$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93cbeda6-437f-4dc2-9319-018ad699c020.cer File: 93cbeda6-437f-4dc2-9319-018ad699c020.cer (raw, json) Hash identifier: 3zsIxDco3dcRckaQ5OCHN5WjNGB9ahESanH2GG7r8u8= Subject key identifier: F9:28:15:D1:AC:AF:AE:DE:3B:E9:AD:1A:0C:26:F7:C1:51:95:EB:15 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AE6B0E92CBF69196A44335780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93cbeda6-437f-4dc2-9319-018ad699c020/93cbeda6-437f-4dc2-9319-018ad699c020.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93cbeda6-437f-4dc2-9319-018ad699c020/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 20:53:08 +0000 Certificate not after: Sun 21 Nov 2027 21:53:08 +0000 Subordinate resources: IP: 143.235.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:b0:e9:2c:bf:69:19:6a:44:33:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 18 20:53:08 2025 GMT Not After : Nov 21 21:53:08 2027 GMT Subject: CN=93cbeda6-437f-4dc2-9319-018ad699c020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b6:25:1e:fa:11:22:f7:87:11:dc:3f:2a:0b: 2c:8a:dd:7e:ca:a0:32:43:f0:ef:c0:47:e8:0e:52: 36:9c:22:57:cd:4a:d9:16:63:cd:44:00:2b:0a:cf: 4c:86:cd:c9:30:dc:f9:54:66:e5:da:58:cd:1c:e7: 38:2e:59:f5:d4:10:e5:80:48:61:1b:ea:f3:48:63: 0b:3d:39:b4:c0:76:a5:b2:8a:24:72:43:fd:c7:4a: b6:3b:ca:c0:87:81:f0:00:6e:7d:b6:da:2e:25:2c: 51:15:39:2f:6c:ba:32:ed:56:e3:e9:36:1c:9a:a7: 4c:38:da:c5:48:32:9a:65:32:b5:c0:3d:14:80:65: ce:77:8a:e7:2d:e7:d6:26:86:d9:b3:1d:fa:94:84: 52:20:5a:f8:10:46:99:f5:42:42:a4:2c:b1:a2:34: 11:5c:b4:34:ae:7b:0a:89:03:34:85:2c:c2:fa:5c: dd:48:66:36:b4:20:27:8d:d8:08:6f:1d:3c:e4:2d: 78:33:53:21:1d:a1:0f:e0:d0:c0:a8:d8:48:8c:4c: df:44:87:3f:26:48:e0:28:5f:19:a4:a0:b5:80:84: 36:b7:d9:b2:2c:ef:16:5b:90:86:13:ad:1c:5b:3a: a0:af:9e:1b:81:26:29:1e:a1:02:b7:08:aa:11:c3: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:28:15:D1:AC:AF:AE:DE:3B:E9:AD:1A:0C:26:F7:C1:51:95:EB:15 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93cbeda6-437f-4dc2-9319-018ad699c020/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/93cbeda6-437f-4dc2-9319-018ad699c020/93cbeda6-437f-4dc2-9319-018ad699c020.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 143.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:17:b7:58:71:3d:54:11:bc:a6:ed:13:ad:ff:2c:1b:85:32: 98:cf:76:51:c7:db:18:28:72:70:7a:8a:03:16:06:b5:76:37: 5b:11:66:b3:67:73:13:a5:7c:4f:d4:0e:ef:b9:88:89:40:78: f7:1f:e4:45:71:c0:2b:8b:ef:f8:47:8f:c8:17:13:22:99:4f: 51:27:11:3b:75:d1:cb:7f:7d:73:29:04:37:2b:de:29:7d:83: 94:cb:e5:eb:7d:5b:c8:ef:0d:8f:d9:55:9a:f6:88:04:f5:2e: d8:05:dc:8c:05:f7:3d:9f:42:21:21:b8:fd:a5:39:fe:97:c8: 95:e4:71:fe:75:f7:18:bf:d6:42:ad:3e:9c:36:97:75:33:ea: 03:b6:38:75:26:f0:fc:80:f4:f6:5c:e7:dc:ae:b3:e0:ad:a9: 03:25:8a:4e:1b:a5:a4:5a:fa:2e:60:6a:df:66:22:dc:b8:93: 3d:21:ca:70:a8:ea:4e:b4:bd:de:93:21:5b:e7:c3:f6:11:69: 80:8a:c1:43:2a:2f:e9:ef:6a:90:ca:17:b5:5d:31:2f:68:51: 52:98:81:76:bb:da:98:b1:da:71:12:f5:d9:83:97:80:69:85: 87:ef:50:59:c0:38:a6:5e:e2:b9:90:95:67:5e:78:97:ac:cb: 71:23:2a:d4 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWErmsOksv2kZakQzV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxODIwNTMwOFoXDTI3MTEyMTIxNTMwOFowLzEtMCsGA1UEAxMk OTNjYmVkYTYtNDM3Zi00ZGMyLTkzMTktMDE4YWQ2OTljMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLYlHvoRIveHEdw/Kgssit1+yqAyQ/DvwEfo DlI2nCJXzUrZFmPNRAArCs9Mhs3JMNz5VGbl2ljNHOc4Lln11BDlgEhhG+rzSGML PTm0wHalsookckP9x0q2O8rAh4HwAG59ttouJSxRFTkvbLoy7Vbj6TYcmqdMONrF SDKaZTK1wD0UgGXOd4rnLefWJobZsx36lIRSIFr4EEaZ9UJCpCyxojQRXLQ0rnsK iQM0hSzC+lzdSGY2tCAnjdgIbx085C14M1MhHaEP4NDAqNhIjEzfRIc/JkjgKF8Z pKC1gIQ2t9myLO8WW5CGE60cWzqgr54bgSYpHqECtwiqEcNsEwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFPkoFdGsr67eO+mtGgwm98FRlesVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 M2NiZWRhNi00MzdmLTRkYzItOTMxOS0wMThhZDY5OWMwMjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzkzY2JlZGE2LTQzN2YtNGRjMi05 MzE5LTAxOGFkNjk5YzAyMC85M2NiZWRhNi00MzdmLTRkYzItOTMxOS0wMThhZDY5 OWMwMjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCP6zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4F7dYcT1UEbym7ROt/ywb hTKYz3ZRx9sYKHJweooDFga1djdbEWazZ3MTpXxP1A7vuYiJQHj3H+RFccAri+/4 R4/IFxMimU9RJxE7ddHLf31zKQQ3K94pfYOUy+XrfVvI7w2P2VWa9ogE9S7YBdyM Bfc9n0IhIbj9pTn+l8iV5HH+dfcYv9ZCrT6cNpd1M+oDtjh1JvD8gPT2XOfcrrPg rakDJYpOG6WkWvouYGrfZiLcuJM9IcpwqOpOtL3ekyFb58P2EWmAisFDKi/p72qQ yhe1XTEvaFFSmIF2u9qYsdpxEvXZg5eAaYWH71BZwDimXuK5kJVnXniXrMtxIyrU -----END CERTIFICATE-----Generated at Wed Nov 5 03:07:47 2025 by rpki-client