$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f4aad428-9973-487a-9bd8-c75093671b27.cer File: f4aad428-9973-487a-9bd8-c75093671b27.cer (raw, json) Hash identifier: HQa9fMEE8U/qxH8As2JcGurpEbG2SLBBhIkZBO4LnOk= Subject key identifier: EF:FC:93:07:5A:3D:21:C8:97:36:44:FA:23:3D:E3:CD:D1:8A:79:1C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B76875AC98A29048AF8230C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f4aad428-9973-487a-9bd8-c75093671b27/f4aad428-9973-487a-9bd8-c75093671b27.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f4aad428-9973-487a-9bd8-c75093671b27/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 09:25:48 +0000 Certificate not after: Wed 12 Jan 2028 10:25:48 +0000 Subordinate resources: IP: 162.245.192.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:87:5a:c9:8a:29:04:8a:f8:23:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 9 09:25:48 2025 GMT Not After : Jan 12 10:25:48 2028 GMT Subject: CN=f4aad428-9973-487a-9bd8-c75093671b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:9b:05:da:b6:a2:3d:a9:cc:7b:79:f1:d2: 93:6f:b0:22:62:49:a1:20:4c:48:d7:32:d6:77:b6: 0e:1f:91:1f:8e:58:79:48:bc:bb:3f:64:b2:a5:5c: ad:4e:1c:6b:3f:67:2b:a0:d9:40:0e:f8:c6:a7:a1: 16:c7:2b:af:29:14:af:0b:90:79:3d:78:2a:f7:ac: c0:78:c9:66:e1:71:05:5e:0e:43:b8:27:86:98:45: 48:fd:01:6b:c5:e3:42:bd:f8:ea:84:a7:73:3e:de: 7e:57:ab:11:d1:13:04:e5:7d:33:f4:6a:52:9c:a4: dc:1c:29:a7:b3:a3:cf:9c:7c:1a:01:e5:d6:43:3a: 89:4b:8b:d7:84:ce:50:90:d5:5e:f6:4d:81:dc:a9: df:a8:a9:26:f9:c5:43:52:0e:92:a1:75:2c:bd:7f: 91:73:be:2d:24:00:37:3f:88:fa:30:4d:ad:2a:4f: e1:84:d0:6d:2c:ea:1a:56:b0:73:a1:93:5e:32:bd: 8e:1c:e3:56:5f:35:b4:0a:7d:71:e0:ef:3b:a0:62: 92:52:96:a7:73:70:2c:de:9d:41:5d:b2:80:bc:0d: 88:5a:6d:29:8c:8e:ba:ba:1b:68:06:9e:28:db:20: 8c:13:d3:b2:98:96:6a:3b:f0:8e:88:da:43:21:d5: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FC:93:07:5A:3D:21:C8:97:36:44:FA:23:3D:E3:CD:D1:8A:79:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f4aad428-9973-487a-9bd8-c75093671b27/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f4aad428-9973-487a-9bd8-c75093671b27/f4aad428-9973-487a-9bd8-c75093671b27.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 162.245.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:04:7b:ce:f0:93:15:5b:d7:b8:90:5e:4b:61:fc:0f:f2:9a: 0f:22:6b:22:ef:09:dd:b4:d3:f1:ae:2b:14:cf:0a:b6:af:92: 63:25:11:82:a1:bb:3c:18:cb:f9:93:41:f7:08:ac:24:1f:1d: 9e:4f:3e:3d:5a:cd:3d:b9:8b:cc:bf:fe:8d:9c:25:e1:13:bb: 05:97:19:d2:ea:45:76:9d:53:ec:68:2f:4e:3c:14:34:cc:a2: 1f:b2:da:26:20:64:f2:2d:94:f8:51:3c:e7:6b:07:f2:28:c6: 21:1d:74:95:0a:d7:9c:25:35:05:d5:24:ff:1d:77:80:7e:8b: 74:b9:ae:e6:27:67:5b:54:8c:3e:07:cd:12:4d:17:d5:fa:cf: eb:de:72:7b:29:b8:70:3a:5b:8c:55:b9:ef:5f:1b:d1:a1:d9: 79:4d:9c:70:5f:6e:47:50:eb:66:fa:d8:9c:e7:94:69:a9:8d: 6c:8b:29:0a:ac:26:bd:5b:b0:7b:ef:20:aa:93:25:15:db:e8: d5:99:60:4a:45:ae:9b:b3:bd:2d:bc:3c:1c:40:bd:9c:7d:ef: 7e:d2:38:00:af:03:12:24:35:25:9d:e4:d4:65:8f:fc:b9:14: 4b:39:f6:4a:03:fc:54:6d:af:af:98:6e:88:ad:d2:cb:e4:68: 07:6c:74:46 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt2h1rJiikEivgjDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwOTA5MjU0OFoXDTI4MDExMjEwMjU0OFowLzEtMCsGA1UEAxMk ZjRhYWQ0MjgtOTk3My00ODdhLTliZDgtYzc1MDkzNjcxYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwSbBdq2oj2pzHt58dKTb7AiYkmhIExI1zLW d7YOH5Efjlh5SLy7P2SypVytThxrP2croNlADvjGp6EWxyuvKRSvC5B5PXgq96zA eMlm4XEFXg5DuCeGmEVI/QFrxeNCvfjqhKdzPt5+V6sR0RME5X0z9GpSnKTcHCmn s6PPnHwaAeXWQzqJS4vXhM5QkNVe9k2B3KnfqKkm+cVDUg6SoXUsvX+Rc74tJAA3 P4j6ME2tKk/hhNBtLOoaVrBzoZNeMr2OHONWXzW0Cn1x4O87oGKSUpanc3As3p1B XbKAvA2IWm0pjI66uhtoBp4o2yCME9OymJZqO/COiNpDIdWy6QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFO/8kwdaPSHIlzZE+iM9483RinkcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9m NGFhZDQyOC05OTczLTQ4N2EtOWJkOC1jNzUwOTM2NzFiMjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2Y0YWFkNDI4LTk5NzMtNDg3YS05 YmQ4LWM3NTA5MzY3MWIyNy9mNGFhZDQyOC05OTczLTQ4N2EtOWJkOC1jNzUwOTM2 NzFiMjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKi9cAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATgR7zvCTFVvXuJBeS2H8 D/KaDyJrIu8J3bTT8a4rFM8Ktq+SYyURgqG7PBjL+ZNB9wisJB8dnk8+PVrNPbmL zL/+jZwl4RO7BZcZ0upFdp1T7GgvTjwUNMyiH7LaJiBk8i2U+FE852sH8ijGIR10 lQrXnCU1BdUk/x13gH6LdLmu5idnW1SMPgfNEk0X1frP695yeym4cDpbjFW5718b 0aHZeU2ccF9uR1DrZvrYnOeUaamNbIspCqwmvVuwe+8gqpMlFdvo1ZlgSkWum7O9 Lbw8HEC9nH3vftI4AK8DEiQ1JZ3k1GWP/LkUSzn2SgP8VG2vr5huiK3Sy+RoB2x0 Rg== -----END CERTIFICATE-----Generated at Wed Oct 15 12:32:16 2025 by rpki-client