:7a:e0:41:b0: 9f:24:a9:00:df:38:80:ee:1f:a9:47:ba:6e:3c:0c: e2:12:ea:cc:f1:f0:2a:40:8b:ea:b2:45:53:15:14: 50:61:0c:b3:a1:e3:f3:ad:e1:c1:e7:fe:78:23:29: 82:43:3d:54:1a:fc:5b:3d:5a:7d:f1:b6:30:9f:51: a6:f1:9d:89:f6:16:2e:12:01:87:12:bd:c1:99:09: f1:44:5d:e7:46:3d:15:a3:bc:0b:b5:0b:d6:72:3e: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7D:82:BF:12:DE:FC:8F:8E:1B:5A:BC:FD:EE:F3:28:26:7E:7A:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 130.12.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:47:32:c0:59:71:47:16:b5:69:95:2d:4c:d6:93:0a:d1:8e: 9a:04:4d:0e:23:18:82:32:2b:57:79:7f:8c:ef:41:db:be:84: 03:30:51:cc:19:f0:0e:2c:2c:a8:44:dd:25:d3:f6:7c:3c:d6: ac:c7:7b:c8:1c:b5:ed:df:96:43:60:62:f6:41:43:c7:df:c3: d8:f8:62:84:99:3b:11:4b:f8:35:72:e7:a6:56:1e:de:bb:c8: 12:63:dc:6e:45:eb:ea:ec:17:ab:be:48:f9:4c:b3:20:02:83: 78:2b:7d:e9:67:53:e8:47:b7:11:be:11:35:95:38:54:d9:1a: 32:d1:b1:ab:a6:1e:7b:b0:8c:f0:59:8a:2b:12:e7:c3:7c:e7: 04:ee:85:07:0e:95:5a:7d:ff:a2:e2:2c:18:c6:ff:aa:0b:52: 4c:f0:4a:e6:14:7e:9d:ca:94:3c:66:42:d0:b3:75:b9:df:2a: fd:19:40:17:74:e4:b8:af:1b:f4:2a:95:a2:7c:ad:22:4c:b0: 89:c6:28:e7:9a:45:01:5d:e0:92:5d:5b:e1:ae:a0:40:31:66: b1:b2:d3:23:dc:80:5b:b9:7f:b3:44:1c:57:23:85:a4:4a:50: 41:d2:1d:c1:c8:8f:13:55:21:44:5a:fb:f0:62:6e:c0:8e:44: 54:1b:c1:bc -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEu9UgKfwyM2QSjNN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTEwMzE4MDA0M1oXDTI4MDIwNjE4MDA0M1owLzEtMCsGA1UEAxMk OTEzZWI5NTctZWU0Yi00NDAwLWI5ZTQtNjdmYzVlOWUyYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDMwN/Kmpbjstr3Muy4UNAtyBMAVv6YVDoSo p+UNCfOFKnuO54s1HHszy3T3ZapjlebFVyCEn/XU0e/Ek92TDDiI6FyTa8GWz5kf o+yBALxcbbSYGU86sCYNn8UrMfDnkXXLUuyNz6uUpYog7rAVPTS3PXDgX+xof5vA OKSg0GfD0PpofIvMCfuZ7/gQ0lH2+YE9EzW6LPrX1CRYHcyy6HrgQbCfJKkA3ziA 7h+pR7puPAziEurM8fAqQIvqskVTFRRQYQyzoePzreHB5/54IymCQz1UGvxbPVp9 8bYwn1Gm8Z2J9hYuEgGHEr3BmQnxRF3nRj0Vo7wLtQvWcj5QCwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFC99gr8S3vyPjhtavP3u8ygmfnojMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 MTNlYjk1Ny1lZTRiLTQ0MDAtYjllNC02N2ZjNWU5ZTJhNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzkxM2ViOTU3LWVlNGItNDQwMC1i OWU0LTY3ZmM1ZTllMmE2ZS85MTNlYjk1Ny1lZTRiLTQ0MDAtYjllNC02N2ZjNWU5 ZTJhNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACCDGgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAEcywFlxRxa1aZUtTNaT CtGOmgRNDiMYgjIrV3l/jO9B276EAzBRzBnwDiwsqETdJdP2fDzWrMd7yBy17d+W Q2Bi9kFDx9/D2PhihJk7EUv4NXLnplYe3rvIEmPcbkXr6uwXq75I+UyzIAKDeCt9 6WdT6Ee3Eb4RNZU4VNkaMtGxq6Yee7CM8FmKKxLnw3znBO6FBw6VWn3/ouIsGMb/ qgtSTPBK5hR+ncqUPGZC0LN1ud8q/RlAF3TkuK8b9CqVonytIkywicYo55pFAV3g kl1b4a6gQDFmsbLTI9yAW7l/s0QcVyOFpEpQQdIdwciPE1UhRFr78GJuwI5EVBvB vA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:13 2025 by rpki-client