$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer File: 0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer (raw, json) Hash identifier: IqXxIqRqbWG6f65hGAL4XnryIdDco/QEFpeWgdgr3M4= Subject key identifier: EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B3C63D384D6398AD22822D980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Sep 2025 13:37:20 +0000 Certificate not after: Wed 22 Dec 2027 14:37:20 +0000 Subordinate resources: AS: 401990 IP: 23.145.212.0/24 IP: 2602:f560::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:63:d3:84:d6:39:8a:d2:28:22:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 18 13:37:20 2025 GMT Not After : Dec 22 14:37:20 2027 GMT Subject: CN=0cf2fac2-d352-4204-9b53-f2d7e4684cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:de:55:8d:4d:86:9b:ab:7e:52:7c:e3:cb:04: d2:da:f0:e5:b5:e3:5b:64:d2:61:96:8a:6d:e9:a4: 9e:60:12:1e:4e:0f:e1:ba:f2:7a:92:36:de:f1:53: e3:68:6d:bc:ea:dc:88:86:f0:aa:7d:52:bb:8f:0d: f1:b5:20:88:89:d2:a0:c6:8f:c5:5e:2d:73:81:ff: 86:e9:fc:7d:3f:5a:7a:f9:1f:84:a6:26:be:d0:d3: d5:97:9c:4c:a9:68:05:b6:64:20:d1:7c:fa:d1:0f: 2a:0f:a0:eb:6a:c9:4a:95:7c:0b:a6:0a:f4:84:e3: 2a:72:0f:0d:94:0e:b2:83:cb:69:3b:e4:85:02:60: c2:66:f0:c6:c0:b5:44:30:7b:26:a7:4a:89:f2:dd: 3a:57:f5:ac:da:4f:08:f8:de:1c:58:7d:f6:7d:d7: 89:0e:bc:37:dd:8c:37:9c:a1:5a:51:14:bd:a0:76: 4b:d8:8b:21:d2:47:91:80:53:68:48:60:fb:4d:2f: e2:78:df:98:be:ab:32:fc:37:8e:fd:1c:62:bd:92: 75:84:68:9c:5e:24:e4:f6:49:91:14:ca:f9:94:eb: d7:5b:06:07:85:12:8f:c3:fd:59:33:bc:5d:1f:20: c9:da:8e:be:7c:12:56:12:bc:5e:31:00:42:b5:1f: 03:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.212.0/24 IPv6: 2602:f560::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401990 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4a:54:3f:e9:43:23:75:c1:4c:7f:72:11:c1:04:2c:20:8f: a1:ee:02:08:84:8b:dd:18:64:31:bb:b4:b3:a5:58:c2:3b:74: a4:41:29:23:20:3b:58:d3:34:3f:19:3e:eb:11:2f:24:52:85: c8:4d:0c:99:91:86:4d:06:39:ab:60:7c:85:b0:96:6f:56:aa: 29:09:86:66:09:8a:66:0e:e3:97:7f:c5:ca:69:5d:92:5e:dd: 1e:78:3a:6a:a2:51:c8:c2:44:83:87:77:5a:f2:9b:42:9f:b0: 1e:f1:f5:83:65:ca:12:cd:81:09:37:6a:c0:66:7e:69:49:9c: 33:06:5f:72:bd:3c:96:29:f3:f0:3a:2c:ea:fe:85:6d:87:d1: 9c:6e:99:c4:d0:cb:a5:41:3d:84:3e:b2:73:ee:56:a0:b7:8e: 62:04:2b:33:24:57:83:79:39:8c:90:2d:e2:32:22:78:45:60: d6:9d:a1:c3:5d:80:30:33:e4:fd:69:4f:5c:26:d5:5c:bc:04: 52:01:af:4a:e8:ed:a6:46:65:55:67:58:d8:72:81:f9:8e:d0: 84:4e:29:6f:d9:7d:a1:e4:86:9a:84:11:e6:ae:21:f5:91:6b: 7d:6e:9c:cb:02:5e:88:8a:29:bd:a0:00:ef:81:7d:de:f1:58: 8b:61:33:19 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEs8Y9OE1jmK0igi2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxODEzMzcyMFoXDTI3MTIyMjE0MzcyMFowLzEtMCsGA1UEAxMk MGNmMmZhYzItZDM1Mi00MjA0LTliNTMtZjJkN2U0Njg0Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN5VjU2Gm6t+UnzjywTS2vDlteNbZNJhlopt 6aSeYBIeTg/huvJ6kjbe8VPjaG286tyIhvCqfVK7jw3xtSCIidKgxo/FXi1zgf+G 6fx9P1p6+R+Epia+0NPVl5xMqWgFtmQg0Xz60Q8qD6DraslKlXwLpgr0hOMqcg8N lA6yg8tpO+SFAmDCZvDGwLVEMHsmp0qJ8t06V/Ws2k8I+N4cWH32fdeJDrw33Yw3 nKFaURS9oHZL2Ish0keRgFNoSGD7TS/ieN+Yvqsy/DeO/RxivZJ1hGicXiTk9kmR FMr5lOvXWwYHhRKPw/1ZM7xdHyDJ2o6+fBJWErxeMQBCtR8DzwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFO5vZMBhx+rrexKLRS9/k77VNs0TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w Y2YyZmFjMi1kMzUyLTQyMDQtOWI1My1mMmQ3ZTQ2ODRjY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzBjZjJmYWMyLWQzNTItNDIwNC05 YjUzLWYyZDdlNDY4NGNjZS8wY2YyZmFjMi1kMzUyLTQyMDQtOWI1My1mMmQ3ZTQ2 ODRjY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkdQwDgQCAAIwCAMGACYC9WAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiRjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0SlQ/6UMjdcFMf3IRwQQsII+h 7gIIhIvdGGQxu7SzpVjCO3SkQSkjIDtY0zQ/GT7rES8kUoXITQyZkYZNBjmrYHyF sJZvVqopCYZmCYpmDuOXf8XKaV2SXt0eeDpqolHIwkSDh3da8ptCn7Ae8fWDZcoS zYEJN2rAZn5pSZwzBl9yvTyWKfPwOizq/oVth9GcbpnE0MulQT2EPrJz7lagt45i BCszJFeDeTmMkC3iMiJ4RWDWnaHDXYAwM+T9aU9cJtVcvARSAa9K6O2mRmVVZ1jY coH5jtCETilv2X2h5IaahBHmriH1kWt9bpzLAl6Iiim9oADvgX3e8ViLYTMZ -----END CERTIFICATE-----Generated at Tue Nov 4 23:34:45 2025 by rpki-client