$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer File: cf1b758d-53cd-4b34-8f1e-86f4156d959a.cer (raw, json) Hash identifier: dyMDkeRvleO980EiS6slr+1CCGTSJc3lh1EhJ+bS/Dk= Subject key identifier: B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AEB98FFCD9FA6EDE7C20574F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Aug 2025 15:04:00 +0000 Certificate not after: Tue 23 Nov 2027 16:04:00 +0000 Subordinate resources: AS: 399928 IP: 167.234.80.0/20 IP: 2604:7a0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:98:ff:cd:9f:a6:ed:e7:c2:05:74:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 20 15:04:00 2025 GMT Not After : Nov 23 16:04:00 2027 GMT Subject: CN=cf1b758d-53cd-4b34-8f1e-86f4156d959a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:83:ca:28:a5:7c:20:ab:9e:01:51:2a:23: 4b:d3:87:bd:12:e8:53:9d:27:d0:4e:f3:14:61:e4: d3:a5:7a:e2:ae:6b:a5:01:cf:7f:42:bf:24:f5:02: e1:5c:68:99:8b:74:02:a5:4b:75:19:39:e2:23:77: 50:5a:58:83:27:3f:61:83:3c:23:df:be:a4:8b:cc: ea:89:14:cd:3b:2a:1e:2c:59:fb:eb:3d:72:a0:a3: 5b:33:d6:21:78:4b:13:c9:44:2e:20:a5:40:97:14: cf:e9:3f:07:a4:28:2d:d5:f5:15:5f:7c:36:a7:63: bf:99:fe:4b:05:ae:0d:bd:d9:86:fe:34:bc:2d:b8: 18:b9:b1:ef:30:d3:a5:1b:a9:8d:67:e0:e2:59:71: 80:c2:b5:63:1f:96:de:d8:d3:3f:d4:4d:7a:16:69: 8f:82:38:21:4d:c1:31:70:be:13:37:b3:d3:0c:c9: ef:13:22:3a:6d:61:c3:d1:02:08:6c:c3:58:e9:70: 0d:e2:45:23:cd:07:75:81:2a:d7:ee:b4:6b:41:6b: 2c:52:9d:21:83:12:fa:3e:22:e9:29:3c:3a:86:82: 5b:1f:2f:8c:cf:0c:ce:5d:d7:61:b7:5c:85:62:54: 8c:05:cc:a6:22:80:62:8d:22:92:e6:c3:27:08:1e: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:55:E2:75:50:CD:19:41:A0:96:47:44:29:A2:9D:B9:1A:F7:81:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf1b758d-53cd-4b34-8f1e-86f4156d959a/cf1b758d-53cd-4b34-8f1e-86f4156d959a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 167.234.80.0/20 IPv6: 2604:7a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399928 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4c:78:7c:ca:c1:53:5d:d4:9b:d9:88:b2:ea:2c:0c:fe:a9: 4e:b8:a1:36:25:09:6b:7e:ae:00:7d:0a:a5:41:a4:5d:ec:41: d4:e9:b9:b0:ef:a1:fb:3c:8b:59:7d:a3:ce:c5:a7:c4:ce:5a: a9:7b:04:9a:b4:9a:a5:54:58:be:c0:2b:51:37:c2:08:c3:92: 2d:f9:2a:66:03:04:a2:51:76:98:4e:c3:8c:d8:21:48:de:49: cb:7f:c0:de:f5:db:43:67:9e:9e:42:ce:b1:b8:c5:c7:0d:7b: 36:cf:04:ed:91:7a:10:6b:e9:b1:7b:4e:a7:4d:ac:83:1f:bc: 45:c3:cb:1c:6b:80:60:b8:71:33:7a:f9:56:58:ab:b5:c7:4c: d1:68:3b:ca:9d:dd:e4:32:68:f9:97:e5:74:b4:d9:15:eb:c6: a5:a4:ce:fc:2a:55:83:d0:a4:3e:f2:4a:b7:1a:5e:4a:b9:3d: 05:ed:04:28:81:cb:fe:eb:de:80:d1:9f:b0:55:36:71:38:41: bf:56:fa:ee:92:de:d1:12:c6:e0:db:be:12:df:11:31:fa:32: ea:47:b3:e6:98:9c:25:0d:48:7f:41:09:f7:75:65:0d:78:12: 17:41:c1:f2:23:dc:1a:f9:27:85:f8:a3:4c:52:99:20:21:6d: 0c:ed:bf:a3 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWErrmP/Nn6bt58IFdPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyMDE1MDQwMFoXDTI3MTEyMzE2MDQwMFowLzEtMCsGA1UEAxMk Y2YxYjc1OGQtNTNjZC00YjM0LThmMWUtODZmNDE1NmQ5NTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj6DyiilfCCrngFRKiNL04e9EuhTnSfQTvMU YeTTpXrirmulAc9/Qr8k9QLhXGiZi3QCpUt1GTniI3dQWliDJz9hgzwj376ki8zq iRTNOyoeLFn76z1yoKNbM9YheEsTyUQuIKVAlxTP6T8HpCgt1fUVX3w2p2O/mf5L Ba4NvdmG/jS8LbgYubHvMNOlG6mNZ+DiWXGAwrVjH5be2NM/1E16FmmPgjghTcEx cL4TN7PTDMnvEyI6bWHD0QIIbMNY6XAN4kUjzQd1gSrX7rRrQWssUp0hgxL6PiLp KTw6hoJbHy+MzwzOXddht1yFYlSMBcymIoBijSKS5sMnCB5ETwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLVV4nVQzRlBoJZHRCminbka94EYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j ZjFiNzU4ZC01M2NkLTRiMzQtOGYxZS04NmY0MTU2ZDk1OWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NmMWI3NThkLTUzY2QtNGIzNC04 ZjFlLTg2ZjQxNTZkOTU5YS9jZjFiNzU4ZC01M2NkLTRiMzQtOGYxZS04NmY0MTU2 ZDk1OWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBASn6lAwDQQCAAIwBwMFACYEB6AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBho4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA9MeHzKwVNd1JvZiLLqLAz+qU64 oTYlCWt+rgB9CqVBpF3sQdTpubDvofs8i1l9o87Fp8TOWql7BJq0mqVUWL7AK1E3 wgjDki35KmYDBKJRdphOw4zYIUjeSct/wN7120Nnnp5CzrG4xccNezbPBO2RehBr 6bF7TqdNrIMfvEXDyxxrgGC4cTN6+VZYq7XHTNFoO8qd3eQyaPmX5XS02RXrxqWk zvwqVYPQpD7ySrcaXkq5PQXtBCiBy/7r3oDRn7BVNnE4Qb9W+u6S3tESxuDbvhLf ETH6MupHs+aYnCUNSH9BCfd1ZQ14EhdBwfIj3Br5J4X4o0xSmSAhbQztv6M= -----END CERTIFICATE-----Generated at Sat Aug 23 13:41:11 2025 by rpki-client