$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6.cer File: 4568d7ed-0cba-4999-8689-06708c0baea6.cer (raw, json) Hash identifier: pNDPL8JC5m0e40RtpFUy6u/MZHVF5WIijNqIJWFl2PI= Subject key identifier: 45:9B:3B:DF:F9:74:DD:70:E1:F6:86:60:0E:C7:CC:4C:7E:60:A6:26 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A983E8A351374BA848631ADC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/4568d7ed-0cba-4999-8689-06708c0baea6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Jul 2025 18:29:38 +0000 Certificate not after: Sun 24 Oct 2027 18:29:38 +0000 Subordinate resources: AS: 399384 IP: 104.249.168.0/24 IP: 2620:94:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:3e:8a:35:13:74:ba:84:86:31:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 21 18:29:38 2025 GMT Not After : Oct 24 18:29:38 2027 GMT Subject: CN=4568d7ed-0cba-4999-8689-06708c0baea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:ff:65:b9:c0:7d:b5:4c:37:db:85:a0:cf: 31:6a:a9:73:30:88:ba:ac:1e:83:39:59:ef:58:ac: 1f:ae:63:81:33:44:87:c0:17:bc:cb:9d:1b:7e:10: 0a:70:24:c6:78:ab:e2:57:da:06:a1:ff:9c:ad:73: 07:59:fb:6a:b4:2d:2a:6a:4b:b1:7b:46:38:9c:c5: f0:75:f7:a3:a6:d5:f7:a1:2f:60:c6:0b:ea:a3:18: 24:a9:80:71:69:b7:1b:b2:af:c5:81:e1:8c:5a:9e: 7f:10:6f:fa:9a:a7:3b:27:d5:18:53:bd:c4:6f:1f: ee:94:df:bf:f3:52:07:9a:d1:2f:4e:04:c1:73:be: ea:03:50:2b:41:70:cf:0d:ba:af:2a:1b:5e:b6:dc: 40:71:44:85:c4:f5:c7:99:eb:e6:df:8b:7e:d7:a2: 9e:4e:36:82:86:a3:06:0c:97:2f:fc:85:84:0f:02: 13:9b:6b:a7:a1:0f:c9:a8:eb:78:75:cb:fc:95:c2: 40:4c:b3:5b:4e:6a:52:13:2d:5c:67:49:fc:b0:cd: e8:31:81:67:70:bf:6b:6b:b5:9c:18:75:22:4a:8e: 75:94:e4:94:49:30:fe:62:24:8f:37:1c:d4:1e:bf: 63:9d:01:69:77:4f:92:00:3d:07:a7:f6:96:73:d1: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9B:3B:DF:F9:74:DD:70:E1:F6:86:60:0E:C7:CC:4C:7E:60:A6:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/4568d7ed-0cba-4999-8689-06708c0baea6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 104.249.168.0/24 IPv6: 2620:94:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399384 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:eb:ea:00:8d:9c:40:7d:b5:51:8d:77:17:45:97:9b:c3:e8: c1:c3:9f:20:f1:d5:a6:c2:90:c8:fc:41:15:60:09:d8:5e:6a: 45:d9:38:fd:b2:f9:50:a3:54:e1:84:5d:c0:16:32:47:2c:db: 5a:f1:10:10:7f:fe:cc:92:91:e8:19:60:93:1d:b2:b9:4d:5b: 54:c9:fd:d6:e7:f4:3c:47:76:cf:c1:1e:af:93:00:00:2c:5a: d2:01:71:e0:37:72:9b:c3:58:2a:c4:ed:36:1f:5f:16:8f:23: e4:58:d5:b2:13:4a:44:5d:5a:46:7d:e0:b0:3c:84:43:c6:c3: 0e:91:c2:c2:86:c7:ba:1d:7e:b0:4c:65:aa:2d:47:cc:b0:00: e6:5d:36:1b:43:20:b0:97:88:47:26:3e:8f:0f:38:50:55:e4: 4a:08:52:be:95:d6:93:89:19:c9:92:90:1a:b6:a4:81:69:74: 23:5b:7f:8b:a3:2b:d0:c3:0e:24:4e:de:d1:57:0b:6d:ab:87: b3:3a:04:5b:91:b0:44:76:cd:92:35:97:cd:01:ba:e9:a9:26: cd:1c:46:43:a2:fb:f7:56:ec:88:3a:9e:17:83:ef:98:94:ef: 7d:41:16:0f:59:a9:4e:38:5d:fd:5a:e4:c3:6a:14:43:19:28: 4b:24:7a:58 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEqYPoo1E3S6hIYxrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyMTE4MjkzOFoXDTI3MTAyNDE4MjkzOFowLzEtMCsGA1UEAxMk NDU2OGQ3ZWQtMGNiYS00OTk5LTg2ODktMDY3MDhjMGJhZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNP/ZbnAfbVMN9uFoM8xaqlzMIi6rB6DOVnv WKwfrmOBM0SHwBe8y50bfhAKcCTGeKviV9oGof+crXMHWftqtC0qakuxe0Y4nMXw dfejptX3oS9gxgvqoxgkqYBxabcbsq/FgeGMWp5/EG/6mqc7J9UYU73Ebx/ulN+/ 81IHmtEvTgTBc77qA1ArQXDPDbqvKhtettxAcUSFxPXHmevm34t+16KeTjaChqMG DJcv/IWEDwITm2unoQ/JqOt4dcv8lcJATLNbTmpSEy1cZ0n8sM3oMYFncL9ra7Wc GHUiSo51lOSUSTD+YiSPNxzUHr9jnQFpd0+SAD0Hp/aWc9G2IQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFEWbO9/5dN1w4faGYA7HzEx+YKYmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 NTY4ZDdlZC0wY2JhLTQ5OTktODY4OS0wNjcwOGMwYmFlYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzQ1NjhkN2VkLTBjYmEtNDk5OS04 Njg5LTA2NzA4YzBiYWVhNi80NTY4ZDdlZC0wY2JhLTQ5OTktODY4OS0wNjcwOGMw YmFlYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBABo+agwDwQCAAIwCQMHACYgAJRgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGGBgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjevqAI2cQH21UY13F0WXm8Po wcOfIPHVpsKQyPxBFWAJ2F5qRdk4/bL5UKNU4YRdwBYyRyzbWvEQEH/+zJKR6Blg kx2yuU1bVMn91uf0PEd2z8Eer5MAACxa0gFx4Ddym8NYKsTtNh9fFo8j5FjVshNK RF1aRn3gsDyEQ8bDDpHCwobHuh1+sExlqi1HzLAA5l02G0MgsJeIRyY+jw84UFXk SghSvpXWk4kZyZKQGrakgWl0I1t/i6Mr0MMOJE7e0VcLbauHszoEW5GwRHbNkjWX zQG66akmzRxGQ6L791bsiDqeF4PvmJTvfUEWD1mpTjhd/Vrkw2oUQxkoSyR6WA== -----END CERTIFICATE-----Generated at Fri Aug 8 20:51:39 2025 by rpki-client