$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer File: 34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer (raw, json) Hash identifier: xboUrLier7IPd/gIjiwUIewc55lBni9QXIqDyh8GDkw= Subject key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ADB5EF2B47BFE7FA9DB30B080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 19:34:06 +0000 Certificate not after: Wed 17 Nov 2027 20:34:06 +0000 Subordinate resources: AS: 161 AS: 2562 IP: 128.247.0.0/16 IP: 137.167.0.0/16 IP: 146.252.0.0/16 IP: 157.87.0.0/16 IP: 157.170.0.0/16 IP: 192.31.38.0/24 IP: 192.48.249.0 -- 192.48.250.255 IP: 192.55.223.0/24 IP: 192.58.102.0 -- 192.58.106.255 IP: 192.91.60.0 -- 192.91.131.255 IP: 192.94.81.0 -- 192.94.100.255 IP: 192.104.87.0 -- 192.104.106.255 IP: 192.132.72.0/22 IP: 192.138.126.0/23 IP: 192.153.229.0 -- 192.153.243.255 IP: 192.157.186.0/24 IP: 192.163.1.0 -- 192.163.20.255 IP: 192.228.64.0 -- 192.228.78.255 IP: 198.47.16.0 -- 198.47.30.255 IP: 198.202.239.0/24 IP: 198.206.210.0 -- 198.206.213.255 IP: 199.33.184.0 -- 199.33.188.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:5e:f2:b4:7b:fe:7f:a9:db:30:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 14 19:34:06 2025 GMT Not After : Nov 17 20:34:06 2027 GMT Subject: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:08:62:d7:94:6d:46:ee:8b:b5:ae:43:31:53: 4b:7f:d9:38:02:dd:0b:7b:3b:42:f5:f4:7b:0b:ea: 25:e3:9d:00:cf:2c:14:bf:d7:78:d7:d9:a6:3c:ff: 42:d2:67:55:8d:11:49:a0:4e:0c:29:8b:73:e1:a6: f5:3e:ea:be:95:48:71:a9:98:98:30:53:96:0e:97: 72:f3:68:12:27:15:f8:22:4c:8c:6a:10:89:b3:68: 11:74:40:02:e1:95:6c:7f:a9:5a:05:03:04:9b:9a: c6:5c:16:43:57:22:08:10:14:21:3d:8d:c0:31:fa: 53:22:dd:2a:6e:fb:60:9b:95:32:3f:7e:b7:e4:d7: ce:db:16:6c:07:69:df:14:28:68:3d:d3:57:39:1e: 63:1e:f0:5a:c0:26:2a:2c:54:07:9d:80:1d:f9:c1: e6:95:2b:04:ef:e8:b4:0c:6b:ae:db:5c:44:f7:d9: 8c:bd:90:17:a6:be:0e:11:30:cb:c7:45:dc:20:6e: 16:68:0d:57:e8:ba:9a:62:af:0f:ea:d1:1b:21:c2: 4f:d6:31:4b:78:83:2a:84:fb:49:24:cd:8f:1f:2c: 05:59:8d:1a:8f:fa:52:09:b1:e1:dd:6a:e6:4a:76: 31:a7:8d:c8:12:80:39:5a:98:a5:a6:80:2b:96:1f: 6b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 128.247.0.0/16 137.167.0.0/16 146.252.0.0/16 157.87.0.0/16 157.170.0.0/16 192.31.38.0/24 192.48.249.0-192.48.250.255 192.55.223.0/24 192.58.102.0-192.58.106.255 192.91.60.0-192.91.131.255 192.94.81.0-192.94.100.255 192.104.87.0-192.104.106.255 192.132.72.0/22 192.138.126.0/23 192.153.229.0-192.153.243.255 192.157.186.0/24 192.163.1.0-192.163.20.255 192.228.64.0-192.228.78.255 198.47.16.0-198.47.30.255 198.202.239.0/24 198.206.210.0-198.206.213.255 199.33.184.0-199.33.188.