$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/81a01ac1-db41-4f70-b85a-cd351f471a48.cer File: 81a01ac1-db41-4f70-b85a-cd351f471a48.cer (raw, json) Hash identifier: PT10nBpbWj/K662/VqdPuLh6LWRdZivSvTjUhIiTedI= Subject key identifier: E3:D0:C8:E2:AD:B6:5E:DE:7E:84:95:52:D8:74:46:1B:E3:87:52:1A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ABF5FFEA553873BB26C051180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/81a01ac1-db41-4f70-b85a-cd351f471a48/81a01ac1-db41-4f70-b85a-cd351f471a48.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/81a01ac1-db41-4f70-b85a-cd351f471a48/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Aug 2025 18:53:34 +0000 Certificate not after: Sun 07 Nov 2027 19:53:34 +0000 Subordinate resources: IP: 198.51.225.0 -- 198.51.229.255 IP: 198.99.250.0 -- 198.99.254.255 IP: 198.203.208.0 -- 198.203.212.255 IP: 205.153.136.0/22 IP: 205.172.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:5f:fe:a5:53:87:3b:b2:6c:05:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 4 18:53:34 2025 GMT Not After : Nov 7 19:53:34 2027 GMT Subject: CN=81a01ac1-db41-4f70-b85a-cd351f471a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:ea:31:f4:a9:a6:2a:04:b7:bf:5b:94:bb: 1e:14:3f:35:23:44:4d:6b:b1:86:ad:21:6c:91:b4: 59:ad:b3:77:78:ae:fa:db:b7:00:37:da:af:da:33: 8c:8c:07:11:b4:14:a8:24:a0:85:8b:04:dd:54:6d: 54:69:3d:9a:37:a4:ae:3d:a8:af:54:75:41:c3:77: e7:50:cb:69:84:df:35:96:df:b3:81:01:e6:61:fb: d1:d9:c1:d4:56:f0:74:0e:59:e5:ee:7f:d5:c4:62: cd:d6:ce:fe:1c:24:3e:71:5c:84:bd:f4:9f:c8:50: 56:06:22:af:d0:ab:30:bd:08:cd:15:7d:09:34:65: a0:ce:9c:e8:f3:dc:6c:dd:7c:a1:28:78:e5:2f:f5: 7a:75:d6:ab:ce:fc:e9:c6:a0:74:9e:a6:8b:e0:cb: 79:2d:ec:78:8a:01:f8:b5:46:e0:2b:2b:79:6e:82: e8:bd:13:7a:be:87:6c:b4:65:58:22:e2:b9:c8:ed: 97:26:22:45:a6:80:7e:d8:b8:77:b5:cc:27:fd:f2: d9:41:fb:98:6f:36:58:c9:46:e5:b2:19:2a:08:e5: 5f:f2:f7:00:a0:64:44:bb:e3:cb:5e:dd:5c:67:ac: 5f:b2:a0:ba:96:9a:06:0e:76:68:83:21:72:b5:e5: dd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D0:C8:E2:AD:B6:5E:DE:7E:84:95:52:D8:74:46:1B:E3:87:52:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/81a01ac1-db41-4f70-b85a-cd351f471a48/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/81a01ac1-db41-4f70-b85a-cd351f471a48/81a01ac1-db41-4f70-b85a-cd351f471a48.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 198.51.225.0-198.51.229.255 198.99.250.0-198.99.254.255 198.203.208.0-198.203.212.255 205.153.136.0/22 205.172.