$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer File: dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer (raw, json) Hash identifier: +AHGml40Ff+cw2JGPbmuBJFu75TfUHZoEbOZjfu7W6U= Subject key identifier: 68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AE68DB0318446552509E2E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 19:42:10 +0000 Certificate not after: Sun 21 Nov 2027 20:42:10 +0000 Subordinate resources: AS: 394232 IP: 23.178.0.0/23 IP: 23.252.224.0/20 IP: 199.4.190.0/24 IP: 2606:7480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:8d:b0:31:84:46:55:25:09:e2:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 18 19:42:10 2025 GMT Not After : Nov 21 20:42:10 2027 GMT Subject: CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:d6:fd:72:86:07:3f:22:1c:3a:ac:29:38: e7:ef:a6:de:2d:aa:72:d5:87:29:e7:cf:3f:d0:a1: 63:9a:47:9d:d6:fe:6e:8c:74:e6:a3:45:12:94:82: b7:c1:87:54:e1:96:6d:ab:2f:b2:ea:92:5d:9d:ec: be:cb:60:00:0e:de:63:00:61:87:a3:fc:b5:87:93: 66:aa:92:db:22:e5:8b:72:3d:71:be:07:96:68:4b: f7:82:54:ae:a0:72:16:a3:f6:d9:dd:61:ce:5f:18: 42:b0:7c:9c:87:0a:f9:9f:ab:a0:64:ce:bb:5b:61: 08:b6:96:4e:33:e8:54:5a:04:e6:08:ef:1a:7b:07: 34:bf:ce:aa:16:ed:f4:ae:cb:7d:58:cf:a6:3b:c3: e2:ba:e2:f7:23:de:52:be:d9:e3:79:ac:f0:80:56: 9d:29:9a:2e:0d:83:b5:1b:24:45:9a:b5:da:fb:d6: 3a:d8:32:1d:61:ee:dd:fc:68:ed:92:00:ff:bb:8c: 00:7f:a5:c7:09:59:3a:40:6e:87:c1:94:13:37:8b: 07:31:93:09:ba:b5:f5:92:25:39:91:d5:c8:e0:3a: d2:2d:ea:0d:34:06:5e:2a:98:01:35:c6:15:ad:72: 3a:a4:ef:7f:b4:1b:20:5f:3a:28:a5:e7:9e:ca:c6: 8b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.178.0.0/23 23.252.224.0/20 199.4.190.0/24 IPv6: 2606:7480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394232 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ac:b4:8d:3e:23:60:12:76:6d:80:0e:00:77:cf:60:5e:99: 24:2e:24:44:d4:25:1b:cb:fd:07:e6:9b:76:35:19:1d:1b:4c: b2:24:06:d2:af:eb:d3:dd:cb:2b:85:bf:a2:97:c2:f8:03:aa: da:19:29:00:29:df:06:93:e6:3a:04:cb:a2:d9:6c:a1:00:e8: 9c:a8:2d:78:43:0f:1a:d5:58:c1:36:9d:16:c7:1c:ec:ee:a5: f2:37:c6:a6:99:d4:88:76:ab:a6:5e:7d:c8:5d:96:79:e8:74: 21:3d:49:41:78:ab:20:3b:1d:03:c1:3b:0f:d2:9a:f5:dc:71: 37:26:85:c6:7f:59:37:8e:e3:4c:92:d3:9d:b4:92:11:d9:cb: ac:06:6b:85:d7:b2:a2:b0:71:0d:88:dc:39:4d:d6:65:75:8b: 8d:f2:0e:79:14:53:ba:14:3f:44:a9:63:f8:d9:52:63:9c:0f: 6f:2c:59:74:16:ad:63:84:f6:71:fc:56:0a:9d:d9:21:59:31: 2d:39:8e:10:7f:1f:9e:cd:78:47:38:ef:0d:5e:2b:20:fc:ec: f2:a7:d1:5f:1b:25:d9:bd:cb:8e:3b:92:a6:c0:02:94:49:1c: f7:0f:3e:76:48:35:19:b8:aa:2c:32:c3:fc:b0:71:b8:91:95: f9:34:8f:bc -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWErmjbAxhEZVJQni5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxODE5NDIxMFoXDTI3MTEyMTIwNDIxMFowLzEtMCsGA1UEAxMk ZGNjNmM5ZDUtMzZkNi00OTIzLWEyYWUtNjFlNGFjZDA5NGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWzW/XKGBz8iHDqsKTjn76beLapy1Ycp588/ 0KFjmked1v5ujHTmo0USlIK3wYdU4ZZtqy+y6pJdney+y2AADt5jAGGHo/y1h5Nm qpLbIuWLcj1xvgeWaEv3glSuoHIWo/bZ3WHOXxhCsHychwr5n6ugZM67W2EItpZO M+hUWgTmCO8aewc0v86qFu30rst9WM+mO8PiuuL3I95SvtnjeazwgFadKZouDYO1 GyRFmrXa+9Y62DIdYe7d/GjtkgD/u4wAf6XHCVk6QG6HwZQTN4sHMZMJurX1kiU5 kdXI4DrSLeoNNAZeKpgBNcYVrXI6pO9/tBsgXzoopeeeysaLywIDAQABo4IENjCC BDIwHQYDVR0OBBYEFGimDrgZF/6SgbAfKVbjHGB5qRenMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k Y2M2YzlkNS0zNmQ2LTQ5MjMtYTJhZS02MWU0YWNkMDk0YzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2RjYzZjOWQ1LTM2ZDYtNDkyMy1h MmFlLTYxZTRhY2QwOTRjMS9kY2M2YzlkNS0zNmQ2LTQ5MjMtYTJhZS02MWU0YWNk MDk0YzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAEXsgADBAQX/OADBADHBL4wDQQCAAIwBwMFACYG dIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgP4MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABGstI0+I2AS dm2ADgB3z2BemSQuJETUJRvL/Qfmm3Y1GR0bTLIkBtKv69PdyyuFv6KXwvgDqtoZ KQAp3waT5joEy6LZbKEA6JyoLXhDDxrVWME2nRbHHOzupfI3xqaZ1Ih2q6Zefchd lnnodCE9SUF4qyA7HQPBOw/SmvXccTcmhcZ/WTeO40yS0520khHZy6wGa4XXsqKw cQ2I3DlN1mV1i43yDnkUU7oUP0SpY/jZUmOcD28sWXQWrWOE9nH8Vgqd2SFZMS05 jhB/H57NeEc47w1eKyD87PKn0V8bJdm9y447kqbAApRJHPcPPnZINRm4qiwyw/yw cbiRlfk0j7w= -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:53 2025 by rpki-client