$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c.cer File: fb26a778-1de5-4c0c-ae29-169277907d9c.cer (raw, json) Hash identifier: x0DcFX1BGWU/CGs1/d10Qdl0w5LcMfaUw8M3GX+S30c= Subject key identifier: E1:27:44:12:2B:2D:5A:DA:49:3D:88:C8:4E:00:EA:2C:AF:97:46:68 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB72BFEE10B388B3CE20BFA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/fb26a778-1de5-4c0c-ae29-169277907d9c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 20:22:20 +0000 Certificate not after: Thu 04 Nov 2027 20:22:20 +0000 Subordinate resources: AS: 589 IP: 129.120.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:2b:fe:e1:0b:38:8b:3c:e2:0b:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 1 20:22:20 2025 GMT Not After : Nov 4 20:22:20 2027 GMT Subject: CN=fb26a778-1de5-4c0c-ae29-169277907d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:fa:e1:33:a1:95:74:05:55:72:99:cd:d9: be:a8:97:91:4e:ca:87:07:9d:55:70:94:77:dc:0e: e2:46:48:74:50:79:c4:85:19:9c:6d:4c:d5:6f:19: 58:a1:67:b1:ae:5b:ee:ba:40:5a:cd:a7:b0:21:89: c5:9d:be:f5:ea:d1:cc:e0:ae:a2:42:3d:5f:90:8e: c9:c2:65:c7:78:56:2e:3a:5b:7b:04:e2:4c:31:d6: e1:df:fa:89:3b:98:08:6e:92:63:9e:1d:df:7c:03: 9c:e2:1c:7f:b4:b7:41:a3:ba:bb:40:ea:72:ea:1e: 7e:66:7d:2d:2d:69:cf:f7:47:f4:2e:3b:b9:a8:40: 9f:d0:72:3b:a3:27:1a:f1:0c:73:53:3a:2c:0b:35: 34:b3:84:31:5f:5b:c2:52:ad:08:63:e8:81:8a:42: b1:2c:04:a0:ef:88:04:ef:23:0b:53:80:4c:ee:6d: a2:66:5e:fe:b6:33:53:59:48:1e:4b:fd:92:01:93: 93:7f:b3:2e:a8:01:4f:7f:8d:4e:d1:fb:3b:13:43: c2:b4:62:87:48:29:3f:46:6a:75:ba:08:74:3f:8b: 1d:ab:b7:19:83:67:e4:2a:34:54:53:f1:e2:b3:f5: e0:cc:86:b2:9f:d7:62:d5:02:c8:a5:fe:cf:11:c5: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:27:44:12:2B:2D:5A:DA:49:3D:88:C8:4E:00:EA:2C:AF:97:46:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb26a778-1de5-4c0c-ae29-169277907d9c/fb26a778-1de5-4c0c-ae29-169277907d9c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 129.120.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 589 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:32:1b:b0:d2:50:d8:74:ae:ff:f6:4f:4c:a9:d9:25:de:22: 2d:ec:d6:02:d9:91:99:c5:f7:36:c4:8e:31:42:61:7f:34:c4: 93:a1:5f:77:65:9e:40:93:76:43:58:82:97:61:3e:f5:50:1b: de:e6:d2:b2:f9:5d:a8:a8:ec:5e:18:38:c3:64:60:86:b8:fe: a7:c2:d4:8a:cb:13:d4:95:01:81:e6:6a:19:f5:ff:7d:ee:a3: a1:5d:97:29:03:ba:29:fd:fc:20:ec:0c:5e:11:c1:82:3c:23: 01:e3:37:7f:60:c9:9c:90:a3:1b:4e:7e:61:6b:f3:08:01:60: bc:77:e4:4f:62:6b:af:58:9e:0a:c9:c1:d3:6a:e0:54:9c:f6: 3e:31:df:cd:33:92:17:c7:92:96:bb:bb:f6:74:9b:d8:1c:45: df:b4:1c:fc:1e:41:00:9d:13:9d:08:74:37:55:08:1c:08:b1: c7:d6:ad:ca:c8:0f:39:32:5e:d4:7e:18:ff:9e:8f:45:51:fd: 48:3c:82:bd:8e:21:e0:74:93:a2:1c:92:b9:7b:f3:a4:86:39: 43:4b:ff:59:af:9f:b5:30:05:b1:12:74:35:60:01:95:54:66: 60:1d:a3:b3:d1:3c:5c:6b:9f:3a:94:ba:1d:f8:38:d5:0a:21: 1d:16:fb:25 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEq3K/7hCziLPOIL+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwMTIwMjIyMFoXDTI3MTEwNDIwMjIyMFowLzEtMCsGA1UEAxMk ZmIyNmE3NzgtMWRlNS00YzBjLWFlMjktMTY5Mjc3OTA3ZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpv64TOhlXQFVXKZzdm+qJeRTsqHB51VcJR3 3A7iRkh0UHnEhRmcbUzVbxlYoWexrlvuukBazaewIYnFnb716tHM4K6iQj1fkI7J wmXHeFYuOlt7BOJMMdbh3/qJO5gIbpJjnh3ffAOc4hx/tLdBo7q7QOpy6h5+Zn0t LWnP90f0Lju5qECf0HI7oyca8QxzUzosCzU0s4QxX1vCUq0IY+iBikKxLASg74gE 7yMLU4BM7m2iZl7+tjNTWUgeS/2SAZOTf7MuqAFPf41O0fs7E0PCtGKHSCk/Rmp1 ugh0P4sdq7cZg2fkKjRUU/His/XgzIayn9di1QLIpf7PEcWswwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFOEnRBIrLVraST2IyE4A6iyvl0ZoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9m YjI2YTc3OC0xZGU1LTRjMGMtYWUyOS0xNjkyNzc5MDdkOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2ZiMjZhNzc4LTFkZTUtNGMwYy1h ZTI5LTE2OTI3NzkwN2Q5Yy9mYjI2YTc3OC0xZGU1LTRjMGMtYWUyOS0xNjkyNzc5 MDdkOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCBeDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIC TTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBYMhuw0lDYdK7/9k9Mqdkl3iIt7NYC2ZGZxfc2xI4xQmF/NMST oV93ZZ5Ak3ZDWIKXYT71UBve5tKy+V2oqOxeGDjDZGCGuP6nwtSKyxPUlQGB5moZ 9f997qOhXZcpA7op/fwg7AxeEcGCPCMB4zd/YMmckKMbTn5ha/MIAWC8d+RPYmuv WJ4KycHTauBUnPY+Md/NM5IXx5KWu7v2dJvYHEXftBz8HkEAnROdCHQ3VQgcCLHH 1q3KyA85Ml7Ufhj/no9FUf1IPIK9jiHgdJOiHJK5e/OkhjlDS/9Zr5+1MAWxEnQ1 YAGVVGZgHaOz0Txca586lLod+DjVCiEdFvsl -----END CERTIFICATE-----Generated at Wed Aug 6 16:18:49 2025 by rpki-client