$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4cd10ae8-038e-4c8f-93c4-ec54aecc2226.cer File: 4cd10ae8-038e-4c8f-93c4-ec54aecc2226.cer (raw, json) Hash identifier: F5UQvd/Y0yW4sf+jBYYx5WCybiU9FmKxcu3mSRDbMF0= Subject key identifier: CA:06:B2:32:D7:CC:46:50:B9:74:6F:61:FF:AC:38:A7:7F:A0:D5:FE Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A6386D8FBD9BA3CAA6F6A6EF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4cd10ae8-038e-4c8f-93c4-ec54aecc2226/4cd10ae8-038e-4c8f-93c4-ec54aecc2226.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4cd10ae8-038e-4c8f-93c4-ec54aecc2226/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 21:17:29 +0000 Certificate not after: Tue 05 Oct 2027 21:17:29 +0000 Subordinate resources: IP: 206.55.164.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:86:d8:fb:d9:ba:3c:aa:6f:6a:6e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 2 21:17:29 2025 GMT Not After : Oct 5 21:17:29 2027 GMT Subject: CN=4cd10ae8-038e-4c8f-93c4-ec54aecc2226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:fa:7a:8e:f7:6e:de:9c:f9:64:26:b2:52: 68:5f:bc:f4:c8:3c:f6:45:66:73:58:e0:eb:87:b8: 8b:44:69:23:ca:99:e1:f0:68:4a:a9:5c:cb:20:06: c9:40:47:8c:61:62:fc:c2:b8:f0:15:70:a0:9b:fa: 08:3b:df:2b:ef:f9:e5:68:67:5e:b5:9d:31:bb:6e: e5:00:77:a1:75:48:77:6e:33:f5:b1:c3:02:43:3a: 98:d0:49:53:3f:23:fc:69:d9:3a:d5:e9:c5:d2:36: 7a:eb:2c:bc:6c:f1:67:a0:6e:c7:1b:f2:bc:e9:ed: af:6a:18:09:59:19:0c:7b:2a:28:4f:7f:bd:84:48: d5:08:db:22:a4:b3:4b:3b:2c:53:e0:aa:37:06:0e: e8:d1:b8:a9:00:65:9a:80:9b:25:e9:1e:9c:8d:bf: 48:3c:d9:7d:cf:30:5d:61:69:ab:0a:c4:80:46:61: de:c7:ca:0f:56:37:62:b7:c8:6c:78:36:30:a8:e2: 7a:6c:e6:fb:19:9d:49:bd:a7:fc:cf:76:2a:ba:84: c9:fc:89:92:4e:2d:0a:5d:72:bc:8f:24:5e:03:42: 77:74:96:3c:2b:69:ff:35:51:10:3a:23:f8:e6:38: db:4f:82:b9:f3:9e:41:e8:9e:33:ec:86:e7:67:73: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:06:B2:32:D7:CC:46:50:B9:74:6F:61:FF:AC:38:A7:7F:A0:D5:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4cd10ae8-038e-4c8f-93c4-ec54aecc2226/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4cd10ae8-038e-4c8f-93c4-ec54aecc2226/4cd10ae8-038e-4c8f-93c4-ec54aecc2226.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 206.55.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7a:34:e9:02:23:47:e1:fc:49:4f:b4:aa:b9:90:f9:b0:a4: de:ad:17:6a:e5:aa:90:02:6b:ec:9a:12:65:af:47:59:98:45: 60:26:5d:18:c4:f9:af:c4:ea:e2:67:d3:9f:52:0b:11:44:02: d2:50:f7:0d:a5:82:e9:79:24:5c:4c:92:34:29:3c:ad:44:0d: a3:9d:32:78:b3:f6:78:0b:8a:71:ad:fa:75:a7:4b:1b:b7:0f: 38:30:06:78:0b:fa:c2:12:4d:42:2d:d9:7b:f1:72:e9:a6:f3: f3:eb:d0:e8:7d:ad:60:6c:b7:81:f2:c1:b9:4b:dc:b3:03:3a: 7f:95:91:37:2f:ed:82:07:7a:b0:a1:04:88:91:77:99:42:8c: 0a:3e:e4:a0:1f:b1:66:15:ca:69:f9:92:22:78:a0:45:0d:27: 1a:8e:ce:b9:65:56:e1:14:ef:1e:c4:4e:02:e2:1b:6e:a0:2c: 88:5d:dc:41:5a:ca:82:a6:54:ac:ae:6e:f6:2b:6e:41:b1:c1: c7:06:09:31:30:83:82:e3:b9:36:a7:46:59:5d:bb:1e:8b:06: 38:97:4c:e9:d3:ad:1c:b0:18:09:6b:80:83:e9:2d:ac:24:cb: 3b:67:80:88:7d:bd:d6:07:a2:24:b8:58:cd:9e:1c:7d:91:93: 94:20:e2:5d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEpjhtj72bo8qm9qbvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcwMjIxMTcyOVoXDTI3MTAwNTIxMTcyOVowLzEtMCsGA1UEAxMk NGNkMTBhZTgtMDM4ZS00YzhmLTkzYzQtZWM1NGFlY2MyMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMv6eo73bt6c+WQmslJoX7z0yDz2RWZzWODr h7iLRGkjypnh8GhKqVzLIAbJQEeMYWL8wrjwFXCgm/oIO98r7/nlaGdetZ0xu27l AHehdUh3bjP1scMCQzqY0ElTPyP8adk61enF0jZ66yy8bPFnoG7HG/K86e2vahgJ WRkMeyooT3+9hEjVCNsipLNLOyxT4Ko3Bg7o0bipAGWagJsl6R6cjb9IPNl9zzBd YWmrCsSARmHex8oPVjdit8hseDYwqOJ6bOb7GZ1Jvaf8z3YquoTJ/ImSTi0KXXK8 jyReA0J3dJY8K2n/NVEQOiP45jjbT4K5855B6J4z7IbnZ3N4PQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMoGsjLXzEZQuXRvYf+sOKd/oNX+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 Y2QxMGFlOC0wMzhlLTRjOGYtOTNjNC1lYzU0YWVjYzIyMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzRjZDEwYWU4LTAzOGUtNGM4Zi05 M2M0LWVjNTRhZWNjMjIyNi80Y2QxMGFlOC0wMzhlLTRjOGYtOTNjNC1lYzU0YWVj YzIyMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALON6QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKXo06QIjR+H8SU+0qrmQ +bCk3q0XauWqkAJr7JoSZa9HWZhFYCZdGMT5r8Tq4mfTn1ILEUQC0lD3DaWC6Xkk XEySNCk8rUQNo50yeLP2eAuKca36dadLG7cPODAGeAv6whJNQi3Ze/Fy6abz8+vQ 6H2tYGy3gfLBuUvcswM6f5WRNy/tggd6sKEEiJF3mUKMCj7koB+xZhXKafmSInig RQ0nGo7OuWVW4RTvHsROAuIbbqAsiF3cQVrKgqZUrK5u9ituQbHBxwYJMTCDguO5 NqdGWV27HosGOJdM6dOtHLAYCWuAg+ktrCTLO2eAiH291geiJLhYzZ4cfZGTlCDi XQ== -----END CERTIFICATE-----Generated at Fri Jul 4 06:58:00 2025 by rpki-client