$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.cer File: a217c0af-ef15-44e5-b0e5-ba4ada5f4765.cer (raw, json) Hash identifier: Wg3cGAIA4RcpvqO6MbF8N3NQ5dgzDdaBxzjcSpaTVFA= Subject key identifier: 5F:33:7D:6F:58:52:0A:04:36:33:95:53:BB:AA:BB:FB:CB:D8:D7:7A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ADBA6317D9B0B7C1D202BC880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 21:57:39 +0000 Certificate not after: Wed 17 Nov 2027 22:57:39 +0000 Subordinate resources: AS: 53780 IP: 199.187.164.0/22 IP: 2620:125:7000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:a6:31:7d:9b:0b:7c:1d:20:2b:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 14 21:57:39 2025 GMT Not After : Nov 17 22:57:39 2027 GMT Subject: CN=a217c0af-ef15-44e5-b0e5-ba4ada5f4765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:c3:79:97:a8:f8:3d:ee:ca:9d:10:07:02:df: 36:20:e7:53:8d:98:a9:d7:07:15:83:9d:a5:fa:99: 31:98:82:f7:3e:78:7e:a2:00:04:95:76:0b:4c:32: 69:de:26:5b:b1:f4:e8:95:3b:fd:c5:9e:4d:88:43: 1e:56:3e:ed:19:b6:0d:c7:f6:0b:7f:c5:2b:39:0e: 46:f0:5e:c1:b8:73:df:5c:e2:12:5b:d0:97:e0:bf: 03:e6:d1:6f:fb:2c:7e:75:95:b8:d1:f2:df:cf:6c: 5c:a2:6f:f3:c1:da:42:7e:a5:1f:78:1f:10:f2:80: 2b:49:c4:c8:c8:0b:d4:f5:a7:ec:16:94:2c:0e:33: 42:09:fd:78:34:8a:93:50:80:f6:01:54:1f:b6:6d: b5:db:36:64:fa:1b:87:f3:e1:88:50:09:f9:ef:74: 66:57:43:e2:0c:59:81:8e:24:e3:bd:b8:9c:1e:f5: 97:c9:46:b1:5c:b1:7f:ad:a2:22:0c:a0:6d:42:ff: ea:8d:d8:a8:24:75:67:ad:06:10:de:b9:06:c0:d3: 32:d3:19:22:3c:fc:18:44:7b:18:83:ca:46:0d:e4: 7e:19:df:ef:e8:18:dc:cb:c3:6a:51:44:5f:56:af: 1e:52:5f:92:2d:66:96:68:d2:31:cc:9f:25:2d:23: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:33:7D:6F:58:52:0A:04:36:33:95:53:BB:AA:BB:FB:CB:D8:D7:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a217c0af-ef15-44e5-b0e5-ba4ada5f4765/a217c0af-ef15-44e5-b0e5-ba4ada5f4765.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 199.187.164.0/22 IPv6: 2620:125:7000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53780 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9a:32:78:83:d1:fe:b0:26:4d:0f:fd:ba:7f:3e:c3:a6:67: b1:7c:da:92:e5:c4:83:08:f2:e7:8d:5e:0b:fb:b7:92:9f:90: 25:af:b1:04:8e:48:ae:a0:f4:7c:3a:44:31:66:ea:63:26:6f: a0:6b:e5:69:94:0b:86:4c:a7:d9:64:1b:c3:57:4c:ef:4c:54: 0b:81:19:5d:13:06:69:b7:2f:cc:59:b8:e1:61:4d:ab:ae:69: 05:1f:b2:42:70:a2:ca:63:b7:19:26:47:b5:1b:c2:9b:19:08: 0e:32:09:63:7e:77:1f:23:05:f7:a2:ce:dd:b2:e0:e9:50:5d: 1a:ca:74:b0:ed:d0:c4:d5:97:e4:ba:82:ec:1c:f4:95:75:c9: ad:61:c6:14:c3:69:71:b7:52:d1:74:d7:51:a8:ad:2a:b5:c8: ca:d2:a0:2b:2f:50:a4:16:0c:2c:cd:30:f9:a6:02:ff:f4:50: 23:9e:2b:82:73:e2:bf:c0:f9:33:17:fd:ba:e8:26:00:f5:bc: 72:2a:ab:7f:1e:94:78:69:17:5e:7d:32:0f:60:26:31:d8:e9: de:2b:48:f7:7f:70:8b:57:bc:53:ed:a8:69:19:b8:d7:88:03: f9:3f:0e:7f:bb:27:13:af:f0:ca:35:21:15:c4:48:ae:a5:22: f5:41:ab:db -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErbpjF9mwt8HSAryIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxNDIxNTczOVoXDTI3MTExNzIyNTczOVowLzEtMCsGA1UEAxMk YTIxN2MwYWYtZWYxNS00NGU1LWIwZTUtYmE0YWRhNWY0NzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/MN5l6j4Pe7KnRAHAt82IOdTjZip1wcVg52l +pkxmIL3Pnh+ogAElXYLTDJp3iZbsfTolTv9xZ5NiEMeVj7tGbYNx/YLf8UrOQ5G 8F7BuHPfXOISW9CX4L8D5tFv+yx+dZW40fLfz2xcom/zwdpCfqUfeB8Q8oArScTI yAvU9afsFpQsDjNCCf14NIqTUID2AVQftm212zZk+huH8+GIUAn573RmV0PiDFmB jiTjvbicHvWXyUaxXLF/raIiDKBtQv/qjdioJHVnrQYQ3rkGwNMy0xkiPPwYRHsY g8pGDeR+Gd/v6Bjcy8NqUURfVq8eUl+SLWaWaNIxzJ8lLSNQlQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFF8zfW9YUgoENjOVU7uqu/vL2Nd6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h MjE3YzBhZi1lZjE1LTQ0ZTUtYjBlNS1iYTRhZGE1ZjQ3NjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2EyMTdjMGFmLWVmMTUtNDRlNS1i MGU1LWJhNGFkYTVmNDc2NS9hMjE3YzBhZi1lZjE1LTQ0ZTUtYjBlNS1iYTRhZGE1 ZjQ3NjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHu6QwDgQCAAIwCAMGACYgASVwMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDSFDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlmjJ4g9H+sCZND/26fz7Dpmex fNqS5cSDCPLnjV4L+7eSn5Alr7EEjkiuoPR8OkQxZupjJm+ga+VplAuGTKfZZBvD V0zvTFQLgRldEwZpty/MWbjhYU2rrmkFH7JCcKLKY7cZJke1G8KbGQgOMgljfncf IwX3os7dsuDpUF0aynSw7dDE1ZfkuoLsHPSVdcmtYcYUw2lxt1LRdNdRqK0qtcjK 0qArL1CkFgwszTD5pgL/9FAjniuCc+K/wPkzF/266CYA9bxyKqt/HpR4aRdefTIP YCYx2OneK0j3f3CLV7xT7ahpGbjXiAP5Pw5/uycTr/DKNSEVxEiupSL1Qavb -----END CERTIFICATE-----Generated at Sat Aug 23 20:17:17 2025 by rpki-client