$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae.cer File: 7b881d7c-479b-4ae4-80c2-a2995524b9ae.cer (raw, json) Hash identifier: eKwfg9NTDBtipZmT10DtgO6ua/pdlIWIfn2t11Bm0Qc= Subject key identifier: A7:95:A6:99:1B:D8:BE:AA:90:24:79:19:2A:8F:A9:2B:23:ED:90:2F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B768F9F2918635B92A49FFA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/7b881d7c-479b-4ae4-80c2-a2995524b9ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 09:42:28 +0000 Certificate not after: Wed 12 Jan 2028 10:42:28 +0000 Subordinate resources: IP: 199.15.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:8f:9f:29:18:63:5b:92:a4:9f:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 9 09:42:28 2025 GMT Not After : Jan 12 10:42:28 2028 GMT Subject: CN=7b881d7c-479b-4ae4-80c2-a2995524b9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:2f:04:e9:76:24:91:5d:b0:20:13:90:98: 21:93:dd:e1:7f:31:9f:ab:60:9e:d3:c4:de:e6:e9: cd:d9:78:a0:1d:65:56:17:4a:8c:fa:53:18:c7:a1: ac:55:e1:c5:f2:80:82:c5:94:b4:11:f7:33:6a:34: b3:a9:56:38:6c:be:6b:c4:4f:21:f2:75:fe:fe:74: 73:20:38:b9:45:bd:c7:97:be:4b:6f:31:ef:63:10: b2:45:5b:44:ca:fc:44:52:7d:a5:e0:02:d7:49:9c: a8:c9:6c:c9:07:a6:1b:4d:11:f6:6f:e3:b1:0c:3e: 80:be:29:86:00:0c:90:1f:55:5b:d1:15:8d:11:cf: 86:f3:ac:81:24:1c:d6:6b:b0:34:b1:57:f8:92:28: 05:17:12:fa:38:d3:10:f1:54:96:89:9e:27:3b:22: f3:7d:1f:60:9a:75:8a:fb:40:5a:e4:bc:ef:b5:cd: e0:da:31:44:15:48:ee:a3:4b:90:0f:60:ef:2a:97: ce:e9:b4:96:75:d4:80:24:35:d0:5f:12:75:5d:ae: 77:1a:54:bc:0a:fb:e4:40:4d:53:51:b7:cb:ba:0c: 2e:b9:12:d0:5c:2d:23:01:68:6d:ae:81:92:c6:d3: 10:3c:b9:c6:36:10:81:68:78:3a:57:6c:df:e1:98: ef:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:95:A6:99:1B:D8:BE:AA:90:24:79:19:2A:8F:A9:2B:23:ED:90:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b881d7c-479b-4ae4-80c2-a2995524b9ae/7b881d7c-479b-4ae4-80c2-a2995524b9ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 199.15.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2f:ac:06:bc:39:93:e7:23:31:1d:ff:11:aa:a2:41:2a:36: d0:4d:71:b7:25:a6:da:d4:f7:3b:84:41:b2:90:9a:df:23:28: c9:ac:0d:ed:68:8b:92:cb:ae:3b:8f:9c:66:e4:14:64:3a:4c: 10:c6:f0:e5:a7:69:26:5a:e4:56:c3:b5:08:77:28:18:44:4a: 65:9e:f1:fd:bd:33:07:44:dd:82:6f:9b:b2:63:ca:08:4a:6e: b5:f9:98:7f:fc:d4:40:6f:a7:b6:b7:7a:2a:98:99:c9:57:33: c1:99:b4:d4:ee:00:c8:67:96:da:3b:20:0f:a7:43:f6:05:70: 1e:89:2e:6e:1f:13:1c:e8:dd:85:e5:e4:a6:31:9b:0f:cc:46: 6b:a7:1a:5b:d8:6e:77:2b:30:83:05:f2:f1:c4:a6:79:3b:3f: 8d:ff:b4:1a:2b:3b:d6:c8:82:56:01:75:ee:51:5b:f1:3f:6a: bc:cb:9d:fe:7d:cc:24:c5:5e:72:db:0e:d0:c9:49:ae:b4:ac: d5:ea:f3:c2:5d:1e:e4:fd:11:c3:a4:48:93:a1:97:39:fa:b0: 9c:df:c8:3c:19:4a:e8:1f:f9:11:1a:4b:a1:57:27:38:60:8d: e4:ab:c6:7d:ca:e7:10:8b:43:fc:ec:2a:9c:f7:18:aa:09:a1: 43:38:c0:f0 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt2j58pGGNbkqSf+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwOTA5NDIyOFoXDTI4MDExMjEwNDIyOFowLzEtMCsGA1UEAxMk N2I4ODFkN2MtNDc5Yi00YWU0LTgwYzItYTI5OTU1MjRiOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt00vBOl2JJFdsCATkJghk93hfzGfq2Ce08Te 5unN2XigHWVWF0qM+lMYx6GsVeHF8oCCxZS0EfczajSzqVY4bL5rxE8h8nX+/nRz IDi5Rb3Hl75LbzHvYxCyRVtEyvxEUn2l4ALXSZyoyWzJB6YbTRH2b+OxDD6AvimG AAyQH1Vb0RWNEc+G86yBJBzWa7A0sVf4kigFFxL6ONMQ8VSWiZ4nOyLzfR9gmnWK +0Ba5Lzvtc3g2jFEFUjuo0uQD2DvKpfO6bSWddSAJDXQXxJ1Xa53GlS8CvvkQE1T UbfLugwuuRLQXC0jAWhtroGSxtMQPLnGNhCBaHg6V2zf4ZjvgQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKeVppkb2L6qkCR5GSqPqSsj7ZAvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 Yjg4MWQ3Yy00NzliLTRhZTQtODBjMi1hMjk5NTUyNGI5YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdiODgxZDdjLTQ3OWItNGFlNC04 MGMyLWEyOTk1NTI0YjlhZS83Yjg4MWQ3Yy00NzliLTRhZTQtODBjMi1hMjk5NTUy NGI5YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHD9AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAey+sBrw5k+cjMR3/Eaqi QSo20E1xtyWm2tT3O4RBspCa3yMoyawN7WiLksuuO4+cZuQUZDpMEMbw5adpJlrk VsO1CHcoGERKZZ7x/b0zB0Tdgm+bsmPKCEputfmYf/zUQG+ntrd6KpiZyVczwZm0 1O4AyGeW2jsgD6dD9gVwHokubh8THOjdheXkpjGbD8xGa6caW9hudyswgwXy8cSm eTs/jf+0Gis71siCVgF17lFb8T9qvMud/n3MJMVectsO0MlJrrSs1erzwl0e5P0R w6RIk6GXOfqwnN/IPBlK6B/5ERpLoVcnOGCN5KvGfcrnEItD/OwqnPcYqgmhQzjA 8A== -----END CERTIFICATE-----Generated at Wed Oct 15 12:16:37 2025 by rpki-client