$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.cer File: d61142c5-6dad-41b6-88e5-f1a6061a1e0d.cer (raw, json) Hash identifier: /pI6S6A5HuRHZoND/3AiS66zYLNnBBiVeFAXzHmMmFs= Subject key identifier: EF:E1:E5:CE:B5:3F:64:3C:C8:F0:A9:50:AF:3F:C9:08:BD:C5:8E:4C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A9B2F88657ADB05A9063B8580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 19:46:50 +0000 Certificate not after: Mon 25 Oct 2027 19:46:50 +0000 Subordinate resources: AS: 25740 IP: 208.68.196.0/22 IP: 208.85.160.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:2f:88:65:7a:db:05:a9:06:3b:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 22 19:46:50 2025 GMT Not After : Oct 25 19:46:50 2027 GMT Subject: CN=d61142c5-6dad-41b6-88e5-f1a6061a1e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b8:eb:8d:e6:22:46:73:f1:13:bf:e4:af:e2: 56:28:f3:f3:d0:47:41:fe:f5:0a:0f:9c:0e:c1:77: a2:de:79:c8:7e:9a:fa:7e:90:70:c2:c6:51:cb:b4: e2:6a:15:5d:3d:2a:f4:67:5a:5d:b4:81:d4:d2:17: d8:1e:15:8e:18:ec:8a:fb:16:b3:26:3d:37:06:83: 1a:99:cf:b1:21:c9:e7:7f:11:05:ca:ff:84:ed:d5: f4:70:0b:fa:45:26:9d:7b:56:85:ac:60:c6:92:ca: 0a:d4:fc:32:df:48:65:ee:b9:44:72:04:b8:49:c6: c8:32:a7:19:3b:59:dc:cc:46:9c:19:46:ad:8f:c3: 0d:42:a5:a7:e9:7d:fa:23:66:0a:f2:89:cf:6b:98: 25:29:6b:06:19:1c:c7:7d:76:19:e5:04:68:e5:19: 4b:ac:37:45:7c:b8:50:ae:ba:c2:41:d7:00:ef:6b: f1:b3:00:2e:ae:76:81:17:86:9c:3d:2d:04:18:55: 66:09:3a:ed:b7:eb:84:f7:c0:3a:d4:c2:af:78:a2: 81:8e:0b:49:23:6f:05:a8:09:e3:a6:98:bf:60:b6: b8:9c:6d:c5:5b:51:3e:07:6a:ff:e6:54:c0:45:68: 86:b4:9b:18:a5:13:00:ab:1c:75:3b:ed:2c:dc:6f: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E1:E5:CE:B5:3F:64:3C:C8:F0:A9:50:AF:3F:C9:08:BD:C5:8E:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 208.68.196.0/22 208.85.160.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25740 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9d:ca:8f:7b:b1:4f:28:05:2a:e6:48:d2:ba:0f:18:13:2d: 2f:01:da:c3:b2:18:bd:7d:a4:31:d0:8c:54:6b:9e:73:a2:e8: b2:27:48:2e:d0:b8:58:42:d8:1d:af:24:a8:46:d4:cb:9b:5d: f3:10:cc:66:d1:5b:0f:25:1a:9b:2a:8c:d3:59:06:99:7d:d6: e3:a6:e1:3c:18:50:ab:88:3d:7e:3c:b3:d3:67:f3:19:73:99: bf:70:cd:8e:f4:0f:66:0d:b5:1e:ba:e4:5b:14:a5:04:cb:4e: 41:f5:fb:b9:07:53:2e:fd:c0:4a:b2:3d:fa:94:12:d0:cb:43: 18:7c:1f:30:f0:c6:f2:e5:54:d1:b1:50:1d:99:bd:ea:3a:c7: af:96:91:82:b5:15:14:24:73:61:91:51:a1:8c:bd:34:0a:98: a9:ad:5e:e3:e4:9b:6b:50:bd:42:ec:ee:d8:c7:ab:d2:19:f0: 0c:27:5d:d1:18:36:d4:39:0f:7f:01:85:a3:2d:a7:9a:6a:99: 14:f0:9f:34:0b:e8:53:db:e0:a6:ef:92:7c:e2:4d:53:b5:8a: 22:c6:06:27:9d:4d:a9:05:de:ba:95:37:2f:ab:1f:44:6c:27: ca:38:60:f5:ca:27:0e:fa:bf:83:59:93:8b:c5:5c:d3:07:d7: 2c:8a:d9:5d -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEqbL4hletsFqQY7hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyMjE5NDY1MFoXDTI3MTAyNTE5NDY1MFowLzEtMCsGA1UEAxMk ZDYxMTQyYzUtNmRhZC00MWI2LTg4ZTUtZjFhNjA2MWExZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7jrjeYiRnPxE7/kr+JWKPPz0EdB/vUKD5wO wXei3nnIfpr6fpBwwsZRy7TiahVdPSr0Z1pdtIHU0hfYHhWOGOyK+xazJj03BoMa mc+xIcnnfxEFyv+E7dX0cAv6RSade1aFrGDGksoK1Pwy30hl7rlEcgS4ScbIMqcZ O1nczEacGUatj8MNQqWn6X36I2YK8onPa5glKWsGGRzHfXYZ5QRo5RlLrDdFfLhQ rrrCQdcA72vxswAurnaBF4acPS0EGFVmCTrtt+uE98A61MKveKKBjgtJI28FqAnj ppi/YLa4nG3FW1E+B2r/5lTARWiGtJsYpRMAqxx1O+0s3G8v4QIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFO/h5c61P2Q8yPCpUK8/yQi9xY5MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k NjExNDJjNS02ZGFkLTQxYjYtODhlNS1mMWE2MDYxYTFlMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2Q2MTE0MmM1LTZkYWQtNDFiNi04 OGU1LWYxYTYwNjFhMWUwZC9kNjExNDJjNS02ZGFkLTQxYjYtODhlNS1mMWE2MDYx YTFlMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALQRMQDBALQVaAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICZIwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAYJ3Kj3uxTygFKuZI0roPGBMtLwHaw7IYvX2kMdCM VGuec6LosidILtC4WELYHa8kqEbUy5td8xDMZtFbDyUamyqM01kGmX3W46bhPBhQ q4g9fjyz02fzGXOZv3DNjvQPZg21HrrkWxSlBMtOQfX7uQdTLv3ASrI9+pQS0MtD GHwfMPDG8uVU0bFQHZm96jrHr5aRgrUVFCRzYZFRoYy9NAqYqa1e4+Sba1C9Quzu 2Mer0hnwDCdd0Rg21DkPfwGFoy2nmmqZFPCfNAvoU9vgpu+SfOJNU7WKIsYGJ51N qQXeupU3L6sfRGwnyjhg9conDvq/g1mTi8Vc0wfXLIrZXQ== -----END CERTIFICATE-----Generated at Wed Aug 6 18:30:13 2025 by rpki-client