$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer File: 0c04df04-2c9d-47f7-9c5f-383c0718b395.cer (raw, json) Hash identifier: 3k+Ia32jtg001JzrVO2espmNLCpW1peY6705Cyoz2RY= Subject key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B6F3E0FCF0441844EC0C156C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 18:47:28 +0000 Certificate not after: Sun 09 Jan 2028 19:47:28 +0000 Subordinate resources: IP: 161.107.0.0/16 IP: 199.233.109.0/24 IP: 204.130.128.0/24 IP: 205.166.101.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:3e:0f:cf:04:41:84:4e:c0:c1:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 6 18:47:28 2025 GMT Not After : Jan 9 19:47:28 2028 GMT Subject: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:19:3a:0d:69:76:12:20:29:68:cd:69:47: 38:41:d4:6b:5e:2c:a6:24:5a:22:b6:99:07:0c:c5: 6e:cb:9e:5c:14:54:94:4c:50:b5:0a:0e:b9:5a:33: 6d:e8:03:48:90:be:57:8d:b0:3a:6b:6e:bd:46:f1: fb:0d:c7:90:93:b3:2b:1c:b5:62:19:1d:8e:b9:30: f6:33:2e:15:f1:7f:b8:3d:b0:27:88:27:35:78:2a: 3e:43:a1:e4:32:c3:1d:5d:88:ba:f8:51:6f:95:1f: e8:24:af:4d:31:c1:d7:53:ce:d2:53:f8:1b:9b:50: cb:fa:af:4c:1d:c9:d5:74:0a:e8:78:3e:72:89:10: 6c:3e:37:f2:fc:7c:b2:81:49:9c:34:34:e5:b2:f7: c3:06:9a:1a:68:53:c1:38:65:b1:4e:42:8a:0a:f6: d4:3a:43:8b:06:bb:dc:9a:e1:cb:4d:55:99:e4:bd: 50:9a:19:98:82:dc:46:27:1c:e2:ef:be:0f:74:b4: 05:a8:2a:27:27:2f:a9:0b:76:8d:b7:e4:04:7d:0b: 07:8f:79:8b:5c:63:3e:8d:2b:7e:dd:a1:da:b8:5d: 3e:d1:bd:66:d2:2e:7a:4b:95:86:a4:f3:2b:90:54: 13:f4:2e:9d:8a:0b:e5:73:61:f1:e7:db:7a:47:31: fe:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 161.107.0.0/16 199.233.109.0/24 204.130.128.0/24 205.166.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:98:66:0b:e2:6f:f4:fc:67:26:2e:95:17:86:5a:b9:1d:b4: 32:04:4b:f0:4f:92:db:20:a7:ec:80:48:90:1a:9b:b9:c6:6e: c8:e1:05:ab:08:2b:ce:1e:e4:89:85:4e:9e:d4:01:fb:0f:6c: bd:bb:44:7d:28:44:ba:5f:d2:aa:2d:ad:8a:d1:9e:fa:53:a4: c3:cb:20:c8:17:d9:65:1a:af:49:b9:6b:7d:00:11:6a:23:e9: 48:8d:49:3e:f8:ac:93:38:e0:cd:db:d0:57:c4:c1:f0:ed:43: 2a:45:c0:a2:1a:d8:06:26:9c:db:11:4b:3f:9d:0f:5b:c6:dd: 89:6e:b3:39:88:a5:9a:f9:7f:e6:a6:68:30:6b:52:ce:23:80: 3c:9f:7b:59:8b:0a:b2:ff:9a:ad:5d:7e:6a:48:63:2a:26:03: 1c:27:c1:04:91:07:f3:76:15:6d:41:80:5a:73:44:75:7d:46: eb:db:9c:2a:4b:aa:c3:4b:73:b9:f0:e9:dc:27:fd:52:49:bd: 0c:e3:df:26:fd:54:b7:57:4a:91:72:9c:5e:1e:39:91:f7:03: 93:d1:08:1c:a0:11:05:5a:f5:e6:5d:17:8b:46:eb:78:90:c4: 2b:b6:3a:2c:fb:93:55:fd:f1:a2:ec:d3:9d:61:d0:d8:f8:11: 0c:7f:94:8d -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEtvPg/PBEGETsDBVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwNjE4NDcyOFoXDTI4MDEwOTE5NDcyOFowLzEtMCsGA1UEAxMk MGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThiMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNQZOg1pdhIgKWjNaUc4QdRrXiymJFoitpkH DMVuy55cFFSUTFC1Cg65WjNt6ANIkL5XjbA6a269RvH7DceQk7MrHLViGR2OuTD2 My4V8X+4PbAniCc1eCo+Q6HkMsMdXYi6+FFvlR/oJK9NMcHXU87SU/gbm1DL+q9M HcnVdAroeD5yiRBsPjfy/HyygUmcNDTlsvfDBpoaaFPBOGWxTkKKCvbUOkOLBrvc muHLTVWZ5L1QmhmYgtxGJxzi774PdLQFqConJy+pC3aNt+QEfQsHj3mLXGM+jSt+ 3aHauF0+0b1m0i56S5WGpPMrkFQT9C6digvlc2Hx59t6RzH+oQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFLjWOY1BHu9HACx4yIlWoizUvpAXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w YzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzBjMDRkZjA0LTJjOWQtNDdmNy05 YzVmLTM4M2MwNzE4YjM5NS8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcx OGIzOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwChawMEAMfpbQMEAMyCgAMEAM2mZTBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAgmGYL4m/0/GcmLpUXhlq5HbQyBEvwT5LbIKfsgEiQGpu5xm7I4QWrCCvOHuSJ hU6e1AH7D2y9u0R9KES6X9KqLa2K0Z76U6TDyyDIF9llGq9JuWt9ABFqI+lIjUk+ +KyTOODN29BXxMHw7UMqRcCiGtgGJpzbEUs/nQ9bxt2JbrM5iKWa+X/mpmgwa1LO I4A8n3tZiwqy/5qtXX5qSGMqJgMcJ8EEkQfzdhVtQYBac0R1fUbr25wqS6rDS3O5 8OncJ/1SSb0M498m/VS3V0qRcpxeHjmR9wOT0QgcoBEFWvXmXReLRut4kMQrtjos +5NV/fGi7NOdYdDY+BEMf5SN -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:05 2025 by rpki-client