$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer File: cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer (raw, json) Hash identifier: zQTwc0oPkvQnsg2C+X8zVv/+0dSkHJNUitZOTc1C69U= Subject key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC5047FEA3EC11A1D1E387C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 19:24:04 +0000 Certificate not after: Tue 09 Nov 2027 20:24:04 +0000 Subordinate resources: AS: 15334 AS: 16474 AS: 21621 IP: 162.223.232.0/21 IP: 199.7.200.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:04:7f:ea:3e:c1:1a:1d:1e:38:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 6 19:24:04 2025 GMT Not After : Nov 9 20:24:04 2027 GMT Subject: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:91:6a:88:8f:a9:63:e1:c9:04:bb:f9:42: f0:05:a8:ba:d2:bd:7f:2a:b1:fb:16:42:ba:ec:aa: ea:a9:7d:3b:f1:da:84:42:56:41:48:a4:55:66:14: 39:69:29:ef:18:f7:9a:86:6d:0d:08:aa:e1:c1:d0: 63:99:7a:b1:91:45:19:bc:13:46:48:fa:00:d7:fd: 9a:7b:1a:d8:01:1f:e5:5b:1c:bb:50:cd:50:7e:e9: ec:35:66:fe:42:eb:25:cd:20:14:b1:3b:3f:ed:8c: be:ff:74:74:e5:8b:04:cd:16:32:ae:31:7f:99:3d: f9:9b:82:d3:bd:85:aa:12:c0:a6:4e:5f:b8:86:b8: ce:2d:89:44:8e:1a:4b:d2:57:e4:97:c9:87:e1:1f: 28:4f:8e:fe:ef:ac:f7:e6:a9:fc:ed:e8:9a:40:d6: 18:a9:fb:ec:86:9b:06:ad:95:df:f4:ae:c3:fd:03: 43:d4:a5:01:bc:21:d5:6d:f6:99:f1:d1:b7:b6:53: 8a:e3:21:5c:17:87:6b:ae:8c:e5:3b:8e:46:5f:3c: 85:3c:21:b9:1b:2f:b0:31:4b:19:85:7f:47:7e:7a: 6e:e2:98:8b:20:13:ea:be:2e:78:cb:64:89:3d:a8: f7:d8:7f:4f:a8:9c:eb:7f:8f:ae:21:0e:09:8c:80: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 162.223.232.0/21 199.7.200.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15334 16474 21621 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e5:0d:a4:f4:82:ac:91:21:16:c3:f7:53:aa:72:e1:d9:38: 5d:34:00:a5:23:6f:51:6d:97:fc:09:7e:f2:43:7a:74:a9:e9: 35:1f:ed:82:73:0b:33:3c:2b:dd:fc:32:04:23:31:79:e6:42: 90:28:72:86:51:8f:e3:ef:70:8b:a3:3b:3a:f4:35:f3:b4:fb: 6f:f9:0e:21:69:86:ed:f2:db:0d:31:f6:f9:7b:1a:fa:29:bd: a5:58:aa:4b:d3:16:a6:c4:16:27:01:2c:b4:b5:fc:52:d5:30: 0a:4a:ca:44:9d:f9:e7:c2:a6:fe:a1:36:b4:14:da:f6:53:10: e2:a7:b5:4f:f9:e5:51:da:80:76:30:15:ce:3f:6c:69:07:56: 01:be:c8:31:41:b7:2a:e6:e6:0c:4b:b8:98:a6:51:db:41:47: 25:4f:4d:d4:15:18:3d:32:3f:d5:fc:b9:37:4a:0f:14:b8:70: 55:de:96:b2:e5:51:72:9a:5e:ed:b2:d6:cb:58:53:0d:2a:71: bb:ca:77:11:c8:e9:32:d1:1e:51:70:cc:cf:9c:bd:75:dc:4d: 17:fd:0c:3a:5c:83:2c:be:21:ee:0a:4c:a7:ea:09:dc:a7:5d: 7a:55:7c:00:ed:d9:ab:89:e1:39:a1:dc:1b:4c:2f:97:b1:d6: 4d:70:76:91 -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWErFBH/qPsEaHR44fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNjE5MjQwNFoXDTI3MTEwOTIwMjQwNFowLzEtMCsGA1UEAxMk Y2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZkNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTaRaoiPqWPhyQS7+ULwBai60r1/KrH7FkK6 7KrqqX078dqEQlZBSKRVZhQ5aSnvGPeahm0NCKrhwdBjmXqxkUUZvBNGSPoA1/2a exrYAR/lWxy7UM1QfunsNWb+QuslzSAUsTs/7Yy+/3R05YsEzRYyrjF/mT35m4LT vYWqEsCmTl+4hrjOLYlEjhpL0lfkl8mH4R8oT47+76z35qn87eiaQNYYqfvshpsG rZXf9K7D/QND1KUBvCHVbfaZ8dG3tlOK4yFcF4drrozlO45GXzyFPCG5Gy+wMUsZ hX9Hfnpu4piLIBPqvi54y2SJPaj32H9PqJzrf4+uIQ4JjIB8MQIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFBKPg/O2UNLlH11CAqBV1rIUz6zHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j YjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NiMGU0ZTdlLTJjNzUtNDU0MS04 ZDY3LWVkMjU0M2FmZDVmMy9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNh ZmQ1ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAOi3+gDBAPHB8gwIQYIKwYBBQUHAQgBAf8EEjAQ oA4wDAICO+YCAkBaAgJUdTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA45Q2k9IKskSEWw/dTqnLh2ThdNACl I29RbZf8CX7yQ3p0qek1H+2CcwszPCvd/DIEIzF55kKQKHKGUY/j73CLozs69DXz tPtv+Q4haYbt8tsNMfb5exr6Kb2lWKpL0xamxBYnASy0tfxS1TAKSspEnfnnwqb+ oTa0FNr2UxDip7VP+eVR2oB2MBXOP2xpB1YBvsgxQbcq5uYMS7iYplHbQUclT03U FRg9Mj/V/Lk3Sg8UuHBV3pay5VFyml7tstbLWFMNKnG7yncRyOky0R5RcMzPnL11 3E0X/Qw6XIMsviHuCkyn6gncp116VXwA7dmrieE5odwbTC+XsdZNcHaR -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:32 2025 by rpki-client