$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer File: e3f835d4-4d6b-4196-b577-3e11be3d0f48.cer (raw, json) Hash identifier: JM44wtvwscZ1IyP3D/yI8X7vOOTBdvBambgo3Odo1j4= Subject key identifier: FD:35:44:A8:C0:3A:E5:B9:54:C8:3A:6A:15:93:C4:9A:78:59:52:4A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AFC03A13D93D0E734ECBD5400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 Aug 2025 12:11:47 +0000 Certificate not after: Mon 29 Nov 2027 13:11:47 +0000 Subordinate resources: AS: 18909 IP: 2602:f925::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:03:a1:3d:93:d0:e7:34:ec:bd:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 26 12:11:47 2025 GMT Not After : Nov 29 13:11:47 2027 GMT Subject: CN=e3f835d4-4d6b-4196-b577-3e11be3d0f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:6e:da:3a:66:cb:02:5b:b4:b4:c1:f1:30: 5a:f2:82:ce:4b:d6:93:cb:5b:e0:cc:b4:4c:d3:b8: 9c:6b:9f:d7:b7:d5:61:31:94:7c:95:91:08:1b:d1: 9b:da:aa:f7:a5:0d:27:63:f7:cb:65:58:e2:09:5a: 39:17:c6:e6:18:fd:14:d8:a7:8f:01:29:84:9c:34: 54:a9:d4:3a:f9:2a:37:46:ba:b4:11:c8:99:ec:f0: 3c:58:ff:11:2e:d1:b4:62:2c:4a:a1:ee:62:e2:ec: d9:c8:8c:58:de:af:c9:45:4d:22:14:cf:97:13:3e: 4e:99:c1:a9:87:b2:6b:d1:03:03:16:7e:46:c8:45: a3:0d:c6:a6:bf:71:19:33:31:d7:81:ce:2d:c3:57: f7:23:9e:07:a5:c9:a6:ee:ac:65:22:6e:2c:23:a6: ea:06:5c:e7:59:96:a6:e7:5e:56:cb:89:4d:93:e4: db:c0:c7:a4:74:f0:5b:0b:b8:f2:e1:3d:69:10:33: 25:9b:c2:fe:f2:f0:fd:86:52:c2:31:61:8b:c2:99: e1:53:9d:45:16:5e:03:4f:8c:f5:4b:37:c1:6d:fe: 59:62:f8:0a:3c:5c:db:60:7d:ff:64:56:e6:c1:3c: 56:f9:14:93:c6:c5:88:26:35:74:da:02:03:01:04: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:35:44:A8:C0:3A:E5:B9:54:C8:3A:6A:15:93:C4:9A:78:59:52:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f835d4-4d6b-4196-b577-3e11be3d0f48/e3f835d4-4d6b-4196-b577-3e11be3d0f48.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f925::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18909 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:1d:a7:73:a4:e3:e5:79:4a:ba:98:75:f0:3d:86:db:f2:e7: 12:be:7d:85:bc:0d:b0:05:2b:44:a2:cf:a8:7f:66:ad:05:54: c5:de:d4:e6:1a:28:f4:4c:a7:c1:f1:ec:0b:13:aa:06:be:53: 1f:57:fb:b6:97:a8:cb:a1:be:2c:42:52:79:e4:05:f6:cb:db: dd:3f:1c:eb:28:f0:1a:dc:a6:6c:a4:70:9c:f4:07:a2:e7:99: b7:52:11:32:25:83:91:77:37:30:53:e6:8f:f6:9c:7c:23:4d: f0:ae:88:72:2e:9d:25:74:2c:be:e4:84:a3:59:5c:6a:bb:28: f3:64:30:06:e4:28:54:25:0b:c4:63:b3:9d:dc:55:2f:65:93: 56:25:7d:b1:d5:14:96:c3:ad:f3:18:78:d9:96:e4:2f:fe:d9: 7b:2a:de:9b:18:d2:34:86:0d:c7:d4:ab:63:84:4a:3d:69:0f: bb:b7:89:99:3a:14:ac:14:16:85:75:3c:86:29:c5:08:33:6d: 9e:10:20:88:32:a9:a3:49:e8:37:fd:d7:b1:ba:47:46:77:6e: ce:94:f9:dc:7e:33:07:a2:75:0c:37:42:f3:5f:c0:b8:40:0b: 91:af:b0:73:32:8e:15:8d:3c:69:e2:f9:fc:80:e0:cc:80:e6: 22:8b:88:80 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEr8A6E9k9DnNOy9VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyNjEyMTE0N1oXDTI3MTEyOTEzMTE0N1owLzEtMCsGA1UEAxMk ZTNmODM1ZDQtNGQ2Yi00MTk2LWI1NzctM2UxMWJlM2QwZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmhu2jpmywJbtLTB8TBa8oLOS9aTy1vgzLRM 07ica5/Xt9VhMZR8lZEIG9Gb2qr3pQ0nY/fLZVjiCVo5F8bmGP0U2KePASmEnDRU qdQ6+So3Rrq0EciZ7PA8WP8RLtG0YixKoe5i4uzZyIxY3q/JRU0iFM+XEz5OmcGp h7Jr0QMDFn5GyEWjDcamv3EZMzHXgc4tw1f3I54Hpcmm7qxlIm4sI6bqBlznWZam 515Wy4lNk+TbwMekdPBbC7jy4T1pEDMlm8L+8vD9hlLCMWGLwpnhU51FFl4DT4z1 SzfBbf5ZYvgKPFzbYH3/ZFbmwTxW+RSTxsWIJjV02gIDAQQO4QIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFP01RKjAOuW5VMg6ahWTxJp4WVJKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l M2Y4MzVkNC00ZDZiLTQxOTYtYjU3Ny0zZTExYmUzZDBmNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2UzZjgzNWQ0LTRkNmItNDE5Ni1i NTc3LTNlMTFiZTNkMGY0OC9lM2Y4MzVkNC00ZDZiLTQxOTYtYjU3Ny0zZTExYmUz ZDBmNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvklADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJJ3TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCiHadzpOPleUq6mHXwPYbb8ucSvn2FvA2wBStEos+of2at BVTF3tTmGij0TKfB8ewLE6oGvlMfV/u2l6jLob4sQlJ55AX2y9vdPxzrKPAa3KZs pHCc9Aei55m3UhEyJYORdzcwU+aP9px8I03wrohyLp0ldCy+5ISjWVxquyjzZDAG 5ChUJQvEY7Od3FUvZZNWJX2x1RSWw63zGHjZluQv/tl7Kt6bGNI0hg3H1KtjhEo9 aQ+7t4mZOhSsFBaFdTyGKcUIM22eECCIMqmjSeg3/dexukdGd27OlPncfjMHonUM N0LzX8C4QAuRr7BzMo4VjTxp4vn8gODMgOYii4iA -----END CERTIFICATE-----Generated at Wed Nov 5 17:25:51 2025 by rpki-client