$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer File: de519df3-4594-450e-ac51-a7e085408381.cer (raw, json) Hash identifier: mJBDZLeHFSkJJSBPROUn+CL5D3u9TGoeXIz/WpjgzcE= Subject key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A7C880E1AF7C3CAE9C5B39480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Jul 2025 20:15:08 +0000 Certificate not after: Thu 14 Oct 2027 20:15:08 +0000 Subordinate resources: IP: 209.205.232.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7c:88:0e:1a:f7:c3:ca:e9:c5:b3:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 11 20:15:08 2025 GMT Not After : Oct 14 20:15:08 2027 GMT Subject: CN=de519df3-4594-450e-ac51-a7e085408381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:e7:82:01:95:0f:ed:2a:2d:3e:83:ed:ce: 30:01:ee:66:0a:7e:18:c2:14:19:72:ae:dc:7c:ab: ac:c5:5b:5b:ab:58:d1:3f:78:2f:9c:70:72:66:bb: 64:44:a1:de:24:14:6b:4b:a2:de:d5:1a:11:29:86: bc:fa:ae:65:17:d3:dc:7e:a9:8e:00:bc:17:69:d5: e7:fb:d2:77:ed:9c:63:60:6f:60:a3:e5:61:1a:ce: 2c:3f:19:41:41:6f:dc:48:52:17:99:4b:2a:30:4c: 3b:55:df:29:bc:44:2b:91:85:53:e4:b7:c7:83:ff: fa:03:36:1c:4e:c0:3a:4f:38:66:3a:04:26:4f:a3: 45:eb:39:63:36:bb:2c:7e:bb:4c:6c:a7:bd:73:ba: 98:71:64:b1:a5:35:6f:e8:f5:c1:62:a2:24:f5:40: df:53:a7:c8:c3:f4:2f:b6:db:6b:6d:94:08:e4:38: 69:e8:08:5b:e8:a7:3b:1f:c3:4b:af:6d:03:2b:4d: 3c:d6:38:0c:ca:77:c5:7d:31:64:1f:47:97:89:88: f0:7c:a7:96:2d:84:80:65:a5:c1:1b:49:86:b2:4b: ab:35:5e:3f:a6:ed:b4:b3:ff:14:b0:55:d8:dd:10: ea:99:f7:5e:a9:5a:a0:74:be:bb:28:4d:69:97:a7: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 209.205.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7a:71:88:80:52:70:bb:69:63:26:53:0d:32:0c:81:5d:0f: 54:f2:0d:98:5a:c8:83:90:5a:7e:d3:9b:ab:99:76:d7:d9:5f: 35:f4:3d:ca:5a:c0:cb:0f:d4:83:44:7b:f4:4d:76:bd:cc:ec: 63:80:c2:5f:f4:00:bb:f8:44:4b:8f:b1:28:ab:4b:f6:d8:4d: 11:5e:49:31:ed:cf:31:26:be:4d:a6:be:d5:14:1a:93:ef:af: 4e:42:15:59:fd:2c:5f:77:8c:ca:60:5c:c6:c5:06:b3:45:ea: 75:c2:5b:44:d8:24:e4:78:db:b2:89:57:e0:ad:f9:9d:f0:35: 80:fa:af:15:d5:e0:56:18:2e:77:b0:60:1c:09:a2:de:d3:fa: fd:9b:89:1c:ff:44:c3:74:ba:ca:4f:42:d9:37:50:5b:71:90: 07:19:47:8f:f4:cf:30:5e:b3:75:cd:6f:07:53:95:3c:38:3f: 8a:3a:cb:f4:89:ad:8f:5a:14:5c:79:9e:38:bf:7c:3f:ce:a0: c9:13:56:bc:ee:6d:4e:e5:eb:63:9d:78:15:5a:69:6f:dc:ed: 7f:91:65:45:63:f3:64:b5:75:84:e1:b8:1c:ab:33:39:38:57: 4d:c3:29:3d:54:b7:0b:d4:01:93:b8:12:60:9b:72:e2:ef:04: 23:43:27:b5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEp8iA4a98PK6cWzlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxMTIwMTUwOFoXDTI3MTAxNDIwMTUwOFowLzEtMCsGA1UEAxMk ZGU1MTlkZjMtNDU5NC00NTBlLWFjNTEtYTdlMDg1NDA4MzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQrnggGVD+0qLT6D7c4wAe5mCn4YwhQZcq7c fKusxVtbq1jRP3gvnHByZrtkRKHeJBRrS6Le1RoRKYa8+q5lF9PcfqmOALwXadXn +9J37ZxjYG9go+VhGs4sPxlBQW/cSFIXmUsqMEw7Vd8pvEQrkYVT5LfHg//6AzYc TsA6TzhmOgQmT6NF6zljNrssfrtMbKe9c7qYcWSxpTVv6PXBYqIk9UDfU6fIw/Qv tttrbZQI5Dhp6Ahb6Kc7H8NLr20DK0081jgMynfFfTFkH0eXiYjwfKeWLYSAZaXB G0mGskurNV4/pu20s/8UsFXY3RDqmfdeqVqgdL67KE1pl6dg0wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFmeSkceMqcoEQTKSBWM1BgtsLkcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k ZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0MDgzODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2RlNTE5ZGYzLTQ1OTQtNDUwZS1h YzUxLWE3ZTA4NTQwODM4MS9kZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0 MDgzODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALRzegwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJXpxiIBScLtpYyZTDTIM gV0PVPINmFrIg5BaftObq5l219lfNfQ9ylrAyw/Ug0R79E12vczsY4DCX/QAu/hE S4+xKKtL9thNEV5JMe3PMSa+Taa+1RQak++vTkIVWf0sX3eMymBcxsUGs0XqdcJb RNgk5HjbsolX4K35nfA1gPqvFdXgVhgud7BgHAmi3tP6/ZuJHP9Ew3S6yk9C2TdQ W3GQBxlHj/TPMF6zdc1vB1OVPDg/ijrL9Imtj1oUXHmeOL98P86gyRNWvO5tTuXr Y514FVppb9ztf5FlRWPzZLV1hOG4HKszOThXTcMpPVS3C9QBk7gSYJty4u8EI0Mn tQ== -----END CERTIFICATE-----Generated at Sun Jul 20 18:52:50 2025 by rpki-client