$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer File: 64a0177e-75a0-4585-b068-73030736bbb1.cer (raw, json) Hash identifier: K9P0s2JrcuWDF0kB9P5pwJBOlCIqeNtrvBH32aJmOtw= Subject key identifier: C7:CF:89:56:DB:55:A4:13:2A:3A:30:CC:DD:D3:C1:D7:80:2A:EE:35 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB7430B9BE83535306A206840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 21:08:47 +0000 Certificate not after: Thu 04 Nov 2027 21:08:47 +0000 Subordinate resources: IP: 129.161.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:43:0b:9b:e8:35:35:30:6a:20:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 1 21:08:47 2025 GMT Not After : Nov 4 21:08:47 2027 GMT Subject: CN=64a0177e-75a0-4585-b068-73030736bbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:ec:8c:f5:80:ef:53:04:73:54:af:9a:0c: 6b:a3:da:52:3a:81:37:ee:45:a1:80:7d:b6:7c:d2: 35:25:bb:e9:59:79:c8:58:f8:cd:a6:71:cc:40:fe: 06:52:2d:b3:84:85:6d:50:d5:cb:5f:85:6b:1b:35: 2f:b1:fb:8e:8b:e3:92:da:65:c2:e4:2b:3e:d4:38: 86:39:74:4d:94:2c:3c:b6:e3:13:6d:50:6c:34:cb: 15:2a:bc:fe:61:8f:8f:f7:a8:fe:31:5a:08:ef:93: b3:8a:5a:3b:11:96:34:79:4f:ab:dd:ec:d1:d2:08: 25:12:d9:40:d0:9d:bc:a9:bb:a9:4a:a7:17:00:02: 0c:94:6e:36:b6:04:f0:d4:b8:7a:36:fe:b3:e4:7a: 34:ba:a1:f6:74:4c:fe:34:93:4e:c3:6b:98:04:51: 1f:30:a6:16:cf:df:6e:40:d6:d7:c9:48:bf:b1:0a: 90:53:8c:7a:d7:34:bd:43:fa:08:5b:91:d5:b0:60: 41:43:23:82:a7:07:9d:12:d2:2e:ce:50:70:f2:4a: 89:36:37:6f:50:60:4e:19:f5:9e:fc:f1:b2:12:07: 67:63:ef:eb:50:a8:45:0c:84:19:0c:9d:99:da:90: 7f:62:25:08:09:46:1a:f8:59:2c:da:2e:0d:c4:87: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CF:89:56:DB:55:A4:13:2A:3A:30:CC:DD:D3:C1:D7:80:2A:EE:35 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 129.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:35:46:51:7d:16:7a:08:2a:29:44:ee:5b:b9:ed:c7:96:7a: d0:b1:e1:23:91:c6:5b:72:91:f1:85:82:73:e9:f0:e9:a8:c6: b1:8d:3e:a0:6c:c8:bd:38:71:04:be:2d:40:ad:4f:df:cb:4c: 9a:9a:ad:dc:e9:00:12:4a:a4:13:64:59:9d:f2:7b:e4:0c:52: df:35:f4:88:99:12:11:93:08:8a:e5:aa:cf:84:b3:99:b8:cd: 2b:74:3b:de:91:95:35:88:f9:d8:50:64:d9:ab:8f:94:86:2f: 03:7c:c5:7e:c6:be:92:3c:ba:0c:d1:76:c5:95:de:6d:eb:af: 36:71:5d:32:ba:a7:b1:c3:8c:3e:cd:02:e0:04:1a:08:7b:78: 47:c4:53:c0:93:64:b9:85:47:16:7c:79:f0:d7:63:b1:b1:f7: 58:ee:3b:46:f1:5c:c9:2f:a9:e1:9d:e7:09:42:f0:f7:7d:37: dc:d8:c7:f3:e1:4e:8a:9a:25:e7:92:09:e9:c2:e0:7e:26:61: ff:6d:34:0e:af:ff:51:8c:6d:fb:36:d8:8c:9f:d1:14:cd:15: 18:b9:85:0a:6b:4d:59:e7:47:b0:55:f7:7d:86:fc:95:a1:72: 0a:26:9a:ce:fd:54:7d:c4:15:47:93:40:bd:14:c7:2a:70:2e: 5d:7d:11:68 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEq3Qwub6DU1MGogaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwMTIxMDg0N1oXDTI3MTEwNDIxMDg0N1owLzEtMCsGA1UEAxMk NjRhMDE3N2UtNzVhMC00NTg1LWIwNjgtNzMwMzA3MzZiYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudzsjPWA71MEc1Svmgxro9pSOoE37kWhgH22 fNI1JbvpWXnIWPjNpnHMQP4GUi2zhIVtUNXLX4VrGzUvsfuOi+OS2mXC5Cs+1DiG OXRNlCw8tuMTbVBsNMsVKrz+YY+P96j+MVoI75Ozilo7EZY0eU+r3ezR0gglEtlA 0J28qbupSqcXAAIMlG42tgTw1Lh6Nv6z5Ho0uqH2dEz+NJNOw2uYBFEfMKYWz99u QNbXyUi/sQqQU4x61zS9Q/oIW5HVsGBBQyOCpwedEtIuzlBw8kqJNjdvUGBOGfWe /PGyEgdnY+/rUKhFDIQZDJ2Z2pB/YiUICUYa+Fks2i4NxIfBHwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFMfPiVbbVaQTKjowzN3TwdeAKu41MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82 NGEwMTc3ZS03NWEwLTQ1ODUtYjA2OC03MzAzMDczNmJiYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzY0YTAxNzdlLTc1YTAtNDU4NS1i MDY4LTczMDMwNzM2YmJiMS82NGEwMTc3ZS03NWEwLTQ1ODUtYjA2OC03MzAzMDcz NmJiYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCBoTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBNUZRfRZ6CCopRO5bue3H lnrQseEjkcZbcpHxhYJz6fDpqMaxjT6gbMi9OHEEvi1ArU/fy0yamq3c6QASSqQT ZFmd8nvkDFLfNfSImRIRkwiK5arPhLOZuM0rdDvekZU1iPnYUGTZq4+Uhi8DfMV+ xr6SPLoM0XbFld5t6682cV0yuqexw4w+zQLgBBoIe3hHxFPAk2S5hUcWfHnw12Ox sfdY7jtG8VzJL6nhnecJQvD3fTfc2Mfz4U6KmiXnkgnpwuB+JmH/bTQOr/9RjG37 NtiMn9EUzRUYuYUKa01Z50ewVfd9hvyVoXIKJprO/VR9xBVHk0C9FMcqcC5dfRFo -----END CERTIFICATE-----Generated at Sat Aug 9 02:56:47 2025 by rpki-client