$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1.cer File: fafea8ad-6b18-4909-8d73-a9987dd107f1.cer (raw, json) Hash identifier: CftCA+nvFZi+hgBHCUIje4BFgRgu+LU813EIU+cwxTo= Subject key identifier: DC:4A:3D:3A:BD:B8:40:AB:D7:94:03:30:A1:66:07:CA:92:F6:67:C5 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B01BC36A4FFAFCEBA9EA2D280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/fafea8ad-6b18-4909-8d73-a9987dd107f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Aug 2025 13:22:44 +0000 Certificate not after: Wed 01 Dec 2027 14:22:44 +0000 Subordinate resources: IP: 204.19.80.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:bc:36:a4:ff:af:ce:ba:9e:a2:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 28 13:22:44 2025 GMT Not After : Dec 1 14:22:44 2027 GMT Subject: CN=fafea8ad-6b18-4909-8d73-a9987dd107f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:07:76:52:e9:9e:fa:31:44:e4:1c:73:c6:0a: b0:5f:5f:ef:3f:85:50:39:f8:e7:ad:8d:61:b4:d3: 56:1b:cf:28:2b:02:fe:04:bc:b8:af:86:b1:32:19: 4a:61:cf:69:b5:29:3c:88:b8:f0:89:37:bd:c7:53: b3:53:f8:d3:a3:d9:eb:ce:f1:0b:80:e8:b4:2c:09: 0f:11:c6:ab:67:63:80:b9:b2:31:17:7e:b3:dc:23: f7:52:dd:a1:5c:3c:b5:b3:0c:79:26:7c:cf:b9:90: 5d:f6:af:1a:1c:46:d0:73:80:f3:37:73:c8:1c:dc: 7d:fd:ab:4d:8b:8a:af:4f:94:db:ed:aa:4b:15:be: 4b:18:0e:2f:12:f6:e3:0e:71:e7:ef:52:05:8f:68: 69:c9:7c:38:da:2e:d1:b9:4d:12:14:95:6f:82:e8: 52:27:29:fb:9d:e7:ce:a7:dd:1e:a0:57:6f:38:af: 69:7c:c0:37:fa:de:42:2e:98:e2:82:20:9e:a1:3c: 0a:76:aa:24:7f:65:2c:f0:b8:fb:81:53:40:39:52: 05:eb:d1:db:15:37:67:b7:9f:82:6c:49:25:2b:55: 0b:b6:b1:73:f3:ba:8e:c0:74:d0:bf:bf:81:6a:5a: 66:73:ea:2d:29:ee:34:23:ac:d0:a5:31:cb:58:9b: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4A:3D:3A:BD:B8:40:AB:D7:94:03:30:A1:66:07:CA:92:F6:67:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/fafea8ad-6b18-4909-8d73-a9987dd107f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 204.19.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:71:04:3c:14:2d:ed:28:ca:d6:e1:00:2c:c9:b2:2d:a8:c0: 92:fa:31:1a:cc:fe:16:36:ae:7a:12:a9:2c:7b:8e:27:a9:51: e7:c0:fc:fb:ae:12:38:65:29:c4:c4:97:c9:c4:e8:d7:9f:9c: b8:fe:91:8a:d8:0f:85:e5:f3:0e:10:b0:ab:46:48:8e:7c:49: eb:45:d2:21:7c:23:1b:c5:1a:18:da:29:66:16:f7:2a:38:f8: b9:96:29:b6:60:42:89:6b:63:23:2a:ac:d7:27:70:90:14:54: e8:1e:7c:24:6f:fd:57:1f:43:a8:48:8f:84:e7:9b:d3:56:21: b4:c2:af:da:8e:d0:4b:77:fb:84:73:dd:08:4c:68:a7:95:e1: 2e:99:ad:f0:37:83:40:a6:7f:05:58:e8:4e:cf:c0:31:04:d6: f0:68:4d:a0:b5:43:45:02:97:8f:b0:bf:18:3c:ec:e9:c6:1d: 0f:cf:dc:6c:06:46:30:34:64:1b:ca:4e:9e:d2:9a:37:89:07: 00:3c:bf:d9:4f:72:5b:34:c2:d1:3f:0b:91:59:58:12:46:2e: 3b:d4:ae:8b:7c:23:e3:d9:f8:20:35:b8:b4:53:3f:28:3b:88: e3:39:77:a7:d9:0e:a8:ad:b4:c0:41:50:dc:a8:fd:ef:40:13: f2:cb:c1:c9 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEsBvDak/6/Oup6i0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyODEzMjI0NFoXDTI3MTIwMTE0MjI0NFowLzEtMCsGA1UEAxMk ZmFmZWE4YWQtNmIxOC00OTA5LThkNzMtYTk5ODdkZDEwN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwd2Uume+jFE5BxzxgqwX1/vP4VQOfjnrY1h tNNWG88oKwL+BLy4r4axMhlKYc9ptSk8iLjwiTe9x1OzU/jTo9nrzvELgOi0LAkP EcarZ2OAubIxF36z3CP3Ut2hXDy1swx5JnzPuZBd9q8aHEbQc4DzN3PIHNx9/atN i4qvT5Tb7apLFb5LGA4vEvbjDnHn71IFj2hpyXw42i7RuU0SFJVvguhSJyn7nefO p90eoFdvOK9pfMA3+t5CLpjigiCeoTwKdqokf2Us8Lj7gVNAOVIF69HbFTdnt5+C bEklK1ULtrFz87qOwHTQv7+Balpmc+otKe40I6zQpTHLWJswZwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNxKPTq9uECr15QDMKFmB8qS9mfFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9m YWZlYThhZC02YjE4LTQ5MDktOGQ3My1hOTk4N2RkMTA3ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2ZhZmVhOGFkLTZiMTgtNDkwOS04 ZDczLWE5OTg3ZGQxMDdmMS9mYWZlYThhZC02YjE4LTQ5MDktOGQ3My1hOTk4N2Rk MTA3ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPME1AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAh3EEPBQt7SjK1uEALMmy LajAkvoxGsz+FjauehKpLHuOJ6lR58D8+64SOGUpxMSXycTo15+cuP6RitgPheXz DhCwq0ZIjnxJ60XSIXwjG8UaGNopZhb3Kjj4uZYptmBCiWtjIyqs1ydwkBRU6B58 JG/9Vx9DqEiPhOeb01YhtMKv2o7QS3f7hHPdCExop5XhLpmt8DeDQKZ/BVjoTs/A MQTW8GhNoLVDRQKXj7C/GDzs6cYdD8/cbAZGMDRkG8pOntKaN4kHADy/2U9yWzTC 0T8LkVlYEkYuO9Sui3wj49n4IDW4tFM/KDuI4zl3p9kOqK20wEFQ3Kj970AT8svB yQ== -----END CERTIFICATE-----Generated at Mon Sep 15 12:31:58 2025 by rpki-client