$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.cer File: d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.cer (raw, json) Hash identifier: uqhsmbm19AldAKvHNyi1X24Yz6cQzo5lYf/X6yLToKY= Subject key identifier: 20:34:56:18:D9:06:3E:0B:F7:97:4E:BF:B2:11:01:8E:9A:6C:59:F3 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B6971B3D38E7DAE5E8168F520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Oct 2025 16:56:40 +0000 Certificate not after: Fri 07 Jan 2028 17:56:40 +0000 Subordinate resources: IP: 23.144.132.0/24 IP: 2602:f58e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:69:71:b3:d3:8e:7d:ae:5e:81:68:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 4 16:56:40 2025 GMT Not After : Jan 7 17:56:40 2028 GMT Subject: CN=d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:41:7c:e4:28:f1:3d:15:d3:80:16:c9:81: b1:a1:df:98:3d:7c:45:15:58:8e:8e:0d:45:e7:1d: 67:68:3b:3a:88:ac:e7:c7:cf:7d:86:5f:03:1c:9e: 08:20:26:58:1c:0f:ec:79:6f:3b:25:75:88:b3:a4: df:9e:8f:c5:72:b2:eb:ed:ca:2e:8f:a6:3b:fc:e6: 48:e1:d2:b0:43:39:3a:2a:85:6e:fe:34:27:e6:26: d6:8d:c8:3c:e8:92:00:ca:36:53:23:cf:05:aa:5b: 38:fd:5c:b2:d0:00:7b:ed:e6:6a:f5:13:6f:6f:50: 5e:67:46:5e:7f:18:b2:4f:8e:3a:b2:04:04:35:2c: 79:c0:a1:df:a3:fb:58:2f:50:5e:75:32:60:dc:87: 56:13:a9:bf:e0:e4:40:75:2e:d6:e5:90:4e:6a:26: 83:28:c4:ae:19:f5:63:25:9b:45:81:58:fe:e9:02: 88:d6:91:fe:21:93:87:d1:f8:71:ba:25:83:4f:da: 71:06:97:30:e6:23:6e:73:9a:89:10:9c:87:7d:d8: b9:93:fa:8a:cb:dc:9f:be:1a:ad:5c:7f:14:68:f9: 3b:7f:c5:ec:d9:6b:11:48:ac:c1:99:9b:ae:28:38: 4a:f0:fa:1a:2a:cf:09:49:40:a5:09:2f:6f:48:3c: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:56:18:D9:06:3E:0B:F7:97:4E:BF:B2:11:01:8E:9A:6C:59:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.144.132.0/24 IPv6: 2602:f58e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c3:3c:8e:2c:18:ef:d8:ba:3c:e3:47:81:88:c5:a6:2a:0d: 38:e7:29:d2:91:0e:08:8f:b2:a3:f5:ee:79:14:b3:92:1d:af: a8:20:f1:6f:12:5b:15:8d:aa:ed:15:f6:5e:26:ea:fb:bb:c1: b0:37:90:9b:9f:78:8b:9e:30:49:5e:cc:fc:97:21:69:e1:71: 00:44:1b:29:14:49:3a:74:87:87:4e:fa:77:0e:f2:a2:7e:03: 57:bc:cb:ca:51:87:21:5f:c4:59:da:d9:81:11:b1:d5:c2:f9: c1:89:f7:63:69:9b:5e:ee:7f:61:97:1b:16:74:f7:ae:78:1e: 28:b2:f8:e2:ef:57:38:56:cb:2f:7e:15:cc:b4:b7:75:16:43: 93:26:e3:78:36:36:4f:fe:09:c1:41:99:21:67:ee:18:88:d5: 80:7e:37:f8:20:a9:7f:62:94:2c:e6:89:58:52:37:49:71:75: 7d:fa:89:93:9b:a9:02:aa:d7:8c:97:de:ab:16:1f:7b:2f:5f: e7:22:9f:e4:66:06:7e:95:8d:09:71:9e:e6:a7:be:62:99:f2: c1:8d:42:f3:5d:db:50:b9:93:b0:88:2f:b5:f9:a2:6f:4a:1a: cd:91:a7:67:a9:d6:f6:90:f3:49:ca:8a:93:9d:a4:fe:9a:28: 86:70:2b:c7 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEtpcbPTjn2uXoFo9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwNDE2NTY0MFoXDTI4MDEwNzE3NTY0MFowLzEtMCsGA1UEAxMk ZDFhM2Q0Y2UtYTdmOC00ZWM5LThhM2ItZTQzNzhjNTliNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJdBfOQo8T0V04AWyYGxod+YPXxFFViOjg1F 5x1naDs6iKznx899hl8DHJ4IICZYHA/seW87JXWIs6Tfno/FcrLr7couj6Y7/OZI 4dKwQzk6KoVu/jQn5ibWjcg86JIAyjZTI88Fqls4/Vyy0AB77eZq9RNvb1BeZ0Ze fxiyT446sgQENSx5wKHfo/tYL1BedTJg3IdWE6m/4ORAdS7W5ZBOaiaDKMSuGfVj JZtFgVj+6QKI1pH+IZOH0fhxuiWDT9pxBpcw5iNuc5qJEJyHfdi5k/qKy9yfvhqt XH8UaPk7f8Xs2WsRSKzBmZuuKDhK8PoaKs8JSUClCS9vSDwu3wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCA0VhjZBj4L95dOv7IRAY6abFnzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k MWEzZDRjZS1hN2Y4LTRlYzktOGEzYi1lNDM3OGM1OWI1OTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2QxYTNkNGNlLWE3ZjgtNGVjOS04 YTNiLWU0Mzc4YzU5YjU5MS9kMWEzZDRjZS1hN2Y4LTRlYzktOGEzYi1lNDM3OGM1 OWI1OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkIQwDgQCAAIwCAMGACYC9Y4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGjDPI4sGO/YujzjR4GIxaYqDTjnKdKRDgiPsqP17nkUs5Idr6gg8W8SWxWNqu0V 9l4m6vu7wbA3kJufeIueMElezPyXIWnhcQBEGykUSTp0h4dO+ncO8qJ+A1e8y8pR hyFfxFna2YERsdXC+cGJ92Npm17uf2GXGxZ09654Hiiy+OLvVzhWyy9+Fcy0t3UW Q5Mm43g2Nk/+CcFBmSFn7hiI1YB+N/ggqX9ilCzmiVhSN0lxdX36iZObqQKq14yX 3qsWH3svX+cin+RmBn6VjQlxnuanvmKZ8sGNQvNd21C5k7CIL7X5om9KGs2Rp2ep 1vaQ80nKipOdpP6aKIZwK8c= -----END CERTIFICATE-----Generated at Wed Oct 8 17:05:15 2025 by rpki-client