$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700.cer File: d3061db8-c3a5-40b9-9ce9-735cf5f78700.cer (raw, json) Hash identifier: FJzNc0Sf9YipTKAw/n9R3G4nY2YmPe9I4JpDAueD51Q= Subject key identifier: 49:79:B2:EE:B1:D4:B2:49:DC:8B:DF:23:78:07:1D:9C:2D:09:4C:05 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AEF294A220FD3F637D63B5100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/d3061db8-c3a5-40b9-9ce9-735cf5f78700.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Aug 2025 21:42:09 +0000 Certificate not after: Wed 24 Nov 2027 22:42:09 +0000 Subordinate resources: AS: 398820 IP: 208.101.230.0/23 IP: 2602:fa44::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:29:4a:22:0f:d3:f6:37:d6:3b:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 21 21:42:09 2025 GMT Not After : Nov 24 22:42:09 2027 GMT Subject: CN=d3061db8-c3a5-40b9-9ce9-735cf5f78700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:17:90:a1:8a:0d:49:1b:9d:77:cb:a8:39:cd: 95:bd:c1:9b:c6:69:7e:8b:5f:ec:d7:3b:9d:58:f7: 6f:01:79:6f:81:9e:4f:70:c4:c8:2d:5a:5a:a0:57: 72:c0:0d:f2:53:ad:2c:bf:0c:bf:ec:c4:ab:2d:ff: 76:4a:12:62:f2:b2:46:13:66:ae:3b:18:d7:1a:01: ac:92:8f:10:c0:4c:84:c0:16:cb:47:2a:17:02:dc: 26:96:be:db:86:22:8c:f6:c7:66:53:93:a1:ae:23: bb:83:50:58:0b:a7:88:e1:d3:54:3e:97:07:97:c2: ae:d8:9f:5c:24:ad:9f:7a:74:f2:79:ba:01:b5:a1: 24:2c:fb:e9:44:a6:44:fe:a4:be:7a:e7:77:d5:86: 8b:44:17:47:32:85:bc:b8:d0:17:4a:c6:57:78:3b: d9:76:b7:ea:5d:48:9f:28:46:b4:57:50:e8:f1:02: 80:59:1c:97:98:29:4b:99:94:c1:80:4f:55:4b:4c: 17:32:61:36:f6:5c:bd:92:d6:2c:bd:67:39:ec:23: 0e:69:22:29:d5:51:5b:3d:70:a0:9d:e2:2c:d4:1b: d0:3e:f1:4a:ce:71:83:6c:74:1b:78:2a:61:2b:82: a5:b8:9c:14:90:a8:fa:e3:b7:f8:34:12:d6:91:aa: a2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:79:B2:EE:B1:D4:B2:49:DC:8B:DF:23:78:07:1D:9C:2D:09:4C:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d3061db8-c3a5-40b9-9ce9-735cf5f78700/d3061db8-c3a5-40b9-9ce9-735cf5f78700.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 208.101.230.0/23 IPv6: 2602:fa44::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398820 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c9:01:3d:67:19:a0:79:99:e7:d1:6d:78:3b:bd:37:2b:75: 0b:37:db:c3:33:8a:b8:c1:b0:b0:79:2c:fb:4e:e5:dd:93:8a: 59:6b:b1:33:5d:81:56:70:8c:2f:10:fb:31:32:08:ad:61:cc: 3a:b2:b9:1c:eb:09:53:a7:5a:b9:30:af:da:c4:b8:b3:7c:58: 1e:ec:77:6f:b3:a9:75:ae:98:bc:f7:51:bd:5b:50:f8:44:4f: c2:4a:65:be:f2:0c:9a:a7:c2:e2:98:bd:0d:5f:5f:ba:0f:f2: a6:ce:66:ec:47:96:79:ac:2a:55:23:c6:df:84:43:a5:4e:6e: 6c:93:4c:3f:59:75:89:9d:85:8e:c6:d4:ef:18:ea:a7:9e:1f: 7e:c6:6b:3f:34:99:f7:73:a9:00:57:18:0f:79:dd:5d:75:b9: 5a:f9:ca:84:b5:25:44:05:c0:46:b6:a8:65:58:74:ac:04:3f: d0:57:3b:e3:3b:f3:31:32:3a:b7:53:30:a4:cd:55:d0:f2:02: 4c:7e:5a:5f:d6:41:ba:c4:6e:60:1b:30:73:30:18:69:bd:bf: 7e:75:39:5d:48:d4:75:00:2e:06:64:c6:0b:49:c2:d8:83:91: 05:65:b9:b7:16:bc:d0:0d:14:db:fa:83:f3:b7:fc:8e:72:3c: 77:e6:2f:3e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErvKUoiD9P2N9Y7UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyMTIxNDIwOVoXDTI3MTEyNDIyNDIwOVowLzEtMCsGA1UEAxMk ZDMwNjFkYjgtYzNhNS00MGI5LTljZTktNzM1Y2Y1Zjc4NzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ReQoYoNSRudd8uoOc2VvcGbxml+i1/s1zud WPdvAXlvgZ5PcMTILVpaoFdywA3yU60svwy/7MSrLf92ShJi8rJGE2auOxjXGgGs ko8QwEyEwBbLRyoXAtwmlr7bhiKM9sdmU5OhriO7g1BYC6eI4dNUPpcHl8Ku2J9c JK2fenTyeboBtaEkLPvpRKZE/qS+eud31YaLRBdHMoW8uNAXSsZXeDvZdrfqXUif KEa0V1Do8QKAWRyXmClLmZTBgE9VS0wXMmE29ly9ktYsvWc57CMOaSIp1VFbPXCg neIs1BvQPvFKznGDbHQbeCphK4KluJwUkKj647f4NBLWkaqiPQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEl5su6x1LJJ3IvfI3gHHZwtCUwFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k MzA2MWRiOC1jM2E1LTQwYjktOWNlOS03MzVjZjVmNzg3MDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2QzMDYxZGI4LWMzYTUtNDBiOS05 Y2U5LTczNWNmNWY3ODcwMC9kMzA2MWRiOC1jM2E1LTQwYjktOWNlOS03MzVjZjVm Nzg3MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHQZeYwDgQCAAIwCAMGACYC+kQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYV5DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyyQE9ZxmgeZnn0W14O703K3UL N9vDM4q4wbCweSz7TuXdk4pZa7EzXYFWcIwvEPsxMgitYcw6srkc6wlTp1q5MK/a xLizfFge7Hdvs6l1rpi891G9W1D4RE/CSmW+8gyap8LimL0NX1+6D/KmzmbsR5Z5 rCpVI8bfhEOlTm5sk0w/WXWJnYWOxtTvGOqnnh9+xms/NJn3c6kAVxgPed1ddbla +cqEtSVEBcBGtqhlWHSsBD/QVzvjO/MxMjq3UzCkzVXQ8gJMflpf1kG6xG5gGzBz MBhpvb9+dTldSNR1AC4GZMYLScLYg5EFZbm3FrzQDRTb+oPzt/yOcjx35i8+ -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:30 2025 by rpki-client