$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer File: d80dfbd4-0944-4c24-a645-a238d9949fb7.cer (raw, json) Hash identifier: tKiOynos4Rykliv2lAaTICCqm0dQ13akaT1Rc/hi80I= Subject key identifier: A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A89D919035E9918D78AF9C000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 14:43:56 +0000 Certificate not after: Tue 19 Oct 2027 14:43:56 +0000 Subordinate resources: IP: 23.141.52.0/24 IP: 2602:f5f5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:d9:19:03:5e:99:18:d7:8a:f9:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 16 14:43:56 2025 GMT Not After : Oct 19 14:43:56 2027 GMT Subject: CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d1:01:e6:57:55:a0:2e:5c:31:5b:28:7a:50: 42:12:f5:ba:3d:5e:e8:b0:32:f0:d4:59:e4:da:6a: d7:53:22:17:11:b1:39:52:99:64:10:c8:90:8e:e9: ad:13:a8:b2:0e:ea:c6:27:73:6e:98:57:c1:96:b7: 85:85:df:a7:b8:bd:0d:ee:ad:8e:03:93:52:2b:81: a7:f3:94:be:ab:e3:ac:25:db:78:a8:6e:c9:bb:b3: 7e:93:c9:b4:22:d1:d3:fd:b4:86:a1:7e:cf:f5:e2: 99:b0:c8:49:dc:5a:fd:80:c3:d9:90:5d:87:25:a0: b1:fd:b2:67:75:6b:7c:d9:50:d0:45:0e:fd:23:fb: 08:d3:bd:1d:ce:f1:83:7d:92:1a:d1:2e:d4:60:a0: 2b:91:d2:a3:ef:d8:d0:4f:e4:3b:68:5a:9e:5e:ee: 27:b5:1e:75:44:a1:45:bf:c7:d5:e2:d8:8c:40:c4: ad:d3:81:06:82:29:ae:55:d5:88:51:aa:13:b6:db: 6b:d0:15:8b:11:06:11:00:c8:c2:29:a6:39:8f:ff: ca:85:1e:fc:0a:72:87:de:60:e0:4c:75:cd:ee:fd: 14:b3:36:92:b3:ce:be:0b:ad:b7:20:16:43:75:54: 66:a2:da:ab:36:71:ad:ed:db:7a:f3:43:d1:12:a2: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.52.0/24 IPv6: 2602:f5f5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b4:d5:9d:3a:0d:d2:32:37:bf:b0:01:06:ce:b7:79:39:4c: 2b:24:9f:51:7f:3b:f4:04:11:88:a5:33:fc:89:94:cf:94:73: dd:c9:fc:cf:d7:23:39:de:03:e2:27:37:43:0e:a3:96:a4:ef: 41:69:9b:24:9c:1b:1a:63:dd:80:d9:ae:d5:cf:6e:d8:63:66: ca:de:8d:64:52:98:d4:16:4d:6e:6b:3f:8c:9f:90:42:16:7b: df:84:b7:27:50:08:90:0b:a1:33:0e:25:2e:02:74:f7:9c:92: 6f:bd:a2:66:3b:f9:72:47:9a:44:d0:b7:9d:7d:95:4d:d2:8c: 86:e7:1f:61:1d:8a:db:b8:d4:3e:38:2f:64:a9:77:ea:0c:02: 9d:0f:0a:f8:0c:bb:9d:24:55:7e:e1:47:c9:51:20:1c:ef:77: 51:84:68:33:aa:18:6b:7a:07:5d:62:94:84:53:3b:61:3b:1f: 5c:87:89:11:92:fb:bc:8c:8f:db:53:fe:a7:7c:06:74:0d:35: f5:44:0f:7d:b6:c5:cf:32:9c:d5:a7:45:88:a9:ca:69:15:35: c9:91:ae:3d:58:6f:d7:03:d4:51:a8:9c:96:cd:8b:a3:6a:48: 1a:bc:d7:59:de:e6:e4:30:b7:dc:e0:d3:8c:f1:61:da:fc:a5: 99:b5:df:e9 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqJ2RkDXpkY14r5wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNjE0NDM1NloXDTI3MTAxOTE0NDM1NlowLzEtMCsGA1UEAxMk ZDgwZGZiZDQtMDk0NC00YzI0LWE2NDUtYTIzOGQ5OTQ5ZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitEB5ldVoC5cMVsoelBCEvW6PV7osDLw1Fnk 2mrXUyIXEbE5UplkEMiQjumtE6iyDurGJ3NumFfBlreFhd+nuL0N7q2OA5NSK4Gn 85S+q+OsJdt4qG7Ju7N+k8m0ItHT/bSGoX7P9eKZsMhJ3Fr9gMPZkF2HJaCx/bJn dWt82VDQRQ79I/sI070dzvGDfZIa0S7UYKArkdKj79jQT+Q7aFqeXu4ntR51RKFF v8fV4tiMQMSt04EGgimuVdWIUaoTtttr0BWLEQYRAMjCKaY5j//KhR78CnKH3mDg THXN7v0UszaSs86+C623IBZDdVRmotqrNnGt7dt680PREqKQXQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKPfe1xWRkmh74mdbQmfeiFeJY7UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k ODBkZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4ZDk5NDlmYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2Q4MGRmYmQ0LTA5NDQtNGMyNC1h NjQ1LWEyMzhkOTk0OWZiNy9kODBkZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4ZDk5 NDlmYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjTQwDgQCAAIwCAMGACYC9fUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHC01Z06DdIyN7+wAQbOt3k5TCskn1F/O/QEEYilM/yJlM+Uc93J/M/XIzneA+In N0MOo5ak70FpmyScGxpj3YDZrtXPbthjZsrejWRSmNQWTW5rP4yfkEIWe9+EtydQ CJALoTMOJS4CdPeckm+9omY7+XJHmkTQt519lU3SjIbnH2Editu41D44L2Spd+oM Ap0PCvgMu50kVX7hR8lRIBzvd1GEaDOqGGt6B11ilIRTO2E7H1yHiRGS+7yMj9tT /qd8BnQNNfVED322xc8ynNWnRYipymkVNcmRrj1Yb9cD1FGonJbNi6NqSBq811ne 5uQwt9zg04zxYdr8pZm13+k= -----END CERTIFICATE-----Generated at Tue Jul 22 04:27:38 2025 by rpki-client