$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a772514-01fd-4021-bd99-2f38a95c7810.cer File: 9a772514-01fd-4021-bd99-2f38a95c7810.cer (raw, json) Hash identifier: Vik5XX+mGhlmw1ZIgseUHk619Vu1aAGacPCyFlG3NZ0= Subject key identifier: F9:A4:D6:7D:37:B4:9E:6C:22:CF:3C:F1:5A:1A:4E:42:92:5E:5E:56 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B743AE55ADF9C3E505CFBA380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a772514-01fd-4021-bd99-2f38a95c7810/9a772514-01fd-4021-bd99-2f38a95c7810.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a772514-01fd-4021-bd99-2f38a95c7810/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 13:40:08 +0000 Certificate not after: Tue 11 Jan 2028 14:40:08 +0000 Subordinate resources: IP: 23.142.164.0/24 IP: 2602:f5be::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:3a:e5:5a:df:9c:3e:50:5c:fb:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 8 13:40:08 2025 GMT Not After : Jan 11 14:40:08 2028 GMT Subject: CN=9a772514-01fd-4021-bd99-2f38a95c7810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:9e:c5:5e:01:fc:35:25:79:3c:4b:74:29: 02:c9:f2:a8:b2:e0:d9:0a:83:f0:61:ff:7e:2a:a2: 13:ff:84:2d:4b:5a:1e:e9:dc:42:ab:24:0d:34:a4: 24:6f:21:c9:95:90:6d:01:dd:ea:99:c6:8e:53:d1: cb:b1:7d:1f:5b:72:5b:d1:fe:2f:e4:fe:46:ad:b6: 56:5b:36:dc:86:49:d5:51:7b:df:c9:78:15:7e:dd: bd:e2:3b:c6:43:97:3b:a6:12:2e:d1:ae:37:c6:96: 5b:d5:1b:c8:59:bd:5a:d3:2c:3d:c7:19:80:a2:63: 2b:8f:fe:a7:42:ba:89:90:19:98:ce:60:c6:b8:7a: 3d:b5:c1:28:08:3b:bc:85:05:ac:32:43:66:58:b9: 32:f3:97:29:fc:53:40:73:53:69:05:96:19:5c:f3: 25:e1:9a:3e:2d:89:d2:43:1d:c9:40:8d:f9:7f:de: e6:c7:8c:f9:9d:6b:f4:39:e0:e4:5d:c1:34:5a:f6: fd:b1:51:28:94:e2:c8:b7:9d:cd:c7:2c:16:22:25: fc:9f:a6:39:35:51:18:02:8e:11:f1:04:d0:73:2a: eb:dd:fc:5f:54:f6:b5:9d:50:94:bf:f9:ce:ff:32: 3f:db:77:98:07:f7:60:5e:92:96:86:6d:02:a8:0d: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A4:D6:7D:37:B4:9E:6C:22:CF:3C:F1:5A:1A:4E:42:92:5E:5E:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a772514-01fd-4021-bd99-2f38a95c7810/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a772514-01fd-4021-bd99-2f38a95c7810/9a772514-01fd-4021-bd99-2f38a95c7810.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.164.0/24 IPv6: 2602:f5be::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:47:fe:95:37:e2:a5:74:aa:7f:e1:c3:a5:2a:2e:59:63:c8: 00:62:7a:af:e5:c3:fa:27:a9:98:87:6f:96:ca:64:76:3e:0c: 27:ab:13:a1:74:34:f5:02:e0:ce:ff:d2:b9:da:5e:9e:a6:fe: 4f:83:d9:27:91:23:e3:14:f1:a1:10:a3:05:3e:72:81:06:48: fa:ad:59:7b:c4:60:82:c3:92:2f:00:97:a7:d3:5b:dc:6f:73: 20:23:5f:2d:1d:9c:44:23:06:8e:c2:7b:dc:e7:b0:be:a7:39: 21:aa:d4:50:c5:dc:61:37:a4:e8:cf:03:65:1c:6e:2a:e8:93: 9a:77:16:af:a5:f2:55:b7:26:30:b5:18:82:0b:f1:59:5a:88: 2d:49:37:5b:91:23:48:34:5e:9f:e1:2f:8f:c0:d1:d5:7c:bf: c0:1f:3a:63:67:28:53:39:42:bb:94:08:3d:d7:56:98:fd:dd: 7b:15:20:a5:7b:56:b7:d0:9e:97:71:59:e9:f9:37:d8:e0:b3: b8:d1:15:ef:97:0c:5d:76:73:76:04:3c:0f:8b:8c:0c:6f:9c: 36:49:76:9b:e5:60:96:db:80:4d:08:8b:9e:7c:5e:f7:a6:4e: 02:a8:ef:3e:0e:dd:f1:a5:91:0a:f8:f3:1c:78:b0:4d:c2:41: a7:22:4e:51 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEt0OuVa35w+UFz7o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwODEzNDAwOFoXDTI4MDExMTE0NDAwOFowLzEtMCsGA1UEAxMk OWE3NzI1MTQtMDFmZC00MDIxLWJkOTktMmYzOGE5NWM3ODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4aexV4B/DUleTxLdCkCyfKosuDZCoPwYf9+ KqIT/4QtS1oe6dxCqyQNNKQkbyHJlZBtAd3qmcaOU9HLsX0fW3Jb0f4v5P5GrbZW WzbchknVUXvfyXgVft294jvGQ5c7phIu0a43xpZb1RvIWb1a0yw9xxmAomMrj/6n QrqJkBmYzmDGuHo9tcEoCDu8hQWsMkNmWLky85cp/FNAc1NpBZYZXPMl4Zo+LYnS Qx3JQI35f97mx4z5nWv0OeDkXcE0Wvb9sVEolOLIt53NxywWIiX8n6Y5NVEYAo4R 8QTQcyrr3fxfVPa1nVCUv/nO/zI/23eYB/dgXpKWhm0CqA2zUQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPmk1n03tJ5sIs888VoaTkKSXl5WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 YTc3MjUxNC0wMWZkLTQwMjEtYmQ5OS0yZjM4YTk1Yzc4MTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzlhNzcyNTE0LTAxZmQtNDAyMS1i ZDk5LTJmMzhhOTVjNzgxMC85YTc3MjUxNC0wMWZkLTQwMjEtYmQ5OS0yZjM4YTk1 Yzc4MTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjqQwDgQCAAIwCAMGBCYC9b4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AMBH/pU34qV0qn/hw6UqLlljyABieq/lw/onqZiHb5bKZHY+DCerE6F0NPUC4M7/ 0rnaXp6m/k+D2SeRI+MU8aEQowU+coEGSPqtWXvEYILDki8Al6fTW9xvcyAjXy0d nEQjBo7Ce9znsL6nOSGq1FDF3GE3pOjPA2Ucbirok5p3Fq+l8lW3JjC1GIIL8Vla iC1JN1uRI0g0Xp/hL4/A0dV8v8AfOmNnKFM5QruUCD3XVpj93XsVIKV7VrfQnpdx Wen5N9jgs7jRFe+XDF12c3YEPA+LjAxvnDZJdpvlYJbbgE0Ii558XvemTgKo7z4O 3fGlkQr48xx4sE3CQaciTlE= -----END CERTIFICATE-----Generated at Mon Oct 20 14:55:44 2025 by rpki-client