$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744.cer File: 5f4e01d2-e3ef-4e93-a304-b877c13a2744.cer (raw, json) Hash identifier: PBLWr5mRwlC15G/FHhOfcOA4jpSTeQUevULF1VM+Qs4= Subject key identifier: 17:BF:76:F7:EF:02:34:BD:79:28:F4:F5:10:EB:08:0F:92:94:C5:5D Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB407689CEA8697B1FDD4BD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/5f4e01d2-e3ef-4e93-a304-b877c13a2744.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Jul 2025 17:21:12 +0000 Certificate not after: Wed 03 Nov 2027 17:21:12 +0000 Subordinate resources: AS: 1842 AS: 5663 IP: 130.11.0.0/16 IP: 130.118.0.0/16 IP: 136.177.0.0/16 IP: 144.47.0.0/16 IP: 152.61.0.0/16 IP: 192.41.204.0/24 IP: 192.41.213.0/24 IP: 192.48.124.0/24 IP: 192.55.108.0/24 IP: 192.58.223.0 -- 192.58.225.255 IP: 192.102.88.0/24 IP: 192.102.216.0/24 IP: 192.146.254.0/24 IP: 192.153.11.0/24 IP: 192.160.139.0 -- 192.160.141.255 IP: 198.187.220.0/24 IP: 199.242.141.0/24 IP: 204.68.149.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:07:68:9c:ea:86:97:b1:fd:d4:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 31 17:21:12 2025 GMT Not After : Nov 3 17:21:12 2027 GMT Subject: CN=5f4e01d2-e3ef-4e93-a304-b877c13a2744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:57:8e:37:b9:7d:8f:da:67:21:4f:ad:41:9b: 0c:6c:fc:0e:63:81:d3:44:aa:30:24:84:d8:f9:59: 93:c4:a0:e4:6a:e0:a1:96:a1:ea:65:97:5d:f2:0b: ba:e1:35:ed:85:e3:74:79:b6:60:43:75:01:d9:cc: 88:0a:25:cb:ec:b6:f7:6e:d4:74:42:59:4e:0a:1a: 9b:ae:b7:af:0a:ac:8d:f8:64:8a:56:1a:11:24:94: 66:1a:ce:91:25:dc:15:40:35:d1:9e:39:69:78:d6: c7:cd:3e:6c:36:0b:1e:a1:bc:be:dc:f8:83:58:05: c9:c6:d9:5c:6a:42:23:b5:73:f2:44:34:36:65:e8: e3:60:d4:a2:bc:28:c0:b5:6f:d9:5d:95:41:59:a3: c1:f3:e9:00:89:c4:03:7a:18:fb:32:fe:cb:c1:f8: e2:d1:bc:04:72:cb:94:d7:31:38:6a:b9:76:88:ea: f6:be:ce:1e:8e:88:75:27:4e:e5:de:e2:74:de:b3: d7:f3:60:df:ac:9c:47:f6:d1:cb:78:af:82:c6:f8: 70:bc:dd:e8:78:e2:ce:5c:46:7c:ed:74:a1:13:ea: 0d:c4:43:25:7a:75:dd:c5:1c:60:b5:84:b5:82:f2: 8d:f1:ff:6b:06:06:63:1f:2c:37:67:c9:5c:03:14: 60:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BF:76:F7:EF:02:34:BD:79:28:F4:F5:10:EB:08:0F:92:94:C5:5D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/5f4e01d2-e3ef-4e93-a304-b877c13a2744.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 130.11.0.0/16 130.118.0.0/16 136.177.0.0/16 144.47.0.0/16 152.61.0.0/16 192.41.204.0/24 192.41.213.0/24 192.48.124.0/24 192.55.108.0/24 192.58.223.0-192.58.225.255 192.102.88.0/24 192.102.216.0/24 192.146.254.0/24 192.153.11.0/24 192.160.139.0-192.160.141.255 198.187.220.0/24 199.242.141.0/24 204.68.149.