$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130.cer File: fd1927f4-008d-46c1-980b-7c6e68a50130.cer (raw, json) Hash identifier: uHle1icKceOZZ3vWNXskpo5jLMZl2PaOUDG1E6ivDmI= Subject key identifier: 1C:2B:74:50:38:A3:5D:D0:19:41:44:FE:20:0B:2E:73:0F:80:5A:70 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A635BE30716D8C38AD1C21B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/fd1927f4-008d-46c1-980b-7c6e68a50130.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 19:50:56 +0000 Certificate not after: Tue 05 Oct 2027 19:50:56 +0000 Subordinate resources: IP: 198.212.213.0 -- 198.212.215.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:5b:e3:07:16:d8:c3:8a:d1:c2:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 2 19:50:56 2025 GMT Not After : Oct 5 19:50:56 2027 GMT Subject: CN=fd1927f4-008d-46c1-980b-7c6e68a50130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:46:f4:e7:02:5e:56:96:7c:f9:20:8f:0e: f3:36:d6:3d:ff:43:78:cb:6c:fa:8d:d6:80:ee:67: 2f:f5:af:4b:6a:6e:4e:64:27:35:ed:0e:21:ed:5b: df:c6:5d:a0:eb:69:9c:09:97:d1:69:2e:dc:e2:43: 29:d8:a4:f0:a5:35:aa:18:84:bc:10:ef:4d:53:39: c6:15:b1:87:76:a2:d6:41:cb:59:ad:97:36:89:02: f9:46:dc:2e:90:48:c6:9f:4b:ae:b7:35:54:c4:2d: 94:6b:04:2e:a9:f5:ed:93:60:66:46:4a:00:e5:f6: 04:7d:93:24:7e:ca:42:f5:bf:68:1a:55:06:b2:5f: 80:fe:c0:ab:5d:2d:8e:74:73:55:e7:2a:f0:88:d8: b6:3c:da:94:45:44:fd:3c:aa:7d:8a:7f:38:9b:7c: d1:af:54:cd:8e:92:b2:5e:91:89:1c:07:08:67:93: cd:d7:08:08:c4:4e:aa:9b:4e:5a:66:61:60:8e:be: 57:d2:a9:17:7f:b3:9f:46:1c:56:0e:c7:2a:93:c0: 0e:d7:47:e8:90:98:30:4a:ed:ed:dc:14:cc:2c:6d: 07:42:d2:6c:d8:4d:4b:37:11:33:4d:fc:90:b9:a0: 9c:82:b2:23:60:1f:2f:d4:00:a1:43:da:94:ff:e1: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2B:74:50:38:A3:5D:D0:19:41:44:FE:20:0B:2E:73:0F:80:5A:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/fd1927f4-008d-46c1-980b-7c6e68a50130.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 198.212.213.0-198.212.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:04:2f:05:53:39:81:8a:d4:6d:3f:26:42:b7:53:35:e0:df: 71:71:65:3b:47:1a:46:9c:b6:4f:f3:ae:1d:26:fb:be:99:60: 91:35:34:d6:90:50:2e:44:09:e2:e7:ea:5f:8e:31:54:73:54: ac:2b:36:c6:7d:33:02:8b:99:b1:17:78:4c:34:a3:40:68:9c: 2a:5d:67:74:15:50:0d:42:5f:21:50:da:b5:3d:d0:4a:ac:93: ef:16:3e:61:b0:cb:45:b3:a1:f3:38:f4:15:42:b2:52:63:a4: d2:57:ac:30:b7:72:fc:d4:62:69:5c:83:7b:cd:f4:76:7f:05: 79:4c:94:d3:7c:4c:3f:48:53:d7:a9:46:a9:03:6c:17:e2:a0: 27:fd:c2:dd:77:9f:9f:25:aa:a7:ca:e7:4f:c2:57:8e:5d:e8: 0d:a3:4f:c1:2e:7c:21:da:56:2d:91:35:97:35:92:20:91:85: df:31:91:b8:2a:8a:31:b5:fc:55:d5:60:9e:22:67:1f:40:85: 69:a9:f6:0e:83:14:a0:91:00:f4:be:68:90:01:25:a1:68:5b: c4:2d:41:04:6a:9f:f5:40:e4:f9:de:ec:ab:c3:53:69:15:a1: 7f:27:79:0f:11:f1:9b:d1:54:36:89:a0:eb:97:83:19:ec:6e: 2f:0b:80:94 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEpjW+MHFtjDitHCGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcwMjE5NTA1NloXDTI3MTAwNTE5NTA1NlowLzEtMCsGA1UEAxMk ZmQxOTI3ZjQtMDA4ZC00NmMxLTk4MGItN2M2ZTY4YTUwMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTFG9OcCXlaWfPkgjw7zNtY9/0N4y2z6jdaA 7mcv9a9Lam5OZCc17Q4h7Vvfxl2g62mcCZfRaS7c4kMp2KTwpTWqGIS8EO9NUznG FbGHdqLWQctZrZc2iQL5RtwukEjGn0uutzVUxC2UawQuqfXtk2BmRkoA5fYEfZMk fspC9b9oGlUGsl+A/sCrXS2OdHNV5yrwiNi2PNqURUT9PKp9in84m3zRr1TNjpKy XpGJHAcIZ5PN1wgIxE6qm05aZmFgjr5X0qkXf7OfRhxWDscqk8AO10fokJgwSu3t 3BTMLG0HQtJs2E1LNxEzTfyQuaCcgrIjYB8v1AChQ9qU/+EusQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFBwrdFA4o13QGUFE/iALLnMPgFpwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9m ZDE5MjdmNC0wMDhkLTQ2YzEtOTgwYi03YzZlNjhhNTAxMzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2ZkMTkyN2Y0LTAwOGQtNDZjMS05 ODBiLTdjNmU2OGE1MDEzMC9mZDE5MjdmNC0wMDhkLTQ2YzEtOTgwYi03YzZlNjhh NTAxMzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMbU1QMEA8bU0DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC2BC8FUzmB itRtPyZCt1M14N9xcWU7RxpGnLZP864dJvu+mWCRNTTWkFAuRAni5+pfjjFUc1Ss KzbGfTMCi5mxF3hMNKNAaJwqXWd0FVANQl8hUNq1PdBKrJPvFj5hsMtFs6HzOPQV QrJSY6TSV6wwt3L81GJpXIN7zfR2fwV5TJTTfEw/SFPXqUapA2wX4qAn/cLdd5+f JaqnyudPwleOXegNo0/BLnwh2lYtkTWXNZIgkYXfMZG4KooxtfxV1WCeImcfQIVp qfYOgxSgkQD0vmiQASWhaFvELUEEap/1QOT53uyrw1NpFaF/J3kPEfGb0VQ2iaDr l4MZ7G4vC4CU -----END CERTIFICATE-----Generated at Fri Jul 4 07:00:32 2025 by rpki-client