$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer File: 3d17c017-30b5-444a-aa30-048cc30971e3.cer (raw, json) Hash identifier: 4PBEpwjRniHZP7OyrOzTtMpcOkXAQPBhR7qYe1d/tqs= Subject key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AEEBA24B5532077709F56C380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Aug 2025 17:58:12 +0000 Certificate not after: Wed 24 Nov 2027 18:58:12 +0000 Subordinate resources: AS: 401927 IP: 2604:1d20::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:ba:24:b5:53:20:77:70:9f:56:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 21 17:58:12 2025 GMT Not After : Nov 24 18:58:12 2027 GMT Subject: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:2e:f9:f9:10:68:ed:07:33:9d:c3:6f:95: 0d:8f:e6:c8:38:17:4f:f9:58:f3:55:fe:8f:98:ed: ea:a7:45:fc:4c:91:db:88:66:bc:d9:7e:40:d0:f4: f8:da:f1:09:93:00:fb:09:84:93:28:57:ae:a5:34: 48:5c:98:a1:7b:0e:e1:46:6c:68:a2:bd:90:d0:b6: 6c:ee:d5:d7:c3:1e:ac:f8:97:15:70:18:3b:a6:8b: 4e:ee:a2:8c:ae:ac:05:a4:fc:45:7b:3d:ec:ed:24: 62:c0:26:86:37:f9:7d:25:5a:33:c3:be:78:44:9e: ec:aa:8f:be:c0:b5:a8:6e:a9:34:cf:33:1b:51:74: ae:47:46:1f:c2:50:78:04:21:d0:70:c8:8f:ef:96: 8f:0c:45:8c:a7:76:1e:47:9a:ae:0b:20:90:bc:f3: b1:0d:5b:cd:c5:df:8f:94:2a:ae:eb:2c:44:e5:44: c1:df:66:d7:18:cd:97:7f:4f:87:a1:eb:d6:e3:8e: 4e:07:3b:48:b5:f3:42:80:e3:07:99:51:21:48:16: 73:70:cf:39:e9:fd:0a:90:e7:81:0e:4f:65:bc:bb: 08:69:fd:c2:55:c1:b1:7e:2e:7c:06:9f:fb:73:71: 41:08:43:06:05:c3:fb:7f:52:cb:43:00:dd:63:d7: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2604:1d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401927 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c6:16:28:5c:21:b4:68:8d:fc:b3:6d:23:e8:29:bf:df:b8: 90:36:01:55:22:60:4b:86:5a:a9:c5:c0:5f:b3:22:7d:c8:45: ed:40:91:95:19:3f:aa:18:44:90:8d:97:19:65:a0:b6:9a:26: ff:a5:27:8c:c3:59:02:c0:31:71:7e:24:aa:1b:07:4d:af:04: 2c:0e:4c:2e:b0:b1:03:1a:74:1d:fa:09:34:5c:ef:4b:60:dd: 8d:89:38:1e:21:58:73:9e:ba:82:ee:88:cd:95:bb:3a:fc:27: 5f:b4:40:52:21:94:d2:61:8b:39:92:3b:f2:47:ee:6f:b1:f1: 3d:80:f4:6e:7f:83:52:4a:bb:a2:72:a3:a9:69:5e:d0:cd:8e: f0:b1:35:cf:c2:05:db:69:3f:90:fd:3a:ab:6b:d5:59:ba:83: fe:92:26:bc:07:f8:e2:b3:78:a0:f1:4d:e0:03:48:42:30:74: 94:fc:26:74:96:a5:62:0f:c1:01:08:f3:7a:62:3e:77:8a:77: 2e:ca:0f:02:9b:49:f3:17:f9:90:c7:ad:95:c2:97:74:57:ef: 7a:b1:41:b4:fd:0c:47:19:83:23:1f:75:8e:cd:f5:72:2f:a0: ce:d6:44:53:cb:68:77:79:3e:8f:36:54:0b:4d:43:34:ac:9e: 8a:ae:13:2f -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEruuiS1UyB3cJ9Ww4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyMTE3NTgxMloXDTI3MTEyNDE4NTgxMlowLzEtMCsGA1UEAxMk M2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcku+fkQaO0HM53Db5UNj+bIOBdP+VjzVf6P mO3qp0X8TJHbiGa82X5A0PT42vEJkwD7CYSTKFeupTRIXJihew7hRmxoor2Q0LZs 7tXXwx6s+JcVcBg7potO7qKMrqwFpPxFez3s7SRiwCaGN/l9JVozw754RJ7sqo++ wLWobqk0zzMbUXSuR0YfwlB4BCHQcMiP75aPDEWMp3YeR5quCyCQvPOxDVvNxd+P lCqu6yxE5UTB32bXGM2Xf0+HoevW445OBztItfNCgOMHmVEhSBZzcM856f0KkOeB Dk9lvLsIaf3CVcGxfi58Bp/7c3FBCEMGBcP7f1LLQwDdY9dl4QIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFGyzNSItudws05hi8U0iaDQa3CseMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z ZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzNkMTdjMDE3LTMwYjUtNDQ0YS1h YTMwLTA0OGNjMzA5NzFlMy8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMw OTcxZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBB0gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYiBzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA5xhYoXCG0aI38s20j6Cm/37iQNgFVImBLhlqpxcBfsyJ9 yEXtQJGVGT+qGESQjZcZZaC2mib/pSeMw1kCwDFxfiSqGwdNrwQsDkwusLEDGnQd +gk0XO9LYN2NiTgeIVhznrqC7ojNlbs6/CdftEBSIZTSYYs5kjvyR+5vsfE9gPRu f4NSSruicqOpaV7QzY7wsTXPwgXbaT+Q/Tqra9VZuoP+kia8B/jis3ig8U3gA0hC MHSU/CZ0lqViD8EBCPN6Yj53incuyg8Cm0nzF/mQx62Vwpd0V+96sUG0/QxHGYMj H3WOzfVyL6DO1kRTy2h3eT6PNlQLTUM0rJ6KrhMv -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:49 2025 by rpki-client