$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer File: 0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer (raw, json) Hash identifier: CnJmWN2tUywyTwDPnUeMj03PeoDyBeRebUddRm8zWqQ= Subject key identifier: 11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A8BD8B1DAECFB4490A562ADC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 07:54:44 +0000 Certificate not after: Wed 20 Oct 2027 07:54:44 +0000 Subordinate resources: IP: 23.141.204.0/24 IP: 2602:f5de::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:d8:b1:da:ec:fb:44:90:a5:62:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 17 07:54:44 2025 GMT Not After : Oct 20 07:54:44 2027 GMT Subject: CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:87:14:77:1a:bf:2f:1b:c3:81:cf:e4:64: 88:03:25:a3:aa:ff:5b:d4:5f:c9:c2:e2:9d:23:dc: 7d:5a:23:f4:7c:fb:da:20:c4:a2:99:fc:13:42:55: 49:9d:b8:ee:44:8e:30:e4:4a:12:e5:09:7b:93:be: 80:3f:2f:bd:b4:3f:22:93:88:c2:dc:53:01:3f:70: 46:6a:86:9e:8e:39:50:b9:9c:de:75:02:fc:da:8b: c7:65:dc:6d:3c:38:69:00:d5:56:76:86:fb:f6:27: 5d:fe:39:7c:7f:2b:99:e1:c7:69:d3:a0:03:c4:ff: 82:1b:3a:00:b8:a9:2d:e7:fd:99:fb:14:a8:cb:d6: bb:ba:f4:c6:5f:1d:36:28:be:a9:0c:76:ce:19:48: 6e:73:a4:d6:b5:c7:48:59:25:10:c7:77:fa:db:34: 9b:06:52:a4:12:ed:ee:fc:4f:ac:b0:e9:95:3e:0a: 7c:b5:37:bc:d0:c9:a0:24:30:32:8a:47:ac:c3:2c: cb:f7:a3:25:d0:21:2d:4b:09:76:e8:43:85:df:67: 1a:0b:57:e3:5b:b5:b9:f7:7a:ca:89:63:76:af:04: ef:5d:b0:d9:e0:12:e4:55:68:78:6c:f1:9d:7f:10: 3a:c7:1a:63:6a:55:5b:1c:79:69:00:1d:60:4b:37: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.204.0/24 IPv6: 2602:f5de::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:bc:62:3a:40:39:14:25:c3:56:37:fa:f0:26:03:41:6a:a7: 09:a1:26:1b:15:cc:9a:d3:9c:5c:0e:4d:20:ec:c9:78:a8:4f: c6:8d:e5:8b:a6:2c:5c:32:68:03:16:d3:a8:b1:ac:36:fc:23: d5:d1:5c:4a:21:db:57:71:08:8b:a6:58:32:01:76:5d:cf:a0: af:89:d5:cc:2e:15:72:02:b9:ef:55:c5:93:0f:04:e2:42:11: 4a:f7:78:e6:7b:85:0a:18:95:70:38:9d:b6:9b:17:d8:aa:b8: ae:c5:18:7b:b3:0b:f3:44:f1:0e:b2:39:42:bc:e5:ff:f6:2d: e4:4b:9f:3f:5d:03:34:9f:22:8c:b7:91:fb:64:26:8b:aa:f4: 2d:ab:83:53:2f:8b:7c:6e:cb:cc:bf:ef:ed:28:b9:bc:95:d6: a4:28:f1:5c:c4:17:49:c8:aa:b5:b8:64:e7:28:95:df:3a:e6: 23:25:35:cc:16:a3:6a:1d:73:df:43:4b:c2:bf:70:67:0c:a5: 7b:f9:0a:a7:19:49:57:6e:c5:d9:14:9f:30:0f:bb:73:af:e0: 64:ff:10:c6:28:08:45:e3:52:76:3a:ac:83:9a:50:ed:8b:54: 8b:b2:98:02:3e:19:9b:1f:e5:04:d6:28:03:42:40:48:45:91: e0:1b:fc:9f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqL2LHa7PtEkKVircAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNzA3NTQ0NFoXDTI3MTAyMDA3NTQ0NFowLzEtMCsGA1UEAxMk MGFkYjRkOWEtOWZjNC00M2Y3LThjZmItOTUxMTljMWRkZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbWHFHcavy8bw4HP5GSIAyWjqv9b1F/JwuKd I9x9WiP0fPvaIMSimfwTQlVJnbjuRI4w5EoS5Ql7k76APy+9tD8ik4jC3FMBP3BG aoaejjlQuZzedQL82ovHZdxtPDhpANVWdob79idd/jl8fyuZ4cdp06ADxP+CGzoA uKkt5/2Z+xSoy9a7uvTGXx02KL6pDHbOGUhuc6TWtcdIWSUQx3f62zSbBlKkEu3u /E+ssOmVPgp8tTe80MmgJDAyikeswyzL96Ml0CEtSwl26EOF32caC1fjW7W593rK iWN2rwTvXbDZ4BLkVWh4bPGdfxA6xxpjalVbHHlpAB1gSzeMEQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBF51KamMUhWXWHnjQYfeaJtCv+JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w YWRiNGQ5YS05ZmM0LTQzZjctOGNmYi05NTExOWMxZGRkZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzBhZGI0ZDlhLTlmYzQtNDNmNy04 Y2ZiLTk1MTE5YzFkZGRmMC8wYWRiNGQ5YS05ZmM0LTQzZjctOGNmYi05NTExOWMx ZGRkZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjcwwDgQCAAIwCAMGACYC9d4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEa8YjpAORQlw1Y3+vAmA0FqpwmhJhsVzJrTnFwOTSDsyXioT8aN5YumLFwyaAMW 06ixrDb8I9XRXEoh21dxCIumWDIBdl3PoK+J1cwuFXICue9VxZMPBOJCEUr3eOZ7 hQoYlXA4nbabF9iquK7FGHuzC/NE8Q6yOUK85f/2LeRLnz9dAzSfIoy3kftkJouq 9C2rg1Mvi3xuy8y/7+0oubyV1qQo8VzEF0nIqrW4ZOcold865iMlNcwWo2odc99D S8K/cGcMpXv5CqcZSVduxdkUnzAPu3Ov4GT/EMYoCEXjUnY6rIOaUO2LVIuymAI+ GZsf5QTWKANCQEhFkeAb/J8= -----END CERTIFICATE-----Generated at Wed Aug 6 11:24:38 2025 by rpki-client