$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer File: 4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer (raw, json) Hash identifier: n4A9HHA8hBeVZ/52Ltzky0Zm1UyYVOrMfLowhlnjytY= Subject key identifier: BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95 Authority key identifier: AF:45:3B:DA:71:F1:EF:6D:46:01:0D:83:9D:F5:74:B3:DD:41:DD:16 Certificate issuer: /CN=f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753 Certificate serial: 010D0C9F4328584B1040460D8BD77EF06147F840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer Manifest: rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft caRepository: rsync://rpki.pudu.be/repo/pudu/4/ Notify URL: https://rpki.pudu.be/rrdp/notification.xml Certificate not before: Tue 02 Sep 2025 18:10:08 +0000 Certificate not after: Mon 06 Dec 2027 19:10:08 +0000 Subordinate resources: IP: 23.144.196.0/24 IP: 2602:f57d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:40:46:0d:8b:d7:7e:f0:61:47:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753 Validity Not Before: Sep 2 18:10:08 2025 GMT Not After : Dec 6 19:10:08 2027 GMT Subject: CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:28:1b:df:87:3e:7b:b4:f2:7c:6c:67:56:b1: c8:34:95:8c:70:83:b6:d1:32:96:86:d4:11:82:06: 86:d4:53:a3:71:71:cf:5e:f7:8f:d6:48:4b:e4:9c: 79:b6:d1:b1:29:6d:46:99:73:97:9f:5f:47:4d:7b: 61:f8:36:c1:61:27:97:1e:67:19:6b:3d:f1:d9:a9: 59:7e:65:ff:04:4d:61:82:7f:16:1d:04:c2:44:33: 2a:88:9c:10:45:72:0e:44:08:d0:a3:7b:ca:5d:ba: 37:0f:57:f0:1f:b0:d8:6e:0b:4d:e5:01:e3:53:7d: c3:3f:ab:6a:ce:f2:8e:04:b2:54:97:86:8e:a8:70: 79:fe:a2:9c:48:54:8b:75:c6:0a:01:b7:56:e2:a4: 6f:94:10:a9:90:8e:04:15:d0:d4:a0:ed:51:83:0a: 28:14:3d:49:c8:50:0a:27:7d:b0:1a:73:e8:d6:62: ed:ba:b3:8e:c5:d0:6a:39:f0:82:86:02:fc:af:55: 6e:4d:d8:ef:c2:54:bf:ad:bf:f3:82:84:f9:af:58: 2c:f4:ed:82:21:2b:f2:ca:a1:e5:b3:b5:ad:44:76: f2:6e:e6:3d:2b:0d:e5:dc:72:cc:c7:2b:bb:f5:64: 7e:b8:d2:20:48:11:58:74:c3:ba:0c:1a:68:6f:b1: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95 Subject Information Access: CA Repository - URI:rsync://rpki.pudu.be/repo/pudu/4/ RPKI Manifest - URI:rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft RPKI Notify - URI:https://rpki.pudu.be/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.crl X509v3 Authority Key Identifier: keyid:AF:45:3B:DA:71:F1:EF:6D:46:01:0D:83:9D:F5:74:B3:DD:41:DD:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer sbgp-ipAddrBlock: critical IPv4: 23.144.196.0/24 IPv6: 2602:f57d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1d:ee:32:07:4c:72:6b:7e:ad:fb:d0:c7:14:74:9b:cd:bf: 00:54:7b:ae:c2:08:a1:53:52:71:66:c6:20:9a:09:4b:51:75: 15:17:56:a2:df:bc:06:76:d8:b0:b4:82:85:f2:7a:7a:cf:ee: 81:8c:ea:92:c3:a8:e0:16:4c:d6:7d:d4:6f:1a:7e:9b:ab:ab: 