$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.cer File: 540d1e8a-06b3-4df7-9d3b-58ec9faa2536.cer (raw, json) Hash identifier: SugpTGXz5VIcBPYbU/lIKcERfHRjhtAHewPfGilJg1U= Subject key identifier: FB:BF:F0:64:0B:D4:4A:CE:AC:23:47:45:C9:E7:9E:A1:D1:23:26:36 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AE686B0ED22926ACA70286080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 19:28:04 +0000 Certificate not after: Sun 21 Nov 2027 20:28:04 +0000 Subordinate resources: AS: 401933 IP: 2602:f59c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e6:86:b0:ed:22:92:6a:ca:70:28:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 18 19:28:04 2025 GMT Not After : Nov 21 20:28:04 2027 GMT Subject: CN=540d1e8a-06b3-4df7-9d3b-58ec9faa2536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:35:6b:b9:3b:cb:e5:b5:e6:5d:42:eb:96:da: ae:11:ee:a4:ba:83:c4:19:65:75:17:64:ce:15:d2: 2b:9a:f1:c8:78:a9:d9:d7:ad:da:a7:33:44:11:bd: f2:2d:14:0f:49:c3:5d:42:a5:84:7e:64:60:55:54: 8e:25:33:7a:33:a9:a3:5d:cf:aa:b3:10:aa:98:bd: 42:64:34:59:06:44:e2:bd:fb:8d:87:2f:ef:5c:7c: 0b:4b:95:88:cf:97:dd:83:a8:78:4d:59:12:7d:57: 67:dd:79:06:2f:4e:98:97:f5:d7:74:84:75:80:b7: 3f:42:0e:ca:cb:81:a3:7d:ba:d3:51:da:21:2e:d5: 12:ad:f8:1a:1b:95:cf:5f:08:16:a8:62:f1:7c:67: 87:35:7f:80:5e:05:3a:7c:7b:ab:60:fa:5a:fe:ed: 7d:88:42:b9:3c:a5:d4:ff:83:b6:12:f0:97:3c:ef: 39:b1:c1:01:53:41:01:2b:2f:07:e1:4d:23:d8:14: de:67:db:0e:03:db:e6:e1:b8:98:7a:ac:74:37:f5: 35:37:d9:cf:83:0f:8f:10:51:f5:e0:a4:5c:43:3c: b0:3c:24:7d:f7:90:fc:46:d4:07:b2:2e:5d:e8:9a: ac:01:48:ad:5e:48:3f:e4:a9:9b:93:ed:ad:76:fd: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BF:F0:64:0B:D4:4A:CE:AC:23:47:45:C9:E7:9E:A1:D1:23:26:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f59c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401933 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:72:a4:75:8c:03:bb:a9:fa:33:4d:2b:68:68:fc:cf:3f:c4: 97:86:01:07:04:97:5d:11:4f:be:72:77:d2:c1:00:a1:dd:d1: 62:f6:15:36:df:73:a0:8c:25:2e:79:80:2c:f0:be:12:0e:8a: 2d:61:eb:e1:33:e7:d3:39:53:d0:31:94:b7:e4:19:06:d0:b7: 77:fd:f8:46:7f:b6:a3:b8:9d:d2:bb:9c:e4:ad:a9:d1:d0:2f: 9d:8a:58:0c:1f:47:b0:2f:43:95:c2:de:75:7f:66:09:32:f0: f8:0d:04:86:36:30:c8:d6:09:78:15:39:e6:6e:33:37:58:6e: 3f:72:77:3e:81:3d:94:c7:fc:f6:ec:97:cf:12:e6:d5:0a:d3: 30:68:1f:37:62:7c:5d:cc:d0:17:2e:9d:5d:fb:78:73:27:fa: 74:e7:2d:b8:13:aa:3f:f7:9e:b6:22:11:94:6c:19:38:7a:43: 96:4c:ee:09:fe:ef:75:1d:b8:64:5e:98:8b:60:3d:46:a9:0e: 3b:3f:0c:bb:dd:f2:e2:8b:d4:71:64:5c:5a:e1:7e:42:7d:64: 6f:8b:57:c3:2a:c4:96:2c:dc:53:06:1d:f0:7d:3e:52:25:6e: 04:01:16:55:33:84:bf:3f:3d:80:6e:5d:1b:e3:e1:b3:21:9b: 38:6f:d7:28 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWErmhrDtIpJqynAoYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxODE5MjgwNFoXDTI3MTEyMTIwMjgwNFowLzEtMCsGA1UEAxMk NTQwZDFlOGEtMDZiMy00ZGY3LTlkM2ItNThlYzlmYWEyNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jVruTvL5bXmXULrltquEe6kuoPEGWV1F2TO FdIrmvHIeKnZ163apzNEEb3yLRQPScNdQqWEfmRgVVSOJTN6M6mjXc+qsxCqmL1C ZDRZBkTivfuNhy/vXHwLS5WIz5fdg6h4TVkSfVdn3XkGL06Yl/XXdIR1gLc/Qg7K y4GjfbrTUdohLtUSrfgaG5XPXwgWqGLxfGeHNX+AXgU6fHurYPpa/u19iEK5PKXU /4O2EvCXPO85scEBU0EBKy8H4U0j2BTeZ9sOA9vm4biYeqx0N/U1N9nPgw+PEFH1 4KRcQzywPCR995D8RtQHsi5d6JqsAUitXkg/5Kmbk+2tdv24hQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFPu/8GQL1ErOrCNHRcnnnqHRIyY2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 NDBkMWU4YS0wNmIzLTRkZjctOWQzYi01OGVjOWZhYTI1MzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzU0MGQxZThhLTA2YjMtNGRmNy05 ZDNiLTU4ZWM5ZmFhMjUzNi81NDBkMWU4YS0wNmIzLTRkZjctOWQzYi01OGVjOWZh YTI1MzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvWcADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIg0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEATnKkdYwDu6n6M00raGj8zz/El4YBBwSXXRFPvnJ30sEA od3RYvYVNt9zoIwlLnmALPC+Eg6KLWHr4TPn0zlT0DGUt+QZBtC3d/34Rn+2o7id 0ruc5K2p0dAvnYpYDB9HsC9DlcLedX9mCTLw+A0EhjYwyNYJeBU55m4zN1huP3J3 PoE9lMf89uyXzxLm1QrTMGgfN2J8XczQFy6dXft4cyf6dOctuBOqP/eetiIRlGwZ OHpDlkzuCf7vdR24ZF6Yi2A9RqkOOz8Mu93y4ovUcWRcWuF+Qn1kb4tXwyrElizc UwYd8H0+UiVuBAEWVTOEvz89gG5dG+PhsyGbOG/XKA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:25 2025 by rpki-client