$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0.cer File: 16b561b0-e462-4e18-a6cf-e910426a13d0.cer (raw, json) Hash identifier: EpW6v60HqtPNj1C4vwEULXmF+gI+Or2Cfr+JOScmucs= Subject key identifier: E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AAC10FE183463E64D716B8A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Jul 2025 20:54:02 +0000 Certificate not after: Sun 31 Oct 2027 20:54:02 +0000 Subordinate resources: AS: 394590 IP: 23.144.104.0/24 IP: 2607:ec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:10:fe:18:34:63:e6:4d:71:6b:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 28 20:54:02 2025 GMT Not After : Oct 31 20:54:02 2027 GMT Subject: CN=16b561b0-e462-4e18-a6cf-e910426a13d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a5:e0:c5:be:28:24:71:03:e5:3d:71:62:1d: f3:e8:e0:78:1b:aa:b9:3c:33:e1:64:bf:c0:42:93: 04:ca:f9:a2:d6:54:d9:c4:3d:c0:8c:c9:04:76:c2: 29:6e:ac:4a:4e:77:fd:cf:76:7c:c6:52:73:fe:b8: ab:2a:d0:fe:19:20:56:16:e5:b4:4f:38:ad:f9:86: f4:ed:ae:f9:9e:3c:e6:b7:c6:74:58:a0:c1:ba:ef: ef:38:5b:72:ee:5f:17:13:8a:f7:24:65:26:6a:f3: d5:b7:e1:f8:b6:d1:67:3c:d0:73:13:3e:9b:b8:51: be:a5:47:cc:2b:19:1e:0d:90:a3:4e:8c:60:d2:fd: 13:74:75:83:92:cb:12:75:07:7a:01:d7:37:45:ed: e8:d9:2e:c7:bd:cf:f5:42:71:3c:5c:23:c3:0e:ad: b2:14:ad:6d:c2:08:16:7c:3e:15:2c:1e:c4:54:41: 08:ed:95:aa:ea:44:b6:10:90:cd:f0:fb:66:fd:85: ca:a4:82:3f:8a:3c:1a:e6:7d:45:93:3d:5d:53:98: 94:42:6e:1f:5b:87:c7:66:97:ae:97:9d:57:d8:34: 1d:f2:61:b6:d7:8c:fb:a4:9b:9b:f3:d8:81:3b:fb: 95:57:de:8a:61:e9:2f:54:3c:38:29:c4:c1:6e:53: 3f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6E:D8:A5:DD:D6:C0:5D:82:7E:73:E5:8C:35:72:5C:02:B7:6D:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/16b561b0-e462-4e18-a6cf-e910426a13d0/16b561b0-e462-4e18-a6cf-e910426a13d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.144.104.0/24 IPv6: 2607:ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394590 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:dd:22:06:70:2c:f4:74:a3:c1:b6:6d:34:01:55:bd:99:8f: 47:ce:44:79:4e:c4:81:5b:bb:f4:65:ee:b7:63:92:b1:1f:5a: c3:d0:b3:42:ad:52:ca:c5:ca:ff:01:e4:47:0d:71:71:19:15: a0:cb:24:f5:15:70:fb:9c:5f:91:9a:f6:13:13:5c:f5:34:d8: 9e:e1:39:2c:78:fa:96:1e:8a:bd:4d:56:84:0f:56:69:bb:dd: ca:a2:2c:c4:e6:35:0d:89:0f:6a:51:f3:15:5e:4c:51:d5:e2: 01:98:06:77:0c:b0:27:82:a7:06:ee:15:4e:59:88:4c:17:2c: 99:45:01:a6:62:12:f0:a2:9c:05:04:17:58:74:42:4b:07:07: fd:b4:57:b1:ff:f0:38:04:23:96:aa:1d:22:b5:31:5c:66:53: c2:7d:00:80:b8:30:4b:09:62:30:77:92:3a:7f:1b:c3:88:fd: 2a:ad:2d:a8:d5:05:b7:7f:6c:8d:42:0e:df:87:94:34:64:67: e1:a7:91:be:36:49:24:b8:8d:6a:05:88:ee:7d:18:4e:8e:5f: 9f:94:37:ca:f8:d2:8d:b2:bb:3a:60:b6:de:a6:3d:13:2e:e6: a3:54:bf:93:91:9b:40:78:9b:68:41:ac:ff:e5:2d:b0:15:d1: d6:14:c0:c6 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEqsEP4YNGPmTXFrigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyODIwNTQwMloXDTI3MTAzMTIwNTQwMlowLzEtMCsGA1UEAxMk MTZiNTYxYjAtZTQ2Mi00ZTE4LWE2Y2YtZTkxMDQyNmExM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKXgxb4oJHED5T1xYh3z6OB4G6q5PDPhZL/A QpMEyvmi1lTZxD3AjMkEdsIpbqxKTnf9z3Z8xlJz/rirKtD+GSBWFuW0Tzit+Yb0 7a75njzmt8Z0WKDBuu/vOFty7l8XE4r3JGUmavPVt+H4ttFnPNBzEz6buFG+pUfM KxkeDZCjToxg0v0TdHWDkssSdQd6Adc3Re3o2S7Hvc/1QnE8XCPDDq2yFK1twggW fD4VLB7EVEEI7ZWq6kS2EJDN8Ptm/YXKpII/ijwa5n1Fkz1dU5iUQm4fW4fHZpeu l51X2DQd8mG214z7pJub89iBO/uVV96KYekvVDw4KcTBblM/HwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFONu2KXd1sBdgn5z5Yw1clwCt21aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8x NmI1NjFiMC1lNDYyLTRlMTgtYTZjZi1lOTEwNDI2YTEzZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzE2YjU2MWIwLWU0NjItNGUxOC1h NmNmLWU5MTA0MjZhMTNkMC8xNmI1NjFiMC1lNDYyLTRlMTgtYTZjZi1lOTEwNDI2 YTEzZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXkGgwDQQCAAIwBwMFACYHDsAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgVeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC3dIgZwLPR0o8G2bTQBVb2Zj0fO RHlOxIFbu/Rl7rdjkrEfWsPQs0KtUsrFyv8B5EcNcXEZFaDLJPUVcPucX5Ga9hMT XPU02J7hOSx4+pYeir1NVoQPVmm73cqiLMTmNQ2JD2pR8xVeTFHV4gGYBncMsCeC pwbuFU5ZiEwXLJlFAaZiEvCinAUEF1h0QksHB/20V7H/8DgEI5aqHSK1MVxmU8J9 AIC4MEsJYjB3kjp/G8OI/SqtLajVBbd/bI1CDt+HlDRkZ+Gnkb42SSS4jWoFiO59 GE6OX5+UN8r40o2yuzpgtt6mPRMu5qNUv5ORm0B4m2hBrP/lLbAV0dYUwMY= -----END CERTIFICATE-----Generated at Wed Aug 6 16:04:27 2025 by rpki-client