$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.cer File: 8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.cer (raw, json) Hash identifier: 9WgyLNSeeQlUMMbRpxsBEKyRlqtnfMQvER+FK2rIkYw= Subject key identifier: 5E:D6:15:E7:D5:93:2C:04:99:19:76:B1:9C:56:42:EB:6E:8D:D8:72 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B71C7A845ECDE88DFE2EC5A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 16:36:20 +0000 Certificate not after: Sat 27 Nov 2027 09:41:32 +0000 Subordinate resources: AS: 401044 IP: 131.143.124.0/24 IP: 2602:f901::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:c7:a8:45:ec:de:88:df:e2:ec:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 7 16:36:20 2025 GMT Not After : Nov 27 09:41:32 2027 GMT Subject: CN=8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:65:4d:c2:c2:f6:b0:a5:c3:f1:55:0f:ad:4a: 81:03:a1:16:7e:25:d0:61:69:ab:72:11:9b:fa:89: 9c:02:b3:66:76:7c:53:75:d9:5c:8b:f4:8c:b5:4a: 6a:dc:24:88:a7:f6:4f:87:61:71:05:64:54:09:13: 3b:64:4a:c9:38:83:f8:b3:8c:71:8a:3f:15:b7:2f: 42:b6:e3:6a:ac:8d:dd:34:63:f5:2b:cd:1a:a9:8d: ed:a3:61:fe:72:aa:b1:55:c4:3e:eb:ae:e6:4d:36: 3c:ac:13:be:1d:0f:43:98:d4:c6:1d:00:21:a9:97: 65:1b:c5:39:d5:01:2b:d8:0c:02:c5:6e:c3:fe:85: db:c9:47:52:cd:00:4d:49:58:1a:86:7b:05:88:ec: dc:05:38:12:16:f1:ae:fc:a6:e3:07:2a:24:d7:89: e3:8a:d7:dd:ee:65:ff:01:95:36:33:e1:a7:56:63: b4:1f:5f:b6:65:5b:8a:24:69:ac:32:6a:6b:00:7a: 1a:ab:16:d7:09:0d:d3:00:51:7a:1c:98:3e:fc:f8: 6a:be:bb:a7:40:b2:1e:6f:1c:d6:fd:bb:4c:96:eb: d8:7e:db:b5:d0:ac:ae:a2:f8:20:2a:78:3b:48:a1: 09:8e:7f:d9:d5:49:d1:ae:48:96:f5:f3:23:44:15: 24:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D6:15:E7:D5:93:2C:04:99:19:76:B1:9C:56:42:EB:6E:8D:D8:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203/8fcd5c10-a10e-4ebf-b0cc-c8e5a8e3a203.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 131.143.124.0/24 IPv6: 2602:f901::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401044 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b3:43:7e:06:c1:c8:ca:84:d6:90:f3:7e:7b:34:e6:f5:f0: 79:85:32:9c:ce:6f:04:51:40:99:55:1b:40:72:a6:35:03:8f: 9c:cf:e1:cf:30:df:23:c4:d4:63:d8:2c:5d:98:a7:a4:37:20: 64:c6:5d:b7:54:09:58:fa:c1:c8:99:c4:98:71:9c:16:c1:ef: ae:35:f0:03:54:68:14:da:28:53:12:75:72:94:ac:92:23:d9: 8d:81:1e:63:a6:c7:95:39:bf:02:62:90:af:f5:59:a7:8e:09: 26:68:13:4d:ac:99:bd:a5:bb:f3:97:a2:76:51:59:bd:2c:e7: ea:9c:90:1c:4b:21:84:25:78:03:d2:84:a9:62:f6:fc:98:c7: 27:db:23:ec:3f:73:42:61:17:5c:b9:38:b7:13:50:d2:b9:e6: 1c:61:8e:e1:0b:98:ac:d3:cb:c5:68:b2:94:c2:01:fa:73:03: 9f:e1:17:01:ac:7a:f9:8d:e8:5e:05:80:d4:36:00:c8:fb:6a: 2f:1e:51:49:15:5d:6e:4a:48:05:ab:15:13:7c:19:bb:82:16: 1a:41:ff:85:93:79:0a:bb:f6:80:7c:be:11:07:33:2d:ed:de: e9:ab:28:b4:93:2b:ce:03:79:7a:13:43:8a:74:9c:39:3b:e6: dd:d7:56:c9 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtxx6hF7N6I3+LsWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwNzE2MzYyMFoXDTI3MTEyNzA5NDEzMlowLzEtMCsGA1UEAxMk OGZjZDVjMTAtYTEwZS00ZWJmLWIwY2MtYzhlNWE4ZTNhMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGVNwsL2sKXD8VUPrUqBA6EWfiXQYWmrchGb +omcArNmdnxTddlci/SMtUpq3CSIp/ZPh2FxBWRUCRM7ZErJOIP4s4xxij8Vty9C tuNqrI3dNGP1K80aqY3to2H+cqqxVcQ+667mTTY8rBO+HQ9DmNTGHQAhqZdlG8U5 1QEr2AwCxW7D/oXbyUdSzQBNSVgahnsFiOzcBTgSFvGu/KbjByok14njitfd7mX/ AZU2M+GnVmO0H1+2ZVuKJGmsMmprAHoaqxbXCQ3TAFF6HJg+/PhqvrunQLIebxzW /btMluvYftu10KyuovggKng7SKEJjn/Z1UnRrkiW9fMjRBUkHwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFF7WFefVkywEmRl2sZxWQutujdhyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 ZmNkNWMxMC1hMTBlLTRlYmYtYjBjYy1jOGU1YThlM2EyMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzhmY2Q1YzEwLWExMGUtNGViZi1i MGNjLWM4ZTVhOGUzYTIwMy84ZmNkNWMxMC1hMTBlLTRlYmYtYjBjYy1jOGU1YThl M2EyMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACDj3wwDgQCAAIwCAMGACYC+QEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYelDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBss0N+BsHIyoTWkPN+ezTm9fB5 hTKczm8EUUCZVRtAcqY1A4+cz+HPMN8jxNRj2CxdmKekNyBkxl23VAlY+sHImcSY cZwWwe+uNfADVGgU2ihTEnVylKySI9mNgR5jpseVOb8CYpCv9VmnjgkmaBNNrJm9 pbvzl6J2UVm9LOfqnJAcSyGEJXgD0oSpYvb8mMcn2yPsP3NCYRdcuTi3E1DSueYc YY7hC5is08vFaLKUwgH6cwOf4RcBrHr5jeheBYDUNgDI+2ovHlFJFV1uSkgFqxUT fBm7ghYaQf+Fk3kKu/aAfL4RBzMt7d7pqyi0kyvOA3l6E0OKdJw5O+bd11bJ -----END CERTIFICATE-----Generated at Wed Oct 8 17:00:08 2025 by rpki-client