$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718.cer File: fbd0620c-9989-4147-9e69-5c9cef88b718.cer (raw, json) Hash identifier: w2426R4mz9lgNykY+LgvEcXutKl9Jt3KhnUl1VM1aTg= Subject key identifier: 86:03:87:30:DB:B5:7F:F9:9B:D4:A9:0C:FA:7C:6F:2B:B8:D3:45:21 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC2386B8DC2BA27D303993B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/fbd0620c-9989-4147-9e69-5c9cef88b718.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Aug 2025 19:21:16 +0000 Certificate not after: Mon 08 Nov 2027 20:21:16 +0000 Subordinate resources: AS: 401716 IP: 161.108.166.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:38:6b:8d:c2:ba:27:d3:03:99:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 5 19:21:16 2025 GMT Not After : Nov 8 20:21:16 2027 GMT Subject: CN=fbd0620c-9989-4147-9e69-5c9cef88b718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e1:87:20:83:36:8b:c0:82:b5:9f:d6:66:fc: fe:0b:ff:19:27:eb:e2:bf:34:42:b2:93:c1:ee:a9: 7e:f3:b5:78:74:ee:1e:52:34:0b:9b:84:e8:c7:92: ce:33:67:54:45:96:b7:2c:ae:d1:99:2c:3e:0f:89: b0:ca:80:32:91:d8:29:44:8c:2d:d6:85:5d:fd:48: 27:ac:db:49:a2:87:fb:d6:5c:9e:77:fa:cf:ab:97: ad:1b:10:20:50:e0:c3:f6:bf:55:77:50:10:7f:3d: 71:42:b9:09:16:06:c6:58:03:da:0d:05:1a:55:cc: b7:80:53:61:c9:6b:cc:ed:b2:f1:c0:f4:df:4c:43: 02:19:6e:11:28:88:60:16:f3:40:28:12:cb:48:b7: 5c:7f:cc:ff:a6:b7:cd:f3:34:d6:6a:1f:30:58:fe: b4:ff:39:f9:f1:d1:49:10:46:21:4c:83:39:bf:0d: 36:73:cc:62:02:47:d8:a9:eb:45:f0:b1:a2:07:53: ea:f5:ef:1e:9a:98:e3:d3:aa:0e:dd:d2:bc:0b:e3: bf:93:7d:f4:0f:7c:38:af:8c:2b:69:b0:6f:d0:07: f1:80:3b:8a:1e:31:26:33:96:42:c2:f4:c6:29:33: e2:86:f9:37:e8:3f:25:42:3e:56:81:3e:73:bd:34: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:03:87:30:DB:B5:7F:F9:9B:D4:A9:0C:FA:7C:6F:2B:B8:D3:45:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbd0620c-9989-4147-9e69-5c9cef88b718/fbd0620c-9989-4147-9e69-5c9cef88b718.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 161.108.166.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401716 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:50:9f:cc:c6:ca:22:63:a5:47:75:b8:08:da:22:aa:7b:aa: 69:ce:62:08:0b:67:5e:5c:4d:f5:c5:c2:a3:21:a8:e5:dd:ad: e8:4a:1f:ec:01:5e:7e:ec:3a:e1:09:b6:ce:0b:61:03:d5:a7: ea:5b:28:af:f9:da:ab:4b:b0:1c:04:a0:1e:e7:16:26:c9:01: b4:d1:8b:98:44:17:ba:03:5f:df:a0:a2:bf:6a:7d:f5:79:32: 03:98:f7:eb:18:ee:7d:5c:97:91:a9:ec:f4:17:08:95:af:b9: e8:3e:58:c9:ef:48:82:8e:74:5a:fa:41:1e:b5:76:15:86:41: f6:ef:78:6d:06:12:35:dd:b9:c8:af:72:7f:bc:0e:a7:14:ae: 97:23:82:c3:8c:7b:e4:62:3f:b8:40:b4:ce:9c:14:3a:30:78: 18:b9:de:6c:78:68:ad:14:96:ec:81:b6:76:fb:77:1e:7a:91: d5:f2:f8:ab:03:8c:e8:23:7f:1d:9b:0b:54:d3:ed:77:21:8b: 07:07:5f:24:b7:19:01:35:a3:11:82:45:ad:da:a1:7d:bf:35: 87:ef:76:74:f0:8f:c4:46:da:bd:ae:20:17:06:09:2e:66:a0: cc:01:43:13:ec:9c:49:6b:c7:cf:12:4c:b6:5b:93:17:0a:9b: 86:7b:ba:da -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWErCOGuNwron0wOZOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNTE5MjExNloXDTI3MTEwODIwMjExNlowLzEtMCsGA1UEAxMk ZmJkMDYyMGMtOTk4OS00MTQ3LTllNjktNWM5Y2VmODhiNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuGHIIM2i8CCtZ/WZvz+C/8ZJ+vivzRCspPB 7ql+87V4dO4eUjQLm4Tox5LOM2dURZa3LK7RmSw+D4mwyoAykdgpRIwt1oVd/Ugn rNtJoof71lyed/rPq5etGxAgUODD9r9Vd1AQfz1xQrkJFgbGWAPaDQUaVcy3gFNh yWvM7bLxwPTfTEMCGW4RKIhgFvNAKBLLSLdcf8z/prfN8zTWah8wWP60/zn58dFJ EEYhTIM5vw02c8xiAkfYqetF8LGiB1Pq9e8empjj06oO3dK8C+O/k330D3w4r4wr abBv0AfxgDuKHjEmM5ZCwvTGKTPihvk36D8lQj5WgT5zvTSOOwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIYDhzDbtX/5m9SpDPp8byu400UhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9m YmQwNjIwYy05OTg5LTQxNDctOWU2OS01YzljZWY4OGI3MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2ZiZDA2MjBjLTk5ODktNDE0Ny05 ZTY5LTVjOWNlZjg4YjcxOC9mYmQwNjIwYy05OTg5LTQxNDctOWU2OS01YzljZWY4 OGI3MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAChbKYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiE0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEtQn8zGyiJjpUd1uAjaIqp7qmnOYggLZ15cTfXFwqMhqOXd rehKH+wBXn7sOuEJts4LYQPVp+pbKK/52qtLsBwEoB7nFibJAbTRi5hEF7oDX9+g or9qffV5MgOY9+sY7n1cl5Gp7PQXCJWvueg+WMnvSIKOdFr6QR61dhWGQfbveG0G EjXducivcn+8DqcUrpcjgsOMe+RiP7hAtM6cFDoweBi53mx4aK0UluyBtnb7dx56 kdXy+KsDjOgjfx2bC1TT7XchiwcHXyS3GQE1oxGCRa3aoX2/NYfvdnTwj8RG2r2u IBcGCS5moMwBQxPsnElrx88STLZbkxcKm4Z7uto= -----END CERTIFICATE-----Generated at Wed Aug 6 16:04:16 2025 by rpki-client