$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer File: 03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer (raw, json) Hash identifier: V4JbqnGH1vK5TxjXbabdddGJWOxyHoBgJ42msg309do= Subject key identifier: 08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB66848E9FF5FB664C7005700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 13:48:00 +0000 Certificate not after: Thu 04 Nov 2027 13:48:00 +0000 Subordinate resources: AS: 32039 IP: 209.196.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:68:48:e9:ff:5f:b6:64:c7:00:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 1 13:48:00 2025 GMT Not After : Nov 4 13:48:00 2027 GMT Subject: CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:40:fa:73:21:5e:f2:82:90:96:7b:07:a0:d5: 21:f5:01:ac:f9:2d:6c:81:f5:ab:10:a6:3e:c8:5f: 51:3d:3d:e9:cf:12:2b:40:9b:8e:1f:70:60:10:c2: 35:7e:ba:54:f5:21:8b:cb:6e:d6:31:ee:bc:26:4a: a2:a2:ba:d5:63:81:18:bf:16:88:37:d3:ca:48:d9: a7:e6:3c:fd:fc:b3:c7:8a:de:f1:8a:10:6d:89:73: 3f:aa:b1:ad:a1:99:f1:15:56:63:2f:7d:4e:14:48: b3:2c:c8:28:0d:21:5d:f8:bf:37:ec:ad:ff:bd:2b: 33:e9:9c:76:87:68:21:78:24:a5:45:54:1a:18:d4: 8a:20:e9:16:c8:f6:78:c8:df:c9:8a:b2:17:ec:35: 4c:4c:63:bb:ed:af:22:c0:50:65:fc:87:0c:bb:e2: 2b:7b:08:27:00:16:dd:ff:d9:4c:92:14:8c:97:a2: b2:ae:4f:02:99:9d:8b:0c:b7:ae:0a:8c:7b:46:b4: 6f:cd:3c:ec:f3:d7:36:4f:58:ba:78:aa:23:cc:9c: a4:db:1a:d0:7d:cd:ec:25:1f:d1:9f:00:da:a2:5b: 98:6f:6e:df:a5:e7:7f:45:35:27:24:6e:36:2f:5e: d0:9b:1c:ca:16:ad:ea:81:5b:91:5e:78:5b:99:f0: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 209.196.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32039 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:8b:14:30:ee:35:e5:3c:46:92:95:b0:b9:5d:43:d1:4e:6a: f1:0d:d6:89:f5:70:23:fc:dd:e8:70:0d:b1:76:1c:22:4e:aa: de:9b:ef:7e:c6:b5:54:50:22:22:4f:fe:2c:4b:3c:90:cf:7b: e0:dc:70:dd:e6:25:21:3c:36:e8:f5:51:ce:99:8b:ba:7d:2e: 1f:c0:40:99:98:85:29:40:98:7f:7b:84:c4:bd:5c:2f:9d:53: 2d:73:a7:46:24:73:61:75:b0:1c:77:bf:3c:a4:31:17:bc:95: 54:e1:1f:da:dc:8d:2d:e0:ae:79:91:fa:da:47:51:8d:16:4c: b5:bb:39:0b:af:9f:91:8f:61:89:ce:c3:1a:ed:62:e5:86:02: 62:63:18:d9:b5:78:97:9a:1a:1c:6e:1d:f3:91:bc:a6:83:23: a0:40:ba:71:e7:a8:26:0e:bb:92:18:86:1c:86:f0:99:e1:68: 23:39:33:4a:90:f7:da:6b:41:9c:40:d7:ea:39:41:78:06:7a: 8d:be:97:9c:ba:e5:70:74:1b:c2:7a:0a:05:15:bd:28:f4:b5: 9e:5f:b1:f2:d6:38:04:63:a2:e3:3d:3e:f3:65:a1:a6:1f:f1: 96:37:f2:a2:d4:f3:23:87:bd:f6:b6:61:2f:13:ea:57:6e:e5: c6:59:1a:a4 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEq2aEjp/1+2ZMcAVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwMTEzNDgwMFoXDTI3MTEwNDEzNDgwMFowLzEtMCsGA1UEAxMk MDM0OTBhZTMtNDFjZC00ZTlhLThkY2UtM2M5YzdmN2ExMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUD6cyFe8oKQlnsHoNUh9QGs+S1sgfWrEKY+ yF9RPT3pzxIrQJuOH3BgEMI1frpU9SGLy27WMe68JkqiorrVY4EYvxaIN9PKSNmn 5jz9/LPHit7xihBtiXM/qrGtoZnxFVZjL31OFEizLMgoDSFd+L837K3/vSsz6Zx2 h2gheCSlRVQaGNSKIOkWyPZ4yN/JirIX7DVMTGO77a8iwFBl/IcMu+IrewgnABbd /9lMkhSMl6Kyrk8CmZ2LDLeuCox7RrRvzTzs89c2T1i6eKojzJyk2xrQfc3sJR/R nwDaoluYb27fped/RTUnJG42L17QmxzKFq3qgVuRXnhbmfCJZwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAjIHZEzGkxu+4l4dTiwry4rlfsLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w MzQ5MGFlMy00MWNkLTRlOWEtOGRjZS0zYzljN2Y3YTEwZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzAzNDkwYWUzLTQxY2QtNGU5YS04 ZGNlLTNjOWM3ZjdhMTBlZS8wMzQ5MGFlMy00MWNkLTRlOWEtOGRjZS0zYzljN2Y3 YTEwZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATRxPAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fScwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAt4sUMO415TxGkpWwuV1D0U5q8Q3WifVwI/zd6HANsXYcIk6q 3pvvfsa1VFAiIk/+LEs8kM974Nxw3eYlITw26PVRzpmLun0uH8BAmZiFKUCYf3uE xL1cL51TLXOnRiRzYXWwHHe/PKQxF7yVVOEf2tyNLeCueZH62kdRjRZMtbs5C6+f kY9hic7DGu1i5YYCYmMY2bV4l5oaHG4d85G8poMjoEC6ceeoJg67khiGHIbwmeFo IzkzSpD32mtBnEDX6jlBeAZ6jb6XnLrlcHQbwnoKBRW9KPS1nl+x8tY4BGOi4z0+ 82Whph/xljfyotTzI4e99rZhLxPqV27lxlkapA== -----END CERTIFICATE-----Generated at Wed Aug 6 16:03:32 2025 by rpki-client