$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8170a01e-2b3f-4b3a-8992-ac0ba33446e0.cer File: 8170a01e-2b3f-4b3a-8992-ac0ba33446e0.cer (raw, json) Hash identifier: iV4PNSgqSzfn0E94brNzryHDYfGlMB9h8WOwiWS6Cm4= Subject key identifier: 72:AA:97:F8:47:36:B7:EF:DC:AE:61:5B:5D:76:B6:F9:19:11:7C:FE Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A89D0EF4064253CE39BE0A180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8170a01e-2b3f-4b3a-8992-ac0ba33446e0/8170a01e-2b3f-4b3a-8992-ac0ba33446e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8170a01e-2b3f-4b3a-8992-ac0ba33446e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 14:27:29 +0000 Certificate not after: Tue 19 Oct 2027 14:27:29 +0000 Subordinate resources: IP: 23.140.236.0/24 IP: 2602:f600::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:d0:ef:40:64:25:3c:e3:9b:e0:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 16 14:27:29 2025 GMT Not After : Oct 19 14:27:29 2027 GMT Subject: CN=8170a01e-2b3f-4b3a-8992-ac0ba33446e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:6d:0f:b2:58:32:88:6d:0e:4e:91:ec:93: 46:bb:37:26:84:31:91:f7:d9:86:22:f9:84:d9:72: 6a:e9:1e:e2:8b:10:6a:4c:a6:fb:5b:45:ad:c3:fd: 84:3e:ec:74:db:13:dd:69:52:d1:82:41:5d:77:b0: 1f:94:0a:79:1e:0f:16:4a:2c:f5:eb:7d:d9:14:00: c7:55:fd:65:61:5f:1b:7d:fb:d3:78:a5:67:59:0c: 8b:7b:be:be:e1:62:25:8a:2c:2e:ee:3b:03:74:d0: 28:0b:dc:05:e1:9a:2c:1b:88:5b:71:bc:ba:7f:01: e8:47:16:f1:ab:2b:8d:09:57:47:db:29:a0:ed:9d: cc:cc:e1:55:66:1c:88:38:d2:9c:6e:cd:12:15:90: 7d:2e:30:f4:32:b9:3c:17:b9:d6:b9:a5:bb:be:69: c9:d1:bc:a3:63:4f:2c:35:6c:9e:4e:86:b6:fd:59: a1:f6:cf:77:6b:36:54:ae:37:0f:70:f7:a1:16:2c: 53:1b:2a:86:31:fa:46:d1:48:30:0d:c3:81:5c:04: eb:10:5a:9d:4d:9b:ec:25:a4:33:d3:6e:9a:e0:a2: 14:09:a6:df:4a:67:fd:92:4a:8a:c1:81:64:b3:46: 2b:a5:54:0a:e2:8c:b4:6a:42:0a:16:a9:c3:e4:ab: ea:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:97:F8:47:36:B7:EF:DC:AE:61:5B:5D:76:B6:F9:19:11:7C:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8170a01e-2b3f-4b3a-8992-ac0ba33446e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8170a01e-2b3f-4b3a-8992-ac0ba33446e0/8170a01e-2b3f-4b3a-8992-ac0ba33446e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.140.236.0/24 IPv6: 2602:f600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9b:14:9e:3c:12:07:4e:91:b5:01:77:b3:be:d4:ff:61:df: 25:2b:3b:3d:ea:cd:b6:a7:f8:ce:44:27:34:77:57:7f:ee:74: 4b:00:37:60:bd:cb:38:71:12:a6:73:a4:49:92:6e:40:1f:c1: 7e:0b:fa:93:9e:e7:c5:f9:d9:15:31:4e:0e:89:8c:1d:09:9f: 86:ae:11:d9:09:a9:af:f0:57:13:af:f3:2c:48:8b:d2:85:2e: 54:ec:30:c3:08:00:89:0a:57:19:3d:81:df:b8:5e:2b:3c:d4: bc:7e:12:81:43:0d:34:96:0d:c8:2b:41:42:2e:5c:a3:e7:a9: db:fd:38:05:cf:56:f2:38:d9:bc:58:f0:b7:e5:4a:13:01:97: c7:9f:94:40:eb:40:a2:ab:44:01:7d:18:ca:9c:06:1a:fc:39: 44:ce:e2:d7:01:5f:69:ce:3b:c8:18:37:00:12:47:14:56:a6: cb:1e:a5:55:07:a8:06:7f:be:07:23:d3:17:45:a7:a5:a1:84: 41:b2:78:89:98:a7:40:5e:00:bb:ef:69:5b:5f:9d:ea:d1:d4: ec:3e:3a:fe:e8:22:5c:3c:64:4d:8c:4c:2d:44:f7:49:c9:ed: 82:20:bc:07:46:db:53:32:a3:9c:3d:2a:0c:8d:a0:b1:3b:0c: 72:c9:1e:1d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqJ0O9AZCU845vgoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNjE0MjcyOVoXDTI3MTAxOTE0MjcyOVowLzEtMCsGA1UEAxMk ODE3MGEwMWUtMmIzZi00YjNhLTg5OTItYWMwYmEzMzQ0NmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLttD7JYMohtDk6R7JNGuzcmhDGR99mGIvmE 2XJq6R7iixBqTKb7W0Wtw/2EPux02xPdaVLRgkFdd7AflAp5Hg8WSiz1633ZFADH Vf1lYV8bffvTeKVnWQyLe76+4WIliiwu7jsDdNAoC9wF4ZosG4hbcby6fwHoRxbx qyuNCVdH2ymg7Z3MzOFVZhyIONKcbs0SFZB9LjD0Mrk8F7nWuaW7vmnJ0byjY08s NWyeToa2/Vmh9s93azZUrjcPcPehFixTGyqGMfpG0UgwDcOBXATrEFqdTZvsJaQz 026a4KIUCabfSmf9kkqKwYFks0YrpVQK4oy0akIKFqnD5KvqXQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHKql/hHNrfv3K5hW112tvkZEXz+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 MTcwYTAxZS0yYjNmLTRiM2EtODk5Mi1hYzBiYTMzNDQ2ZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzgxNzBhMDFlLTJiM2YtNGIzYS04 OTkyLWFjMGJhMzM0NDZlMC84MTcwYTAxZS0yYjNmLTRiM2EtODk5Mi1hYzBiYTMz NDQ2ZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjOwwDgQCAAIwCAMGACYC9gAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEWbFJ48EgdOkbUBd7O+1P9h3yUrOz3qzban+M5EJzR3V3/udEsAN2C9yzhxEqZz pEmSbkAfwX4L+pOe58X52RUxTg6JjB0Jn4auEdkJqa/wVxOv8yxIi9KFLlTsMMMI AIkKVxk9gd+4Xis81Lx+EoFDDTSWDcgrQUIuXKPnqdv9OAXPVvI42bxY8LflShMB l8eflEDrQKKrRAF9GMqcBhr8OUTO4tcBX2nOO8gYNwASRxRWpssepVUHqAZ/vgcj 0xdFp6WhhEGyeImYp0BeALvvaVtfnerR1Ow+Ov7oIlw8ZE2MTC1E90nJ7YIgvAdG 21Myo5w9KgyNoLE7DHLJHh0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:53:42 2025 by rpki-client