$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer File: 7af1a9d7-c226-4beb-8f1e-623878125f52.cer (raw, json) Hash identifier: ZD4xS+dk6Ce6Z3ADTOigiv4ZK8yqhJVyeLcGLA66VmQ= Subject key identifier: 8A:8D:A3:93:DC:37:54:A6:B8:9A:56:2B:7D:23:6D:F6:14:8B:A9:65 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B028ED9EB99F200718E2B2C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Aug 2025 20:27:09 +0000 Certificate not after: Wed 01 Dec 2027 21:27:09 +0000 Subordinate resources: IP: 143.207.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:8e:d9:eb:99:f2:00:71:8e:2b:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 28 20:27:09 2025 GMT Not After : Dec 1 21:27:09 2027 GMT Subject: CN=7af1a9d7-c226-4beb-8f1e-623878125f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:d9:f3:70:23:42:16:48:b8:87:03:88:94: cd:68:f2:b2:ee:50:73:bc:5e:77:6e:b3:37:2e:3a: 9b:aa:98:cc:90:73:73:1f:f0:fa:a1:bb:ef:4d:f1: f8:2f:47:08:f2:a2:ce:9b:53:87:bf:34:4e:b9:c2: 02:57:e5:de:28:0c:29:16:58:2a:ae:3f:28:38:b9: 5d:4e:93:6b:77:a2:3a:af:eb:45:53:1f:f1:3f:b4: 97:a9:e8:30:b9:36:24:6f:b4:92:9d:bd:3d:04:c7: 0e:53:0a:c5:a3:1e:81:d0:d5:d4:d9:a2:b3:e2:ee: 48:da:b1:2d:0e:4f:58:6a:9d:d8:22:83:bc:3e:bc: 33:9c:59:57:54:62:32:87:d7:14:24:60:ad:11:48: dc:74:e3:f6:84:04:5f:7d:84:67:04:a7:44:4a:a0: c6:b3:da:21:93:b9:90:b3:df:39:7e:41:fc:ad:44: 6f:45:d3:73:ed:35:46:97:6a:b3:7e:a1:c0:0d:cc: 1f:95:4e:f1:34:7d:b6:76:f4:ab:42:8d:22:f2:ea: 7c:13:2d:8f:5a:a5:63:5b:55:6c:fc:31:ae:c0:e7: e7:f5:61:bd:f6:43:ad:9a:21:99:60:e9:97:2f:b7: 6b:4c:8b:3f:6f:06:3a:ce:c1:8b:27:b0:93:98:bc: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:A3:93:DC:37:54:A6:B8:9A:56:2B:7D:23:6D:F6:14:8B:A9:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 143.207.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:48:3b:81:fa:b9:50:08:f8:0d:9d:8c:c5:84:e6:6a:ab:a2: cf:60:a1:0f:12:a2:94:fd:c2:7f:cb:7b:b2:47:21:fc:a3:51: 01:7c:98:86:73:cb:0a:0c:0e:43:a5:a4:de:46:bc:ec:47:eb: 5a:66:88:a3:e6:01:2b:fb:25:56:19:0b:94:d9:8c:a7:50:77: ed:a5:a3:01:96:76:2b:b9:a5:c0:74:6f:4f:2f:f2:a7:ee:b4: 16:51:8f:f3:17:d6:7a:23:45:76:eb:47:25:37:47:e6:e9:4a: 0c:97:97:b6:32:41:86:db:69:e8:a4:7e:06:60:ae:4d:82:ce: 63:2f:56:1d:dc:7e:c4:d7:46:18:1f:2a:7e:00:00:f8:8f:dd: 1b:c3:cc:23:64:03:38:20:00:bb:77:d2:f3:e5:48:10:6b:41: 85:c1:cd:ea:c5:95:a1:9a:d8:74:5b:8a:5e:de:ad:82:78:b9: 40:02:b1:e3:5b:43:62:80:1b:49:80:53:08:69:1b:56:33:bb: 21:d8:a1:36:68:6a:29:f5:35:01:a6:0b:b6:3d:7b:1e:53:c2: 83:44:9d:86:7a:9a:19:66:37:8d:cc:3f:26:07:02:57:ef:31: c2:67:88:cd:81:b5:44:6a:f4:21:68:66:e0:00:dd:41:78:e1: 95:7c:e7:db -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEsCjtnrmfIAcY4rLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyODIwMjcwOVoXDTI3MTIwMTIxMjcwOVowLzEtMCsGA1UEAxMk N2FmMWE5ZDctYzIyNi00YmViLThmMWUtNjIzODc4MTI1ZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6/Z83AjQhZIuIcDiJTNaPKy7lBzvF53brM3 LjqbqpjMkHNzH/D6obvvTfH4L0cI8qLOm1OHvzROucICV+XeKAwpFlgqrj8oOLld TpNrd6I6r+tFUx/xP7SXqegwuTYkb7SSnb09BMcOUwrFox6B0NXU2aKz4u5I2rEt Dk9Yap3YIoO8PrwznFlXVGIyh9cUJGCtEUjcdOP2hARffYRnBKdESqDGs9ohk7mQ s985fkH8rURvRdNz7TVGl2qzfqHADcwflU7xNH22dvSrQo0i8up8Ey2PWqVjW1Vs /DGuwOfn9WG99kOtmiGZYOmXL7drTIs/bwY6zsGLJ7CTmLzgnwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFIqNo5PcN1SmuJpWK30jbfYUi6llMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 YWYxYTlkNy1jMjI2LTRiZWItOGYxZS02MjM4NzgxMjVmNTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdhZjFhOWQ3LWMyMjYtNGJlYi04 ZjFlLTYyMzg3ODEyNWY1Mi83YWYxYTlkNy1jMjI2LTRiZWItOGYxZS02MjM4Nzgx MjVmNTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCPzzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDDSDuB+rlQCPgNnYzFhOZq q6LPYKEPEqKU/cJ/y3uyRyH8o1EBfJiGc8sKDA5DpaTeRrzsR+taZoij5gEr+yVW GQuU2YynUHftpaMBlnYruaXAdG9PL/Kn7rQWUY/zF9Z6I0V260clN0fm6UoMl5e2 MkGG22nopH4GYK5Ngs5jL1Yd3H7E10YYHyp+AAD4j90bw8wjZAM4IAC7d9Lz5UgQ a0GFwc3qxZWhmth0W4pe3q2CeLlAArHjW0NigBtJgFMIaRtWM7sh2KE2aGop9TUB pgu2PXseU8KDRJ2GepoZZjeNzD8mBwJX7zHCZ4jNgbVEavQhaGbgAN1BeOGVfOfb -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:02 2025 by rpki-client