$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b.cer File: a01694e6-82f3-4f1f-9e78-52d23a92940b.cer (raw, json) Hash identifier: ILTIRU0aBmyMpsqHE5bqgHnVd+PxTM30at76GCGY6fg= Subject key identifier: EA:3C:CA:00:A4:99:68:E6:5A:B3:CA:BA:B9:DE:9F:16:8E:6B:CF:2F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AD3112156323999DC3AFD7D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/a01694e6-82f3-4f1f-9e78-52d23a92940b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Aug 2025 20:10:50 +0000 Certificate not after: Sun 14 Nov 2027 21:10:50 +0000 Subordinate resources: AS: 11257 IP: 2620:11e:d000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:11:21:56:32:39:99:dc:3a:fd:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 11 20:10:50 2025 GMT Not After : Nov 14 21:10:50 2027 GMT Subject: CN=a01694e6-82f3-4f1f-9e78-52d23a92940b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3b:bc:76:d5:8f:24:08:c2:32:62:58:e3:93: 3a:85:65:e6:00:0e:8a:04:f6:09:13:a5:bc:97:a3: 34:62:fd:9e:fa:f6:a2:ed:9c:a1:e7:e2:e9:86:ea: 59:9c:1a:a3:fe:43:5a:ad:d1:cc:54:48:83:6a:9c: 34:ae:bf:52:16:9e:1e:de:0e:06:67:a3:aa:d2:94: 42:2d:5a:4a:df:fd:ed:38:89:ec:24:59:58:d0:d0: da:36:8b:49:9d:e9:a5:fa:e8:0a:b2:dd:e3:02:36: a7:0c:2d:2e:fd:cb:fc:0f:89:25:8f:4b:26:b7:52: c8:2d:cc:4e:92:68:60:5c:33:24:d7:8d:9c:cb:97: 99:31:ac:59:0d:a0:01:91:ec:82:f5:6f:bd:20:06: 02:94:ae:b6:9c:67:40:93:85:f2:b1:55:1f:4d:98: 18:27:75:d2:c4:e4:ef:d6:12:4f:c3:df:52:06:70: 85:b6:7e:f0:f5:d8:1d:5b:0a:b8:05:b4:08:d9:dc: 17:98:54:b4:40:84:06:8a:38:9d:32:5f:78:39:f2: 6e:3b:30:3d:34:f4:84:3f:95:7c:1d:15:53:b7:a6: 07:b4:8b:4d:c3:cd:ae:1b:d4:fd:cc:a0:63:8f:b0: fa:b3:d5:d4:9d:8d:97:9c:89:ff:6c:7c:7b:6a:00: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3C:CA:00:A4:99:68:E6:5A:B3:CA:BA:B9:DE:9F:16:8E:6B:CF:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a01694e6-82f3-4f1f-9e78-52d23a92940b/a01694e6-82f3-4f1f-9e78-52d23a92940b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2620:11e:d000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11257 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d0:31:54:2d:08:54:f4:3d:5b:1d:20:78:bc:16:75:f5:ac: a8:5c:c8:de:8a:92:c6:03:e2:01:10:75:de:64:3e:1c:1f:f7: cc:7c:65:40:48:77:d7:c3:07:54:af:01:4f:fe:0e:6c:c1:3e: 25:75:69:b5:f7:f1:28:0d:57:85:42:2f:59:52:d8:90:32:fd: 1d:e2:40:07:bf:b7:eb:12:6b:0d:05:32:98:0a:d3:c1:82:41: 61:89:f6:12:02:e4:3c:a3:ed:87:8f:38:59:bd:65:84:17:2a: 89:4c:5a:79:36:25:13:9a:24:03:46:f9:34:19:a2:25:3e:a8: 9b:88:b1:a5:90:5d:0f:87:a5:3d:75:41:cd:46:a7:82:9c:82: 73:36:3e:f7:f6:65:9a:22:92:7d:b9:94:ed:ee:c0:bc:e5:25: f0:dc:36:2c:8e:69:4e:46:f9:4c:20:46:f6:23:ed:48:48:60: b0:3e:5c:55:e3:3a:42:99:29:92:d7:fd:43:43:32:67:0e:75: 38:02:a8:b3:f2:a2:6d:23:70:85:79:7c:2d:de:1e:5b:6e:38: d3:66:1f:a0:58:c9:03:f9:5c:4e:29:47:3a:a7:34:82:13:44: 27:d8:e0:64:93:8d:69:87:2f:ab:fb:cd:5a:63:96:65:33:21: 55:e4:6d:ee -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWErTESFWMjmZ3Dr9fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxMTIwMTA1MFoXDTI3MTExNDIxMTA1MFowLzEtMCsGA1UEAxMk YTAxNjk0ZTYtODJmMy00ZjFmLTllNzgtNTJkMjNhOTI5NDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDu8dtWPJAjCMmJY45M6hWXmAA6KBPYJE6W8 l6M0Yv2e+vai7Zyh5+LphupZnBqj/kNardHMVEiDapw0rr9SFp4e3g4GZ6Oq0pRC LVpK3/3tOInsJFlY0NDaNotJneml+ugKst3jAjanDC0u/cv8D4klj0smt1LILcxO kmhgXDMk142cy5eZMaxZDaABkeyC9W+9IAYClK62nGdAk4XysVUfTZgYJ3XSxOTv 1hJPw99SBnCFtn7w9dgdWwq4BbQI2dwXmFS0QIQGijidMl94OfJuOzA9NPSEP5V8 HRVTt6YHtItNw82uG9T9zKBjj7D6s9XUnY2XnIn/bHx7agCElQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFOo8ygCkmWjmWrPKurnenxaOa88vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h MDE2OTRlNi04MmYzLTRmMWYtOWU3OC01MmQyM2E5Mjk0MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2EwMTY5NGU2LTgyZjMtNGYxZi05 ZTc4LTUyZDIzYTkyOTQwYi9hMDE2OTRlNi04MmYzLTRmMWYtOWU3OC01MmQyM2E5 Mjk0MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIAEe0AAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICK/kwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAn9AxVC0IVPQ9Wx0geLwWdfWsqFzI3oqSxgPiARB13mQ+ HB/3zHxlQEh318MHVK8BT/4ObME+JXVptffxKA1XhUIvWVLYkDL9HeJAB7+36xJr DQUymArTwYJBYYn2EgLkPKPth484Wb1lhBcqiUxaeTYlE5okA0b5NBmiJT6om4ix pZBdD4elPXVBzUangpyCczY+9/ZlmiKSfbmU7e7AvOUl8Nw2LI5pTkb5TCBG9iPt SEhgsD5cVeM6Qpkpktf9Q0MyZw51OAKos/KibSNwhXl8Ld4eW24402YfoFjJA/lc TilHOqc0ghNEJ9jgZJONaYcvq/vNWmOWZTMhVeRt7g== -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:48 2025 by rpki-client