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 161 2562 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e9:be:40:3d:48:5c:7a:c5:66:16:30:43:90:1d:9b:17:56: 1e:bb:bd:1d:1b:d9:02:9b:ef:ad:00:38:46:b0:e4:d7:0a:19: cd:25:bb:f4:61:91:9c:31:2b:7a:28:bd:8b:19:c4:a4:0c:99: 03:d8:33:c7:d2:90:9a:03:4f:47:c4:5e:a8:9f:91:72:bf:d9: ed:bb:11:07:18:b3:9e:8f:27:91:4d:04:44:8d:b7:5c:8f:f8: a6:09:e0:bd:2c:0d:d5:24:c6:8d:7d:7c:87:70:1f:6b:c5:b7: a9:80:07:23:49:19:e0:74:73:56:cc:cb:54:6c:ae:5a:6c:61: 68:ff:f7:70:33:e9:0b:bf:7a:fe:5e:e7:4e:08:3b:e5:f9:77: 68:22:19:a3:7a:13:b9:9c:25:ac:55:2b:91:00:2b:a6:e0:95: 7d:66:84:e9:65:45:e2:fe:77:1a:00:0f:93:7c:40:fb:3f:5d: f8:75:ad:8b:d2:d2:fc:a2:51:69:db:6f:69:92:d6:99:81:0a: cf:a8:fb:89:30:4a:91:51:43:05:4d:9d:91:b7:05:32:b1:82: 12:53:88:3f:83:23:0a:19:95:15:c7:38:17:8d:3e:e8:11:59: bc:33:67:2b:fa:d2:78:74:fd:61:db:79:15:35:19:83:25:8f: 78:33:8b:b6 -----BEGIN CERTIFICATE----- MIIH4jCCBsqgAwIBAgIUAQ0Mn0MoWErbXvK0e/5/qdswsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxNDE5MzQwNloXDTI3MTExNzIwMzQwNlowLzEtMCsGA1UEAxMk MzRiMjIxMTctYzNiMS00Zjc0LWFkMmEtMGZjZDEwYTJkNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAhi15RtRu6Lta5DMVNLf9k4At0LeztC9fR7 C+ol450AzywUv9d419mmPP9C0mdVjRFJoE4MKYtz4ab1Puq+lUhxqZiYMFOWDpdy 82gSJxX4IkyMahCJs2gRdEAC4ZVsf6laBQMEm5rGXBZDVyIIEBQhPY3AMfpTIt0q bvtgm5UyP3635NfO2xZsB2nfFChoPdNXOR5jHvBawCYqLFQHnYAd+cHmlSsE7+i0 DGuu21xE99mMvZAXpr4OETDLx0XcIG4WaA1X6LqaYq8P6tEbIcJP1jFLeIMqhPtJ JM2PHywFWY0aj/pSCbHh3WrmSnYxp43IEoA5WpilpoArlh9rnwIDAQABo4IE9DCC BPAwHQYDVR0OBBYEFINdDBKvnijrweugcYLs9D5JVq9ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z NGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBhMmQ3OGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzM0YjIyMTE3LWMzYjEtNGY3NC1h ZDJhLTBmY2QxMGEyZDc4ZS8zNGIyMjExNy1jM2IxLTRmNzQtYWQyYS0wZmNkMTBh MmQ3OGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwgfQGCCsGAQUF BwEHAQH/BIHkMIHhMIHeBAIAATCB1wMDAID3AwMAiacDAwCS/AMDAJ1XAwMAnaoD BADAHyYwDAMEAMAw+QMEAMAw+gMEAMA33zAMAwQBwDpmAwQAwDpqMAwDBALAWzwD BALAW4AwDAMEAMBeUQMEAMBeZDAMAwQAwGhXAwQAwGhqAwQCwIRIAwQBwIp+MAwD BADAmeUDBALAmfADBADAnbowDAMEAMCjAQMEAMCjFDAMAwQGwORAAwQAwOROMAwD BATGLxADBADGLx4DBADGyu8wDAMEAcbO0gMEAcbO1DAMAwQDxyG4AwQAxyG8MB0G CCsGAQUFBwEIAQH/BA4wDKAKMAgCAgChAgIKAjBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA46b5APUhcesVm FjBDkB2bF1Yeu70dG9kCm++tADhGsOTXChnNJbv0YZGcMSt6KL2LGcSkDJkD2DPH 0pCaA09HxF6on5Fyv9ntuxEHGLOejyeRTQREjbdcj/imCeC9LA3VJMaNfXyHcB9r xbepgAcjSRngdHNWzMtUbK5abGFo//dwM+kLv3r+XudOCDvl+XdoIhmjehO5nCWs VSuRACum4JV9ZoTpZUXi/ncaAA+TfED7P134da2L0tL8olFp229pktaZgQrPqPuJ MEqRUUMFTZ2RtwUysYISU4g/gyMKGZUVxzgXjT7oEVm8M2cr+tJ4dP1h23kVNRmD JY94M4u2 -----END CERTIFICATE-----Generated at Sat Aug 23 13:42:05 2025 by rpki-client