$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e64c54-f16b-42fe-bd0e-d764dd5cb5d6.cer File: 18e64c54-f16b-42fe-bd0e-d764dd5cb5d6.cer (raw, json) Hash identifier: Wf3CQAbHQT1+PuUKCsP0pMFSbS1VlSbuUSQ+0GJUCtk= Subject key identifier: 23:2D:E1:4D:7B:7A:FF:4D:CF:7E:2F:A1:54:6F:9E:A8:C1:34:89:09 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B4DB3957F1A6C20C4F0685F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e64c54-f16b-42fe-bd0e-d764dd5cb5d6/18e64c54-f16b-42fe-bd0e-d764dd5cb5d6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e64c54-f16b-42fe-bd0e-d764dd5cb5d6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Sep 2025 18:26:47 +0000 Certificate not after: Tue 28 Dec 2027 19:26:47 +0000 Subordinate resources: IP: 147.97.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:b3:95:7f:1a:6c:20:c4:f0:68:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 24 18:26:47 2025 GMT Not After : Dec 28 19:26:47 2027 GMT Subject: CN=18e64c54-f16b-42fe-bd0e-d764dd5cb5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:76:09:4c:77:b0:79:cf:8e:4d:60:3f:1c: 5e:66:a0:2f:ca:53:06:94:5b:cc:59:42:dd:cd:63: 8c:4d:26:1a:b9:69:60:eb:64:40:db:47:50:33:4b: 23:9f:d9:77:14:4c:b0:9d:f7:34:4a:ec:e7:25:db: eb:59:99:d2:b7:6b:e6:48:b7:e5:19:2a:26:0b:41: d4:c9:69:d1:63:fd:3a:a7:91:98:5e:56:c3:04:24: 78:68:69:b2:67:61:74:94:77:ab:b7:5d:d0:5a:14: 9f:1a:1d:a9:1d:55:72:1b:dd:02:a7:f6:c6:01:33: 15:07:90:b6:c2:f6:c5:73:9a:4b:dd:ff:91:71:b6: 72:fa:ad:0d:c6:b9:d8:3d:ca:66:f6:18:9c:b1:6c: dd:f2:ac:0e:61:c3:00:97:c3:1e:79:ed:79:d6:79: 58:79:93:59:7b:3c:c2:84:6b:6c:17:88:3d:d1:02: 52:de:cd:f3:c5:54:8d:99:73:e9:12:22:e5:52:71: ba:e9:fd:a7:ed:e7:3a:63:8c:d9:08:de:77:6c:1c: a2:98:ed:25:8d:98:e6:b9:de:3e:1b:62:b8:ca:82: a1:76:2d:12:75:98:4a:d4:77:d8:af:3d:99:82:e8: de:05:16:ca:d3:1c:3c:05:ad:d3:09:92:18:e1:d5: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2D:E1:4D:7B:7A:FF:4D:CF:7E:2F:A1:54:6F:9E:A8:C1:34:89:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e64c54-f16b-42fe-bd0e-d764dd5cb5d6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e64c54-f16b-42fe-bd0e-d764dd5cb5d6/18e64c54-f16b-42fe-bd0e-d764dd5cb5d6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 147.97.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1c:82:c4:2c:c8:60:5d:60:54:61:4d:89:a8:0d:0c:1c:e3: 92:16:03:71:8f:0b:db:b3:4d:69:d7:a5:4d:45:df:19:0f:10: 18:ac:1e:c3:76:01:e5:55:b4:2e:2c:45:28:99:6d:d6:42:81: 09:b4:08:f9:cf:1c:f9:1a:3d:61:fc:ba:03:2b:41:95:2a:d4: 24:6b:57:6e:8f:2b:bc:28:30:e9:fa:3e:81:f3:12:cd:32:91: 85:f2:40:d0:d0:f6:7d:86:3f:61:df:56:a7:15:21:e5:e5:b9: 04:62:44:7c:ca:19:8d:38:5b:be:5c:0e:c3:c0:fd:29:ef:17: 72:4d:52:12:32:2c:93:11:df:7b:30:c2:e3:73:5f:a7:50:3c: b7:ee:87:ee:b6:8d:77:8b:8b:71:15:67:93:da:a9:45:8f:1d: 38:78:16:b7:df:0f:40:e9:4f:cd:2b:94:2d:cc:44:ba:a4:1f: 05:fe:fc:41:52:ef:17:b3:89:2d:02:e4:b7:0f:a7:57:dd:2d: 40:a6:03:30:ad:3f:e7:51:17:aa:01:6f:17:d3:77:a0:69:33: 3d:a7:ed:ac:4c:8e:32:c4:25:64:65:ff:7e:ba:ec:35:e8:83: e2:1b:3e:6a:05:58:6a:ea:8a:54:30:72:db:43:fc:db:e3:16: 84:70:f8:85 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEtNs5V/GmwgxPBoXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyNDE4MjY0N1oXDTI3MTIyODE5MjY0N1owLzEtMCsGA1UEAxMk MThlNjRjNTQtZjE2Yi00MmZlLWJkMGUtZDc2NGRkNWNiNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyd2CUx3sHnPjk1gPxxeZqAvylMGlFvMWULd zWOMTSYauWlg62RA20dQM0sjn9l3FEywnfc0SuznJdvrWZnSt2vmSLflGSomC0HU yWnRY/06p5GYXlbDBCR4aGmyZ2F0lHert13QWhSfGh2pHVVyG90Cp/bGATMVB5C2 wvbFc5pL3f+RcbZy+q0NxrnYPcpm9hicsWzd8qwOYcMAl8Meee151nlYeZNZezzC hGtsF4g90QJS3s3zxVSNmXPpEiLlUnG66f2n7ec6Y4zZCN53bByimO0ljZjmud4+ G2K4yoKhdi0SdZhK1HfYrz2ZgujeBRbK0xw8Ba3TCZIY4dU0swIDAQABo4ID/jCC A/owHQYDVR0OBBYEFCMt4U17ev9Nz34voVRvnqjBNIkJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8x OGU2NGM1NC1mMTZiLTQyZmUtYmQwZS1kNzY0ZGQ1Y2I1ZDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzE4ZTY0YzU0LWYxNmItNDJmZS1i ZDBlLWQ3NjRkZDVjYjVkNi8xOGU2NGM1NC1mMTZiLTQyZmUtYmQwZS1kNzY0ZGQ1 Y2I1ZDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCTYTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/HILELMhgXWBUYU2JqA0M HOOSFgNxjwvbs01p16VNRd8ZDxAYrB7DdgHlVbQuLEUomW3WQoEJtAj5zxz5Gj1h /LoDK0GVKtQka1dujyu8KDDp+j6B8xLNMpGF8kDQ0PZ9hj9h31anFSHl5bkEYkR8 yhmNOFu+XA7DwP0p7xdyTVISMiyTEd97MMLjc1+nUDy37ofuto13i4txFWeT2qlF jx04eBa33w9A6U/NK5QtzES6pB8F/vxBUu8Xs4ktAuS3D6dX3S1ApgMwrT/nUReq AW8X03egaTM9p+2sTI4yxCVkZf9+uuw16IPiGz5qBVhq6opUMHLbQ/zb4xaEcPiF -----END CERTIFICATE-----Generated at Wed Oct 8 17:00:48 2025 by rpki-client