$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer File: c39c90a0-ee66-4964-918e-0296541e3ad8.cer (raw, json) Hash identifier: YJy1yoJ2IN36JQzIxb8/imJ6MysbnJiwpxUfNBbNytg= Subject key identifier: C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B79F73670D42286B69405F080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 14:58:37 +0000 Certificate not after: Thu 13 Jan 2028 15:58:37 +0000 Subordinate resources: IP: 208.79.176.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:f7:36:70:d4:22:86:b6:94:05:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 10 14:58:37 2025 GMT Not After : Jan 13 15:58:37 2028 GMT Subject: CN=c39c90a0-ee66-4964-918e-0296541e3ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:41:e8:0b:5a:8f:0c:2f:6c:9f:4d:3c:8a:16: 4c:70:11:2a:02:1a:22:48:4d:e7:ea:c4:f9:d0:2a: 67:ef:76:96:b1:6a:23:80:24:0f:af:21:c8:09:86: c4:b4:70:ea:e1:f0:75:47:50:93:30:ae:d1:68:44: e5:82:f4:5c:12:e6:21:e4:fb:ff:a1:7a:eb:57:ea: 5d:d7:bf:e5:34:c2:15:2a:90:c7:69:f0:4e:d9:7d: 05:0f:92:66:92:b0:9b:13:35:3a:d0:c5:a4:15:7d: 6d:08:9b:6a:11:2e:b8:fb:f9:4e:2e:c0:1b:81:ab: f0:fd:7e:fc:10:7e:36:a6:08:de:ee:82:a2:d2:44: b3:fd:1a:d0:0d:0c:fd:fa:a2:6a:d3:66:da:11:9c: 8d:73:ff:3d:42:c0:34:91:98:c6:3a:5f:4a:4f:8d: ac:fa:c0:dd:d2:98:7d:c0:96:b5:6d:b1:42:4f:63: 1d:32:42:0e:e8:fe:54:7d:de:85:54:c2:24:e3:89: fa:be:e4:f7:8a:b0:ed:06:07:12:22:63:1b:8a:b1: 2f:fc:26:43:e7:4a:ae:19:1e:01:ad:ca:a7:8e:a4: 5e:3c:6f:98:98:cc:66:f0:e8:ed:a3:0f:8a:9e:6e: 85:9b:0b:6c:eb:89:1d:c9:af:ef:1e:2b:e3:f5:d3: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 208.79.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f2:40:77:1d:44:6f:1b:58:31:a4:e7:28:18:72:b4:56:45: c2:33:3d:36:d8:98:56:c8:5c:ae:fd:32:8d:06:a0:77:14:db: 9d:2c:15:48:f6:97:15:01:89:92:a5:d7:3f:cf:68:c8:c0:6a: 3c:32:63:22:8b:ac:49:0b:00:cb:d5:5c:11:33:17:1f:41:e8: 4a:60:e1:05:5a:57:92:d7:58:ba:c8:b9:70:00:ab:c0:c0:59: 4b:4d:8b:86:fd:b0:06:2b:dc:5e:4e:a5:4f:41:a3:1e:a1:12: 98:7f:89:3c:9c:e6:8c:d0:d2:cc:63:30:bc:4e:03:b0:3e:00: a9:f3:36:54:20:3a:bf:4e:b6:87:d9:b9:d2:04:82:6a:3c:65: 21:fe:48:cc:06:08:9f:d6:94:ab:f2:ef:65:f2:7e:57:ae:5e: 21:e7:7a:73:1f:f3:5c:b8:48:2e:77:76:a0:79:fd:ef:36:50: 4e:6b:ab:45:de:a6:7b:48:1a:30:6e:f4:6f:2b:41:82:74:6f: 97:65:57:b0:ce:0e:dd:35:91:68:64:bd:00:41:a9:17:34:f8: 22:f8:8c:6b:30:99:af:3a:8e:47:a2:34:80:ea:d1:99:6e:0a: e0:a5:93:00:05:8d:77:c3:c4:cf:6b:70:16:ae:6f:7d:95:e0: 78:19:54:fe -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt59zZw1CKGtpQF8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAxMDE0NTgzN1oXDTI4MDExMzE1NTgzN1owLzEtMCsGA1UEAxMk YzM5YzkwYTAtZWU2Ni00OTY0LTkxOGUtMDI5NjU0MWUzYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEHoC1qPDC9sn008ihZMcBEqAhoiSE3n6sT5 0Cpn73aWsWojgCQPryHICYbEtHDq4fB1R1CTMK7RaETlgvRcEuYh5Pv/oXrrV+pd 17/lNMIVKpDHafBO2X0FD5JmkrCbEzU60MWkFX1tCJtqES64+/lOLsAbgavw/X78 EH42pgje7oKi0kSz/RrQDQz9+qJq02baEZyNc/89QsA0kZjGOl9KT42s+sDd0ph9 wJa1bbFCT2MdMkIO6P5Ufd6FVMIk44n6vuT3irDtBgcSImMbirEv/CZD50quGR4B rcqnjqRePG+YmMxm8Ojtow+Knm6Fmwts64kdya/vHivj9dOltQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMTiinkhOD7n6y6Xx9ceBCmX4QJhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j MzljOTBhMC1lZTY2LTQ5NjQtOTE4ZS0wMjk2NTQxZTNhZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2MzOWM5MGEwLWVlNjYtNDk2NC05 MThlLTAyOTY1NDFlM2FkOC9jMzljOTBhMC1lZTY2LTQ5NjQtOTE4ZS0wMjk2NTQx ZTNhZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQT7AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHvJAdx1EbxtYMaTnKBhy tFZFwjM9NtiYVshcrv0yjQagdxTbnSwVSPaXFQGJkqXXP89oyMBqPDJjIousSQsA y9VcETMXH0HoSmDhBVpXktdYusi5cACrwMBZS02Lhv2wBivcXk6lT0GjHqESmH+J PJzmjNDSzGMwvE4DsD4AqfM2VCA6v062h9m50gSCajxlIf5IzAYIn9aUq/LvZfJ+ V65eIed6cx/zXLhILnd2oHn97zZQTmurRd6me0gaMG70bytBgnRvl2VXsM4O3TWR aGS9AEGpFzT4IviMazCZrzqOR6I0gOrRmW4K4KWTAAWNd8PEz2twFq5vfZXgeBlU /g== -----END CERTIFICATE-----Generated at Wed Oct 15 12:29:53 2025 by rpki-client