$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.cer File: 9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.cer (raw, json) Hash identifier: vCc07lYSrkipsxHj3FHny+PYqEyS6OznQNxWp87Yn1k= Subject key identifier: CC:B7:8F:43:D1:10:D5:D3:38:2B:9A:6E:B7:22:B1:98:9A:9C:13:34 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B71DF7C28554738CD55FE14C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 17:24:20 +0000 Certificate not after: Thu 06 Jan 2028 20:05:27 +0000 Subordinate resources: IP: 23.146.204.0/24 IP: 131.143.84.0/22 IP: 2602:f531::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:df:7c:28:55:47:38:cd:55:fe:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 7 17:24:20 2025 GMT Not After : Jan 6 20:05:27 2028 GMT Subject: CN=9a798c1c-9f1e-43d6-a5e9-09da6d32b31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:95:0f:61:7d:16:6b:59:89:8a:2f:52:f1: 8c:87:86:79:19:09:ba:82:2c:c6:bc:c6:b5:27:92: e9:c5:1f:b2:42:e9:94:99:0b:ca:74:2c:b7:aa:01: 48:7d:42:6c:4a:a8:be:8d:80:bf:5e:c7:6e:bd:1f: 34:5c:a4:bd:f6:86:81:1e:30:fb:1e:aa:9a:b8:ef: 8c:ed:69:31:95:6a:15:80:b3:43:90:95:e9:be:5a: eb:fe:b1:90:2a:35:75:a7:9d:6d:83:60:66:e9:95: a2:5a:cb:25:cc:f2:d0:4e:b4:fd:8f:95:82:8b:5b: ec:aa:5f:e2:14:cd:07:2f:a2:39:dd:2e:a5:0b:ba: c4:fd:19:51:84:dd:0e:10:55:0a:3e:9e:19:8e:1c: f6:fc:d2:16:1b:ef:f6:fc:26:e0:a9:35:fd:24:61: ef:3a:55:67:25:ba:ec:19:18:ae:0a:14:a5:b4:39: 7a:9d:01:0d:74:08:6d:2b:36:fa:f2:50:64:e0:0e: 29:45:77:7d:50:56:d9:bc:24:82:db:30:39:42:75: 49:b8:f8:51:73:ab:76:e2:28:20:fc:8e:cf:5a:0f: 4a:be:a7:94:3d:5d:3d:34:23:db:ec:74:cb:61:0d: 91:8e:b6:af:7b:e8:1e:fc:38:6b:68:df:3a:e6:ea: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B7:8F:43:D1:10:D5:D3:38:2B:9A:6E:B7:22:B1:98:9A:9C:13:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e/9a798c1c-9f1e-43d6-a5e9-09da6d32b31e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.146.204.0/24 131.143.84.0/22 IPv6: 2602:f531::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a2:cb:a7:c9:de:d6:42:72:b7:46:ff:21:3d:63:a2:eb:38: 34:82:3f:13:95:d7:1a:48:8d:60:8c:88:04:9c:71:e6:c5:69: fc:7e:16:fa:1e:36:ee:54:37:e0:cd:c6:36:b2:fa:6b:70:2f: 84:18:fa:1d:65:a2:08:d3:97:08:1d:82:83:41:17:18:6c:f9: 59:be:d3:ad:0a:64:24:9a:ce:21:c7:0f:16:e2:3e:fc:eb:06: 4c:ab:2e:2f:66:09:05:b1:38:ea:86:c3:8f:55:b1:97:f6:8e: 0b:cb:81:8c:ce:70:44:2b:8f:aa:89:73:31:79:8a:07:d5:fe: 46:c1:fc:a0:db:93:8b:83:12:7a:aa:90:36:46:c1:5f:4c:d4: 5e:7e:07:a9:9a:da:90:e8:c9:53:cb:38:89:65:2c:62:a4:74: 04:24:70:4a:0c:3a:be:51:45:ae:2e:9a:6a:0b:30:5e:9f:44: 94:97:c2:67:18:c1:09:a5:f4:a8:2b:4d:c2:36:95:71:00:93: 03:da:b8:63:9b:2f:69:80:71:e0:56:05:41:57:3d:f4:68:f9: 11:3f:29:c9:65:8f:80:0a:42:2a:87:18:8c:ae:3c:cb:5d:62: db:c9:14:11:ce:d6:7a:f8:67:2f:d1:f8:86:9c:05:b9:a6:b7: 6b:b2:1a:30 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEtx33woVUc4zVX+FMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwNzE3MjQyMFoXDTI4MDEwNjIwMDUyN1owLzEtMCsGA1UEAxMk OWE3OThjMWMtOWYxZS00M2Q2LWE1ZTktMDlkYTZkMzJiMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ+VD2F9FmtZiYovUvGMh4Z5GQm6gizGvMa1 J5LpxR+yQumUmQvKdCy3qgFIfUJsSqi+jYC/XsduvR80XKS99oaBHjD7HqqauO+M 7WkxlWoVgLNDkJXpvlrr/rGQKjV1p51tg2Bm6ZWiWsslzPLQTrT9j5WCi1vsql/i FM0HL6I53S6lC7rE/RlRhN0OEFUKPp4Zjhz2/NIWG+/2/CbgqTX9JGHvOlVnJbrs GRiuChSltDl6nQENdAhtKzb68lBk4A4pRXd9UFbZvCSC2zA5QnVJuPhRc6t24igg /I7PWg9KvqeUPV09NCPb7HTLYQ2Rjrave+ge/DhraN865urjGQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFMy3j0PRENXTOCuabrcisZianBM0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 YTc5OGMxYy05ZjFlLTQzZDYtYTVlOS0wOWRhNmQzMmIzMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzlhNzk4YzFjLTlmMWUtNDNkNi1h NWU5LTA5ZGE2ZDMyYjMxZS85YTc5OGMxYy05ZjFlLTQzZDYtYTVlOS0wOWRhNmQz MmIzMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkswDBAKDj1QwDgQCAAIwCAMGBCYC9TEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKiy6fJ3tZCcrdG/yE9Y6LrODSCPxOV1xpIjWCMiASccebFafx+Fvoe Nu5UN+DNxjay+mtwL4QY+h1logjTlwgdgoNBFxhs+Vm+060KZCSaziHHDxbiPvzr BkyrLi9mCQWxOOqGw49VsZf2jgvLgYzOcEQrj6qJczF5igfV/kbB/KDbk4uDEnqq kDZGwV9M1F5+B6ma2pDoyVPLOIllLGKkdAQkcEoMOr5RRa4ummoLMF6fRJSXwmcY wQml9KgrTcI2lXEAkwPauGObL2mAceBWBUFXPfRo+RE/Kcllj4AKQiqHGIyuPMtd YtvJFBHO1nr4Zy/R+IacBbmmt2uyGjA= -----END CERTIFICATE-----Generated at Wed Oct 8 17:07:37 2025 by rpki-client