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b9:5a:e7:3f:72:64:f6:46:78:0e:d2:88:f0:05:9d:a9:53: fd:b0:6d:93:80:84:93:51:e5:93:8e:0f:d3:63:df:4d:b6:b6: a2:14:5b:c4:66:57:e0:52:6e:0f:c5:8b:5a:88:61:a9:fa:64: 66:df:59:a3:9f:54:a4:38:70:c0:e9:2f:d0:b5:00:53:63:8b: b9:21:dc:e0:2f:72:00:69:64:37:93:0e:65:23:ec:c5:a8:5a: 83:79:20:5f:b2:ee:82:41:67:bf:8a:80:ab:8d:f7:b7:77:23: 02:be:8f:48:4e:ad:05:5d:fe:83:64:f7:0f:fe:ee:0f:b9:21: 40:56:fc:75:40:71:cb:da:bf:0f:c8:7b:3e:80:8d:ca:87:45: 9e:cf:e7:2f:99:77:f3:33:38:90:dc:ab:df:f2:00:bc:81:9c: 1d:92:99:74:77:a3:95:42:d7:c5:e7:ff:f5:c8:e8:08:6d:01: 3e:6a:04:21:2c:b5:99:e8:81:03:d9:37:f0:66:ca:37:f7:1d: e9:fb:d4:cb:53:16:3c:81:b9:3a:2e:eb:0a:4d:75:7e:a0:8b: f6:85:3d:73:22:ba:4e:e7:8c:d7:d6:9b:49:48:38:92:23:c9: b9:6d:c4:c3:45:06:ff:53:51:2c:eb:65:3f:7c:5d:a0:cf:72: 2e:16:5b:c8 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEq/X/6lU4c7smwFEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNDE4NTMzNFoXDTI3MTEwNzE5NTMzNFowLzEtMCsGA1UEAxMk ODFhMDFhYzEtZGI0MS00ZjcwLWI4NWEtY2QzNTFmNDcxYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAginqMfSppioEt79blLseFD81I0RNa7GGrSFs kbRZrbN3eK7627cAN9qv2jOMjAcRtBSoJKCFiwTdVG1UaT2aN6SuPaivVHVBw3fn UMtphN81lt+zgQHmYfvR2cHUVvB0Dlnl7n/VxGLN1s7+HCQ+cVyEvfSfyFBWBiKv 0KswvQjNFX0JNGWgzpzo89xs3XyhKHjlL/V6ddarzvzpxqB0nqaL4Mt5Lex4igH4 tUbgKyt5boLovRN6vodstGVYIuK5yO2XJiJFpoB+2Lh3tcwn/fLZQfuYbzZYyUbl shkqCOVf8vcAoGREu+PLXt1cZ6xfsqC6lpoGDnZogyFyteXdewIDAQABo4IELzCC BCswHQYDVR0OBBYEFOPQyOKttl7efoSVUth0Rhvjh1IaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 MWEwMWFjMS1kYjQxLTRmNzAtYjg1YS1jZDM1MWY0NzFhNDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzgxYTAxYWMxLWRiNDEtNGY3MC1i ODVhLWNkMzUxZjQ3MWE0OC84MWEwMWFjMS1kYjQxLTRmNzAtYjg1YS1jZDM1MWY0 NzFhNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MDwEAgABMDYwDAMEAMYz4QMEAcYz5DAMAwQBxmP6AwQAxmP+MAwD BATGy9ADBADGy9QDBALNmYgDBALNrPgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAM7la5z9yZPZGeA7SiPAF nalT/bBtk4CEk1Hlk44P02PfTba2ohRbxGZX4FJuD8WLWohhqfpkZt9Zo59UpDhw wOkv0LUAU2OLuSHc4C9yAGlkN5MOZSPsxahag3kgX7LugkFnv4qAq433t3cjAr6P SE6tBV3+g2T3D/7uD7khQFb8dUBxy9q/D8h7PoCNyodFns/nL5l38zM4kNyr3/IA vIGcHZKZdHejlULXxef/9cjoCG0BPmoEISy1meiBA9k38GbKN/cd6fvUy1MWPIG5 Oi7rCk11fqCL9oU9cyK6TueM19abSUg4kiPJuW3Ew0UG/1NRLOtlP3xdoM9yLhZb yA== -----END CERTIFICATE-----Generated at Thu Aug 7 03:18:14 2025 by rpki-client