$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587.cer File: 02d642b9-8f67-4883-b980-ce36229bb587.cer (raw, json) Hash identifier: HFjwUrTmdEaK3qL93KwgG7QQLCUjaCsMoftvhZqnofY= Subject key identifier: 83:CC:82:AA:12:F9:ED:D3:9D:48:89:FC:1B:8D:F2:AC:3B:51:FB:B2 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B0A454FAC520713478BA9EC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/02d642b9-8f67-4883-b980-ce36229bb587.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 31 Aug 2025 14:45:26 +0000 Certificate not after: Sat 04 Dec 2027 15:45:26 +0000 Subordinate resources: IP: 140.235.16.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:45:4f:ac:52:07:13:47:8b:a9:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 31 14:45:26 2025 GMT Not After : Dec 4 15:45:26 2027 GMT Subject: CN=02d642b9-8f67-4883-b980-ce36229bb587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:21:b0:6c:b3:fa:f2:8c:65:de:6a:82:85: ed:de:1c:d9:8e:1f:8f:18:34:e0:f3:50:1e:42:2f: 73:ca:d5:75:30:eb:e4:90:15:74:73:ac:fe:26:7d: 93:1c:f1:ba:ce:6f:dd:b3:ed:7f:7b:80:c9:78:67: 4c:18:2d:37:17:7f:25:2f:e3:26:3c:0b:f3:65:78: 10:75:d1:52:a8:cf:e9:9a:d7:d6:fc:b6:55:73:68: f9:52:c6:4d:9b:54:64:1e:1f:b3:e3:f6:cf:89:dd: d6:88:70:b0:2c:95:b6:82:b9:ec:26:26:7b:7e:e2: b8:3e:8d:1a:62:9b:5d:57:93:5f:a5:c9:4b:68:0d: d4:56:98:42:1a:82:ec:dc:02:eb:43:88:ed:f6:55: 06:2b:2d:03:2a:48:20:bf:cc:fa:44:2c:bd:69:41: e5:95:34:90:2c:cc:c8:bf:d9:0c:e8:df:3e:be:ab: 3e:cf:e5:74:a4:e4:2e:d3:c0:4d:14:81:63:8f:3f: ba:4e:ff:d9:ca:35:dc:52:88:48:09:9f:6f:ed:78: a8:c2:ba:58:02:5e:3e:7e:bf:85:95:8a:a9:82:14: d5:c6:8e:91:b3:aa:88:c3:f0:1c:f5:ff:42:f3:c5: 65:4a:7f:78:a5:1a:9c:85:69:a2:cf:64:a9:77:02: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CC:82:AA:12:F9:ED:D3:9D:48:89:FC:1B:8D:F2:AC:3B:51:FB:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/02d642b9-8f67-4883-b980-ce36229bb587/02d642b9-8f67-4883-b980-ce36229bb587.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 140.235.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d7:2d:ff:f9:bc:9e:28:48:0b:94:25:5b:df:83:e5:1c:a5: c0:bd:9c:4c:b3:c3:c0:00:e8:94:9f:33:36:2b:5a:d2:30:af: 8b:04:bb:61:98:c1:70:49:a7:d5:4c:56:51:96:4c:ae:a2:74: f8:d4:ef:dc:85:a8:be:8d:e0:7f:35:5e:30:f4:c1:de:ba:50: ae:f3:ef:65:14:67:ad:82:3f:9d:b3:19:cb:ab:84:0c:c9:98: 21:1d:c7:51:51:06:65:de:b6:9d:71:0c:f1:81:9d:d7:cf:84: cb:76:8c:ce:c7:70:e1:1a:08:6a:29:86:d9:22:aa:eb:be:da: ab:23:ab:5c:5d:b8:a9:1c:fd:f8:12:8c:67:0c:1e:d0:1a:11: eb:f3:c7:de:c6:2e:f1:9c:6a:fa:90:c9:3a:57:a2:71:18:c7: 8b:aa:5c:48:32:70:f8:91:b5:ce:dc:10:22:25:cd:b9:7c:f3: dc:db:ce:1d:e4:c5:46:f9:5f:03:c7:1b:1e:5d:fe:db:0e:48: b2:c2:eb:15:1d:ec:1c:7d:da:61:f3:26:72:0d:89:97:bd:85: fb:fb:3b:d3:27:0e:93:8a:4c:fc:3d:70:62:c9:8a:00:f1:6c: 2b:c2:3d:d8:44:38:9f:a0:c3:a3:b4:ce:13:d3:75:be:95:63: 80:4b:f2:9f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEsKRU+sUgcTR4up7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgzMTE0NDUyNloXDTI3MTIwNDE1NDUyNlowLzEtMCsGA1UEAxMk MDJkNjQyYjktOGY2Ny00ODgzLWI5ODAtY2UzNjIyOWJiNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivkhsGyz+vKMZd5qgoXt3hzZjh+PGDTg81Ae Qi9zytV1MOvkkBV0c6z+Jn2THPG6zm/ds+1/e4DJeGdMGC03F38lL+MmPAvzZXgQ ddFSqM/pmtfW/LZVc2j5UsZNm1RkHh+z4/bPid3WiHCwLJW2grnsJiZ7fuK4Po0a YptdV5NfpclLaA3UVphCGoLs3ALrQ4jt9lUGKy0DKkggv8z6RCy9aUHllTSQLMzI v9kM6N8+vqs+z+V0pOQu08BNFIFjjz+6Tv/ZyjXcUohICZ9v7XiowrpYAl4+fr+F lYqpghTVxo6Rs6qIw/Ac9f9C88VlSn94pRqchWmiz2SpdwJYhQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIPMgqoS+e3TnUiJ/BuN8qw7UfuyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w MmQ2NDJiOS04ZjY3LTQ4ODMtYjk4MC1jZTM2MjI5YmI1ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzAyZDY0MmI5LThmNjctNDg4My1i OTgwLWNlMzYyMjliYjU4Ny8wMmQ2NDJiOS04ZjY3LTQ4ODMtYjk4MC1jZTM2MjI5 YmI1ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKM6xAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAndct//m8nihIC5QlW9+D 5RylwL2cTLPDwADolJ8zNita0jCviwS7YZjBcEmn1UxWUZZMrqJ0+NTv3IWovo3g fzVeMPTB3rpQrvPvZRRnrYI/nbMZy6uEDMmYIR3HUVEGZd62nXEM8YGd18+Ey3aM zsdw4RoIaimG2SKq677aqyOrXF24qRz9+BKMZwwe0BoR6/PH3sYu8Zxq+pDJOlei cRjHi6pcSDJw+JG1ztwQIiXNuXzz3NvOHeTFRvlfA8cbHl3+2w5IssLrFR3sHH3a YfMmcg2Jl72F+/s70ycOk4pM/D1wYsmKAPFsK8I92EQ4n6DDo7TOE9N1vpVjgEvy nw== -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:41 2025 by rpki-client