$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82.cer File: 1a3bba56-316c-4439-8cfd-d9c463a7aa82.cer (raw, json) Hash identifier: w73Ygx8CYizc3T9qvENkOXZQ2yVaEz5Brx3i+hESCwU= Subject key identifier: 19:A9:CB:15:78:39:AD:80:84:03:DC:EC:F7:36:B5:B1:0F:6A:0D:5A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB0DADF40C75B96E2CF7E4100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/1a3bba56-316c-4439-8cfd-d9c463a7aa82.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Jul 2025 14:04:02 +0000 Certificate not after: Tue 02 Nov 2027 14:04:02 +0000 Subordinate resources: IP: 167.73.0.0/16 IP: 198.51.9.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b0:da:df:40:c7:5b:96:e2:cf:7e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 30 14:04:02 2025 GMT Not After : Nov 2 14:04:02 2027 GMT Subject: CN=1a3bba56-316c-4439-8cfd-d9c463a7aa82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:5e:fd:1e:af:71:7c:d0:d2:f0:72:94:80:87: c1:03:5c:f4:d7:3d:b9:d7:66:52:f8:e3:6e:da:2a: cd:e9:a9:7b:87:ff:df:7e:74:6d:8d:cc:fc:af:28: 05:a6:dc:86:6d:7f:7c:5c:e1:8c:56:9f:57:c7:d5: aa:47:7d:50:ae:b5:03:59:6c:0f:72:a3:8b:f2:92: 4a:e8:28:ef:29:57:08:ac:3f:3e:c7:e6:b0:1c:a8: d5:2c:ca:08:4f:5d:7c:64:9c:9c:b3:8a:67:75:53: 82:cd:48:cc:ff:52:6b:f9:91:76:e1:8a:ec:5b:cf: 7e:f5:04:1e:d6:1f:aa:20:98:53:fd:5b:7f:00:28: 48:71:b1:4d:08:6c:9c:06:e8:0f:a3:b8:38:dc:47: 5e:be:43:06:15:af:0f:24:9e:2e:58:74:25:d1:56: 27:57:bd:12:f1:62:7b:5a:0e:83:4a:ba:f0:46:98: cc:51:26:a3:85:8c:9a:36:5e:48:c5:c7:2e:68:20: e3:3e:97:a9:04:1e:72:52:b4:55:08:49:a9:0d:c3: c6:28:bb:67:6b:3c:80:47:83:3a:b7:68:76:75:4e: 0d:7b:1b:f9:1f:d7:e7:43:de:49:5c:9d:29:65:36: 50:16:dc:38:40:55:bf:67:29:ed:1f:95:5c:e9:87: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A9:CB:15:78:39:AD:80:84:03:DC:EC:F7:36:B5:B1:0F:6A:0D:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a3bba56-316c-4439-8cfd-d9c463a7aa82/1a3bba56-316c-4439-8cfd-d9c463a7aa82.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 167.73.0.0/16 198.51.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1f:aa:10:55:a9:ba:5b:02:5f:23:ab:8e:0b:e4:21:25:5c: 88:8f:66:86:da:8b:84:67:5d:97:08:37:97:a4:5f:9a:3d:cb: 0d:a9:ca:f1:51:c9:73:da:59:b3:67:ca:79:4a:06:0e:e8:55: 6e:e2:4b:f9:db:05:ac:1f:a8:ed:e6:7d:25:ea:f4:8c:f9:e7: ae:70:ad:71:d3:4b:fc:29:f9:79:0e:96:f3:16:24:10:7c:47: 89:ec:da:f6:ff:84:c2:37:d3:a5:37:5e:71:9d:f2:19:d6:40: fa:c7:ef:b3:36:97:f3:e7:d3:9d:73:9c:79:da:51:8e:64:fb: dc:2b:87:7c:65:a3:d9:6b:8a:a1:1f:74:a6:59:25:a5:a8:c3: 2c:18:47:04:fc:c4:c9:d8:bb:da:9e:75:f4:74:ee:09:59:da: d6:84:6f:aa:1b:f5:4f:d5:ac:65:aa:a2:0f:23:ae:a1:de:20: 30:5e:64:35:c0:20:af:bc:c1:2e:bf:ef:a8:e0:1f:a7:e0:8d: a5:ef:bc:5e:21:66:3f:32:d2:94:c2:97:21:69:95:d7:ec:2c: b5:42:fb:f4:90:34:89:34:6d:ea:86:0e:a4:d3:76:90:26:75: ab:af:0e:66:7b:8c:a4:87:50:2b:30:fe:e4:79:be:65:15:e7: 26:0c:de:dd -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEqw2t9Ax1uW4s9+QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDczMDE0MDQwMloXDTI3MTEwMjE0MDQwMlowLzEtMCsGA1UEAxMk MWEzYmJhNTYtMzE2Yy00NDM5LThjZmQtZDljNDYzYTdhYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/F79Hq9xfNDS8HKUgIfBA1z01z2512ZS+ONu 2irN6al7h//ffnRtjcz8rygFptyGbX98XOGMVp9Xx9WqR31QrrUDWWwPcqOL8pJK 6CjvKVcIrD8+x+awHKjVLMoIT118ZJycs4pndVOCzUjM/1Jr+ZF24YrsW89+9QQe 1h+qIJhT/Vt/AChIcbFNCGycBugPo7g43EdevkMGFa8PJJ4uWHQl0VYnV70S8WJ7 Wg6DSrrwRpjMUSajhYyaNl5IxccuaCDjPpepBB5yUrRVCEmpDcPGKLtnazyAR4M6 t2h2dU4Nexv5H9fnQ95JXJ0pZTZQFtw4QFW/ZyntH5Vc6YfoZQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFBmpyxV4Oa2AhAPc7Pc2tbEPag1aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8x YTNiYmE1Ni0zMTZjLTQ0MzktOGNmZC1kOWM0NjNhN2FhODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzFhM2JiYTU2LTMxNmMtNDQzOS04 Y2ZkLWQ5YzQ2M2E3YWE4Mi8xYTNiYmE1Ni0zMTZjLTQ0MzktOGNmZC1kOWM0NjNh N2FhODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCnSQMEAMYzCTBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6H6oQVam6WwJf I6uOC+QhJVyIj2aG2ouEZ12XCDeXpF+aPcsNqcrxUclz2lmzZ8p5SgYO6FVu4kv5 2wWsH6jt5n0l6vSM+eeucK1x00v8Kfl5DpbzFiQQfEeJ7Nr2/4TCN9OlN15xnfIZ 1kD6x++zNpfz59Odc5x52lGOZPvcK4d8ZaPZa4qhH3SmWSWlqMMsGEcE/MTJ2Lva nnX0dO4JWdrWhG+qG/VP1axlqqIPI66h3iAwXmQ1wCCvvMEuv++o4B+n4I2l77xe IWY/MtKUwpchaZXX7Cy1Qvv0kDSJNG3qhg6k03aQJnWrrw5me4ykh1ArMP7keb5l FecmDN7d -----END CERTIFICATE-----Generated at Thu Aug 7 02:05:40 2025 by rpki-client