$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer File: 37d65fc0-6e4c-4477-9488-812657d0d39e.cer (raw, json) Hash identifier: U/ayft92Oge4pZT7jENU9fxXwX8nqhHcfg+BYtpSD0E= Subject key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B3C39A7255C7B87FFF74E7B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Sep 2025 12:12:22 +0000 Certificate not after: Mon 11 Oct 2027 23:55:00 +0000 Subordinate resources: IP: 153.45.0.0/16 IP: 2604:20e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:39:a7:25:5c:7b:87:ff:f7:4e:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 18 12:12:22 2025 GMT Not After : Oct 11 23:55:00 2027 GMT Subject: CN=37d65fc0-6e4c-4477-9488-812657d0d39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:01:ae:c7:f7:27:96:b3:80:f8:99:3c:f9: 03:2f:4f:36:f7:b9:81:31:04:23:23:12:f0:6b:6a: fc:87:76:c4:87:4a:16:30:2b:7b:96:f1:76:10:50: 57:51:cb:d7:24:c2:6d:77:6c:0f:2b:e7:45:df:ae: b9:46:14:99:e8:e4:9a:3a:7a:ea:3d:a1:23:98:8e: b5:f9:ed:b1:27:92:90:6e:b2:5b:46:c0:b2:09:9a: f3:2d:15:94:61:84:12:b4:fe:b3:ae:14:8c:fe:7d: fc:a4:c2:74:18:5d:27:0d:87:ed:5f:5f:15:cd:fb: 51:bb:b5:00:b2:4d:50:34:04:e9:bc:52:84:27:7b: 3d:10:2d:06:5b:83:42:bc:86:67:fc:6d:d4:b6:2e: 73:c8:c6:bb:58:8e:7b:54:9b:87:a2:3e:5b:d2:85: d2:c9:0f:a2:f6:2a:66:79:f9:4f:c9:74:48:10:23: 37:92:d2:ab:18:e7:e4:93:59:25:ce:17:91:52:d9: 21:06:8a:b0:90:0a:f1:63:3e:1a:2e:bd:32:ac:07: 1a:c6:fa:d9:2e:a7:ad:85:f0:bd:d1:d6:67:71:88: f8:8d:78:5f:be:d7:df:ac:59:4e:cb:13:93:1b:16: 0f:f5:e9:bc:15:5e:e1:08:ac:4d:40:66:76:33:c6: f8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 153.45.0.0/16 IPv6: 2604:20e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f4:cf:c7:9a:41:fd:12:32:f4:56:de:c6:44:fc:49:31:4f: 6a:92:69:6e:b0:af:4d:09:0d:91:2e:36:df:67:51:6c:b5:55: 82:ac:fc:35:56:e7:a3:bc:9c:62:b9:23:16:e6:7e:e4:6f:18: 47:73:5d:60:bd:7f:eb:1e:ab:07:2e:cd:6c:b4:92:0d:46:e0: 11:3a:cd:bd:5e:52:f5:59:56:2f:7b:f3:13:51:e3:49:cc:b2: 83:20:48:70:56:bb:cd:9b:46:24:cc:8e:5f:80:03:57:c4:51: 04:83:9b:77:9d:fd:5e:15:44:34:98:7e:8b:72:f7:66:18:f3: 81:c0:c1:50:8a:54:4d:28:e2:1c:1d:ae:b0:80:7a:fe:24:34: 5f:73:65:0f:86:b9:fd:e1:1d:f2:40:af:28:34:08:4a:f4:83: b8:7b:bb:19:04:0b:e4:49:57:f1:31:43:58:eb:36:6f:62:fe: 09:d5:71:48:dc:95:0a:c0:26:3e:30:b8:cf:a9:7b:23:e0:44: ef:26:7e:58:17:b1:11:c5:89:70:80:e4:6b:f4:da:ab:b0:bd: a3:1c:a8:15:92:65:21:52:83:83:cc:5f:61:6c:2e:ca:5d:c6: 46:6d:b6:31:45:63:96:c2:38:d4:db:9b:cf:7e:fd:ad:0e:5c: b5:ca:c4:db -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEs8OaclXHuH//dOe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxODEyMTIyMloXDTI3MTAxMTIzNTUwMFowLzEtMCsGA1UEAxMk MzdkNjVmYzAtNmU0Yy00NDc3LTk0ODgtODEyNjU3ZDBkMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkwBrsf3J5azgPiZPPkDL08297mBMQQjIxLw a2r8h3bEh0oWMCt7lvF2EFBXUcvXJMJtd2wPK+dF3665RhSZ6OSaOnrqPaEjmI61 +e2xJ5KQbrJbRsCyCZrzLRWUYYQStP6zrhSM/n38pMJ0GF0nDYftX18VzftRu7UA sk1QNATpvFKEJ3s9EC0GW4NCvIZn/G3Uti5zyMa7WI57VJuHoj5b0oXSyQ+i9ipm eflPyXRIECM3ktKrGOfkk1klzheRUtkhBoqwkArxYz4aLr0yrAcaxvrZLqethfC9 0dZncYj4jXhfvtffrFlOyxOTGxYP9em8FV7hCKxNQGZ2M8b4lQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFJHY6fU+ScWdYnUcQ+VBo7rknTxpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z N2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdkMGQzOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzM3ZDY1ZmMwLTZlNGMtNDQ3Ny05 NDg4LTgxMjY1N2QwZDM5ZS8zN2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdk MGQzOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwCZLTANBAIAAjAHAwUAJgQg4DBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCW 9M/HmkH9EjL0Vt7GRPxJMU9qkmlusK9NCQ2RLjbfZ1FstVWCrPw1VuejvJxiuSMW 5n7kbxhHc11gvX/rHqsHLs1stJINRuAROs29XlL1WVYve/MTUeNJzLKDIEhwVrvN m0YkzI5fgANXxFEEg5t3nf1eFUQ0mH6LcvdmGPOBwMFQilRNKOIcHa6wgHr+JDRf c2UPhrn94R3yQK8oNAhK9IO4e7sZBAvkSVfxMUNY6zZvYv4J1XFI3JUKwCY+MLjP qXsj4ETvJn5YF7ERxYlwgORr9NqrsL2jHKgVkmUhUoODzF9hbC7KXcZGbbYxRWOW wjjU25vPfv2tDly1ysTb -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:05 2025 by rpki-client