$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer File: e3f86821-4e46-4672-b57e-2fd50dfe628b.cer (raw, json) Hash identifier: nX64LpFYA5/JRr2OoSiVHY4hKbr7Pi8hfwrBHvwrHjU= Subject key identifier: 5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B299DCC9C6FD118E05A30D220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 20:13:47 +0000 Certificate not after: Wed 15 Dec 2027 21:13:47 +0000 Subordinate resources: IP: 161.250.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:9d:cc:9c:6f:d1:18:e0:5a:30:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 11 20:13:47 2025 GMT Not After : Dec 15 21:13:47 2027 GMT Subject: CN=e3f86821-4e46-4672-b57e-2fd50dfe628b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:86:c4:5a:d0:82:d3:19:33:c6:66:08:6c:63: c5:cb:91:b9:20:8f:1e:18:ea:26:fe:ff:e3:c5:80: eb:09:8b:d5:7d:ec:81:69:f5:24:87:45:65:03:4b: af:a7:d3:05:da:a5:e5:fb:ce:53:48:a3:13:53:a9: 95:20:39:0b:27:07:a6:5b:56:2f:59:ce:93:e7:9b: 6b:72:c9:b2:2d:7b:db:4c:fd:ef:8e:ab:97:a8:ad: f3:c3:3e:df:af:81:56:57:c7:31:54:f9:13:13:e8: 15:c6:82:b7:d3:38:3b:b8:ab:ad:a2:1f:2a:79:14: bc:6f:c0:83:0c:4c:e2:06:2c:e1:24:36:73:0d:3e: cc:ad:89:09:b2:2b:ac:64:3c:5b:2b:b6:a5:4b:34: af:a2:16:c7:81:b6:b9:7a:85:a1:1d:df:81:f9:c5: 78:68:a2:cd:21:04:48:e0:7e:a9:c8:89:df:02:17: 54:c6:22:81:0a:11:39:d8:71:2b:52:ac:1c:8c:e2: e6:e0:c9:7a:f7:32:cd:0c:4e:ff:07:e0:88:e1:3c: cf:4b:fa:be:46:54:75:dc:13:87:9c:a8:39:6d:88: 77:e8:68:c7:f9:68:20:1f:38:f1:ee:12:7b:54:1c: 7c:72:e0:06:b9:39:70:91:1b:b4:08:f5:78:b9:1b: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 161.250.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:3f:6c:f8:f8:d0:c9:68:45:83:8c:3d:eb:cc:e0:9b:21:9e: 4f:37:05:bc:e4:1d:76:7f:0d:f0:1e:07:a7:7f:36:a3:d1:30: cb:c2:56:fe:46:6b:97:04:1a:24:4d:48:bc:c5:d4:a1:56:0a: bc:ca:31:21:d7:9e:bb:ef:cc:96:03:1c:aa:32:d8:72:a9:56: 85:14:66:f2:61:76:ed:7f:7d:9a:82:00:24:0c:c5:76:d8:c9: 33:c2:5c:4d:8f:a0:e5:52:f3:8d:f3:9d:04:b4:1e:b9:79:a2: f1:4b:30:89:3f:5d:4d:07:97:72:15:2a:d1:df:27:7c:c2:9e: f9:a2:49:c2:60:5e:5e:2b:33:84:cb:df:2a:95:f9:3d:5d:d1: 04:02:a4:84:0e:68:cc:0d:c8:7b:d5:42:52:c0:b2:28:2b:64: e6:86:12:67:5f:57:a1:92:f1:99:b0:1a:6b:51:8e:83:57:f6: d3:02:8d:8d:1c:26:2e:ef:06:14:db:38:ef:36:85:32:5b:72: 4b:ad:8a:79:28:a2:f2:d3:c3:d4:2f:49:bc:2a:88:2e:77:9b: ea:36:d2:61:c5:51:27:87:b7:dd:2f:91:a1:4c:22:f4:b4:7f: 4b:db:69:12:e4:fb:6b:11:9a:8b:bf:15:75:72:76:7e:09:ea: 99:73:d8:e4 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEspncycb9EY4Fow0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxMTIwMTM0N1oXDTI3MTIxNTIxMTM0N1owLzEtMCsGA1UEAxMk ZTNmODY4MjEtNGU0Ni00NjcyLWI1N2UtMmZkNTBkZmU2MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4bEWtCC0xkzxmYIbGPFy5G5II8eGOom/v/j xYDrCYvVfeyBafUkh0VlA0uvp9MF2qXl+85TSKMTU6mVIDkLJwemW1YvWc6T55tr csmyLXvbTP3vjquXqK3zwz7fr4FWV8cxVPkTE+gVxoK30zg7uKutoh8qeRS8b8CD DEziBizhJDZzDT7MrYkJsiusZDxbK7alSzSvohbHgba5eoWhHd+B+cV4aKLNIQRI 4H6pyInfAhdUxiKBChE52HErUqwcjOLm4Ml69zLNDE7/B+CI4TzPS/q+RlR13BOH nKg5bYh36GjH+WggHzjx7hJ7VBx8cuAGuTlwkRu0CPV4uRs17QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFF3VE6J0k8V0iVsSito61SUj4ZdsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l M2Y4NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1MGRmZTYyOGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2UzZjg2ODIxLTRlNDYtNDY3Mi1i NTdlLTJmZDUwZGZlNjI4Yi9lM2Y4NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1MGRm ZTYyOGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCh+jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC6P2z4+NDJaEWDjD3rzOCb IZ5PNwW85B12fw3wHgenfzaj0TDLwlb+RmuXBBokTUi8xdShVgq8yjEh156778yW AxyqMthyqVaFFGbyYXbtf32aggAkDMV22MkzwlxNj6DlUvON850EtB65eaLxSzCJ P11NB5dyFSrR3yd8wp75oknCYF5eKzOEy98qlfk9XdEEAqSEDmjMDch71UJSwLIo K2TmhhJnX1ehkvGZsBprUY6DV/bTAo2NHCYu7wYU2zjvNoUyW3JLrYp5KKLy08PU L0m8Kogud5vqNtJhxVEnh7fdL5GhTCL0tH9L22kS5PtrEZqLvxV1cnZ+CeqZc9jk -----END CERTIFICATE-----Generated at Tue Sep 16 05:45:32 2025 by rpki-client