$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35.cer File: 22d369d5-60e3-4583-b038-ee0ce1961d35.cer (raw, json) Hash identifier: 9FCJNGSbStwrHpeSdhuGEEsAeTKzYQ7yE3CY240xENA= Subject key identifier: ED:BD:D1:11:71:5D:E2:D1:B7:0A:2F:8A:4B:4A:33:41:62:E3:6F:4D Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A8A2E9339EBF72BD570B858C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/22d369d5-60e3-4583-b038-ee0ce1961d35.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 17:36:09 +0000 Certificate not after: Tue 19 Oct 2027 17:36:09 +0000 Subordinate resources: IP: 2620:d9:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8a:2e:93:39:eb:f7:2b:d5:70:b8:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 16 17:36:09 2025 GMT Not After : Oct 19 17:36:09 2027 GMT Subject: CN=22d369d5-60e3-4583-b038-ee0ce1961d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:18:d2:09:a9:ec:5f:e9:2b:1b:d8:06:51: 83:e9:3c:b4:3b:ad:9b:60:3b:7a:7c:40:a6:95:66: 0c:58:b3:9c:fd:f4:2f:d3:32:2c:78:a9:41:01:a6: 48:1b:de:a5:27:5b:be:e1:a8:e0:2b:8c:ad:99:74: 0a:91:12:0c:01:a3:62:1b:76:84:90:2a:60:89:99: db:57:cd:91:7c:ed:65:81:61:eb:e9:b3:5d:34:1c: 30:4c:84:1e:15:57:54:56:a5:7a:24:8e:1d:78:20: 4f:85:a6:71:02:b6:49:c7:28:31:f4:c7:e6:b0:09: 80:11:46:9c:fc:32:72:75:5c:98:58:52:24:a6:fa: ed:b5:fe:34:a4:35:5e:ab:dd:e6:0e:53:79:67:7a: 7e:e5:67:0c:ca:d1:05:f0:5d:c7:3d:c2:fa:ed:d1: 54:20:1a:9b:52:09:b2:bf:cd:c0:a3:0b:cf:f0:06: 1e:bb:4d:ad:92:1c:db:52:bb:38:47:30:76:6b:38: 84:2d:21:06:9c:61:1d:f2:9c:18:bc:2d:1f:a8:bf: 41:2b:78:99:be:a0:fc:65:54:ca:25:d4:eb:91:58: 64:68:eb:2c:a1:0b:68:8f:96:db:2e:35:76:8e:70: ae:f9:a5:01:7b:3d:e8:7c:92:b1:b6:d5:97:18:e1: 0f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BD:D1:11:71:5D:E2:D1:B7:0A:2F:8A:4B:4A:33:41:62:E3:6F:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/22d369d5-60e3-4583-b038-ee0ce1961d35/22d369d5-60e3-4583-b038-ee0ce1961d35.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2620:d9:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0c:9b:7f:cc:13:e2:61:e7:59:24:d8:3a:d8:9d:ee:e0:73: 32:c9:cc:89:32:f1:7c:0a:2b:6a:a7:17:f3:c3:a4:5d:c0:60: 4b:2a:f5:b8:7f:3e:c9:a3:9b:71:d5:ac:ad:4a:e6:05:2b:d1: 62:18:b7:42:d8:06:1e:94:18:55:83:1b:7c:6c:e9:9f:df:20: 7f:76:be:f7:14:08:23:3e:70:9e:a4:4d:9a:89:ca:43:cb:e5: 2c:f5:32:4f:99:2b:d2:84:68:86:23:80:3c:68:4c:e1:db:77: 1e:d9:00:26:6e:7c:42:f7:ea:61:57:87:6c:71:af:c9:e8:8b: e1:55:60:99:35:2c:cf:cf:b5:99:0d:ff:07:3a:46:60:d4:75: 0f:c9:7d:76:17:7d:f6:17:02:5f:b9:3d:67:4a:b8:ea:0f:6d: db:89:05:3c:12:05:77:8b:94:b7:d7:72:d5:35:0e:45:52:9e: 97:ca:60:37:3e:44:9b:88:b8:c4:a0:5e:be:59:cf:ce:04:87: 39:63:0b:e7:97:58:6c:15:d3:8d:d1:21:32:0f:f3:86:82:c9: 08:dc:09:79:e4:38:04:f9:1d:b7:1b:9b:91:61:24:8c:09:22: c9:ce:a0:df:c7:b4:1e:18:46:23:4b:f2:40:0c:a0:dd:ee:d0: eb:44:0d:0c -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEqKLpM56/cr1XC4WMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNjE3MzYwOVoXDTI3MTAxOTE3MzYwOVowLzEtMCsGA1UEAxMk MjJkMzY5ZDUtNjBlMy00NTgzLWIwMzgtZWUwY2UxOTYxZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxosY0gmp7F/pKxvYBlGD6Ty0O62bYDt6fECm lWYMWLOc/fQv0zIseKlBAaZIG96lJ1u+4ajgK4ytmXQKkRIMAaNiG3aEkCpgiZnb V82RfO1lgWHr6bNdNBwwTIQeFVdUVqV6JI4deCBPhaZxArZJxygx9MfmsAmAEUac /DJydVyYWFIkpvrttf40pDVeq93mDlN5Z3p+5WcMytEF8F3HPcL67dFUIBqbUgmy v83AowvP8AYeu02tkhzbUrs4RzB2aziELSEGnGEd8pwYvC0fqL9BK3iZvqD8ZVTK JdTrkVhkaOssoQtoj5bbLjV2jnCu+aUBez3ofJKxttWXGOEPbQIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFO290RFxXeLRtwoviktKM0Fi429NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y MmQzNjlkNS02MGUzLTQ1ODMtYjAzOC1lZTBjZTE5NjFkMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzIyZDM2OWQ1LTYwZTMtNDU4My1i MDM4LWVlMGNlMTk2MWQzNS8yMmQzNjlkNS02MGUzLTQ1ODMtYjAzOC1lZTBjZTE5 NjFkMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADZYAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQgybf8wT4mHnWSTY Otid7uBzMsnMiTLxfAoraqcX88OkXcBgSyr1uH8+yaObcdWsrUrmBSvRYhi3QtgG HpQYVYMbfGzpn98gf3a+9xQIIz5wnqRNmonKQ8vlLPUyT5kr0oRohiOAPGhM4dt3 HtkAJm58QvfqYVeHbHGvyeiL4VVgmTUsz8+1mQ3/BzpGYNR1D8l9dhd99hcCX7k9 Z0q46g9t24kFPBIFd4uUt9dy1TUORVKel8pgNz5Em4i4xKBevlnPzgSHOWML55dY bBXTjdEhMg/zhoLJCNwJeeQ4BPkdtxubkWEkjAkiyc6g38e0HhhGI0vyQAyg3e7Q 60QNDA== -----END CERTIFICATE-----Generated at Wed Jul 23 18:05:50 2025 by rpki-client