$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer File: 252aff2f-9807-45d4-ba31-1a3198784cae.cer (raw, json) Hash identifier: 0OM/0kIdZeF4yPaNfLRBgi9IffkH2i+E9mwkNax7+2I= Subject key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AAE4D771988DA110747C93E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Jul 2025 16:07:30 +0000 Certificate not after: Mon 01 Nov 2027 16:07:30 +0000 Subordinate resources: IP: 199.185.120.0 -- 199.185.122.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:4d:77:19:88:da:11:07:47:c9:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 29 16:07:30 2025 GMT Not After : Nov 1 16:07:30 2027 GMT Subject: CN=252aff2f-9807-45d4-ba31-1a3198784cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:e8:0e:42:37:0e:34:69:86:9b:8f:43:30: 2f:2d:29:d1:66:8c:25:19:0a:77:90:df:b7:e7:cb: 2a:38:57:9a:98:9b:fd:7e:3e:51:56:0a:66:89:09: 5a:98:c5:f6:87:35:3c:69:4b:a7:a4:02:76:b8:ae: c7:d3:4d:3b:f7:09:4f:24:b2:cd:5e:1b:bb:2c:83: e0:72:c6:97:4d:0e:43:a9:f8:7f:a0:ce:76:1d:77: 85:31:94:32:3e:8c:34:a6:e6:0f:5e:55:35:ba:06: 66:cb:a2:91:26:63:39:33:0d:ed:31:15:96:30:a5: 51:25:db:d9:a3:01:17:aa:11:b2:7f:9d:e4:7e:09: 6f:b3:bb:96:3f:e9:b3:8d:3c:19:2d:2f:c9:ef:46: 97:bc:c1:fc:54:3b:c2:f1:65:e6:08:55:47:de:3f: fd:5d:c3:7e:d6:73:19:14:cf:94:69:d8:42:7a:0f: 10:51:dc:cb:7a:57:e0:f2:cc:e5:bf:3f:cb:f3:92: 14:d0:7c:25:80:12:fc:fc:c3:1c:13:17:8c:2a:a5: f9:29:d0:0b:c1:a6:3d:f1:81:cd:c1:8e:b9:89:41: b7:52:5d:33:c8:4f:44:a5:85:df:07:5d:a9:1c:45: e0:c5:24:28:d6:39:90:be:d7:60:32:85:6b:11:93: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 199.185.120.0-199.185.122.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:76:31:1f:d2:bd:17:69:d1:e0:02:ff:29:75:2e:08:88:d7: d3:b7:a8:2f:39:1a:3e:0a:05:45:7f:62:fc:be:1e:90:c5:b5: 13:7c:d2:09:f9:13:08:cf:b2:2c:6c:de:4c:3e:98:c7:d4:d7: ba:a5:4c:18:3a:4f:5f:35:1e:3b:d8:f3:f7:7f:e2:0c:26:3d: c8:f3:de:da:65:55:55:a8:1a:36:2f:c2:87:39:10:16:1c:cb: 68:99:40:7b:e9:56:7a:a8:3d:8d:b4:75:d6:96:ed:50:3c:84: 2e:bc:0b:75:35:74:3d:e9:e0:4f:de:e3:25:3c:f7:ea:fc:f5: b9:70:45:d2:14:0c:d0:e6:9b:78:80:d5:cc:85:49:17:0d:c1: 30:62:6d:b8:01:b9:6b:db:7e:ef:c0:01:44:e4:8d:08:c2:33: ba:79:8c:8a:8f:c7:9f:85:02:7e:d8:fa:85:49:93:80:23:39: 88:ba:6b:f1:ed:80:b1:52:1c:2b:87:16:a9:25:f7:87:84:ac: 90:1e:48:0b:3c:10:56:43:de:cf:aa:93:24:a0:28:20:41:09: 12:3f:8d:72:a2:ed:dd:ba:b5:0d:32:88:77:ab:6e:bd:03:d4: d8:cf:03:42:b3:d3:bc:69:18:d0:8a:30:a5:29:bd:13:27:0e: 49:f4:cf:c1 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEquTXcZiNoRB0fJPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyOTE2MDczMFoXDTI3MTEwMTE2MDczMFowLzEtMCsGA1UEAxMk MjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR/oDkI3DjRphpuPQzAvLSnRZowlGQp3kN+3 58sqOFeamJv9fj5RVgpmiQlamMX2hzU8aUunpAJ2uK7H00079wlPJLLNXhu7LIPg csaXTQ5Dqfh/oM52HXeFMZQyPow0puYPXlU1ugZmy6KRJmM5Mw3tMRWWMKVRJdvZ owEXqhGyf53kfglvs7uWP+mzjTwZLS/J70aXvMH8VDvC8WXmCFVH3j/9XcN+1nMZ FM+UadhCeg8QUdzLelfg8szlvz/L85IU0HwlgBL8/MMcExeMKqX5KdALwaY98YHN wY65iUG3Ul0zyE9EpYXfB12pHEXgxSQo1jmQvtdgMoVrEZNNuQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFGUhOjtFLfMzkl3XFoMMMTB6+JjAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y NTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzI1MmFmZjJmLTk4MDctNDVkNC1i YTMxLTFhMzE5ODc4NGNhZS8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3 ODRjYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEA8e5eAMEAMe5ejBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAadjEf0r0X adHgAv8pdS4IiNfTt6gvORo+CgVFf2L8vh6QxbUTfNIJ+RMIz7IsbN5MPpjH1Ne6 pUwYOk9fNR472PP3f+IMJj3I897aZVVVqBo2L8KHORAWHMtomUB76VZ6qD2NtHXW lu1QPIQuvAt1NXQ96eBP3uMlPPfq/PW5cEXSFAzQ5pt4gNXMhUkXDcEwYm24Ablr 237vwAFE5I0IwjO6eYyKj8efhQJ+2PqFSZOAIzmIumvx7YCxUhwrhxapJfeHhKyQ HkgLPBBWQ97PqpMkoCggQQkSP41you3durUNMoh3q269A9TYzwNCs9O8aRjQijCl Kb0TJw5J9M/B -----END CERTIFICATE-----Generated at Thu Aug 7 05:05:07 2025 by rpki-client