$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2.cer File: 165a626b-da00-4cde-9359-20f11dac13c2.cer (raw, json) Hash identifier: +r5e6KScy2fXZJIrMsLDR7cA8oqxSiPTd+rWHqhBLeY= Subject key identifier: 24:A6:28:EA:20:A9:09:28:C9:16:7B:16:1E:8C:5E:54:60:6F:29:F6 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A87DFF182F7956F4AC20A3600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/165a626b-da00-4cde-9359-20f11dac13c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Jul 2025 21:46:06 +0000 Certificate not after: Mon 18 Oct 2027 21:46:06 +0000 Subordinate resources: IP: 167.154.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:df:f1:82:f7:95:6f:4a:c2:0a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 15 21:46:06 2025 GMT Not After : Oct 18 21:46:06 2027 GMT Subject: CN=165a626b-da00-4cde-9359-20f11dac13c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:1c:45:a0:38:95:1f:fb:78:75:3f:60:8d: b8:89:1e:9a:48:b2:b0:f1:cf:62:b1:ce:3f:5a:3c: 83:1c:44:4e:c7:a5:2c:38:dd:7a:b7:30:83:a0:e6: f2:0b:98:66:f4:be:2c:ae:56:f3:4f:86:d9:10:e5: 6b:44:ee:b6:16:53:dc:06:04:f7:31:d1:b2:6f:ac: b3:44:41:ed:fa:cf:2b:d4:c9:e3:d2:d2:e8:3d:4c: 5a:3d:73:0b:2d:68:4e:0d:41:7e:78:72:41:ea:d7: a5:e3:91:e3:ee:9b:41:a5:8f:ad:f2:18:35:2a:c3: 00:a6:74:97:db:63:0d:75:0a:b1:d7:ef:da:ad:72: 0d:14:fd:66:f1:5a:5f:de:26:cd:9f:ef:46:f8:94: 32:c1:77:28:45:2a:86:e8:ae:48:75:f1:a3:31:f1: b6:47:6b:53:0f:c4:f1:5e:91:36:e4:67:28:52:4f: 92:0e:a8:53:bd:80:f4:b1:a7:8d:21:88:59:1c:75: 4f:ec:79:22:09:e0:56:b8:03:f8:0f:cc:30:05:42: 5a:ec:43:29:e5:16:da:84:96:69:cb:0c:a5:61:aa: 42:24:f2:0f:44:fa:c9:f7:ef:f4:9b:a9:92:9e:85: 5d:9f:89:62:8f:f8:85:8b:80:83:f0:75:b5:cb:2b: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A6:28:EA:20:A9:09:28:C9:16:7B:16:1E:8C:5E:54:60:6F:29:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/165a626b-da00-4cde-9359-20f11dac13c2/165a626b-da00-4cde-9359-20f11dac13c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 167.154.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0e:60:59:1e:8d:cf:bb:fb:b2:14:eb:5d:7c:31:70:2d:ab: 33:5d:57:0d:86:97:56:4c:f0:1c:89:0c:16:54:0d:54:00:5b: e0:53:ff:d2:58:dc:3a:b7:c0:c7:11:74:91:82:63:75:5d:68: 33:5c:d2:67:82:f9:78:73:30:19:2b:eb:da:93:9d:a9:af:7c: de:fe:33:66:6f:f8:71:eb:3a:76:26:c0:37:40:63:08:8c:1e: 52:69:13:03:37:3a:46:7f:5d:ae:25:58:23:b0:17:c0:55:00: 8a:c2:f6:a9:49:93:61:f4:ac:c0:cb:29:94:43:76:8c:63:87: 82:0c:63:ea:04:b3:c2:67:e9:58:e3:0c:3e:74:5f:46:d0:05: 46:9a:86:58:87:81:88:40:2a:64:24:57:3f:44:c7:f5:c2:f8: 59:9b:85:21:ef:de:af:e7:ce:aa:ed:d4:a6:0a:1a:76:7f:c3: 55:a9:75:74:ed:03:53:0f:3a:66:82:10:d3:5b:f5:70:06:68: c5:a8:85:25:90:7d:8b:f8:91:73:6b:43:21:5a:0e:44:e4:d6: 4e:e3:24:9b:8f:49:43:37:2a:a7:3d:72:d3:3d:0a:f7:c2:83: c3:18:b5:0d:7d:87:df:00:17:92:d6:e0:09:38:7e:9e:39:b4: 43:10:6f:ac -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEqH3/GC95VvSsIKNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNTIxNDYwNloXDTI3MTAxODIxNDYwNlowLzEtMCsGA1UEAxMk MTY1YTYyNmItZGEwMC00Y2RlLTkzNTktMjBmMTFkYWMxM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU4cRaA4lR/7eHU/YI24iR6aSLKw8c9isc4/ WjyDHEROx6UsON16tzCDoObyC5hm9L4srlbzT4bZEOVrRO62FlPcBgT3MdGyb6yz REHt+s8r1Mnj0tLoPUxaPXMLLWhODUF+eHJB6tel45Hj7ptBpY+t8hg1KsMApnSX 22MNdQqx1+/arXINFP1m8Vpf3ibNn+9G+JQywXcoRSqG6K5IdfGjMfG2R2tTD8Tx XpE25GcoUk+SDqhTvYD0saeNIYhZHHVP7HkiCeBWuAP4D8wwBUJa7EMp5RbahJZp ywylYapCJPIPRPrJ9+/0m6mSnoVdn4lij/iFi4CD8HW1yyvofwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFCSmKOogqQkoyRZ7Fh6MXlRgbyn2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8x NjVhNjI2Yi1kYTAwLTRjZGUtOTM1OS0yMGYxMWRhYzEzYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzE2NWE2MjZiLWRhMDAtNGNkZS05 MzU5LTIwZjExZGFjMTNjMi8xNjVhNjI2Yi1kYTAwLTRjZGUtOTM1OS0yMGYxMWRh YzEzYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCnmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNDmBZHo3Pu/uyFOtdfDFw LaszXVcNhpdWTPAciQwWVA1UAFvgU//SWNw6t8DHEXSRgmN1XWgzXNJngvl4czAZ K+vak52pr3ze/jNmb/hx6zp2JsA3QGMIjB5SaRMDNzpGf12uJVgjsBfAVQCKwvap SZNh9KzAyymUQ3aMY4eCDGPqBLPCZ+lY4ww+dF9G0AVGmoZYh4GIQCpkJFc/RMf1 wvhZm4Uh796v586q7dSmChp2f8NVqXV07QNTDzpmghDTW/VwBmjFqIUlkH2L+JFz a0MhWg5E5NZO4ySbj0lDNyqnPXLTPQr3woPDGLUNfYffABeS1uAJOH6eObRDEG+s -----END CERTIFICATE-----Generated at Thu Aug 7 05:15:14 2025 by rpki-client