$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer File: df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer (raw, json) Hash identifier: yfLeWEKUSCy09ynyH37+BA3YQz7yhyWekbnRRbUlPII= Subject key identifier: E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A8466829B28E47820BAF72100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Jul 2025 15:54:01 +0000 Certificate not after: Sun 17 Oct 2027 15:54:01 +0000 Subordinate resources: IP: 192.132.27.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:66:82:9b:28:e4:78:20:ba:f7:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 14 15:54:01 2025 GMT Not After : Oct 17 15:54:01 2027 GMT Subject: CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:a5:a6:23:52:56:66:5a:fe:f9:bf:bf:6a: 25:78:62:8b:e1:61:33:59:ba:45:75:e0:a4:b1:5b: ba:fc:92:a7:e5:f3:38:42:ab:04:b0:f7:2f:6f:91: 17:e4:f4:ce:06:ab:1f:6c:d0:9e:b4:fe:df:78:3b: 0c:af:30:94:9f:f4:98:91:a0:c9:6e:b3:1e:eb:91: 21:70:c4:46:21:ac:e7:18:8c:90:eb:ce:1d:b4:90: 61:33:28:8f:f0:1e:56:59:53:00:79:87:d3:fe:be: 56:1b:50:36:82:2f:2a:f4:33:8a:13:51:ed:13:a0: 54:09:e6:8b:69:c8:5b:d1:27:c2:ac:b1:dc:2d:e1: 67:e2:23:01:ba:a6:a1:b8:0e:24:4d:54:ce:c2:76: 07:cd:78:7d:1f:82:02:ab:53:35:46:63:e5:fc:78: e0:d5:f8:98:b8:ef:db:60:8d:9c:83:97:a0:19:8b: d9:bc:3c:80:62:96:7c:cd:af:55:fa:ca:be:4e:bc: ba:68:5a:51:60:83:61:5a:4e:d5:cd:18:f6:14:7d: 23:aa:70:e0:91:39:70:44:78:8e:65:4c:e3:3c:8e: d6:94:9c:75:c5:32:d2:eb:b1:f4:47:c1:3a:1b:f4: a7:7a:fd:b9:ea:6b:6b:04:9e:5a:ba:31:fd:0d:ae: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 192.132.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:41:72:2b:cb:9e:25:03:c7:b5:c4:29:9e:ed:c4:88:1f:8e: ce:76:9e:c2:e7:1d:c8:fa:cc:e0:da:31:8b:e2:64:ee:9b:43: 76:83:95:a1:80:ee:56:17:22:ee:c6:93:d5:64:61:cb:a3:a5: 3a:57:f2:65:88:18:34:f2:28:03:9e:38:d2:49:98:99:d0:a6: 1e:36:3d:3d:b4:cc:21:0a:d5:f2:e3:54:13:17:a9:fb:1f:ca: 24:65:40:4a:b5:29:46:64:e9:81:28:9c:11:f3:5a:cd:7f:10: 15:a4:f3:02:a1:d3:c0:6c:50:9e:51:5b:eb:91:d0:35:ed:f7: 7b:8a:2e:9f:52:45:5f:9a:57:b3:7c:86:40:f7:3c:4b:32:d0: 90:1f:85:cd:30:80:c8:90:2c:e1:76:7e:1f:82:a9:80:69:78: 20:37:89:3b:25:f6:ef:9a:c8:c6:4c:c0:00:70:d6:12:59:b1: 89:6a:a5:cb:96:f4:43:24:c0:3d:fc:72:de:a5:c5:ba:ee:1e: eb:7b:90:89:7f:3d:17:3a:0f:ed:13:fb:2e:63:39:ab:bb:71: dd:3c:36:52:04:fd:ac:c0:9d:17:ae:f3:c4:e9:73:3d:da:c2: 7a:70:e7:00:68:bc:bf:36:b8:f1:d0:04:03:08:2a:d6:d0:cf: 14:a4:90:73 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEqEZoKbKOR4ILr3IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNDE1NTQwMVoXDTI3MTAxNzE1NTQwMVowLzEtMCsGA1UEAxMk ZGY2ZWY5NjctY2EwNC00YWZiLTk2YmEtNmU2NzRhMzVmNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh2lpiNSVmZa/vm/v2oleGKL4WEzWbpFdeCk sVu6/JKn5fM4QqsEsPcvb5EX5PTOBqsfbNCetP7feDsMrzCUn/SYkaDJbrMe65Eh cMRGIaznGIyQ684dtJBhMyiP8B5WWVMAeYfT/r5WG1A2gi8q9DOKE1HtE6BUCeaL achb0SfCrLHcLeFn4iMBuqahuA4kTVTOwnYHzXh9H4ICq1M1RmPl/Hjg1fiYuO/b YI2cg5egGYvZvDyAYpZ8za9V+sq+Try6aFpRYINhWk7VzRj2FH0jqnDgkTlwRHiO ZUzjPI7WlJx1xTLS67H0R8E6G/Snev256mtrBJ5aujH9Da4KIQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOSIsFQRFxtCdgpcmxMcGVuSZ9MmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k ZjZlZjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3NGEzNWY0YTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2RmNmVmOTY3LWNhMDQtNGFmYi05 NmJhLTZlNjc0YTM1ZjRhMS9kZjZlZjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3NGEz NWY0YTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAhBswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAo0FyK8ueJQPHtcQpnu3E iB+OznaewucdyPrM4Noxi+Jk7ptDdoOVoYDuVhci7saT1WRhy6OlOlfyZYgYNPIo A5440kmYmdCmHjY9PbTMIQrV8uNUExep+x/KJGVASrUpRmTpgSicEfNazX8QFaTz AqHTwGxQnlFb65HQNe33e4oun1JFX5pXs3yGQPc8SzLQkB+FzTCAyJAs4XZ+H4Kp gGl4IDeJOyX275rIxkzAAHDWElmxiWqly5b0QyTAPfxy3qXFuu4e63uQiX89FzoP 7RP7LmM5q7tx3Tw2UgT9rMCdF67zxOlzPdrCenDnAGi8vza48dAEAwgq1tDPFKSQ cw== -----END CERTIFICATE-----Generated at Sun Jul 20 13:01:48 2025 by rpki-client