$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621.cer File: aecee1ad-59f3-4a6e-ad86-3feb38be6621.cer (raw, json) Hash identifier: 3scFiSBJm3JrPttEfRdvaUBtjPale59qV2Vr5hRE4m4= Subject key identifier: 00:BD:0F:80:46:A8:D3:DE:BB:E1:46:75:07:45:F8:66:B5:ED:59:D2 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B79A7F1BB442E9B2289137220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/aecee1ad-59f3-4a6e-ad86-3feb38be6621.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 12:18:54 +0000 Certificate not after: Thu 13 Jan 2028 13:18:54 +0000 Subordinate resources: IP: 130.12.140.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:a7:f1:bb:44:2e:9b:22:89:13:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 10 12:18:54 2025 GMT Not After : Jan 13 13:18:54 2028 GMT Subject: CN=aecee1ad-59f3-4a6e-ad86-3feb38be6621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:fd:be:11:dd:fd:1c:ff:be:ce:93:58:e3: 0b:9a:14:fc:22:36:84:3b:dd:e8:73:03:9c:6a:bb: 4d:e4:2f:bf:0c:a2:07:a8:52:62:60:7e:cf:35:73: 41:8a:29:e5:08:e1:7e:7e:80:ec:34:c2:8b:62:bd: ed:38:22:e7:9a:a8:24:3a:55:8e:81:3d:ad:84:07: fb:d8:24:94:f6:aa:4b:8f:7e:d8:71:31:d4:fd:11: 1d:d9:4a:5a:21:8a:59:77:78:c5:c4:4d:fa:16:6e: b6:ea:bf:a7:eb:07:dc:5b:94:46:c4:93:76:9d:f0: de:8f:8d:cf:31:c8:73:19:af:7d:d4:cc:b8:15:66: 72:6a:ad:c4:da:c1:24:cb:39:ca:0f:2b:ad:8c:d1: 52:96:e8:4e:b1:f3:73:a1:f0:29:d6:93:64:3d:fa: 93:81:e3:52:4a:d9:96:e2:d0:d1:77:03:97:97:c3: 72:82:69:d3:0b:20:27:d8:1a:65:6d:83:1b:01:52: 06:49:53:0a:f4:f6:34:fd:0d:39:3e:3f:30:cd:72: 1e:77:56:e5:99:28:2c:02:01:24:d4:ed:ec:e8:6d: 01:b2:77:26:e5:c8:11:ba:fc:17:75:67:59:01:0d: 3b:0f:d4:98:96:40:af:d2:9a:0b:12:fb:c6:7b:cb: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BD:0F:80:46:A8:D3:DE:BB:E1:46:75:07:45:F8:66:B5:ED:59:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aecee1ad-59f3-4a6e-ad86-3feb38be6621/aecee1ad-59f3-4a6e-ad86-3feb38be6621.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 130.12.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b6:7c:f6:5e:c6:96:99:28:14:a0:52:dc:93:a3:1f:44:e9: 38:5f:6c:c2:08:1c:66:21:82:b4:7e:52:bb:97:6c:18:21:77: 86:7c:e5:19:43:4f:62:4d:4c:1f:b9:fa:ef:25:e9:3b:44:f3: 82:c0:13:10:9f:b1:53:35:6f:12:cf:28:84:dc:8b:6e:e5:09: 1e:fe:3c:90:05:d6:a8:82:e9:aa:40:01:2b:20:0e:aa:ea:ee: 19:5c:3f:f6:71:bf:7a:88:c3:27:2f:c4:49:57:13:2a:c7:46: f3:1d:20:0a:32:e5:d9:ad:e3:6b:a9:7a:83:be:5d:15:b1:7b: a7:3d:3b:1b:ff:78:70:7f:5d:ff:1f:f4:ca:a6:72:44:d1:a2: a3:21:b5:86:b1:01:eb:05:c4:27:e3:4f:6b:2a:27:66:e0:b9: 52:5b:85:47:1f:36:98:39:6f:63:34:b3:e7:d9:21:d8:4d:b2: 94:29:87:f3:cb:1b:f9:44:de:ad:ba:18:3c:c6:7e:f6:9c:35: dd:84:fd:55:3e:06:27:ec:67:eb:05:e9:25:34:c7:35:8e:a4: 7c:bd:5b:b3:c1:11:4c:ce:17:f9:73:62:79:39:98:4a:72:e0: 22:4f:40:ed:6f:d2:eb:35:61:7d:a5:ea:91:f1:27:fb:b5:49: 16:7b:06:35 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt5p/G7RC6bIokTciAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAxMDEyMTg1NFoXDTI4MDExMzEzMTg1NFowLzEtMCsGA1UEAxMk YWVjZWUxYWQtNTlmMy00YTZlLWFkODYtM2ZlYjM4YmU2NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAf9vhHd/Rz/vs6TWOMLmhT8IjaEO93ocwOc artN5C+/DKIHqFJiYH7PNXNBiinlCOF+foDsNMKLYr3tOCLnmqgkOlWOgT2thAf7 2CSU9qpLj37YcTHU/REd2UpaIYpZd3jFxE36Fm626r+n6wfcW5RGxJN2nfDej43P MchzGa991My4FWZyaq3E2sEkyznKDyutjNFSluhOsfNzofAp1pNkPfqTgeNSStmW 4tDRdwOXl8NygmnTCyAn2BplbYMbAVIGSVMK9PY0/Q05Pj8wzXIed1blmSgsAgEk 1O3s6G0Bsncm5cgRuvwXdWdZAQ07D9SYlkCv0poLEvvGe8v8mwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAC9D4BGqNPeu+FGdQdF+Ga17VnSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h ZWNlZTFhZC01OWYzLTRhNmUtYWQ4Ni0zZmViMzhiZTY2MjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FlY2VlMWFkLTU5ZjMtNGE2ZS1h ZDg2LTNmZWIzOGJlNjYyMS9hZWNlZTFhZC01OWYzLTRhNmUtYWQ4Ni0zZmViMzhi ZTY2MjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKCDIwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmbZ89l7GlpkoFKBS3JOj H0TpOF9swggcZiGCtH5Su5dsGCF3hnzlGUNPYk1MH7n67yXpO0TzgsATEJ+xUzVv Es8ohNyLbuUJHv48kAXWqILpqkABKyAOquruGVw/9nG/eojDJy/ESVcTKsdG8x0g CjLl2a3ja6l6g75dFbF7pz07G/94cH9d/x/0yqZyRNGioyG1hrEB6wXEJ+NPayon ZuC5UluFRx82mDlvYzSz59kh2E2ylCmH88sb+UTerboYPMZ+9pw13YT9VT4GJ+xn 6wXpJTTHNY6kfL1bs8ERTM4X+XNieTmYSnLgIk9A7W/S6zVhfaXqkfEn+7VJFnsG NQ== -----END CERTIFICATE-----Generated at Fri Oct 24 05:57:44 2025 by rpki-client