$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941.cer File: e37d8dd2-7394-4cf9-b015-70c1c857a941.cer (raw, json) Hash identifier: wYekxOhrAwJWHHdl8k1IBUXhvRcvpqPTP/8+ipvxO0I= Subject key identifier: AA:20:98:D4:35:EB:A8:E6:DA:CC:C2:D9:63:E3:DF:74:B1:BE:E5:11 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB73F11C7CD39762D37828680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e37d8dd2-7394-4cf9-b015-70c1c857a941.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 21:00:46 +0000 Certificate not after: Thu 04 Nov 2027 21:00:46 +0000 Subordinate resources: AS: 2881 IP: 129.5.0.0/16 IP: 2620:0:bf0::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:3f:11:c7:cd:39:76:2d:37:82:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 1 21:00:46 2025 GMT Not After : Nov 4 21:00:46 2027 GMT Subject: CN=e37d8dd2-7394-4cf9-b015-70c1c857a941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:35:92:c0:87:1c:5b:09:11:1f:84:db:36:e8: da:41:ee:78:0e:ed:33:8e:36:d2:5f:2a:b0:4b:b0: fb:9e:fe:fe:d8:fb:eb:f8:bb:ed:16:e1:9b:c4:f8: 22:28:e0:a6:72:86:cf:ff:30:05:73:fe:2f:c0:3b: dc:63:52:c9:fb:32:13:c0:8b:e1:2d:cc:de:c4:fd: 34:10:42:dc:48:5d:97:d0:e3:1d:a2:72:05:d3:d2: 0b:8e:1b:e0:e2:2f:db:87:62:03:16:db:aa:f1:15: 82:e9:57:a2:e7:1a:d6:a7:f4:d9:07:24:18:c2:82: f6:c9:3e:d7:60:2c:d1:1d:f4:c6:1f:7e:f4:aa:9e: 8b:d4:ab:0a:f7:26:8a:f8:b9:43:cd:8c:f6:d5:14: 82:97:fe:95:41:4e:31:17:42:eb:8b:2b:93:22:64: bc:c5:f0:ae:f0:d1:65:7d:09:fc:16:95:e7:0e:86: d5:5a:9d:95:5e:03:59:30:29:3e:bb:7a:e9:ae:13: 2c:b3:43:6a:ae:54:e2:23:d0:ab:d2:42:18:08:27: 12:15:a5:fd:53:8b:8d:de:be:fc:29:a8:52:30:db: c9:a0:16:77:46:b3:4f:e1:e1:9c:2c:c7:df:39:01: b0:53:f9:f5:6d:72:1e:95:b4:b6:73:32:c9:ba:ff: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:20:98:D4:35:EB:A8:E6:DA:CC:C2:D9:63:E3:DF:74:B1:BE:E5:11 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e37d8dd2-7394-4cf9-b015-70c1c857a941.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 129.5.0.0/16 IPv6: 2620:0:bf0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2881 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7f:ce:39:f3:4f:4e:f0:e1:a4:2d:3f:be:aa:f9:9e:6c:5d: 13:34:cd:72:db:24:56:52:cd:37:fe:72:6b:af:55:a8:25:1b: 30:28:11:98:26:9f:46:92:65:34:3d:c1:a9:2b:61:54:b8:31: f4:02:78:10:1d:1b:56:d6:62:23:4e:66:b1:cb:54:0d:c7:0a: 1b:11:1c:9a:a7:44:03:85:a2:46:77:f9:be:65:43:3d:db:1d: cd:15:73:b8:fd:5b:89:d0:a9:20:d6:59:2e:52:f5:22:4d:b0: a6:31:46:af:91:c2:f0:8e:fb:b3:29:83:5b:08:d1:97:90:62: b7:02:c1:53:df:09:44:9c:68:c3:4d:80:94:6d:23:c8:85:fc: da:cc:b7:2f:e1:a8:bb:93:aa:bb:98:b0:3f:2d:a0:d8:f6:28: c6:d9:0c:ac:8a:1a:69:e3:23:21:8f:46:1c:48:79:e1:ce:a6: ab:23:28:69:df:8f:a5:ce:b9:ea:af:88:5e:36:bf:28:84:bc: 8c:6f:c1:16:39:a8:26:b4:fe:da:f7:2e:28:b4:be:f1:7d:aa: e5:53:5c:54:9b:e7:de:fe:9c:89:8c:d0:d1:e2:2c:59:a2:02: b3:6e:6e:db:58:18:e7:dc:4c:e8:4a:b3:1f:fc:7d:11:c2:8a: b2:12:18:53 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEq3PxHHzTl2LTeChoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwMTIxMDA0NloXDTI3MTEwNDIxMDA0NlowLzEtMCsGA1UEAxMk ZTM3ZDhkZDItNzM5NC00Y2Y5LWIwMTUtNzBjMWM4NTdhOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDWSwIccWwkRH4TbNujaQe54Du0zjjbSXyqw S7D7nv7+2Pvr+LvtFuGbxPgiKOCmcobP/zAFc/4vwDvcY1LJ+zITwIvhLczexP00 EELcSF2X0OMdonIF09ILjhvg4i/bh2IDFtuq8RWC6Vei5xrWp/TZByQYwoL2yT7X YCzRHfTGH370qp6L1KsK9yaK+LlDzYz21RSCl/6VQU4xF0LriyuTImS8xfCu8NFl fQn8FpXnDobVWp2VXgNZMCk+u3rprhMss0NqrlTiI9Cr0kIYCCcSFaX9U4uN3r78 KahSMNvJoBZ3RrNP4eGcLMffOQGwU/n1bXIelbS2czLJuv9GJwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKogmNQ166jm2szC2WPj33SxvuURMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l MzdkOGRkMi03Mzk0LTRjZjktYjAxNS03MGMxYzg1N2E5NDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2UzN2Q4ZGQyLTczOTQtNGNmOS1i MDE1LTcwYzFjODU3YTk0MS9lMzdkOGRkMi03Mzk0LTRjZjktYjAxNS03MGMxYzg1 N2E5NDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCBBTAPBAIAAjAJAwcAJiAAAAvwMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAgtBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADp/zjnzT07w4aQtP76q+Z5sXRM0 zXLbJFZSzTf+cmuvVaglGzAoEZgmn0aSZTQ9wakrYVS4MfQCeBAdG1bWYiNOZrHL VA3HChsRHJqnRAOFokZ3+b5lQz3bHc0Vc7j9W4nQqSDWWS5S9SJNsKYxRq+RwvCO +7Mpg1sI0ZeQYrcCwVPfCUScaMNNgJRtI8iF/NrMty/hqLuTqruYsD8toNj2KMbZ DKyKGmnjIyGPRhxIeeHOpqsjKGnfj6XOueqviF42vyiEvIxvwRY5qCa0/tr3Lii0 vvF9quVTXFSb597+nImM0NHiLFmiArNubttYGOfcTOhKsx/8fRHCirISGFM= -----END CERTIFICATE-----Generated at Wed Aug 6 16:18:40 2025 by rpki-client