$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer File: ac31201d-d18d-4a22-837e-aa1c05197e8b.cer (raw, json) Hash identifier: Ug0sivj/NOTlcs5lzQEvRZZKt8VN5+DrIRXjNCGA0iA= Subject key identifier: A3:28:A4:0E:AE:B3:94:DA:E4:56:60:96:36:DD:55:87:AE:00:5A:A5 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC4F1E672461F63E272F61500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 18:46:36 +0000 Certificate not after: Tue 09 Nov 2027 19:46:36 +0000 Subordinate resources: IP: 207.210.115.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:f1:e6:72:46:1f:63:e2:72:f6:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 6 18:46:36 2025 GMT Not After : Nov 9 19:46:36 2027 GMT Subject: CN=ac31201d-d18d-4a22-837e-aa1c05197e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:7d:1f:16:18:f0:04:ec:ab:61:f9:c6:b3: e5:ce:ed:29:e7:40:37:8f:f9:53:30:f7:ba:22:fd: 50:bf:22:85:56:7d:0c:f6:cb:27:13:c4:11:0d:e9: 60:f0:3b:27:78:92:fb:aa:b7:ba:2a:db:19:05:aa: 07:9f:ad:78:b5:b4:69:ec:0b:94:40:88:24:1c:13: e9:e4:e3:eb:7d:90:59:4e:f6:ae:c0:ba:a6:75:5f: 16:d4:49:d8:b4:98:bd:19:54:51:d4:44:c0:ee:e8: be:f2:9e:94:eb:af:b0:6d:9e:b1:1f:8a:15:5d:33: f0:2c:9f:2d:3f:e5:7c:17:ff:7c:5b:26:c6:a0:1d: f0:41:25:3b:fa:bf:c3:ad:ab:21:e0:13:a1:dd:7f: 9e:97:da:03:94:06:81:fa:14:06:c8:e4:85:8f:54: c2:c1:1d:f3:28:c7:9c:89:74:56:f2:28:32:db:de: b8:f0:57:b1:35:d8:96:93:cc:4d:30:fb:53:b7:dc: 64:0f:e1:8a:f4:54:1a:72:af:f7:83:8c:d4:30:ba: 01:67:4b:a6:4a:9e:b9:2e:5e:f5:76:ae:f9:e6:0c: e6:e2:2c:48:39:30:16:3b:69:8d:18:c3:cd:dc:cd: 08:bf:16:5c:05:22:e1:e1:92:bb:e3:46:46:29:67: 97:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:28:A4:0E:AE:B3:94:DA:E4:56:60:96:36:DD:55:87:AE:00:5A:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 207.210.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0b:51:c9:27:28:2a:da:55:a3:ee:48:d0:c7:02:d4:b4:f1: 11:70:48:bf:5e:d6:7d:14:8f:d7:11:32:64:62:a4:50:65:77: ef:e9:24:c6:a8:41:e4:c9:ef:6a:70:d9:5a:dc:30:9c:e4:f7: 99:a7:04:62:c6:de:27:b4:a1:ee:60:fe:cc:7e:24:3a:47:cc: 31:46:27:06:9b:41:e0:c7:09:9b:be:03:aa:12:ca:e4:c2:48: f5:e2:36:a6:31:b3:f4:5d:2b:d8:70:bc:f9:e7:8f:9e:4b:ce: 0a:92:72:f7:ef:3e:54:d1:69:68:03:bd:43:68:22:cc:04:14: 59:ee:e0:07:ec:f7:ab:64:08:33:84:66:b7:a9:7f:e4:81:a8: 9e:62:ac:55:ec:1d:07:39:47:7d:f4:18:4d:9d:c2:eb:bc:d8: 4e:4b:0d:4f:41:ae:f5:d7:dd:e1:95:2e:92:90:d2:3a:d5:4a: d3:e6:03:eb:95:4c:66:ba:b9:d1:65:1b:71:23:83:12:c1:0a: 28:c8:04:26:bd:1a:1e:81:b9:36:e1:b1:2f:1c:b3:53:6b:90: 43:f4:c3:da:30:fd:56:75:92:94:e2:83:62:d4:f3:9c:60:ab: 25:c8:2f:65:21:5c:d3:7f:a1:0a:27:26:b2:aa:7f:92:7e:d7: aa:d5:07:4d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErE8eZyRh9j4nL2FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNjE4NDYzNloXDTI3MTEwOTE5NDYzNlowLzEtMCsGA1UEAxMk YWMzMTIwMWQtZDE4ZC00YTIyLTgzN2UtYWExYzA1MTk3ZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQl9HxYY8ATsq2H5xrPlzu0p50A3j/lTMPe6 Iv1QvyKFVn0M9ssnE8QRDelg8DsneJL7qre6KtsZBaoHn614tbRp7AuUQIgkHBPp 5OPrfZBZTvauwLqmdV8W1EnYtJi9GVRR1ETA7ui+8p6U66+wbZ6xH4oVXTPwLJ8t P+V8F/98WybGoB3wQSU7+r/Drash4BOh3X+el9oDlAaB+hQGyOSFj1TCwR3zKMec iXRW8igy29648FexNdiWk8xNMPtTt9xkD+GK9FQacq/3g4zUMLoBZ0umSp65Ll71 dq755gzm4ixIOTAWO2mNGMPN3M0IvxZcBSLh4ZK740ZGKWeXLQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKMopA6us5Ta5FZgljbdVYeuAFqlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h YzMxMjAxZC1kMThkLTRhMjItODM3ZS1hYTFjMDUxOTdlOGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FjMzEyMDFkLWQxOGQtNGEyMi04 MzdlLWFhMWMwNTE5N2U4Yi9hYzMxMjAxZC1kMThkLTRhMjItODM3ZS1hYTFjMDUx OTdlOGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADP0nMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIgtRyScoKtpVo+5I0McC 1LTxEXBIv17WfRSP1xEyZGKkUGV37+kkxqhB5MnvanDZWtwwnOT3macEYsbeJ7Sh 7mD+zH4kOkfMMUYnBptB4McJm74DqhLK5MJI9eI2pjGz9F0r2HC8+eePnkvOCpJy 9+8+VNFpaAO9Q2gizAQUWe7gB+z3q2QIM4Rmt6l/5IGonmKsVewdBzlHffQYTZ3C 67zYTksNT0Gu9dfd4ZUukpDSOtVK0+YD65VMZrq50WUbcSODEsEKKMgEJr0aHoG5 NuGxLxyzU2uQQ/TD2jD9VnWSlOKDYtTznGCrJcgvZSFc03+hCicmsqp/kn7XqtUH TQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:42 2025 by rpki-client