$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer File: c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer (raw, json) Hash identifier: aBKhgSJp6GDcIXlJWVwq11RssAMo1jLIeKCvo/N4ObA= Subject key identifier: E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B7A2BD6FE486A14A0AD02CB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 16:44:39 +0000 Certificate not after: Thu 13 Jan 2028 17:44:39 +0000 Subordinate resources: IP: 130.12.159.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:2b:d6:fe:48:6a:14:a0:ad:02:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 10 16:44:39 2025 GMT Not After : Jan 13 17:44:39 2028 GMT Subject: CN=c8bca10d-6445-4407-bd16-6d0c90e9bfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:09:76:a6:59:92:4c:9e:f1:6e:23:9c:34:59: ac:ea:bb:47:de:de:d7:03:b1:af:31:89:d6:15:44: ab:24:54:46:fb:8e:b4:4b:ad:73:18:e9:99:b0:b5: 1c:5e:cb:f8:d3:e0:a3:a0:bd:8f:1e:74:fd:59:3d: fc:3d:57:18:b6:c5:48:00:fa:62:68:31:fd:a7:1f: 91:84:d2:8f:27:bf:ca:fd:9e:1d:d7:3b:a9:37:4b: 88:95:7b:28:7f:f4:e0:64:1c:53:a9:4d:9a:bb:bd: 9f:63:88:69:a5:4e:77:a6:6c:59:5d:ac:87:f3:9f: 5e:00:90:90:45:bf:52:38:0a:74:8b:09:0c:3c:e9: 2f:bc:d2:3f:7e:52:45:78:33:74:ce:81:1d:0f:3e: c4:79:d8:12:db:1e:8e:08:96:86:08:5f:f3:59:30: 7e:a3:b1:b1:73:a9:12:05:ff:ed:e8:a6:f9:db:ac: 39:ff:1c:08:7d:16:4e:b4:5b:2e:5d:d0:8e:e0:05: 3c:a0:44:de:33:46:d3:14:22:8a:f0:87:29:0d:7e: 86:15:26:3f:f0:78:75:b0:da:bb:c0:34:77:83:2b: 9d:36:fa:fe:91:b1:20:e7:5c:5d:91:75:6c:d2:a7: 44:c8:a7:1f:01:a9:9f:8f:71:36:d7:25:cb:e7:f8: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 130.12.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:19:82:fb:76:ef:f8:8e:b7:4d:9f:ee:b9:ec:30:81:43:6b: 02:31:1d:0e:71:cb:5c:c4:9f:f7:a2:ba:02:fd:3d:a3:39:e2: 63:5a:0c:47:8f:ef:ac:6f:63:23:ab:43:30:f8:b6:db:2b:12: 0a:82:04:af:99:d3:d4:58:3a:15:fc:78:d5:5d:bb:73:8b:60: 95:ef:d9:9b:bb:64:57:f8:c8:cf:3c:b2:c6:64:ab:54:00:13: 93:7c:d8:b1:3a:aa:ca:41:cc:2a:bd:54:1c:91:4c:12:58:a9: b7:a0:61:b9:6e:88:ee:2b:59:57:25:9c:c2:92:54:59:1a:97: 8c:f7:04:52:e4:d4:a9:51:ca:08:54:24:9a:7e:b1:66:04:13: 30:d4:c1:23:04:bc:cf:a0:fe:20:f7:59:6c:58:35:3a:04:b0: 85:91:9d:d4:6b:b7:bc:49:a1:f1:11:31:f2:55:2e:62:28:38: 6f:53:2f:92:7d:58:eb:49:65:c0:a3:6e:8a:ed:5b:6d:80:71: e1:3d:c3:1b:40:f2:41:d2:3f:62:1a:bf:05:38:a7:c8:51:0e: 83:d0:59:59:64:1d:ee:f8:60:c6:0e:34:24:7b:48:0c:fb:4c: 91:3c:08:36:1a:3d:03:5a:ba:16:0c:8d:69:89:fc:35:26:a6: 4f:65:74:2c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt6K9b+SGoUoK0CywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAxMDE2NDQzOVoXDTI4MDExMzE3NDQzOVowLzEtMCsGA1UEAxMk YzhiY2ExMGQtNjQ0NS00NDA3LWJkMTYtNmQwYzkwZTliZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggl2plmSTJ7xbiOcNFms6rtH3t7XA7GvMYnW FUSrJFRG+460S61zGOmZsLUcXsv40+CjoL2PHnT9WT38PVcYtsVIAPpiaDH9px+R hNKPJ7/K/Z4d1zupN0uIlXsof/TgZBxTqU2au72fY4hppU53pmxZXayH859eAJCQ Rb9SOAp0iwkMPOkvvNI/flJFeDN0zoEdDz7EedgS2x6OCJaGCF/zWTB+o7Gxc6kS Bf/t6Kb526w5/xwIfRZOtFsuXdCO4AU8oETeM0bTFCKK8IcpDX6GFSY/8Hh1sNq7 wDR3gyudNvr+kbEg51xdkXVs0qdEyKcfAamfj3E21yXL5/g2SwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOlv79ATXO59mfxuIUZyI++6oHWPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j OGJjYTEwZC02NDQ1LTQ0MDctYmQxNi02ZDBjOTBlOWJmZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2M4YmNhMTBkLTY0NDUtNDQwNy1i ZDE2LTZkMGM5MGU5YmZkNS9jOGJjYTEwZC02NDQ1LTQ0MDctYmQxNi02ZDBjOTBl OWJmZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACCDJ8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAxmC+3bv+I63TZ/uueww gUNrAjEdDnHLXMSf96K6Av09ozniY1oMR4/vrG9jI6tDMPi22ysSCoIEr5nT1Fg6 Ffx41V27c4tgle/Zm7tkV/jIzzyyxmSrVAATk3zYsTqqykHMKr1UHJFMElipt6Bh uW6I7itZVyWcwpJUWRqXjPcEUuTUqVHKCFQkmn6xZgQTMNTBIwS8z6D+IPdZbFg1 OgSwhZGd1Gu3vEmh8REx8lUuYig4b1Mvkn1Y60llwKNuiu1bbYBx4T3DG0DyQdI/ Yhq/BTinyFEOg9BZWWQd7vhgxg40JHtIDPtMkTwINho9A1q6FgyNaYn8NSamT2V0 LA== -----END CERTIFICATE-----Generated at Sun Oct 19 20:03:21 2025 by rpki-client