$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d.cer File: 2d400a27-be93-4337-a967-4cb74da5710d.cer (raw, json) Hash identifier: wjAi1S1b/nQeUA1azHo5lV3btRTYqumwLYpzoIgFuCI= Subject key identifier: BB:56:7A:4E:E9:F8:8B:3E:0C:D8:5B:5D:3C:B8:C7:70:17:54:F0:60 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A63249ECC0E6E2484ACBFFC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 17:59:34 +0000 Certificate not after: Tue 05 Oct 2027 17:59:34 +0000 Subordinate resources: AS: 19796 IP: 207.246.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:24:9e:cc:0e:6e:24:84:ac:bf:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 2 17:59:34 2025 GMT Not After : Oct 5 17:59:34 2027 GMT Subject: CN=2d400a27-be93-4337-a967-4cb74da5710d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:06:4b:37:b7:ee:35:ad:88:2f:90:62:10:da: a6:5f:f4:00:60:a8:a6:27:5a:6f:af:e5:38:7c:64: 95:33:8b:e7:6b:46:1f:70:04:31:22:79:c9:84:74: ec:ca:86:30:44:8a:80:f6:ca:78:5d:61:d1:33:48: cc:25:27:56:59:10:f2:4b:d8:84:aa:eb:9f:a5:2e: 3b:34:25:9e:8e:ff:25:6c:85:37:23:82:d9:c2:94: dc:c2:eb:a3:f1:25:79:2f:04:75:86:c5:02:72:69: 12:72:e4:3b:77:1a:9f:68:ce:74:1d:b0:af:6b:f9: 81:78:3b:3c:52:00:63:ff:05:02:8f:cd:3d:0f:51: 65:66:7c:90:e5:0d:33:21:ae:41:ab:8f:19:fe:e5: ba:03:84:3f:bd:f4:fb:e8:bf:51:5c:67:70:ea:57: ca:90:14:42:98:8f:a2:f8:23:d4:81:f9:a8:cd:1b: 64:c1:77:14:7c:b7:4a:44:39:f1:bd:b6:c1:15:fc: c9:ae:57:5c:27:39:c3:4b:d9:1c:6f:77:c2:b8:03: 73:a0:76:70:10:17:7d:29:41:f6:9b:f8:64:64:82: c6:b2:55:d5:a2:f1:f9:7b:0d:e0:97:ee:13:c0:15: e3:d7:bc:98:e2:be:38:f4:ef:09:b3:f5:b3:02:6b: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:56:7A:4E:E9:F8:8B:3E:0C:D8:5B:5D:3C:B8:C7:70:17:54:F0:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 207.246.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19796 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6b:b4:aa:a3:60:9e:32:b5:e4:ba:29:4b:7a:21:46:2d:55: 96:07:d2:b8:5b:16:a6:73:48:ee:90:1d:45:6f:04:8d:5b:9e: 05:a0:db:d8:3f:42:62:d4:bc:ec:ce:7a:85:38:2b:ef:d2:49: 98:db:6b:2b:2d:8d:1f:c2:74:9b:2e:36:6b:e8:a8:e6:08:9b: e1:24:60:86:3c:f4:37:d1:4b:9b:9e:95:1d:7c:a3:ee:1c:db: b6:d8:4d:bf:61:9b:4d:b6:ef:05:79:5d:3e:d6:b8:0e:54:eb: 1d:ce:f5:9a:17:99:b7:6b:11:f0:9f:0a:18:74:ff:c9:52:b9: 6a:d5:8a:f0:cf:d1:49:61:0f:22:4f:b8:de:05:24:8e:e9:6b: 13:80:2e:cb:48:55:46:45:00:dd:73:c3:eb:4a:38:7d:8f:d4: b7:f3:ca:64:7a:60:e5:e4:73:73:3e:e2:6d:f8:26:e5:09:84: c1:2a:48:f7:4d:6f:5c:12:03:21:77:3b:fc:c1:42:b6:6f:8c: 7b:e5:2c:71:88:02:5a:4a:f2:ea:61:1d:67:e0:f4:4b:92:db: 54:c1:2a:28:63:87:31:3b:8e:15:4c:20:9f:b9:6c:09:6f:ba: 16:09:99:b5:99:23:df:70:b9:49:9a:2e:92:46:d7:c0:32:30: b0:a9:5b:54 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEpjJJ7MDm4khKy//IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcwMjE3NTkzNFoXDTI3MTAwNTE3NTkzNFowLzEtMCsGA1UEAxMk MmQ0MDBhMjctYmU5My00MzM3LWE5NjctNGNiNzRkYTU3MTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgZLN7fuNa2IL5BiENqmX/QAYKimJ1pvr+U4 fGSVM4vna0YfcAQxInnJhHTsyoYwRIqA9sp4XWHRM0jMJSdWWRDyS9iEquufpS47 NCWejv8lbIU3I4LZwpTcwuuj8SV5LwR1hsUCcmkScuQ7dxqfaM50HbCva/mBeDs8 UgBj/wUCj809D1FlZnyQ5Q0zIa5Bq48Z/uW6A4Q/vfT76L9RXGdw6lfKkBRCmI+i +CPUgfmozRtkwXcUfLdKRDnxvbbBFfzJrldcJznDS9kcb3fCuANzoHZwEBd9KUH2 m/hkZILGslXVovH5ew3gl+4TwBXj17yY4r449O8Js/WzAmvnVwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFLtWek7p+Is+DNhbXTy4x3AXVPBgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y ZDQwMGEyNy1iZTkzLTQzMzctYTk2Ny00Y2I3NGRhNTcxMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzJkNDAwYTI3LWJlOTMtNDMzNy1h OTY3LTRjYjc0ZGE1NzEwZC8yZDQwMGEyNy1iZTkzLTQzMzctYTk2Ny00Y2I3NGRh NTcxMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATP9tAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TVQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAXGu0qqNgnjK15LopS3ohRi1VlgfSuFsWpnNI7pAdRW8EjVue BaDb2D9CYtS87M56hTgr79JJmNtrKy2NH8J0my42a+io5gib4SRghjz0N9FLm56V HXyj7hzbtthNv2GbTbbvBXldPta4DlTrHc71mheZt2sR8J8KGHT/yVK5atWK8M/R SWEPIk+43gUkjulrE4Auy0hVRkUA3XPD60o4fY/Ut/PKZHpg5eRzcz7ibfgm5QmE wSpI901vXBIDIXc7/MFCtm+Me+UscYgCWkry6mEdZ+D0S5LbVMEqKGOHMTuOFUwg n7lsCW+6FgmZtZkj33C5SZoukkbXwDIwsKlbVA== -----END CERTIFICATE-----Generated at Fri Jul 4 06:55:46 2025 by rpki-client