$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144.cer File: e9b8f5b3-a51f-4b99-b9cc-068ed2754144.cer (raw, json) Hash identifier: nzZDVU3x2pBBcG8CWiOw0h+Ecz/Efm75ObtekAQrWPc= Subject key identifier: 71:94:B2:16:95:32:4B:2C:97:DE:3E:69:76:7E:8A:47:CA:93:AC:0F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AF9F33A9D58A9E9BC9ED412C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/e9b8f5b3-a51f-4b99-b9cc-068ed2754144.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Aug 2025 18:27:07 +0000 Certificate not after: Sun 28 Nov 2027 19:27:07 +0000 Subordinate resources: IP: 192.112.24.0/24 IP: 205.159.121.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:f3:3a:9d:58:a9:e9:bc:9e:d4:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 25 18:27:07 2025 GMT Not After : Nov 28 19:27:07 2027 GMT Subject: CN=e9b8f5b3-a51f-4b99-b9cc-068ed2754144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:35:a8:74:6a:32:76:df:98:70:0b:56:80: a2:8a:96:5e:fa:61:6a:cc:af:2a:b5:4f:17:74:83: cd:48:91:e0:4b:ea:76:8a:58:b2:60:c0:47:8f:9d: c6:a2:55:f5:c1:04:a1:49:31:d8:1a:9c:ba:bc:01: 6e:1d:f6:e3:48:14:d6:1e:74:d7:5e:b9:a9:19:e2: 62:43:e0:f2:ca:8c:48:d8:45:ee:df:a3:75:fc:2f: 41:e7:f5:54:9f:5e:e1:b9:d2:60:1e:26:9a:c5:04: 4f:50:f0:8e:9f:0c:2f:90:43:fa:82:47:62:71:08: cb:22:83:b0:db:b9:ff:0b:8b:82:1a:86:df:c1:a9: f3:d0:d7:a3:cc:87:1a:68:de:96:f9:b3:89:2a:e9: aa:6a:26:44:41:14:4d:49:94:a8:9a:05:fa:ec:19: b9:0f:f3:48:21:e9:49:b0:c5:8b:d2:50:46:2d:7d: c3:82:6b:e9:f3:e7:d1:8f:ef:f6:36:18:ac:f4:de: 61:55:b2:d8:f3:0e:de:c7:2c:4f:d8:78:73:b3:ad: 88:3c:56:b0:86:b5:4f:f4:52:e3:f7:39:a7:25:57: ed:5f:d6:b2:03:92:67:15:2a:59:05:b6:8f:8d:6e: c0:c5:fa:eb:e5:17:70:fe:3b:c2:fc:66:16:89:01: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:94:B2:16:95:32:4B:2C:97:DE:3E:69:76:7E:8A:47:CA:93:AC:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/e9b8f5b3-a51f-4b99-b9cc-068ed2754144.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.112.24.0/24 205.159.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:76:c9:9f:56:86:0d:2e:57:7e:c8:d8:e1:ec:16:60:8a:29: 5f:27:ba:ba:18:cb:82:2f:2e:15:57:21:05:2a:63:64:de:3e: d4:e6:63:ac:6b:a0:4a:87:ab:b1:1e:c1:33:7a:e4:45:3a:65: 70:eb:43:6c:85:66:9e:3e:08:56:a6:30:bf:98:e4:62:89:59: ac:6e:f7:e6:7d:44:bb:82:08:2d:84:f4:5a:55:21:50:e6:19: cc:06:07:dc:0d:c6:27:40:ba:3a:82:f2:8a:bb:bf:79:4f:15: f9:94:17:29:04:d4:c5:4a:cb:c1:b6:70:e1:87:b1:e8:aa:24: 6a:48:84:3d:62:46:a0:78:99:7c:b0:66:4d:93:47:d3:73:08: 67:a5:82:38:ef:d7:87:05:45:89:7f:43:85:8f:5e:fd:89:11: 77:4d:20:7b:d5:1a:9f:1f:8b:18:d6:a4:f3:25:f1:88:91:1b: 47:8b:94:74:d5:84:84:6d:97:44:f3:45:8e:6b:ec:8d:8a:09: cd:43:59:5a:cf:02:c3:58:12:c7:ab:71:c6:e2:27:95:ee:48: 22:26:80:aa:3e:03:10:73:a5:e9:9e:ab:c1:56:bb:dc:9c:b9: 86:b9:02:e6:f4:18:bc:e3:2c:6f:9f:33:35:44:f9:c5:9d:4e: a4:4d:93:99 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEr58zqdWKnpvJ7UEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyNTE4MjcwN1oXDTI3MTEyODE5MjcwN1owLzEtMCsGA1UEAxMk ZTliOGY1YjMtYTUxZi00Yjk5LWI5Y2MtMDY4ZWQyNzU0MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9Q1qHRqMnbfmHALVoCiipZe+mFqzK8qtU8X dIPNSJHgS+p2iliyYMBHj53GolX1wQShSTHYGpy6vAFuHfbjSBTWHnTXXrmpGeJi Q+DyyoxI2EXu36N1/C9B5/VUn17hudJgHiaaxQRPUPCOnwwvkEP6gkdicQjLIoOw 27n/C4uCGobfwanz0NejzIcaaN6W+bOJKumqaiZEQRRNSZSomgX67Bm5D/NIIelJ sMWL0lBGLX3Dgmvp8+fRj+/2Nhis9N5hVbLY8w7exyxP2Hhzs62IPFawhrVP9FLj 9zmnJVftX9ayA5JnFSpZBbaPjW7Axfrr5Rdw/jvC/GYWiQFVSQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFHGUshaVMkssl94+aXZ+ikfKk6wPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l OWI4ZjViMy1hNTFmLTRiOTktYjljYy0wNjhlZDI3NTQxNDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2U5YjhmNWIzLWE1MWYtNGI5OS1i OWNjLTA2OGVkMjc1NDE0NC9lOWI4ZjViMy1hNTFmLTRiOTktYjljYy0wNjhlZDI3 NTQxNDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAcBgDBADNn3kwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAC3bJn1aGDS5X fsjY4ewWYIopXye6uhjLgi8uFVchBSpjZN4+1OZjrGugSoersR7BM3rkRTplcOtD bIVmnj4IVqYwv5jkYolZrG735n1Eu4IILYT0WlUhUOYZzAYH3A3GJ0C6OoLyiru/ eU8V+ZQXKQTUxUrLwbZw4Yex6KokakiEPWJGoHiZfLBmTZNH03MIZ6WCOO/XhwVF iX9DhY9e/YkRd00ge9Uanx+LGNak8yXxiJEbR4uUdNWEhG2XRPNFjmvsjYoJzUNZ Ws8Cw1gSx6txxuInle5IIiaAqj4DEHOl6Z6rwVa73Jy5hrkC5vQYvOMsb58zNUT5 xZ1OpE2TmQ== -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:06 2025 by rpki-client