$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4.cer File: 8866ed50-4fe4-4558-8cfc-b417bf2032f4.cer (raw, json) Hash identifier: r9Gci1dBGZ1rlABkGOXFn0zquEHHWPUaGTr22V1awWE= Subject key identifier: 74:2A:E0:07:F3:8E:E4:7A:BE:7F:8B:F9:8D:9A:EF:2F:BF:20:F3:DE Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B77D37A7A87C9C1F3C9464080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/8866ed50-4fe4-4558-8cfc-b417bf2032f4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 20:35:00 +0000 Certificate not after: Wed 12 Jan 2028 21:35:00 +0000 Subordinate resources: IP: 204.19.128.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:d3:7a:7a:87:c9:c1:f3:c9:46:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 9 20:35:00 2025 GMT Not After : Jan 12 21:35:00 2028 GMT Subject: CN=8866ed50-4fe4-4558-8cfc-b417bf2032f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:49:db:0d:a8:5c:15:a0:28:2b:45:5d:85:e3: 25:05:f8:9f:68:e7:0d:69:ec:88:27:d0:05:84:4f: 69:43:a9:08:ca:10:53:b0:cf:be:bb:7d:74:2b:ea: fb:fb:4d:ef:7b:8c:e4:12:b6:1c:dc:bf:b9:9d:f1: 0a:84:2f:19:85:d7:1f:91:43:c7:1b:ff:b7:c3:66: 11:9b:e3:c9:55:ff:4c:1b:6b:d1:af:47:aa:6f:0c: 89:72:ed:f0:29:e0:a8:1f:b1:88:1e:e0:cd:c0:58: 76:54:bf:87:ed:f0:6f:10:d4:ce:94:c5:e2:df:ea: 9a:e4:0c:f9:1b:b6:2e:14:46:84:95:f3:57:e9:23: 83:41:5f:0d:90:dd:d0:4e:c9:3a:17:ed:fd:30:e8: 69:a1:f7:fe:a4:f8:e3:17:ba:cb:8d:4b:4f:35:8f: 66:b5:51:48:d0:78:84:44:d0:be:45:a9:1a:b3:50: ad:2e:23:7c:e9:4e:77:7b:7f:68:91:4a:57:85:02: 00:24:84:84:5a:fc:e7:50:a9:d8:bf:83:0d:40:45: a3:27:fc:c0:f4:b1:2c:8b:b7:8b:e5:b8:8e:50:64: 90:6e:c2:b2:4e:2d:f9:2e:c5:4c:be:b4:be:d7:c0: db:79:9c:42:e2:7d:48:3e:90:96:f3:c5:e8:34:08: bc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2A:E0:07:F3:8E:E4:7A:BE:7F:8B:F9:8D:9A:EF:2F:BF:20:F3:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8866ed50-4fe4-4558-8cfc-b417bf2032f4/8866ed50-4fe4-4558-8cfc-b417bf2032f4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 204.19.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:06:33:0c:65:24:df:fa:0a:19:61:fa:ea:7d:01:51:15:a1: cd:fc:92:01:85:71:30:88:11:81:22:80:8b:19:17:82:b3:db: 54:d9:07:6d:c4:76:1e:b6:8d:1c:f8:f7:c7:7a:1f:4b:4f:e2: c2:fb:31:f2:a5:8d:4e:2d:9e:29:0e:3a:a8:22:3e:dd:63:f7: 7c:95:5a:70:ed:6a:4a:61:20:a6:44:55:19:8a:3d:14:6e:d8: c4:42:f2:01:fc:c1:d0:cb:11:e7:03:b6:bd:35:a1:1b:40:81: b2:5f:b0:88:3c:71:40:69:e9:a8:66:a7:55:0c:b2:fa:f0:f0: de:16:a5:46:27:a6:07:7b:f8:9e:68:e1:e2:92:b8:82:a7:9b: 77:9a:a1:c2:8c:f3:21:5e:a2:43:6c:28:93:bc:39:42:86:9c: 16:75:4d:ea:de:16:c5:b1:eb:67:45:32:ee:e9:66:a6:00:44: 34:2c:e4:83:d4:3d:fb:e4:48:88:b2:13:94:d9:28:c6:aa:82: a3:0c:9a:2f:ff:5f:d2:98:42:a8:e0:1a:a8:d8:12:a3:8c:9f: d5:30:89:2c:b0:9d:00:bb:c0:d4:4c:02:ea:f9:6b:df:29:f1: 08:51:9f:53:79:96:4e:92:df:16:fa:7e:0f:d7:32:50:f4:9d: a0:5a:92:4c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt303p6h8nB88lGQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwOTIwMzUwMFoXDTI4MDExMjIxMzUwMFowLzEtMCsGA1UEAxMk ODg2NmVkNTAtNGZlNC00NTU4LThjZmMtYjQxN2JmMjAzMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgknbDahcFaAoK0VdheMlBfifaOcNaeyIJ9AF hE9pQ6kIyhBTsM++u310K+r7+03ve4zkErYc3L+5nfEKhC8ZhdcfkUPHG/+3w2YR m+PJVf9MG2vRr0eqbwyJcu3wKeCoH7GIHuDNwFh2VL+H7fBvENTOlMXi3+qa5Az5 G7YuFEaElfNX6SODQV8NkN3QTsk6F+39MOhpoff+pPjjF7rLjUtPNY9mtVFI0HiE RNC+Rakas1CtLiN86U53e39okUpXhQIAJISEWvznUKnYv4MNQEWjJ/zA9LEsi7eL 5biOUGSQbsKyTi35LsVMvrS+18DbeZxC4n1IPpCW88XoNAi8vQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHQq4AfzjuR6vn+L+Y2a7y+/IPPeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 ODY2ZWQ1MC00ZmU0LTQ1NTgtOGNmYy1iNDE3YmYyMDMyZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzg4NjZlZDUwLTRmZTQtNDU1OC04 Y2ZjLWI0MTdiZjIwMzJmNC84ODY2ZWQ1MC00ZmU0LTQ1NTgtOGNmYy1iNDE3YmYy MDMyZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADME4AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArAYzDGUk3/oKGWH66n0B URWhzfySAYVxMIgRgSKAixkXgrPbVNkHbcR2HraNHPj3x3ofS0/iwvsx8qWNTi2e KQ46qCI+3WP3fJVacO1qSmEgpkRVGYo9FG7YxELyAfzB0MsR5wO2vTWhG0CBsl+w iDxxQGnpqGanVQyy+vDw3halRiemB3v4nmjh4pK4gqebd5qhwozzIV6iQ2wok7w5 QoacFnVN6t4WxbHrZ0Uy7ulmpgBENCzkg9Q9++RIiLITlNkoxqqCowyaL/9f0phC qOAaqNgSo4yf1TCJLLCdALvA1EwC6vlr3ynxCFGfU3mWTpLfFvp+D9cyUPSdoFqS TA== -----END CERTIFICATE-----Generated at Mon Oct 20 20:02:01 2025 by rpki-client