$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be.cer File: a2acb878-6cfd-4407-9620-cc328f43d1be.cer (raw, json) Hash identifier: gzVeNP/LjLnxdrFCwVAeXALvJ13/uV9bJlmmKnNjvHw= Subject key identifier: E5:E9:07:D8:5E:BA:1A:4A:AC:31:99:45:DF:0D:5B:30:28:9A:16:73 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B4E857615770C59F19A93C580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/a2acb878-6cfd-4407-9620-cc328f43d1be.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 Sep 2025 01:29:40 +0000 Certificate not after: Wed 29 Dec 2027 02:29:40 +0000 Subordinate resources: IP: 216.96.128.0/17 IP: 2620:120:5000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:85:76:15:77:0c:59:f1:9a:93:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 25 01:29:40 2025 GMT Not After : Dec 29 02:29:40 2027 GMT Subject: CN=a2acb878-6cfd-4407-9620-cc328f43d1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:4e:55:ae:be:4e:72:4d:f6:a1:17:99:d4: ef:c0:b8:0a:35:fb:98:4f:4c:a2:4f:8b:5d:b0:f8: 22:4c:2d:7f:05:1f:c5:c7:cf:02:ed:5a:21:be:e1: 49:97:9a:c8:94:e5:75:74:f3:af:91:27:18:69:7e: fb:5f:25:53:48:63:36:80:34:16:2b:87:0e:b4:5f: fc:63:97:b9:ca:df:9a:ae:58:3c:f4:77:69:05:76: 46:56:e9:8c:46:87:09:60:aa:ed:96:57:87:ad:f9: c9:e1:01:6d:d1:2e:53:0f:92:01:ee:a7:4f:ef:68: 6e:94:44:53:88:58:b1:23:5e:38:b3:f4:a2:30:2b: fa:73:0e:2c:48:4a:94:6f:52:22:99:04:ae:dd:46: ee:30:ae:f6:75:05:00:0d:58:d2:b4:52:f8:2d:15: cf:95:38:4a:9a:00:ac:f8:f0:f9:ae:4a:56:6a:bd: 23:e1:06:0e:e0:9f:4b:19:2a:e1:11:15:5d:89:ca: 00:94:c7:50:f5:6a:c1:7e:bd:3e:aa:78:7d:db:ef: 4e:aa:c3:f8:07:52:0e:b5:ec:db:80:c9:33:7f:ca: b6:02:3f:49:22:39:7b:ee:e7:2e:3d:2d:79:9b:59: 48:73:1b:8b:fc:41:f4:fd:50:62:c4:00:b4:e8:82: b4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:07:D8:5E:BA:1A:4A:AC:31:99:45:DF:0D:5B:30:28:9A:16:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a2acb878-6cfd-4407-9620-cc328f43d1be/a2acb878-6cfd-4407-9620-cc328f43d1be.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 216.96.128.0/17 IPv6: 2620:120:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:78:26:e4:d7:1c:cb:b8:bb:fa:f0:a4:40:8c:18:b9:99:4b: c2:eb:01:00:c8:75:d2:e2:de:b4:74:e3:32:2a:20:21:2a:dc: a5:30:d1:01:3b:ec:d6:35:98:3e:47:f5:09:02:14:ca:cc:2c: 96:bc:df:e4:5d:81:b2:6e:50:47:ac:c2:03:6c:e2:99:4f:45: 7e:b2:05:2a:dd:90:e4:81:4b:8c:a5:d6:45:6b:45:2f:56:e3: b0:1b:dd:c9:85:be:bf:8b:a5:38:d2:19:d8:68:47:26:09:98: 2c:dc:15:9e:3d:3c:cc:0e:b0:49:0c:9b:6e:9e:de:fd:fb:c8: d8:09:62:a1:84:e3:94:98:28:9a:06:4b:91:6d:cf:03:b3:2d: 95:27:ca:34:c4:d2:bc:7f:24:8b:8d:f1:0c:24:15:d6:da:e9: c5:80:64:99:80:4e:df:9e:69:52:bc:09:25:ef:e9:64:2f:e2: cd:ec:b6:42:1f:ac:90:03:f3:bb:77:f4:64:93:2a:66:72:ee: 8e:1c:68:22:8e:dd:25:95:80:8e:80:91:94:f4:62:e4:ae:b7: f1:01:73:49:27:30:ae:66:46:81:1e:73:66:db:49:be:40:50: 9b:31:f4:e4:5b:47:92:5e:2a:1a:98:22:74:25:b8:fc:05:5b: 6f:47:fa:64 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEtOhXYVdwxZ8ZqTxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyNTAxMjk0MFoXDTI3MTIyOTAyMjk0MFowLzEtMCsGA1UEAxMk YTJhY2I4NzgtNmNmZC00NDA3LTk2MjAtY2MzMjhmNDNkMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+pOVa6+TnJN9qEXmdTvwLgKNfuYT0yiT4td sPgiTC1/BR/Fx88C7VohvuFJl5rIlOV1dPOvkScYaX77XyVTSGM2gDQWK4cOtF/8 Y5e5yt+arlg89HdpBXZGVumMRocJYKrtlleHrfnJ4QFt0S5TD5IB7qdP72hulERT iFixI144s/SiMCv6cw4sSEqUb1IimQSu3UbuMK72dQUADVjStFL4LRXPlThKmgCs +PD5rkpWar0j4QYO4J9LGSrhERVdicoAlMdQ9WrBfr0+qnh92+9OqsP4B1IOtezb gMkzf8q2Aj9JIjl77ucuPS15m1lIcxuL/EH0/VBixAC06IK06QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOXpB9heuhpKrDGZRd8NWzAomhZzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h MmFjYjg3OC02Y2ZkLTQ0MDctOTYyMC1jYzMyOGY0M2QxYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2EyYWNiODc4LTZjZmQtNDQwNy05 NjIwLWNjMzI4ZjQzZDFiZS9hMmFjYjg3OC02Y2ZkLTQ0MDctOTYyMC1jYzMyOGY0 M2QxYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAfYYIAwDgQCAAIwCAMGACYgASBQMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AD94JuTXHMu4u/rwpECMGLmZS8LrAQDIddLi3rR04zIqICEq3KUw0QE77NY1mD5H 9QkCFMrMLJa83+RdgbJuUEeswgNs4plPRX6yBSrdkOSBS4yl1kVrRS9W47Ab3cmF vr+LpTjSGdhoRyYJmCzcFZ49PMwOsEkMm26e3v37yNgJYqGE45SYKJoGS5FtzwOz LZUnyjTE0rx/JIuN8QwkFdba6cWAZJmATt+eaVK8CSXv6WQv4s3stkIfrJAD87t3 9GSTKmZy7o4caCKO3SWVgI6AkZT0YuSut/EBc0knMK5mRoEec2bbSb5AUJsx9ORb R5JeKhqYInQluPwFW29H+mQ= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:06 2025 by rpki-client