$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.cer File: 7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.cer (raw, json) Hash identifier: W+WvtDSntP5QcaZEiB+sHf11NoeRphOFyLkCO8YUX2U= Subject key identifier: F2:2F:C8:DF:36:28:9E:BF:37:31:16:AA:E7:5D:1B:1A:85:39:DB:A6 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AD18FCDB478C5F47AF56A2AF8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Aug 2025 07:14:27 +0000 Certificate not after: Sun 14 Nov 2027 08:14:27 +0000 Subordinate resources: IP: 204.77.128.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d1:8f:cd:b4:78:c5:f4:7a:f5:6a:2a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 11 07:14:27 2025 GMT Not After : Nov 14 08:14:27 2027 GMT Subject: CN=7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:c5:03:89:ee:78:77:d1:4f:85:5e:cd:76: 2f:92:5e:e7:68:de:c6:17:02:19:72:34:52:bd:a0: 0d:af:f8:22:7f:6a:d3:57:f7:b9:b9:58:7c:93:4b: b7:84:b5:27:c2:0b:bc:30:69:2e:ce:71:19:17:b9: b9:34:43:bc:92:ba:6b:1d:83:22:68:f8:b3:02:8e: 69:5f:3b:de:07:42:2d:e1:6a:9b:6b:66:a0:58:16: 46:99:77:87:d4:79:6f:05:4d:43:7e:74:db:ca:5f: 3b:82:f0:92:9f:79:bf:2b:12:5c:82:be:fd:52:e0: 15:f1:61:9a:07:ff:5b:09:a1:d5:08:f4:dd:e9:85: 26:c3:f6:7a:58:a8:e1:90:3b:37:16:50:25:aa:5d: b5:92:f4:a3:d5:6f:2f:12:88:25:f4:06:63:3b:3b: dd:62:63:79:76:3e:4c:dc:66:aa:2b:21:ea:74:cf: d2:60:a6:a9:40:2a:cf:ea:78:39:86:65:5b:1d:b2: 35:69:bf:90:35:1a:23:3f:3a:f2:ba:20:0d:1e:4d: 8a:e1:f1:34:79:a7:a6:0f:52:64:22:16:f9:57:16: 5d:9a:71:4e:89:98:75:1b:c3:91:ed:3f:8e:81:7c: ed:bc:f4:80:cf:05:4c:9b:c4:2e:25:18:0b:b3:1d: 03:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2F:C8:DF:36:28:9E:BF:37:31:16:AA:E7:5D:1B:1A:85:39:DB:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c1:b9:b4:1f:5a:a2:5b:4b:c2:20:6d:f9:91:08:49:cf:16: 13:11:69:3f:01:8d:c2:32:83:87:4a:0c:c1:78:84:f4:6e:ef: 85:dc:44:14:ef:14:35:c6:a8:d5:71:38:a5:e7:b7:87:0a:12: 29:96:54:33:52:f2:c4:65:47:fe:a5:e3:09:3c:71:e9:64:22: a9:ef:04:4a:b6:72:7d:a5:32:9e:bd:ee:75:69:8e:0c:1d:45: 48:f0:32:96:b9:21:c2:ed:1a:71:a5:4a:ae:a0:73:fc:a6:b5: 73:d7:88:9d:7f:e2:30:29:7a:1f:45:ec:1a:11:6e:fc:12:6f: 9d:fa:72:73:87:3e:48:89:e8:17:8d:fd:04:d4:e7:ee:ae:99: a9:b8:55:ea:ec:c6:cf:06:15:46:e3:57:f8:62:e9:35:67:4b: b0:d8:d1:aa:f8:1f:cb:56:77:89:58:06:d5:7c:92:e2:73:6f: ad:0a:72:ef:0c:24:b7:8b:35:53:fd:b0:f6:ae:e7:25:9b:c4: b1:78:73:dd:ac:ec:5f:d4:7a:8b:1c:23:91:75:a0:d2:dd:62: 5a:e0:d1:f5:15:c8:3c:8b:5f:ec:09:7f:01:bf:47:09:c7:ae: 78:fc:67:11:87:9d:20:2e:2b:57:00:f5:64:1b:e0:70:ae:27: 05:cd:27:f7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErRj820eMX0evVqKvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxMTA3MTQyN1oXDTI3MTExNDA4MTQyN1owLzEtMCsGA1UEAxMk N2VhYmEyYmItODE0Mi00YTNhLThjYjctZjNkZmUzNGI0NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhbFA4nueHfRT4VezXYvkl7naN7GFwIZcjRS vaANr/gif2rTV/e5uVh8k0u3hLUnwgu8MGkuznEZF7m5NEO8krprHYMiaPizAo5p XzveB0It4Wqba2agWBZGmXeH1HlvBU1DfnTbyl87gvCSn3m/KxJcgr79UuAV8WGa B/9bCaHVCPTd6YUmw/Z6WKjhkDs3FlAlql21kvSj1W8vEogl9AZjOzvdYmN5dj5M 3GaqKyHqdM/SYKapQCrP6ng5hmVbHbI1ab+QNRojPzryuiANHk2K4fE0eaemD1Jk Ihb5VxZdmnFOiZh1G8OR7T+OgXztvPSAzwVMm8QuJRgLsx0DHwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPIvyN82KJ6/NzEWquddGxqFOdumMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 ZWFiYTJiYi04MTQyLTRhM2EtOGNiNy1mM2RmZTM0YjQ0MmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdlYWJhMmJiLTgxNDItNGEzYS04 Y2I3LWYzZGZlMzRiNDQyYi83ZWFiYTJiYi04MTQyLTRhM2EtOGNiNy1mM2RmZTM0 YjQ0MmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALMTYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlsG5tB9aoltLwiBt+ZEI Sc8WExFpPwGNwjKDh0oMwXiE9G7vhdxEFO8UNcao1XE4pee3hwoSKZZUM1LyxGVH /qXjCTxx6WQiqe8ESrZyfaUynr3udWmODB1FSPAylrkhwu0acaVKrqBz/Ka1c9eI nX/iMCl6H0XsGhFu/BJvnfpyc4c+SInoF439BNTn7q6ZqbhV6uzGzwYVRuNX+GLp NWdLsNjRqvgfy1Z3iVgG1XyS4nNvrQpy7wwkt4s1U/2w9q7nJZvEsXhz3azsX9R6 ixwjkXWg0t1iWuDR9RXIPItf7Al/Ab9HCceuePxnEYedIC4rVwD1ZBvgcK4nBc0n 9w== -----END CERTIFICATE-----Generated at Sat Aug 23 14:16:15 2025 by rpki-client