$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db.cer File: 823b3bd2-8946-4618-b2b5-7d04ccd697db.cer (raw, json) Hash identifier: 5KOOKgS2y8BDoK7zbpjR/oLGQlbIvrBA8ot+YpaaZpI= Subject key identifier: 31:E4:E5:CB:99:3D:5F:CD:D2:18:41:69:51:CC:D0:BA:EB:34:4F:65 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B0293892530D7CFADA1AE6300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/823b3bd2-8946-4618-b2b5-7d04ccd697db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Aug 2025 20:36:35 +0000 Certificate not after: Wed 01 Dec 2027 21:36:35 +0000 Subordinate resources: AS: 19106 IP: 2620:0:2be0::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:93:89:25:30:d7:cf:ad:a1:ae:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 28 20:36:35 2025 GMT Not After : Dec 1 21:36:35 2027 GMT Subject: CN=823b3bd2-8946-4618-b2b5-7d04ccd697db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:76:4b:e2:5d:34:27:30:f7:8c:01:98:81:fb: 58:26:c6:f7:d5:6b:26:ec:1e:8e:92:44:66:08:5f: 49:ab:ba:d3:3e:dc:2f:51:c8:00:ef:32:4a:47:29: c5:84:85:c4:2c:ae:f0:4a:3f:cb:36:3c:96:72:77: a3:64:b3:95:24:e2:c0:9e:df:fe:7c:dd:5d:a0:60: d4:6f:c8:ff:3d:2a:34:e5:5c:23:22:35:c4:c0:40: 07:f6:23:16:16:ee:81:7b:0f:d3:97:94:17:26:fd: f0:64:cc:58:9f:26:81:10:54:ea:6e:6d:48:a9:94: 29:8c:94:95:d8:7a:42:14:48:11:d7:1d:54:7a:f2: de:b7:68:23:d5:3d:da:12:18:e4:3c:62:4d:e9:6b: ea:7b:ba:18:de:b1:78:5e:57:fb:a5:28:b7:82:be: 6d:c4:20:cd:62:45:74:6b:d0:e5:aa:82:c4:56:90: 7c:df:48:28:40:12:0e:40:39:28:7f:64:a6:7e:a3: 45:86:5f:97:3e:b7:3e:11:29:98:3f:13:d6:63:9f: 63:7c:d0:5c:af:86:7d:f4:fa:12:53:cf:48:e6:61: a7:0d:60:07:56:fc:ef:11:25:e2:f4:c4:7e:2e:f8: d6:a3:5f:b3:61:6d:c5:84:a7:34:9d:d6:a7:56:5d: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E4:E5:CB:99:3D:5F:CD:D2:18:41:69:51:CC:D0:BA:EB:34:4F:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/823b3bd2-8946-4618-b2b5-7d04ccd697db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2be0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19106 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a6:9e:53:63:75:cb:1c:43:15:7e:a0:31:0a:21:2b:aa:d7: de:bf:33:2d:8f:cb:8f:79:5b:a9:19:1f:ad:cd:36:22:89:7d: e8:3d:bb:1f:8b:b4:94:a5:83:e5:24:d3:02:11:82:78:f3:65: c8:30:69:02:0a:8a:a7:66:0d:a8:cd:33:63:a4:42:a3:9b:c3: 0c:c1:d6:25:70:cd:2d:47:1f:9b:6c:27:4f:93:6e:4d:e1:a9: ea:85:fc:e7:10:25:2f:13:ea:42:f0:5d:b5:b5:12:fa:5c:b2: fe:be:d3:f3:8c:88:c9:ef:1b:02:39:da:db:3b:51:a9:dd:ea: a8:de:5c:cf:de:79:65:97:59:d1:53:8b:78:59:db:f5:1f:ce: dd:6e:0a:0c:c0:d5:e5:60:59:a1:ce:3d:72:ff:21:94:44:ca: b4:0a:c8:30:13:aa:84:f1:87:62:66:2c:2d:41:0d:99:55:3e: 81:c1:8b:24:c2:8e:7f:72:36:ef:6e:e1:59:10:bb:77:a7:e6: ea:a8:d5:c8:ef:bb:70:05:ee:5c:32:48:55:fa:f9:8b:25:af: 84:44:a3:34:6f:4e:4e:b8:9a:23:fa:51:ac:a4:52:04:91:2a: 47:d1:4e:0c:13:eb:40:d3:cf:d7:03:2e:10:76:c7:26:7f:d9: 24:69:2d:e0 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEsCk4klMNfPraGuYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyODIwMzYzNVoXDTI3MTIwMTIxMzYzNVowLzEtMCsGA1UEAxMk ODIzYjNiZDItODk0Ni00NjE4LWIyYjUtN2QwNGNjZDY5N2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXZL4l00JzD3jAGYgftYJsb31Wsm7B6OkkRm CF9Jq7rTPtwvUcgA7zJKRynFhIXELK7wSj/LNjyWcnejZLOVJOLAnt/+fN1doGDU b8j/PSo05VwjIjXEwEAH9iMWFu6Bew/Tl5QXJv3wZMxYnyaBEFTqbm1IqZQpjJSV 2HpCFEgR1x1UevLet2gj1T3aEhjkPGJN6Wvqe7oY3rF4Xlf7pSi3gr5txCDNYkV0 a9DlqoLEVpB830goQBIOQDkof2SmfqNFhl+XPrc+ESmYPxPWY59jfNBcr4Z99PoS U89I5mGnDWAHVvzvESXi9MR+LvjWo1+zYW3FhKc0ndanVl2cmwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFDHk5cuZPV/N0hhBaVHM0LrrNE9lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 MjNiM2JkMi04OTQ2LTQ2MTgtYjJiNS03ZDA0Y2NkNjk3ZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzgyM2IzYmQyLTg5NDYtNDYxOC1i MmI1LTdkMDRjY2Q2OTdkYi84MjNiM2JkMi04OTQ2LTQ2MTgtYjJiNS03ZDA0Y2Nk Njk3ZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAAAK+AwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICSqIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAh6aeU2N1yxxDFX6gMQohK6rX3r8zLY/Lj3lbqRkfrc02 Iol96D27H4u0lKWD5STTAhGCePNlyDBpAgqKp2YNqM0zY6RCo5vDDMHWJXDNLUcf m2wnT5NuTeGp6oX85xAlLxPqQvBdtbUS+lyy/r7T84yIye8bAjna2ztRqd3qqN5c z955ZZdZ0VOLeFnb9R/O3W4KDMDV5WBZoc49cv8hlETKtArIMBOqhPGHYmYsLUEN mVU+gcGLJMKOf3I2727hWRC7d6fm6qjVyO+7cAXuXDJIVfr5iyWvhESjNG9OTria I/pRrKRSBJEqR9FODBPrQNPP1wMuEHbHJn/ZJGkt4A== -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:52 2025 by rpki-client