7b:8e:ca:0a:0f:00:f2:63:06:a6:9c:93:a9:3c:5c:78:12:c9: fd:8e:da:22:4c:24:6c:6e:2d:b1:10:f7:30:d3:03:03:8a:b8: c2:43:08:5e:20:6a:76:b4:71:20:21:99:bb:27:67:e5:9e:5c: 12:4a:9f:2f:26:7a:9c:fc:d3:28:db:c9:86:25:fd:b6:bc:0b: eb:05:d6:65:fb:f1:fa:71:c8:87:bf:e6:7c:5d:91:93:9a:e6: c9:8a:ab:f8:5e:b3:5e:9b:e9:5a:a8:ef:e2:6f:d4:c8:74:13: 00:10:9d:ba:de:d6:32:15:79:35:87:f3:97:2d:1e:cf:ba:b5: 5d:5b:3b:b6:73:4c:d2:63:27:1b:84:3a:02:c6:46:fd:9d:cc: af:65:f2:a4:b7:8c:1e:81:54:56:69:5a:7b:09:86:f9:29:53: 08:ee:c6:33:d9:91:1b:88:51:6d:de:db:37:1a:97:a3:07:60: 52:7b:20:1c -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEsQQEYNi9d+8GFH+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFiZDQ3MmMtYjBjOC00YmEwLWE1ZDItZmZmY2JlNGQy NzUzMB4XDTI1MDkwMjE4MTAwOFoXDTI3MTIwNjE5MTAwOFowPTE7MDkGA1UEAxMy NDMyNzc1MGE1MjQ2ODM1Zjk2YjE1Y2E2ODY1ZjY3Y2YyZGRhZWQ0MzkyYzAyMDhj ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKBvfhz57tPJ8bGdW scg0lYxwg7bRMpaG1BGCBobUU6Nxcc9e94/WSEvknHm20bEpbUaZc5efX0dNe2H4 NsFhJ5ceZxlrPfHZqVl+Zf8ETWGCfxYdBMJEMyqInBBFcg5ECNCje8pdujcPV/Af sNhuC03lAeNTfcM/q2rO8o4EslSXho6ocHn+opxIVIt1xgoBt1bipG+UEKmQjgQV 0NSg7VGDCigUPUnIUAonfbAac+jWYu26s47F0Go58IKGAvyvVW5N2O/CVL+tv/OC hPmvWCz07YIhK/LKoeWzta1EdvJu5j0rDeXccszHK7v1ZH640iBIEVh0w7oMGmhv sU8hAgMBAAGjggNjMIIDXzAdBgNVHQ4EFgQUvty6oNasy+l8IvYL43+BK21pBJUw gdIGCCsGAQUFBwELBIHFMIHCMC0GCCsGAQUFBzAFhiFyc3luYzovL3Jwa2kucHVk dS5iZS9yZXBvL3B1ZHUvNC8wWQYIKwYBBQUHMAqGTXJzeW5jOi8vcnBraS5wdWR1 LmJlL3JlcG8vcHVkdS80L0JFRENCQUEwRDZBQ0NCRTk3QzIyRjYwQkUzN0Y4MTJC NkQ2OTA0OTUubWZ0MDYGCCsGAQUFBzANhipodHRwczovL3Jwa2kucHVkdS5iZS9y cmRwL25vdGlmaWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHU MIHRMIHOoIHLoIHIhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkv YXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk My9mZGUxNjllZC1kMGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjFiZDQ3MmMt YjBjOC00YmEwLWE1ZDItZmZmY2JlNGQyNzUzL2YxYmQ0NzJjLWIwYzgtNGJhMC1h NWQyLWZmZmNiZTRkMjc1My5jcmwwHwYDVR0jBBgwFoAUr0U72nHx721GAQ2DnfV0 s91B3RYwDgYDVR0PAQH/BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYB BQUHMAKGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMWJkNDcyYy1iMGM4LTRi YTAtYTVkMi1mZmZjYmU0ZDI3NTMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIA ATAGAwQAF5DEMA4EAgACMAgDBgAmAvV9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMHe4yB0xya36t+9DH FHSbzb8AVHuuwgihU1JxZsYgmglLUXUVF1ai37wGdtiwtIKF8np6z+6BjOqSw6jg FkzWfdRvGn6bq6t7jsoKDwDyYwamnJOpPFx4Esn9jtoiTCRsbi2xEPcw0wMDirjC QwheIGp2tHEgIZm7J2flnlwSSp8vJnqc/NMo28mGJf22vAvrBdZl+/H6cciHv+Z8 XZGTmubJiqv4XrNem+laqO/ib9TIdBMAEJ263tYyFXk1h/OXLR7PurVdWzu2c0zS YycbhDoCxkb9ncyvZfKkt4wegVRWaVp7CYb5KVMI7sYz2ZEbiFFt3ts3GpejB2BS eyAc -----END CERTIFICATE-----Generated at Wed Oct 8 20:58:46 2025 by rpki-client