$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bc78b53-d8a4-4fe0-be34-0a7a34935904.cer File: 9bc78b53-d8a4-4fe0-be34-0a7a34935904.cer (raw, json) Hash identifier: 9vVS0fHT17rL3r2gkj1uB2mcuUzgb3snYdY2+pcA08s= Subject key identifier: F6:19:35:87:17:E7:7D:F2:B6:E4:AD:B4:E8:96:9C:AF:A9:71:93:03 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B77817ED5735795A8DE642440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bc78b53-d8a4-4fe0-be34-0a7a34935904/9bc78b53-d8a4-4fe0-be34-0a7a34935904.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bc78b53-d8a4-4fe0-be34-0a7a34935904/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 17:49:49 +0000 Certificate not after: Wed 12 Jan 2028 18:49:49 +0000 Subordinate resources: IP: 140.235.252.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:81:7e:d5:73:57:95:a8:de:64:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 9 17:49:49 2025 GMT Not After : Jan 12 18:49:49 2028 GMT Subject: CN=9bc78b53-d8a4-4fe0-be34-0a7a34935904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:2b:67:a8:72:1d:a6:9f:20:d8:e8:4d:6f: 5c:dd:0a:9e:25:9d:5f:1b:9c:be:67:bb:0f:6e:a3: f2:7d:ca:56:85:73:64:00:bf:b3:a2:13:0e:2f:7c: 42:62:25:07:35:ce:5f:3e:23:43:6a:0d:2d:68:46: ba:14:23:fe:88:5c:83:9c:82:e6:ef:f6:40:b9:a4: 7e:e8:dc:4c:d2:47:00:f0:e1:55:c8:3b:ce:eb:58: fe:d6:3f:b0:34:69:9d:ec:79:94:e1:55:53:b5:11: a6:2e:59:8f:c1:0f:f5:76:56:cd:1a:9e:8e:e8:20: a5:83:fe:e8:ee:26:25:c7:3c:74:b8:51:c3:67:2f: ef:0e:de:80:03:6f:e7:bf:e5:f8:8b:ee:a9:72:4a: 9f:0a:b3:2c:21:ad:d3:19:69:1c:d8:16:ae:61:fc: 68:c6:b5:88:f7:0e:99:c4:f1:5b:86:dd:61:dd:b5: d8:0c:bd:2f:37:0b:ed:67:6b:cd:84:c0:2e:2c:1d: 43:0d:12:d0:c2:8e:e9:fa:81:98:34:6c:40:6c:25: 12:cf:43:19:e9:34:b5:c9:85:b7:ab:ca:75:0a:de: 71:01:bf:25:63:47:13:14:98:e0:b7:65:17:74:dd: 2e:f4:ee:03:01:03:d7:8a:38:39:0e:a7:fd:d7:4c: 87:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:35:87:17:E7:7D:F2:B6:E4:AD:B4:E8:96:9C:AF:A9:71:93:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bc78b53-d8a4-4fe0-be34-0a7a34935904/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9bc78b53-d8a4-4fe0-be34-0a7a34935904/9bc78b53-d8a4-4fe0-be34-0a7a34935904.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 140.235.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bc:f7:b1:65:a9:6a:a6:78:81:cb:89:52:22:2e:c5:b1:1f: e0:63:b9:12:f5:ab:4d:59:d3:79:e4:04:c4:ac:22:e2:15:86: 35:92:b0:b5:47:b8:1b:0a:cb:b2:71:c0:07:84:c8:59:5f:bc: 20:a2:0a:56:02:61:2b:c6:ce:5e:b7:ea:9f:97:94:fe:c6:d7: ad:65:d4:1a:00:4e:34:92:bf:03:8a:65:36:c5:11:09:fa:9b: f0:95:40:8c:49:32:e1:28:55:d3:d1:91:49:80:d7:fd:62:2c: c2:1f:58:65:d1:b7:d0:df:11:43:dc:23:42:09:5d:a3:8e:96: b5:f9:ce:4a:15:d0:6c:3d:de:4e:68:3f:5f:5c:ff:c9:85:24: 1c:70:10:5c:53:d6:cc:45:34:53:3e:ce:17:3d:9e:40:b4:97: 76:05:d2:c8:6c:b7:bd:f9:f5:c2:f9:cc:6f:d2:8f:78:0f:fa: e9:a4:bf:f6:db:10:66:fd:d9:70:21:9a:ad:b8:ee:34:08:66: 03:c7:08:d3:58:a3:a0:16:40:e9:0b:de:44:20:97:47:e0:28: 4e:b4:31:83:06:1e:c2:28:7c:e1:90:8c:ce:83:36:93:47:0a: 72:26:b9:6d:89:a6:98:17:62:e7:51:02:a9:9a:51:5e:ba:b2: b5:73:c7:5e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt3gX7Vc1eVqN5kJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwOTE3NDk0OVoXDTI4MDExMjE4NDk0OVowLzEtMCsGA1UEAxMk OWJjNzhiNTMtZDhhNC00ZmUwLWJlMzQtMGE3YTM0OTM1OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08grZ6hyHaafINjoTW9c3QqeJZ1fG5y+Z7sP bqPyfcpWhXNkAL+zohMOL3xCYiUHNc5fPiNDag0taEa6FCP+iFyDnILm7/ZAuaR+ 6NxM0kcA8OFVyDvO61j+1j+wNGmd7HmU4VVTtRGmLlmPwQ/1dlbNGp6O6CClg/7o 7iYlxzx0uFHDZy/vDt6AA2/nv+X4i+6pckqfCrMsIa3TGWkc2BauYfxoxrWI9w6Z xPFbht1h3bXYDL0vNwvtZ2vNhMAuLB1DDRLQwo7p+oGYNGxAbCUSz0MZ6TS1yYW3 q8p1Ct5xAb8lY0cTFJjgt2UXdN0u9O4DAQPXijg5Dqf910yHRwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPYZNYcX533ytuSttOiWnK+pcZMDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 YmM3OGI1My1kOGE0LTRmZTAtYmUzNC0wYTdhMzQ5MzU5MDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzliYzc4YjUzLWQ4YTQtNGZlMC1i ZTM0LTBhN2EzNDkzNTkwNC85YmM3OGI1My1kOGE0LTRmZTAtYmUzNC0wYTdhMzQ5 MzU5MDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGM6/wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACrz3sWWpaqZ4gcuJUiIu xbEf4GO5EvWrTVnTeeQExKwi4hWGNZKwtUe4GwrLsnHAB4TIWV+8IKIKVgJhK8bO Xrfqn5eU/sbXrWXUGgBONJK/A4plNsURCfqb8JVAjEky4ShV09GRSYDX/WIswh9Y ZdG30N8RQ9wjQgldo46WtfnOShXQbD3eTmg/X1z/yYUkHHAQXFPWzEU0Uz7OFz2e QLSXdgXSyGy3vfn1wvnMb9KPeA/66aS/9tsQZv3ZcCGarbjuNAhmA8cI01ijoBZA 6QveRCCXR+AoTrQxgwYewih84ZCMzoM2k0cKcia5bYmmmBdi51ECqZpRXrqytXPH Xg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:08:27 2025 by rpki-client