$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer File: 37d65fc0-6e4c-4477-9488-812657d0d39e.cer (raw, json) Hash identifier: oOao+RqjiLXrrG2INaDR2hIt3dY99g1FQ1q6FQujtJg= Subject key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A7495208AA96C5B905E473980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Jul 2025 23:55:00 +0000 Certificate not after: Mon 11 Oct 2027 23:55:00 +0000 Subordinate resources: IP: 153.45.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:95:20:8a:a9:6c:5b:90:5e:47:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 8 23:55:00 2025 GMT Not After : Oct 11 23:55:00 2027 GMT Subject: CN=37d65fc0-6e4c-4477-9488-812657d0d39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:01:ae:c7:f7:27:96:b3:80:f8:99:3c:f9: 03:2f:4f:36:f7:b9:81:31:04:23:23:12:f0:6b:6a: fc:87:76:c4:87:4a:16:30:2b:7b:96:f1:76:10:50: 57:51:cb:d7:24:c2:6d:77:6c:0f:2b:e7:45:df:ae: b9:46:14:99:e8:e4:9a:3a:7a:ea:3d:a1:23:98:8e: b5:f9:ed:b1:27:92:90:6e:b2:5b:46:c0:b2:09:9a: f3:2d:15:94:61:84:12:b4:fe:b3:ae:14:8c:fe:7d: fc:a4:c2:74:18:5d:27:0d:87:ed:5f:5f:15:cd:fb: 51:bb:b5:00:b2:4d:50:34:04:e9:bc:52:84:27:7b: 3d:10:2d:06:5b:83:42:bc:86:67:fc:6d:d4:b6:2e: 73:c8:c6:bb:58:8e:7b:54:9b:87:a2:3e:5b:d2:85: d2:c9:0f:a2:f6:2a:66:79:f9:4f:c9:74:48:10:23: 37:92:d2:ab:18:e7:e4:93:59:25:ce:17:91:52:d9: 21:06:8a:b0:90:0a:f1:63:3e:1a:2e:bd:32:ac:07: 1a:c6:fa:d9:2e:a7:ad:85:f0:bd:d1:d6:67:71:88: f8:8d:78:5f:be:d7:df:ac:59:4e:cb:13:93:1b:16: 0f:f5:e9:bc:15:5e:e1:08:ac:4d:40:66:76:33:c6: f8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 153.45.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2a:0c:8a:1b:45:49:40:92:fb:22:8e:df:74:c0:59:7e:43: 16:92:d4:64:9c:ef:38:e0:3a:f1:a4:48:a1:f5:18:84:34:2f: 62:b2:1d:6d:78:85:c7:cd:43:4a:e4:f3:3c:dc:3c:50:fe:52: 75:0f:7c:e8:29:ca:93:e4:0a:34:5a:0e:74:a7:69:46:2f:3e: 4f:ed:73:c7:a6:a7:b2:51:d5:ff:b4:8b:87:3f:f3:48:8e:72: db:b6:2a:0e:bc:c3:d1:1b:1e:c3:0b:1d:20:bc:8d:e8:bc:bb: 5c:e8:89:33:37:1a:44:6b:70:9c:fe:98:7f:1b:10:49:92:b5: 2b:bf:02:20:82:39:b8:75:38:bd:43:54:81:be:43:04:f0:1e: d8:10:e2:39:5b:bb:f8:5f:39:98:84:c9:00:eb:18:27:63:cd: 73:a5:14:8f:82:a4:10:aa:9a:86:28:e0:69:21:97:4d:87:0a: ee:30:29:8a:78:a3:2f:07:a9:b1:2f:bf:11:04:46:7f:a0:be: 4d:35:9a:17:8e:1e:53:f4:2f:ed:ca:97:49:f3:94:08:f1:d1: 61:74:99:6c:b4:03:05:d5:4f:08:7d:5d:2d:49:f7:17:2f:7b: 7d:21:71:1c:58:f5:d1:9b:28:e6:de:0d:a8:02:74:01:8b:0a: b8:4a:51:98 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEp0lSCKqWxbkF5HOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcwODIzNTUwMFoXDTI3MTAxMTIzNTUwMFowLzEtMCsGA1UEAxMk MzdkNjVmYzAtNmU0Yy00NDc3LTk0ODgtODEyNjU3ZDBkMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkwBrsf3J5azgPiZPPkDL08297mBMQQjIxLw a2r8h3bEh0oWMCt7lvF2EFBXUcvXJMJtd2wPK+dF3665RhSZ6OSaOnrqPaEjmI61 +e2xJ5KQbrJbRsCyCZrzLRWUYYQStP6zrhSM/n38pMJ0GF0nDYftX18VzftRu7UA sk1QNATpvFKEJ3s9EC0GW4NCvIZn/G3Uti5zyMa7WI57VJuHoj5b0oXSyQ+i9ipm eflPyXRIECM3ktKrGOfkk1klzheRUtkhBoqwkArxYz4aLr0yrAcaxvrZLqethfC9 0dZncYj4jXhfvtffrFlOyxOTGxYP9em8FV7hCKxNQGZ2M8b4lQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFJHY6fU+ScWdYnUcQ+VBo7rknTxpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z N2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdkMGQzOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzM3ZDY1ZmMwLTZlNGMtNDQ3Ny05 NDg4LTgxMjY1N2QwZDM5ZS8zN2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdk MGQzOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCZLTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiKgyKG0VJQJL7Io7fdMBZ fkMWktRknO844DrxpEih9RiENC9ish1teIXHzUNK5PM83DxQ/lJ1D3zoKcqT5Ao0 Wg50p2lGLz5P7XPHpqeyUdX/tIuHP/NIjnLbtioOvMPRGx7DCx0gvI3ovLtc6Ikz NxpEa3Cc/ph/GxBJkrUrvwIggjm4dTi9Q1SBvkME8B7YEOI5W7v4XzmYhMkA6xgn Y81zpRSPgqQQqpqGKOBpIZdNhwruMCmKeKMvB6mxL78RBEZ/oL5NNZoXjh5T9C/t ypdJ85QI8dFhdJlstAMF1U8IfV0tSfcXL3t9IXEcWPXRmyjm3g2oAnQBiwq4SlGY -----END CERTIFICATE-----Generated at Sat Aug 23 11:36:20 2025 by rpki-client