$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer File: 52fb91a6-cd61-4d3a-a409-799dd96b3d14.cer (raw, json) Hash identifier: XvQr3xeFWuPg2YC664+1q0Yul1kyYm4QCO9+yotwUMI= Subject key identifier: 8D:06:2A:56:E4:4B:F4:A4:7C:6B:03:11:79:A1:BF:99:A6:97:13:0C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AE5FBF86C99DFA8C9E4853980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 14:48:34 +0000 Certificate not after: Sun 21 Nov 2027 15:48:34 +0000 Subordinate resources: IP: 23.143.228.0/24 IP: 2602:f59e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:fb:f8:6c:99:df:a8:c9:e4:85:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 18 14:48:34 2025 GMT Not After : Nov 21 15:48:34 2027 GMT Subject: CN=52fb91a6-cd61-4d3a-a409-799dd96b3d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:99:8a:bf:2d:23:0d:8f:3b:2c:4b:01:dc: e4:cc:33:be:71:28:32:e9:a8:3c:f6:d0:6e:d7:67: 55:42:75:a7:ff:12:83:90:88:08:0f:27:dd:ef:50: cc:b0:df:e4:a3:20:a8:9c:21:63:2e:31:be:30:b4: b3:01:97:a2:72:a9:9c:d9:6e:6e:9e:ea:f6:90:f2: 83:71:16:17:44:00:b7:0c:df:b9:e6:16:76:f5:67: b8:4e:d0:32:07:44:a5:81:dc:a2:cf:fa:e4:08:bd: 31:d1:04:dc:e6:7f:85:ca:7b:75:f5:9e:4f:6b:fd: 91:6b:fa:48:8f:6c:3f:7f:68:1e:d7:22:0c:ce:4d: 0e:bb:f6:de:a9:55:70:be:7d:77:13:c8:a2:aa:61: 62:b0:6d:da:25:aa:f1:ad:16:32:62:b3:e8:5c:9e: b8:ff:57:7d:f3:c5:4d:32:9b:f0:06:52:a7:64:86: 55:10:0d:ec:d8:d3:b5:7d:aa:9a:d8:fa:c0:46:26: 2e:d3:77:74:38:7b:3e:10:a5:e2:d8:05:42:47:5a: f7:4a:3d:75:62:6c:9d:e6:b4:37:16:a5:0a:1f:f8: 73:ab:a2:2a:09:4b:8f:98:f8:9e:6f:6f:a4:48:c4: bc:4a:83:51:40:b3:57:6d:72:7a:1a:7b:1d:03:5b: df:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:06:2A:56:E4:4B:F4:A4:7C:6B:03:11:79:A1:BF:99:A6:97:13:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/52fb91a6-cd61-4d3a-a409-799dd96b3d14/52fb91a6-cd61-4d3a-a409-799dd96b3d14.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.228.0/24 IPv6: 2602:f59e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7c:a1:f7:3d:d1:33:69:cc:59:00:33:7f:d8:3b:6e:13:91: 54:86:2c:25:0d:34:bc:b8:a8:57:91:b7:23:55:3c:64:2c:12: 51:4f:e2:bf:46:43:67:53:f6:14:30:b8:f8:2a:02:7d:aa:90: 82:fe:b8:da:87:5c:cf:4d:4b:a8:a4:2b:27:b2:02:81:f9:05: fc:ed:3a:e2:93:c2:9e:66:86:81:e5:40:fb:a5:8e:1a:b0:de: 5a:0f:1d:d7:5e:24:12:59:f4:20:12:56:a4:b0:27:83:7c:46: 9c:45:72:f6:c6:c4:ba:1f:b3:2b:a0:1a:ad:ee:bf:69:6f:4f: af:d9:73:ab:fc:27:3a:fc:ef:d7:b2:50:70:b8:82:c4:73:2d: d3:05:79:5f:42:fe:b0:4a:ae:cb:4d:46:23:ca:eb:d6:1f:4d: f9:9e:97:4a:94:3a:d7:b6:02:02:9e:8c:b7:a3:f1:a5:0d:16: 45:25:ca:42:2f:71:d5:6e:37:a9:56:10:3c:0b:84:c9:e7:46: 33:3f:48:cb:0e:05:c4:02:0a:68:9a:c7:3c:99:98:98:f5:3e: 74:a6:17:9f:cd:8e:71:05:e2:72:92:31:0f:8f:89:e8:55:1d: cc:e3:63:11:ed:bc:db:19:83:b0:73:3e:ef:ff:d3:0b:4d:35: 15:61:cf:9f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWErl+/hsmd+oyeSFOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxODE0NDgzNFoXDTI3MTEyMTE1NDgzNFowLzEtMCsGA1UEAxMk NTJmYjkxYTYtY2Q2MS00ZDNhLWE0MDktNzk5ZGQ5NmIzZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI6Zir8tIw2POyxLAdzkzDO+cSgy6ag89tBu 12dVQnWn/xKDkIgIDyfd71DMsN/koyConCFjLjG+MLSzAZeicqmc2W5unur2kPKD cRYXRAC3DN+55hZ29We4TtAyB0Slgdyiz/rkCL0x0QTc5n+Fynt19Z5Pa/2Ra/pI j2w/f2ge1yIMzk0Ou/beqVVwvn13E8iiqmFisG3aJarxrRYyYrPoXJ64/1d988VN MpvwBlKnZIZVEA3s2NO1faqa2PrARiYu03d0OHs+EKXi2AVCR1r3Sj11Ymyd5rQ3 FqUKH/hzq6IqCUuPmPieb2+kSMS8SoNRQLNXbXJ6GnsdA1vfZQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFI0GKlbkS/SkfGsDEXmhv5mmlxMMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 MmZiOTFhNi1jZDYxLTRkM2EtYTQwOS03OTlkZDk2YjNkMTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzUyZmI5MWE2LWNkNjEtNGQzYS1h NDA5LTc5OWRkOTZiM2QxNC81MmZiOTFhNi1jZDYxLTRkM2EtYTQwOS03OTlkZDk2 YjNkMTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXj+QwDgQCAAIwCAMGACYC9Z4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABV8ofc90TNpzFkAM3/YO24TkVSGLCUNNLy4qFeRtyNVPGQsElFP4r9GQ2dT9hQw uPgqAn2qkIL+uNqHXM9NS6ikKyeyAoH5BfztOuKTwp5mhoHlQPuljhqw3loPHdde JBJZ9CASVqSwJ4N8RpxFcvbGxLofsyugGq3uv2lvT6/Zc6v8Jzr879eyUHC4gsRz LdMFeV9C/rBKrstNRiPK69YfTfmel0qUOte2AgKejLej8aUNFkUlykIvcdVuN6lW EDwLhMnnRjM/SMsOBcQCCmiaxzyZmJj1PnSmF5/NjnEF4nKSMQ+PiehVHczjYxHt vNsZg7BzPu//0wtNNRVhz58= -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:38 2025 by rpki-client