$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69.cer File: 2752199c-de37-4b0c-89a9-511d26205f69.cer (raw, json) Hash identifier: coB+cce5UBY2m9H2kQblF8u/gmBZdLnnSPhC3LEko3w= Subject key identifier: 34:0A:98:3F:5F:59:BF:5B:4F:BC:77:15:33:8D:52:85:43:B7:26:01 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AD30FFD6BF7174039C18B6280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/2752199c-de37-4b0c-89a9-511d26205f69.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Aug 2025 20:08:33 +0000 Certificate not after: Sun 14 Nov 2027 21:08:33 +0000 Subordinate resources: IP: 142.66.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:0f:fd:6b:f7:17:40:39:c1:8b:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 11 20:08:33 2025 GMT Not After : Nov 14 21:08:33 2027 GMT Subject: CN=2752199c-de37-4b0c-89a9-511d26205f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:82:c4:de:e2:13:26:32:a7:9b:78:84:f0:42: f4:73:f0:41:da:32:a1:d0:64:7d:93:40:61:03:85: 9f:73:50:17:58:ed:15:7f:3c:ee:2d:59:4b:b8:83: c2:bb:9f:c5:60:56:bd:8a:28:53:77:96:57:1b:e8: 25:08:ff:d2:ac:09:4d:bb:59:89:17:7d:99:fa:fb: 37:fa:2f:93:7a:09:da:93:ef:bc:5f:ea:b7:16:c9: af:9e:58:ba:70:f7:21:10:68:23:fd:8a:46:18:ed: 8d:24:4c:c1:89:34:76:0f:b5:13:74:de:6f:78:0d: fe:6e:bd:d8:cc:61:d1:cc:ff:42:2e:3a:21:dc:e8: ec:27:bc:6b:b0:00:2b:bc:a7:05:8c:70:e6:84:97: 19:a5:65:04:91:f2:2e:bf:02:41:3f:f5:e5:e0:66: 18:a5:22:5b:08:25:80:94:20:d4:f0:65:d3:64:8e: e5:56:c8:e2:a3:72:59:68:a5:3b:20:53:a5:fa:e3: 13:ed:bb:06:9d:c8:0e:c8:75:01:f2:89:11:7a:2b: f9:cc:3a:e5:ef:3c:d3:d8:73:c4:c4:d4:13:86:7d: 85:8f:11:10:13:42:83:3b:e9:9e:89:1e:c2:4f:9b: 77:90:79:9c:c0:0d:41:00:6e:2d:24:e5:ba:2e:4a: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0A:98:3F:5F:59:BF:5B:4F:BC:77:15:33:8D:52:85:43:B7:26:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2752199c-de37-4b0c-89a9-511d26205f69/2752199c-de37-4b0c-89a9-511d26205f69.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 142.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:11:a3:62:18:e7:bc:4e:36:ab:77:35:fb:8b:f4:8b:db:1f: 00:2b:ae:ae:0c:ba:15:68:83:c3:02:2e:e9:d0:a4:51:39:d8: 80:c4:52:89:72:52:b2:92:eb:a1:09:5f:77:85:0e:1d:f6:75: be:ef:30:06:21:de:92:5c:8a:9e:2c:31:b6:5c:3d:a8:a6:66: b9:a4:f9:66:0c:c8:db:f7:83:ad:ee:a2:22:7f:08:df:25:25: 9e:9f:a5:d9:b8:95:23:d9:00:9f:d4:cd:f4:7e:1e:62:c9:59: 9e:e2:5e:35:ef:f4:65:6a:25:ee:4b:c9:c7:dd:f4:8d:d2:53: be:43:27:95:9c:96:7c:17:56:5f:e0:b8:08:28:4d:b5:81:35: 24:c2:f9:36:93:39:74:b8:c2:99:25:ca:cb:1d:e6:33:aa:aa: 4e:a7:b8:e2:5d:be:58:f7:4a:c2:70:45:3a:2b:3b:15:a3:32: 51:9b:bb:76:0b:dd:f2:b2:ee:28:a3:79:38:5c:ab:bf:ca:d0: c2:08:0d:dd:1f:c1:25:87:51:fe:19:68:0d:65:6e:ba:21:6e: b6:d5:8f:00:6e:f5:07:bb:b8:35:8c:2c:ad:98:33:27:7a:0d: 24:0d:ab:7f:23:aa:d9:e8:d1:7a:0d:de:ef:bc:6c:ef:aa:fe: f9:ee:be:73 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWErTD/1r9xdAOcGLYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxMTIwMDgzM1oXDTI3MTExNDIxMDgzM1owLzEtMCsGA1UEAxMk Mjc1MjE5OWMtZGUzNy00YjBjLTg5YTktNTExZDI2MjA1ZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4LE3uITJjKnm3iE8EL0c/BB2jKh0GR9k0Bh A4Wfc1AXWO0VfzzuLVlLuIPCu5/FYFa9iihTd5ZXG+glCP/SrAlNu1mJF32Z+vs3 +i+Tegnak++8X+q3Fsmvnli6cPchEGgj/YpGGO2NJEzBiTR2D7UTdN5veA3+br3Y zGHRzP9CLjoh3OjsJ7xrsAArvKcFjHDmhJcZpWUEkfIuvwJBP/Xl4GYYpSJbCCWA lCDU8GXTZI7lVsjio3JZaKU7IFOl+uMT7bsGncgOyHUB8okReiv5zDrl7zzT2HPE xNQThn2FjxEQE0KDO+meiR7CT5t3kHmcwA1BAG4tJOW6LkoP3QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFDQKmD9fWb9bT7x3FTONUoVDtyYBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y NzUyMTk5Yy1kZTM3LTRiMGMtODlhOS01MTFkMjYyMDVmNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzI3NTIxOTljLWRlMzctNGIwYy04 OWE5LTUxMWQyNjIwNWY2OS8yNzUyMTk5Yy1kZTM3LTRiMGMtODlhOS01MTFkMjYy MDVmNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCOQjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2EaNiGOe8TjardzX7i/SL 2x8AK66uDLoVaIPDAi7p0KRROdiAxFKJclKykuuhCV93hQ4d9nW+7zAGId6SXIqe LDG2XD2opma5pPlmDMjb94Ot7qIifwjfJSWen6XZuJUj2QCf1M30fh5iyVme4l41 7/RlaiXuS8nH3fSN0lO+QyeVnJZ8F1Zf4LgIKE21gTUkwvk2kzl0uMKZJcrLHeYz qqpOp7jiXb5Y90rCcEU6KzsVozJRm7t2C93ysu4oo3k4XKu/ytDCCA3dH8Elh1H+ GWgNZW66IW621Y8AbvUHu7g1jCytmDMneg0kDat/I6rZ6NF6Dd7vvGzvqv757r5z -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:09 2025 by rpki-client