$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer File: 7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer (raw, json) Hash identifier: OEm+z1OMcrKLDQA1Grub20CkM5XRXDf/HS3jkgmeAD8= Subject key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB6180CA0B1A9AE175E674C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 11:06:20 +0000 Certificate not after: Wed 03 Nov 2027 11:55:42 +0000 Subordinate resources: AS: 401833 IP: 23.141.188.0/24 IP: 2602:f5b0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:18:0c:a0:b1:a9:ae:17:5e:67:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 1 11:06:20 2025 GMT Not After : Nov 3 11:55:42 2027 GMT Subject: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:b0:d8:07:4e:4f:d3:d9:4f:85:41:00:69: 54:af:7d:86:2a:2b:9a:bc:18:df:93:66:86:fb:95: c1:ae:44:ec:2d:71:14:1b:af:cc:42:e5:ba:27:ad: 4f:fa:21:32:28:e5:7d:82:06:9c:88:d8:d2:ee:a1: 40:e4:52:56:4e:98:f6:69:d2:db:0d:d0:39:f9:13: cb:64:1f:20:ed:8b:3e:87:f4:9a:ee:57:38:fc:51: b8:95:66:8b:92:f6:9b:b9:fc:67:c1:44:c6:fe:95: 67:74:82:e3:fe:3a:3b:43:5f:fe:74:da:25:2e:5b: be:5c:c9:b5:52:b9:04:6f:b1:61:df:1c:ed:7c:7d: 6c:3d:8e:d3:77:a4:6b:9e:d8:8a:b7:7c:a0:26:5c: 03:8b:6a:e4:f1:ec:04:7a:b4:14:bd:d3:ca:52:0a: 8d:71:5d:36:b9:15:e1:15:ae:58:47:cb:30:78:eb: 4c:a5:f5:04:c0:25:79:07:4a:24:d0:b0:df:e6:f0: a6:87:5a:f8:76:08:d1:be:65:67:66:79:be:9b:fe: ac:6f:a8:3c:51:c5:81:74:d2:1b:b3:07:6b:d1:04: 50:15:85:46:07:78:16:72:47:0b:f0:3d:ae:fb:58: 78:63:c8:cc:6c:1c:2f:e7:f7:9d:8f:d0:34:2b:36: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.188.0/24 IPv6: 2602:f5b0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401833 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:a6:1c:2f:db:74:b3:b5:b0:09:f5:9d:4b:eb:25:8e:41:67: c6:21:1e:69:55:87:cd:54:2a:5d:5f:b1:b7:8b:5a:0d:9a:5b: fc:52:20:80:a5:83:5c:70:57:28:d7:df:90:2c:12:96:74:9d: 56:8e:37:31:78:dd:c5:d1:d1:e0:dd:b3:1d:7a:13:f1:9b:21: bf:2f:28:7e:96:98:26:b7:8d:3b:d5:54:95:23:64:b8:6b:90: 3d:bf:0c:37:11:22:8a:4a:52:49:d5:b9:16:4d:bb:a5:17:05: 61:77:ff:11:6b:fd:04:f8:54:51:61:39:98:ce:74:12:a7:83: 1b:84:d8:45:12:39:5a:46:e4:0b:09:96:78:4d:74:44:04:79: 5c:ef:8a:a9:ea:1a:ca:2d:9a:c5:a5:2b:b2:d4:bc:42:27:89: dd:21:c9:e6:2d:8e:7f:ad:83:04:38:bb:cb:3a:67:d2:3c:97: 51:07:0b:6e:12:90:c5:16:d3:4c:19:fb:12:7b:72:4a:29:22: 9a:8f:66:01:39:97:7e:6d:1e:74:33:13:f8:19:2e:96:03:4f: d2:12:3e:92:65:e2:04:b9:c7:9c:69:c2:c2:57:34:1a:a9:51: 2c:df:f1:71:4c:68:3d:ea:c6:7f:53:65:8a:3e:4c:06:f0:40: f5:67:0c:ee -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEq2GAygsamuF15nTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwMTExMDYyMFoXDTI3MTEwMzExNTU0MlowLzEtMCsGA1UEAxMk N2E4MWUzOTEtMmY5Zi00M2FjLWE3M2UtZTAxOGUyNzljMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVKw2AdOT9PZT4VBAGlUr32GKiuavBjfk2aG +5XBrkTsLXEUG6/MQuW6J61P+iEyKOV9ggaciNjS7qFA5FJWTpj2adLbDdA5+RPL ZB8g7Ys+h/Sa7lc4/FG4lWaLkvabufxnwUTG/pVndILj/jo7Q1/+dNolLlu+XMm1 UrkEb7Fh3xztfH1sPY7Td6RrntiKt3ygJlwDi2rk8ewEerQUvdPKUgqNcV02uRXh Fa5YR8sweOtMpfUEwCV5B0ok0LDf5vCmh1r4dgjRvmVnZnm+m/6sb6g8UcWBdNIb swdr0QRQFYVGB3gWckcL8D2u+1h4Y8jMbBwv5/edj9A0KzZl/QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLO0HK8DjpfpTlsv1dHvWJwp7Q9MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 YTgxZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4ZTI3OWMyZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdhODFlMzkxLTJmOWYtNDNhYy1h NzNlLWUwMThlMjc5YzJkNC83YTgxZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4ZTI3 OWMyZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjbwwDgQCAAIwCAMGACYC9bAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhqTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDFphwv23SztbAJ9Z1L6yWOQWfG IR5pVYfNVCpdX7G3i1oNmlv8UiCApYNccFco19+QLBKWdJ1WjjcxeN3F0dHg3bMd ehPxmyG/Lyh+lpgmt4071VSVI2S4a5A9vww3ESKKSlJJ1bkWTbulFwVhd/8Ra/0E +FRRYTmYznQSp4MbhNhFEjlaRuQLCZZ4TXREBHlc74qp6hrKLZrFpSuy1LxCJ4nd IcnmLY5/rYMEOLvLOmfSPJdRBwtuEpDFFtNMGfsSe3JKKSKaj2YBOZd+bR50MxP4 GS6WA0/SEj6SZeIEucecacLCVzQaqVEs3/FxTGg96sZ/U2WKPkwG8ED1Zwzu -----END CERTIFICATE-----Generated at Wed Aug 6 19:36:00 2025 by rpki-client