$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f.cer File: b3cdb9f9-485f-42c4-879d-31049b91d87f.cer (raw, json) Hash identifier: ldEe7wipOzphahRpyOfzvgZGicg/Gx3QQgGzXDVCu5o= Subject key identifier: D4:7E:B6:52:60:9A:D1:06:CE:3E:0B:4F:A6:C9:D9:C3:D5:EF:7D:3C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B5EF970C286707441F926FF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 22:56:17 +0000 Certificate not after: Mon 03 Jan 2028 23:56:17 +0000 Subordinate resources: IP: 206.109.76.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:f9:70:c2:86:70:74:41:f9:26:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 30 22:56:17 2025 GMT Not After : Jan 3 23:56:17 2028 GMT Subject: CN=b3cdb9f9-485f-42c4-879d-31049b91d87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9e:2b:ad:78:b6:50:86:40:e2:ac:64:01:25: 97:1d:61:7f:60:ba:a6:0c:ca:d6:8d:2f:e5:9f:ff: 0b:a5:f0:3f:a4:8d:78:8d:d9:a2:3e:4a:dd:88:5e: 25:d8:92:03:42:5b:bd:fe:27:41:58:c8:df:2c:1f: 4c:c5:20:ba:5b:4b:1d:79:b3:f2:8a:cf:07:c2:69: a0:65:d7:cc:37:e2:79:52:c1:98:5c:38:5a:44:82: 12:b3:65:3a:bc:07:d4:19:be:0f:44:7c:46:39:cd: 0a:a7:2b:6c:2c:2c:12:35:1d:9b:7a:f5:1a:28:55: d1:8a:84:95:3b:e5:ef:60:bd:ca:eb:bc:93:aa:d9: 9c:0f:3f:32:e8:f0:54:04:3d:f3:56:e8:c4:d3:57: d9:5b:d0:ad:fa:66:66:7a:db:91:d1:38:61:8a:87: 34:98:8d:b7:f1:9d:76:b9:5d:da:bb:e0:23:ff:37: bd:b8:38:47:fb:9f:6b:fd:e9:73:81:3a:e2:ab:a6: 1e:56:17:a2:17:73:d8:23:8c:5c:66:42:e4:13:f1: 5b:9c:42:66:f3:d3:a9:77:88:7d:8e:32:b8:e0:0b: 25:29:6f:10:fe:9c:ed:11:f5:4b:50:4b:72:ac:88: 75:a2:45:f9:7d:0c:14:00:77:6c:f8:5f:60:b3:76: a4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7E:B6:52:60:9A:D1:06:CE:3E:0B:4F:A6:C9:D9:C3:D5:EF:7D:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 206.109.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7d:e2:fb:e2:1e:1a:8c:09:f0:08:5a:66:79:1c:e5:24:9f: bc:6c:2e:0d:c2:46:78:68:8e:b3:48:6b:ae:8f:78:f7:05:61: f4:8e:1d:a4:b7:4c:37:7e:ca:22:ba:bd:b5:b5:34:88:64:28: c5:1a:89:51:a7:5a:33:b5:b2:be:23:e8:15:9a:b2:67:51:18: de:8c:28:41:cd:90:cf:e4:e2:f0:df:86:94:49:c3:ee:84:ff: f9:2a:dd:3e:d9:09:ed:bb:ce:66:e6:6a:fe:4e:43:48:db:33: c3:a9:fa:bd:d4:9f:a1:51:c9:1a:52:e8:8d:d2:3d:c7:11:b3: 69:df:fc:52:18:a2:97:cb:ee:9d:18:84:c1:71:bf:6e:68:29: 0a:62:d3:f5:9f:5b:73:a0:f1:18:38:2c:2a:d8:ff:41:58:77: 85:4f:46:83:f8:db:28:e3:d7:c9:5b:14:e8:3e:23:be:1e:cb: 4d:e6:f2:a1:e1:b6:0e:85:5e:10:37:7d:39:f5:49:23:5f:ad: 62:c2:4b:b7:44:8d:2f:d0:ea:ef:ab:84:69:75:c2:58:88:2c: b2:ac:80:34:0e:8f:8d:85:a3:52:f8:0a:fc:9e:90:51:3c:2c: 28:dc:5d:b1:55:b1:92:0e:d8:f8:d0:64:44:eb:8e:8f:f1:18: 7c:ff:56:5b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEte+XDChnB0Qfkm/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkzMDIyNTYxN1oXDTI4MDEwMzIzNTYxN1owLzEtMCsGA1UEAxMk YjNjZGI5ZjktNDg1Zi00MmM0LTg3OWQtMzEwNDliOTFkODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ4rrXi2UIZA4qxkASWXHWF/YLqmDMrWjS/l n/8LpfA/pI14jdmiPkrdiF4l2JIDQlu9/idBWMjfLB9MxSC6W0sdebPyis8Hwmmg ZdfMN+J5UsGYXDhaRIISs2U6vAfUGb4PRHxGOc0KpytsLCwSNR2bevUaKFXRioSV O+XvYL3K67yTqtmcDz8y6PBUBD3zVujE01fZW9Ct+mZmetuR0Thhioc0mI238Z12 uV3au+Aj/ze9uDhH+59r/elzgTriq6YeVheiF3PYI4xcZkLkE/FbnEJm89Opd4h9 jjK44AslKW8Q/pztEfVLUEtyrIh1okX5fQwUAHds+F9gs3akhQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNR+tlJgmtEGzj4LT6bJ2cPV7308MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i M2NkYjlmOS00ODVmLTQyYzQtODc5ZC0zMTA0OWI5MWQ4N2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2IzY2RiOWY5LTQ4NWYtNDJjNC04 NzlkLTMxMDQ5YjkxZDg3Zi9iM2NkYjlmOS00ODVmLTQyYzQtODc5ZC0zMTA0OWI5 MWQ4N2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADObUwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARn3i++IeGowJ8AhaZnkc 5SSfvGwuDcJGeGiOs0hrro949wVh9I4dpLdMN37KIrq9tbU0iGQoxRqJUadaM7Wy viPoFZqyZ1EY3owoQc2Qz+Ti8N+GlEnD7oT/+SrdPtkJ7bvOZuZq/k5DSNszw6n6 vdSfoVHJGlLojdI9xxGzad/8Uhiil8vunRiEwXG/bmgpCmLT9Z9bc6DxGDgsKtj/ QVh3hU9Gg/jbKOPXyVsU6D4jvh7LTebyoeG2DoVeEDd9OfVJI1+tYsJLt0SNL9Dq 76uEaXXCWIgssqyANA6PjYWjUvgK/J6QUTwsKNxdsVWxkg7Y+NBkROuOj/EYfP9W Ww== -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:05 2025 by rpki-client