$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b3659b1-9888-4467-93a7-9fea5b4d5195.cer File: 7b3659b1-9888-4467-93a7-9fea5b4d5195.cer (raw, json) Hash identifier: Q4eFk+ftxTAeEHV00x7kkxEWlFVKF40dR6HV5Knmogg= Subject key identifier: 16:DE:B7:9C:98:32:00:32:96:44:24:61:82:87:F1:A6:EC:50:0A:0F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B5BAB0575E790D4F848A93B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b3659b1-9888-4467-93a7-9fea5b4d5195/7b3659b1-9888-4467-93a7-9fea5b4d5195.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b3659b1-9888-4467-93a7-9fea5b4d5195/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Sep 2025 18:30:51 +0000 Certificate not after: Sun 02 Jan 2028 19:30:51 +0000 Subordinate resources: IP: 155.34.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:ab:05:75:e7:90:d4:f8:48:a9:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 29 18:30:51 2025 GMT Not After : Jan 2 19:30:51 2028 GMT Subject: CN=7b3659b1-9888-4467-93a7-9fea5b4d5195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:84:62:c1:8a:12:96:36:85:14:c4:57:f1: 8d:a8:25:1a:33:77:98:e7:a0:24:a8:cf:01:75:0e: d6:40:0b:18:49:5e:2f:9e:d8:e3:48:e3:c0:48:f8: e7:fc:10:f5:d5:d0:12:4c:75:1c:00:bf:d9:90:aa: da:51:cc:dd:a2:a3:15:6c:c2:67:7c:7a:ca:6f:6b: db:96:53:71:ce:14:97:55:8c:09:92:2c:7d:b1:55: 1b:e0:de:98:d4:f6:bb:bf:de:c1:57:0f:60:bf:3e: bf:1e:6e:b6:0a:0d:57:65:d1:21:8d:05:47:c4:14: d8:d9:31:94:1b:6e:80:aa:a9:a6:32:73:7f:c8:e9: 44:9f:2f:51:22:c7:5f:c2:dc:1b:e3:a5:a8:68:5e: bf:66:1b:f7:99:3a:16:6a:61:c3:c9:a0:7e:39:37: 77:4f:1a:62:ea:cf:4b:07:71:9b:a8:d0:53:28:f8: cf:5e:ce:97:14:c2:13:93:1b:c8:db:f5:14:3b:b1: 3e:99:98:99:17:80:c3:b2:c9:c8:a7:a2:f9:73:1b: bb:fa:40:f7:cc:ff:33:bb:db:e2:fe:35:68:cb:01: ab:bc:6f:f9:55:80:e0:2d:2e:46:70:55:1c:b2:41: 27:d7:8b:c9:95:71:56:7f:d0:dd:70:cb:82:cd:b1: aa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DE:B7:9C:98:32:00:32:96:44:24:61:82:87:F1:A6:EC:50:0A:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b3659b1-9888-4467-93a7-9fea5b4d5195/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b3659b1-9888-4467-93a7-9fea5b4d5195/7b3659b1-9888-4467-93a7-9fea5b4d5195.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 155.34.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:24:4f:ef:63:ad:64:69:73:16:d8:8d:31:2b:b4:aa:c6:7b: f7:06:6e:12:26:be:55:f5:1d:f4:8e:94:0c:10:f0:9a:c2:3d: 96:33:89:02:95:fd:27:c7:e2:8c:ee:47:17:65:a9:6c:c7:d2: f7:e8:b3:df:f4:7f:b0:82:d5:be:3d:be:e5:dd:d7:09:5b:ae: d6:3c:ed:63:b6:36:88:70:e2:a3:d1:6f:2e:03:46:3c:6d:c9: 85:ff:66:c8:70:4a:42:c0:26:a7:2e:65:a6:6e:dd:c7:c1:70: b3:aa:1a:61:dc:92:e8:34:83:34:24:30:46:70:ca:fb:6e:48: 74:2d:ce:f8:b7:3b:40:58:f4:d5:76:19:ee:d6:c4:fa:9d:75: 68:85:64:fe:e1:27:7d:36:4a:3c:0e:8d:39:49:5a:c8:b2:33: e9:dd:14:17:2b:dc:da:fd:90:47:11:8f:80:c1:c3:d4:d9:89: 4a:66:92:41:81:8f:c2:73:13:97:3f:7e:5c:99:df:59:0c:b1: f2:df:b8:ec:8e:f5:a9:c0:9f:45:12:43:5c:2d:8e:24:fd:cd: b7:fc:77:7c:ab:04:ba:14:e9:23:8f:60:36:e5:19:00:d8:e9: b6:58:fb:be:ac:3f:1a:36:ad:d8:1f:ac:6d:8c:0c:cd:a9:db: 46:e0:0d:3a -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEtbqwV155DU+EipO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyOTE4MzA1MVoXDTI4MDEwMjE5MzA1MVowLzEtMCsGA1UEAxMk N2IzNjU5YjEtOTg4OC00NDY3LTkzYTctOWZlYTViNGQ1MTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApouEYsGKEpY2hRTEV/GNqCUaM3eY56AkqM8B dQ7WQAsYSV4vntjjSOPASPjn/BD11dASTHUcAL/ZkKraUczdoqMVbMJnfHrKb2vb llNxzhSXVYwJkix9sVUb4N6Y1Pa7v97BVw9gvz6/Hm62Cg1XZdEhjQVHxBTY2TGU G26AqqmmMnN/yOlEny9RIsdfwtwb46WoaF6/Zhv3mToWamHDyaB+OTd3Txpi6s9L B3GbqNBTKPjPXs6XFMITkxvI2/UUO7E+mZiZF4DDssnIp6L5cxu7+kD3zP8zu9vi /jVoywGrvG/5VYDgLS5GcFUcskEn14vJlXFWf9DdcMuCzbGqFQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFBbet5yYMgAylkQkYYKH8absUAoPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 YjM2NTliMS05ODg4LTQ0NjctOTNhNy05ZmVhNWI0ZDUxOTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdiMzY1OWIxLTk4ODgtNDQ2Ny05 M2E3LTlmZWE1YjRkNTE5NS83YjM2NTliMS05ODg4LTQ0NjctOTNhNy05ZmVhNWI0 ZDUxOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCbIjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC2JE/vY61kaXMW2I0xK7Sq xnv3Bm4SJr5V9R30jpQMEPCawj2WM4kClf0nx+KM7kcXZalsx9L36LPf9H+wgtW+ Pb7l3dcJW67WPO1jtjaIcOKj0W8uA0Y8bcmF/2bIcEpCwCanLmWmbt3HwXCzqhph 3JLoNIM0JDBGcMr7bkh0Lc74tztAWPTVdhnu1sT6nXVohWT+4Sd9Nko8Do05SVrI sjPp3RQXK9za/ZBHEY+AwcPU2YlKZpJBgY/CcxOXP35cmd9ZDLHy37jsjvWpwJ9F EkNcLY4k/c23/Hd8qwS6FOkjj2A25RkA2Om2WPu+rD8aNq3YH6xtjAzNqdtG4A06 -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:00 2025 by rpki-client