$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer File: ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer (raw, json) Hash identifier: 3ba70O1kbJjgicUUugJiUqpSn4nqjqEfxdw5AuX/1Ec= Subject key identifier: 9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B21A96267D81ED9ECEFBE4200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 23:50:40 +0000 Certificate not after: Mon 13 Dec 2027 00:50:40 +0000 Subordinate resources: AS: 398211 IP: 64.239.16.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:a9:62:67:d8:1e:d9:ec:ef:be:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 8 23:50:40 2025 GMT Not After : Dec 13 00:50:40 2027 GMT Subject: CN=ca0f18ca-4189-45e1-9c58-09f2daa808fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:f4:85:87:e9:03:77:42:e5:31:34:59:94: 3f:32:14:68:07:69:be:70:76:81:a8:a3:3a:67:8d: 61:56:4f:54:fb:a9:12:ce:19:fa:da:3f:fc:5d:fc: a2:ec:c1:62:39:e2:79:65:5a:e8:00:77:12:9f:7c: bb:93:60:55:d5:fb:16:01:5f:4e:27:17:ab:1b:62: 2f:62:8d:02:2c:43:e0:10:85:c8:77:16:e1:e6:85: 38:22:c2:17:1d:69:1f:72:b4:4d:35:13:77:83:ca: 1d:6b:9b:c4:e6:ef:71:c0:2f:e4:e6:06:bf:a6:2c: 89:9c:05:c7:e0:89:dd:97:af:49:71:ad:23:f2:28: 3f:8d:66:72:ef:9c:eb:ea:a1:b7:a8:b3:d6:b2:7b: 14:04:09:3d:5b:3a:d1:8f:35:6b:71:ed:80:cd:e7: a0:62:1a:6c:fa:9a:50:9f:f1:97:7f:e2:6f:02:58: 6f:b0:ae:1e:f5:2e:14:86:41:76:b6:a6:9a:3e:7e: 1f:d0:ac:dc:30:30:e8:6f:ba:33:88:73:d3:cb:53: 71:7a:ca:ad:cc:53:2f:35:dd:6f:d2:62:72:d3:5d: 98:cc:4f:43:db:94:2d:37:3e:e4:35:0c:8c:9f:59: 66:c1:7a:10:aa:d6:4e:4e:98:08:75:6c:9f:c0:cc: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.239.16.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398211 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:10:d7:40:34:16:d1:33:f7:de:6b:28:76:73:ac:97:fb:b3: 2e:02:4d:0c:d3:66:e2:77:14:2f:a9:d8:ab:83:1f:8f:ac:1f: 90:a8:0c:e8:f5:14:41:b9:76:4f:32:61:80:82:eb:71:84:89: a0:3a:36:bb:5f:98:fa:e0:ea:5d:c7:72:bc:07:6f:47:6d:2e: ac:6d:5e:73:7b:9d:2d:0b:bd:a8:0d:34:bf:5a:f4:a8:3e:78: dc:e2:3c:ef:62:b0:ad:ef:a6:34:88:6c:0d:fe:ad:4d:72:42: df:50:46:de:70:e8:4f:64:50:72:40:db:1d:c0:25:25:d7:e5: f2:6b:60:51:11:3b:f7:2b:76:a3:9e:37:52:1f:9e:a6:a7:f7: 14:5f:3a:eb:cd:6b:2e:98:f4:ec:cb:b6:b3:e7:25:2c:d7:8a: 26:7f:be:2d:c4:42:1e:b5:f7:3d:66:09:64:0e:9d:ca:64:85: 60:b3:0d:a2:9d:95:5d:89:20:df:1c:1b:23:76:f6:b9:ce:5d: bd:19:78:bc:95:ea:21:37:90:62:98:52:b9:3b:31:e4:b3:c6: 52:3a:7a:f4:78:eb:d4:21:90:37:bf:c8:ec:5f:be:13:73:e2: 0c:d5:cb:aa:66:4f:6a:a4:90:7c:0e:8c:9b:76:5b:8e:9c:ef: e6:1d:0e:8a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEshqWJn2B7Z7O++QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwODIzNTA0MFoXDTI3MTIxMzAwNTA0MFowLzEtMCsGA1UEAxMk Y2EwZjE4Y2EtNDE4OS00NWUxLTljNTgtMDlmMmRhYTgwOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwb0hYfpA3dC5TE0WZQ/MhRoB2m+cHaBqKM6 Z41hVk9U+6kSzhn62j/8Xfyi7MFiOeJ5ZVroAHcSn3y7k2BV1fsWAV9OJxerG2Iv Yo0CLEPgEIXIdxbh5oU4IsIXHWkfcrRNNRN3g8oda5vE5u9xwC/k5ga/piyJnAXH 4Indl69Jca0j8ig/jWZy75zr6qG3qLPWsnsUBAk9WzrRjzVrce2AzeegYhps+ppQ n/GXf+JvAlhvsK4e9S4UhkF2tqaaPn4f0KzcMDDob7oziHPTy1NxesqtzFMvNd1v 0mJy012YzE9D25QtNz7kNQyMn1lmwXoQqtZOTpgIdWyfwMzkwQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJ8/2PZUVULEDyMDn8CEQGzWAd/GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j YTBmMThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYyZGFhODA4ZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NhMGYxOGNhLTQxODktNDVlMS05 YzU4LTA5ZjJkYWE4MDhmYS9jYTBmMThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYyZGFh ODA4ZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFA7xAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhODMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGAQ10A0FtEz995rKHZzrJf7sy4CTQzTZuJ3FC+p2KuDH4+s H5CoDOj1FEG5dk8yYYCC63GEiaA6NrtfmPrg6l3HcrwHb0dtLqxtXnN7nS0LvagN NL9a9Kg+eNziPO9isK3vpjSIbA3+rU1yQt9QRt5w6E9kUHJA2x3AJSXX5fJrYFER O/crdqOeN1Ifnqan9xRfOuvNay6Y9OzLtrPnJSzXiiZ/vi3EQh619z1mCWQOncpk hWCzDaKdlV2JIN8cGyN29rnOXb0ZeLyV6iE3kGKYUrk7MeSzxlI6evR469QhkDe/ yOxfvhNz4gzVy6pmT2qkkHwOjJt2W46c7+YdDoo= -----END CERTIFICATE-----Generated at Tue Sep 9 20:10:48 2025 by rpki-client