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1842 5663 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b6:af:28:4c:f1:b0:8d:90:7b:5c:05:5e:98:ca:d2:21:37: c5:6e:e8:90:77:77:49:a3:f4:ab:36:11:11:55:79:bb:ec:f5: 21:62:ed:a2:04:b4:92:5f:4b:18:c6:ca:1c:8b:11:56:a0:09: 21:2d:b0:e9:ba:16:94:68:07:bc:76:9b:94:1b:27:c5:27:1e: 6c:8a:a5:7f:5d:fb:7c:81:bb:f0:4d:52:87:9f:42:8d:4f:c2: 12:fe:14:36:0c:70:b7:8c:3f:a3:6f:a0:74:1f:fe:ac:7e:57: 28:bf:2f:54:9a:27:fe:77:e3:80:de:0b:71:de:96:ea:05:34: c7:77:df:57:75:c2:93:d2:12:46:db:73:cb:c2:6b:d5:32:a0: 30:30:7c:84:f0:2f:b7:37:4a:00:5f:1f:44:4f:19:8f:08:df: 3e:13:30:86:1c:77:1e:2a:34:65:ca:08:f1:be:21:75:9c:c8: 30:b8:2d:eb:5b:29:a2:50:c3:3f:46:3e:59:62:47:e9:e2:34: 8c:64:22:52:04:cf:9e:ea:be:ec:08:54:54:ab:35:aa:7f:61: 1d:78:c2:99:c9:c8:8f:0f:65:df:db:b4:54:cb:96:ec:8e:37: b1:89:2c:78:63:fc:57:68:04:cd:fa:bb:1b:8c:d0:74:18:70: e4:6d:85:cc -----BEGIN CERTIFICATE----- MIIHfzCCBmegAwIBAgIUAQ0Mn0MoWEq0B2ic6oaXsf3UvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDczMTE3MjExMloXDTI3MTEwMzE3MjExMlowLzEtMCsGA1UEAxMk NWY0ZTAxZDItZTNlZi00ZTkzLWEzMDQtYjg3N2MxM2EyNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4leON7l9j9pnIU+tQZsMbPwOY4HTRKowJITY +VmTxKDkauChlqHqZZdd8gu64TXtheN0ebZgQ3UB2cyICiXL7Lb3btR0QllOChqb rrevCqyN+GSKVhoRJJRmGs6RJdwVQDXRnjlpeNbHzT5sNgseoby+3PiDWAXJxtlc akIjtXPyRDQ2ZejjYNSivCjAtW/ZXZVBWaPB8+kAicQDehj7Mv7Lwfji0bwEcsuU 1zE4arl2iOr2vs4ejoh1J07l3uJ03rPX82DfrJxH9tHLeK+CxvhwvN3oeOLOXEZ8 7XShE+oNxEMlenXdxRxgtYS1gvKN8f9rBgZjHyw3Z8lcAxRghQIDAQABo4IEkTCC BI0wHQYDVR0OBBYEFBe/dvfvAjS9eSj09RDrCA+SlMVdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 ZjRlMDFkMi1lM2VmLTRlOTMtYTMwNC1iODc3YzEzYTI3NDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzVmNGUwMWQyLWUzZWYtNGU5My1h MzA0LWI4NzdjMTNhMjc0NC81ZjRlMDFkMi1lM2VmLTRlOTMtYTMwNC1iODc3YzEz YTI3NDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwgZEGCCsGAQUF BwEHAQH/BIGBMH8wfQQCAAEwdwMDAIILAwMAgnYDAwCIsQMDAJAvAwMAmD0DBADA KcwDBADAKdUDBADAMHwDBADAN2wwDAMEAMA63wMEAcA64AMEAMBmWAMEAMBm2AME AMCS/gMEAMCZCzAMAwQAwKCLAwQBwKCMAwQAxrvcAwQAx/KNAwQAzESVMB0GCCsG AQUFBwEIAQH/BA4wDKAKMAgCAgcyAgIWHzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCktq8oTPGwjZB7XAVe mMrSITfFbuiQd3dJo/SrNhERVXm77PUhYu2iBLSSX0sYxsocixFWoAkhLbDpuhaU aAe8dpuUGyfFJx5siqV/Xft8gbvwTVKHn0KNT8IS/hQ2DHC3jD+jb6B0H/6sflco vy9Umif+d+OA3gtx3pbqBTTHd99XdcKT0hJG23PLwmvVMqAwMHyE8C+3N0oAXx9E TxmPCN8+EzCGHHceKjRlygjxviF1nMgwuC3rWymiUMM/Rj5ZYkfp4jSMZCJSBM+e 6r7sCFRUqzWqf2EdeMKZyciPD2Xf27RUy5bsjjexiSx4Y/xXaATN+rsbjNB0GHDk bYXM -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:51 2025 by rpki-client