$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer File: fab1a958-ded9-4a94-97d9-0ff41a67ab25.cer (raw, json) Hash identifier: gOXkdKs7kUyRV5+Z0P+pPu5WduDcvWxkPDi1+0OjlJ4= Subject key identifier: F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584A4D7DB590983E87811094E0E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Jun 2025 23:51:18 +0000 Certificate not after: Mon 27 Sep 2027 23:51:18 +0000 Subordinate resources: IP: 169.199.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:7d:b5:90:98:3e:87:81:10:94:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Jun 24 23:51:18 2025 GMT Not After : Sep 27 23:51:18 2027 GMT Subject: CN=fab1a958-ded9-4a94-97d9-0ff41a67ab25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:f1:54:d3:3f:89:55:a8:c4:b9:55:ce:ba: 4b:2e:49:f8:08:5f:cb:b5:69:38:45:ef:ed:76:58: 5e:e0:19:32:28:14:d4:e0:00:f8:46:00:60:85:bf: 52:f1:4b:76:9e:55:25:f9:f1:82:3a:01:3a:0b:10: 94:69:58:9b:1c:1e:d3:12:4a:4c:37:1a:63:3b:d6: c6:8d:84:9d:44:29:9f:2c:e2:42:b2:4e:72:01:c4: 42:0e:68:f7:4e:1e:2a:bd:17:9d:56:9e:97:bc:7c: e4:67:11:d5:2d:30:15:fd:3e:00:ac:da:5d:fa:08: 40:92:ec:60:d0:93:f0:24:d0:48:86:99:33:10:8f: d9:89:dc:85:3b:48:0e:c7:53:fd:98:61:8e:a1:d7: 4e:83:a9:54:c5:1a:1c:27:97:56:52:86:a5:80:bb: 1b:4a:b3:82:28:6a:9d:df:c8:8f:69:b6:8d:f8:e0: a6:29:6d:98:f3:ef:40:53:b8:dd:e8:83:5b:c9:d1: 4a:6a:7c:42:99:ec:20:23:f9:7d:23:ff:32:2e:ef: 6c:03:92:8d:e4:7d:6b:b4:12:84:a1:fd:7b:10:c2: ef:cb:7d:2b:7a:62:fa:2c:39:63:1d:55:4e:5d:70: ef:8b:54:1e:4f:36:51:22:cd:08:0c:c9:7b:df:7b: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8D:66:1A:71:A8:F2:70:03:41:53:6D:90:C9:C3:61:5F:FA:7C:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fab1a958-ded9-4a94-97d9-0ff41a67ab25/fab1a958-ded9-4a94-97d9-0ff41a67ab25.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 169.199.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:30:4f:76:45:ea:94:85:dd:46:74:45:71:22:c0:bf:8f:58: 69:19:60:5f:09:14:af:d5:b3:b5:95:67:8e:ef:aa:e9:8c:e7: ab:fc:f1:d2:be:e3:76:f8:21:09:93:08:8d:bb:f0:10:c5:f3: 93:3e:0a:35:d7:ac:e7:8c:61:c3:5e:44:3a:e3:08:cb:50:6e: b1:ab:d4:61:e0:09:08:15:85:20:8b:b6:ea:9b:9e:44:16:eb: f6:9d:e9:5f:6e:4f:1a:19:59:6a:6f:83:88:1c:5b:6a:50:c4: 1f:a9:62:35:cc:10:c2:91:50:a8:e2:e9:fd:56:cb:8e:b1:f4: df:c3:bd:fc:4b:8f:dd:90:66:7a:7f:d7:f9:10:96:ee:8b:5e: d6:8f:91:43:82:c7:fa:f3:ee:22:70:e1:82:01:2e:c3:4f:84: 02:6f:e4:e8:ae:b3:95:77:5e:0c:8e:97:30:bd:b5:87:4b:40: e0:ea:49:f9:2b:3f:a7:9b:c1:88:0e:c1:f9:5b:f8:54:6f:7a: eb:8f:2b:5b:79:2d:54:d8:0d:40:fb:4c:50:16:7c:f7:fe:40: 3c:b5:52:49:94:49:b2:ab:7f:12:1c:f6:08:b1:b8:13:f1:88: f9:48:7d:16:a9:1e:1f:f1:a7:fc:bf:14:8a:eb:75:1f:a5:cc: ac:a8:0f:f1 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEpNfbWQmD6HgRCU4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDYyNDIzNTExOFoXDTI3MDkyNzIzNTExOFowLzEtMCsGA1UEAxMk ZmFiMWE5NTgtZGVkOS00YTk0LTk3ZDktMGZmNDFhNjdhYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk/xVNM/iVWoxLlVzrpLLkn4CF/LtWk4Re/t dlhe4BkyKBTU4AD4RgBghb9S8Ut2nlUl+fGCOgE6CxCUaVibHB7TEkpMNxpjO9bG jYSdRCmfLOJCsk5yAcRCDmj3Th4qvRedVp6XvHzkZxHVLTAV/T4ArNpd+ghAkuxg 0JPwJNBIhpkzEI/ZidyFO0gOx1P9mGGOoddOg6lUxRocJ5dWUoalgLsbSrOCKGqd 38iPabaN+OCmKW2Y8+9AU7jd6INbydFKanxCmewgI/l9I/8yLu9sA5KN5H1rtBKE of17EMLvy30remL6LDljHVVOXXDvi1QeTzZRIs0IDMl733uknQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFPWNZhpxqPJwA0FTbZDJw2Ff+nyRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m YWIxYTk1OC1kZWQ5LTRhOTQtOTdkOS0wZmY0MWE2N2FiMjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZhYjFhOTU4LWRlZDktNGE5NC05 N2Q5LTBmZjQxYTY3YWIyNS9mYWIxYTk1OC1kZWQ5LTRhOTQtOTdkOS0wZmY0MWE2 N2FiMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCpxzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApME92ReqUhd1GdEVxIsC/ j1hpGWBfCRSv1bO1lWeO76rpjOer/PHSvuN2+CEJkwiNu/AQxfOTPgo116znjGHD XkQ64wjLUG6xq9Rh4AkIFYUgi7bqm55EFuv2nelfbk8aGVlqb4OIHFtqUMQfqWI1 zBDCkVCo4un9VsuOsfTfw738S4/dkGZ6f9f5EJbui17Wj5FDgsf68+4icOGCAS7D T4QCb+TorrOVd14MjpcwvbWHS0Dg6kn5Kz+nm8GIDsH5W/hUb3rrjytbeS1U2A1A +0xQFnz3/kA8tVJJlEmyq38SHPYIsbgT8Yj5SH0WqR4f8af8vxSK63UfpcysqA/x -----END CERTIFICATE-----Generated at Sun Oct 26 00:44:28 2025 by rpki-client