$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer File: 7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.cer (raw, json) Hash identifier: fHeMYIBwUDFs5XzHTfnHmQkR32aMz4m0rXQO+ZsjYNc= Subject key identifier: B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ABF6C49809E3F0FFB05C6E180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Aug 2025 19:18:21 +0000 Certificate not after: Thu 04 Nov 2027 19:30:08 +0000 Subordinate resources: AS: 401896 IP: 23.143.76.0/24 IP: 2602:f5ad::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:6c:49:80:9e:3f:0f:fb:05:c6:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 4 19:18:21 2025 GMT Not After : Nov 4 19:30:08 2027 GMT Subject: CN=7f4682fd-15a3-4dca-aaa2-1b5c7b71b511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:c6:14:d3:76:ee:2b:7e:0a:68:95:30:60: 18:0d:d1:58:dd:0a:97:ee:47:37:f3:fc:e1:bd:5d: c1:ae:5a:0c:43:f4:4a:1b:7d:1c:5d:45:02:e3:9f: 69:4c:e0:b1:d1:14:bd:8d:4e:30:d7:01:c8:f0:ad: f5:7b:8c:14:f4:38:f3:d1:34:3f:67:44:7d:5b:d4: 80:4a:41:a6:75:e5:48:13:ba:8c:ea:aa:c7:39:c9: 3f:ad:f6:c7:f5:eb:68:11:e8:c1:81:be:4d:81:45: 0e:2b:61:aa:0e:d4:0d:13:1d:24:ec:5a:ea:25:0b: d0:0d:e5:a2:43:50:85:26:3e:ff:2d:82:66:a8:c6: d8:ee:27:3a:d6:a6:b4:f4:9c:29:ef:f2:3d:8c:4a: b3:e0:84:40:8c:8b:dd:2c:79:6d:92:76:1a:84:e4: 1c:ad:97:a3:be:c5:a6:0d:7e:5d:de:45:a7:94:41: 24:6a:73:c0:40:cc:82:63:fb:1b:f5:56:af:24:5d: 8f:6b:a6:70:73:a5:4c:d4:91:b0:18:7f:79:1a:37: e4:98:20:29:01:c5:d7:ff:88:aa:49:4f:6b:7f:8e: 74:7b:78:95:5c:26:dc:44:0c:06:47:4b:1c:b3:1a: 29:6e:8d:02:9b:18:df:8c:44:96:43:ae:41:38:59: ef:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:70:E7:D0:B9:79:2D:48:B2:DB:8B:90:88:7A:13:54:CD:62:8F:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511/7f4682fd-15a3-4dca-aaa2-1b5c7b71b511.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.76.0/24 IPv6: 2602:f5ad::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401896 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:26:f4:2d:13:28:cf:0f:fe:c3:30:ac:32:6a:85:c6:f4:2a: 14:1c:86:87:44:71:a7:32:cc:02:a5:43:e4:e8:07:a0:f6:4c: bb:18:7d:52:0a:4e:e4:71:00:34:68:ca:3b:c8:08:dd:e7:e9: d6:13:7a:6e:e3:0e:36:73:0c:cf:14:5f:b1:2a:f6:84:88:4c: 91:1b:19:54:23:e7:ab:67:f1:34:d4:71:52:a1:65:82:43:0a: db:7b:c9:2e:0c:bd:f9:29:78:39:66:c1:5d:f8:8c:51:84:0b: 08:5a:2b:b7:ad:f4:e2:f7:70:2b:19:b1:e2:1c:a5:db:97:fd: bd:9b:19:aa:a2:e8:c1:e7:c4:63:8c:f8:64:ab:08:46:bc:04: 3c:38:56:e5:92:ba:b5:3c:c5:81:af:55:28:e7:00:d5:d6:81: d2:ef:b6:12:aa:ae:c5:22:0e:a9:f8:1f:4c:ac:a4:45:dd:1f: f3:b1:87:83:70:2d:66:79:6c:11:74:21:f5:2d:1a:15:a4:72: 4f:19:bf:df:a1:eb:ff:cb:ad:02:b8:0c:38:45:71:19:63:77: b4:0b:3f:5f:cc:3b:38:97:a2:04:e3:c4:34:95:58:45:c8:17: a6:03:0e:74:4e:a9:22:5d:dd:4a:bb:30:19:e9:5f:26:de:4d: f6:93:52:b8 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEq/bEmAnj8P+wXG4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNDE5MTgyMVoXDTI3MTEwNDE5MzAwOFowLzEtMCsGA1UEAxMk N2Y0NjgyZmQtMTVhMy00ZGNhLWFhYTItMWI1YzdiNzFiNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnbGFNN27it+CmiVMGAYDdFY3QqX7kc38/zh vV3BrloMQ/RKG30cXUUC459pTOCx0RS9jU4w1wHI8K31e4wU9Djz0TQ/Z0R9W9SA SkGmdeVIE7qM6qrHOck/rfbH9etoEejBgb5NgUUOK2GqDtQNEx0k7FrqJQvQDeWi Q1CFJj7/LYJmqMbY7ic61qa09Jwp7/I9jEqz4IRAjIvdLHltknYahOQcrZejvsWm DX5d3kWnlEEkanPAQMyCY/sb9VavJF2Pa6Zwc6VM1JGwGH95GjfkmCApAcXX/4iq SU9rf450e3iVXCbcRAwGR0scsxopbo0CmxjfjESWQ65BOFnvdwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLNw59C5eS1IstuLkIh6E1TNYo/oMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 ZjQ2ODJmZC0xNWEzLTRkY2EtYWFhMi0xYjVjN2I3MWI1MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdmNDY4MmZkLTE1YTMtNGRjYS1h YWEyLTFiNWM3YjcxYjUxMS83ZjQ2ODJmZC0xNWEzLTRkY2EtYWFhMi0xYjVjN2I3 MWI1MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXj0wwDgQCAAIwCAMGACYC9a0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYh6DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfJvQtEyjPD/7DMKwyaoXG9CoU HIaHRHGnMswCpUPk6Aeg9ky7GH1SCk7kcQA0aMo7yAjd5+nWE3pu4w42cwzPFF+x KvaEiEyRGxlUI+erZ/E01HFSoWWCQwrbe8kuDL35KXg5ZsFd+IxRhAsIWiu3rfTi 93ArGbHiHKXbl/29mxmqoujB58RjjPhkqwhGvAQ8OFblkrq1PMWBr1Uo5wDV1oHS 77YSqq7FIg6p+B9MrKRF3R/zsYeDcC1meWwRdCH1LRoVpHJPGb/foev/y60CuAw4 RXEZY3e0Cz9fzDs4l6IE48Q0lVhFyBemAw50TqkiXd1KuzAZ6V8m3k32k1K4 -----END CERTIFICATE-----Generated at Thu Aug 7 00:31:48 2025 by rpki-client