$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer File: a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.cer (raw, json) Hash identifier: P0DD36BO0QUtHUo4e458v5YsJJNhV8CaLEfCWD59hGY= Subject key identifier: DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A79F3E7551BCA8F6EA96A3300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Jul 2025 22:05:00 +0000 Certificate not after: Wed 13 Oct 2027 22:05:00 +0000 Subordinate resources: IP: 67.208.32.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:f3:e7:55:1b:ca:8f:6e:a9:6a:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 10 22:05:00 2025 GMT Not After : Oct 13 22:05:00 2027 GMT Subject: CN=a6b962cd-d36a-4673-8d04-bc6f84e0b6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:94:7c:64:55:82:ac:0d:ba:3e:93:f3:f6: 8f:0e:cc:42:68:a8:93:0a:4a:cf:c4:3e:e7:1b:95: 24:9a:0b:6c:a7:8a:1c:b4:7c:9b:35:9a:62:35:e2: 8b:a2:0d:a2:cb:57:a3:ef:37:78:85:c4:c1:0f:f2: 97:55:a7:6f:0a:4f:2e:7c:6e:3e:43:cc:5a:39:e4: ec:d0:fc:91:c2:9b:00:6f:3f:ad:47:8c:ee:8f:5e: a6:1f:e0:cb:b2:e3:96:8d:02:ae:d4:8d:42:cb:9f: b8:37:03:e5:71:60:e0:44:ff:be:83:5f:90:16:a0: 14:47:62:f8:6d:2c:d7:54:c6:a0:1e:eb:39:ea:37: c2:00:db:e5:23:e7:8e:b9:83:9c:92:53:b0:cd:df: 9f:a7:6e:b0:90:f7:3a:c4:dd:59:6d:35:b1:3e:67: 10:40:2c:ca:13:96:75:8b:a1:26:a1:dc:0b:77:4f: b2:d4:b3:9b:29:09:76:19:b1:7d:3d:8f:5e:7c:6a: 25:cd:e3:51:a7:1e:e4:cb:0b:33:17:24:77:cd:5a: 56:03:e3:3f:52:e0:cc:42:1b:f5:83:e2:0e:aa:07: 9c:8c:68:31:f9:97:ef:50:be:bd:7b:02:cf:61:a7: 12:e6:85:00:84:a2:86:94:e4:29:a4:4b:46:f7:78: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D8:8F:EB:35:B0:BE:79:41:0A:41:62:52:2C:1D:C1:44:8A:D3:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef/a6b962cd-d36a-4673-8d04-bc6f84e0b6ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 67.208.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:85:c8:f3:6d:68:de:70:a6:89:3d:5e:8d:05:27:fb:51:3d: 76:c6:3b:ac:99:59:6f:f9:f9:4f:4b:55:00:02:33:75:40:d2: c7:15:fd:07:35:39:d5:54:9d:6f:51:3a:79:ff:3d:3b:ea:20: b5:8e:8f:73:1a:ea:92:f9:eb:10:d5:ce:1d:fc:f8:c7:2a:e7: 8f:2d:65:4a:74:a8:68:c6:44:e7:04:09:8e:17:bb:29:09:be: 12:65:7f:1f:87:ca:39:e0:55:68:93:4f:e4:a2:24:39:a8:53: fe:16:dd:71:20:20:af:5f:8d:ee:48:9c:89:49:2f:a9:2e:e7: eb:4d:d6:63:c1:b8:af:0b:e7:59:b5:d3:31:07:8b:34:71:f9: 9c:5e:d2:84:a4:af:2b:e8:ad:de:01:aa:1c:f0:ab:5f:7f:fb: 55:7c:53:17:61:3b:17:0b:10:9e:87:62:45:e9:be:5d:b3:20: b4:6d:fc:40:56:56:99:05:8d:f4:26:d9:5c:aa:de:fb:25:99: d7:9f:58:06:50:e3:72:29:67:78:db:ac:1f:11:f0:69:73:d9: 1d:c4:36:b7:d6:73:14:42:eb:7f:ca:aa:a4:f9:6f:83:fa:29: 50:b0:04:6b:c7:dc:20:6d:82:86:46:ee:31:fd:10:04:63:22: 57:0b:8d:3f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEp58+dVG8qPbqlqMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxMDIyMDUwMFoXDTI3MTAxMzIyMDUwMFowLzEtMCsGA1UEAxMk YTZiOTYyY2QtZDM2YS00NjczLThkMDQtYmM2Zjg0ZTBiNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkOUfGRVgqwNuj6T8/aPDsxCaKiTCkrPxD7n G5Ukmgtsp4octHybNZpiNeKLog2iy1ej7zd4hcTBD/KXVadvCk8ufG4+Q8xaOeTs 0PyRwpsAbz+tR4zuj16mH+DLsuOWjQKu1I1Cy5+4NwPlcWDgRP++g1+QFqAUR2L4 bSzXVMagHus56jfCANvlI+eOuYOcklOwzd+fp26wkPc6xN1ZbTWxPmcQQCzKE5Z1 i6EmodwLd0+y1LObKQl2GbF9PY9efGolzeNRpx7kywszFyR3zVpWA+M/UuDMQhv1 g+IOqgecjGgx+ZfvUL69ewLPYacS5oUAhKKGlOQppEtG93gKSwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFN7Yj+s1sL55QQpBYlIsHcFEitOeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h NmI5NjJjZC1kMzZhLTQ2NzMtOGQwNC1iYzZmODRlMGI2ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2E2Yjk2MmNkLWQzNmEtNDY3My04 ZDA0LWJjNmY4NGUwYjZlZi9hNmI5NjJjZC1kMzZhLTQ2NzMtOGQwNC1iYzZmODRl MGI2ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARD0CAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKoXI821o3nCmiT1ejQUn +1E9dsY7rJlZb/n5T0tVAAIzdUDSxxX9BzU51VSdb1E6ef89O+ogtY6Pcxrqkvnr ENXOHfz4xyrnjy1lSnSoaMZE5wQJjhe7KQm+EmV/H4fKOeBVaJNP5KIkOahT/hbd cSAgr1+N7kiciUkvqS7n603WY8G4rwvnWbXTMQeLNHH5nF7ShKSvK+it3gGqHPCr X3/7VXxTF2E7FwsQnodiRem+XbMgtG38QFZWmQWN9CbZXKre+yWZ159YBlDjciln eNusHxHwaXPZHcQ2t9ZzFELrf8qqpPlvg/opULAEa8fcIG2ChkbuMf0QBGMiVwuN Pw== -----END CERTIFICATE-----Generated at Sat Jul 26 23:55:58 2025 by rpki-client