$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.cer File: 9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.cer (raw, json) Hash identifier: YAxaHLEfuyijdUJCJY8VW2cSG+MNE8x1H2ukNyCxmTw= Subject key identifier: D4:35:F9:45:84:B6:D3:39:4B:FA:A3:31:E2:25:86:DF:D9:2F:56:58 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC312F6BA537F89F2618C4680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 02:41:36 +0000 Certificate not after: Tue 09 Nov 2027 03:41:36 +0000 Subordinate resources: IP: 23.143.100.0/24 IP: 2602:f5aa::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c3:12:f6:ba:53:7f:89:f2:61:8c:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 6 02:41:36 2025 GMT Not After : Nov 9 03:41:36 2027 GMT Subject: CN=9c3c60d3-2280-4c4e-a6f4-bf16d96b4896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:d0:1c:b8:1a:6a:c3:06:b7:90:35:51:5a: 69:c8:06:89:bb:eb:d4:f2:35:41:88:53:96:d6:05: 5b:8c:c7:8e:3c:e5:61:54:ba:28:55:33:58:07:8c: 44:ab:c8:6f:81:40:e8:d8:74:c9:f2:f6:14:dc:e2: 0d:54:1a:ec:0f:68:e7:4c:d4:8a:d1:f0:ad:59:ae: e0:1f:29:fc:37:d6:5e:e5:92:f8:4f:fd:21:43:82: 18:7e:5c:1c:f4:13:a5:90:09:49:b0:97:38:4d:2b: 60:87:6d:09:54:83:7a:26:87:d3:00:16:f5:2d:d0: 82:0f:05:4b:1c:bc:db:fb:94:96:fa:fa:cc:1b:d4: 4c:b1:6e:73:64:da:4b:77:bb:2e:32:ab:0c:2a:a4: 52:a3:d2:cb:b0:ea:0e:d1:72:39:c0:5e:73:e3:86: 84:5f:97:62:c8:52:0a:76:f9:9f:9f:80:1f:51:57: 61:72:e9:0c:c6:94:90:30:45:e1:8c:29:fe:cf:dc: a5:27:2d:74:fd:f0:58:86:10:14:de:ce:38:0d:7d: 92:fd:80:f3:c5:42:8e:22:19:77:19:75:b7:f0:28: 8b:47:30:87:3a:51:ad:34:49:b1:50:aa:00:61:02: 98:15:a1:3e:7e:9e:b9:a2:23:8f:f3:e2:39:e7:88: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:35:F9:45:84:B6:D3:39:4B:FA:A3:31:E2:25:86:DF:D9:2F:56:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896/9c3c60d3-2280-4c4e-a6f4-bf16d96b4896.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.100.0/24 IPv6: 2602:f5aa::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:b4:26:c5:00:ca:bf:0f:33:5f:63:c4:5d:85:4a:e4:b6:20: e5:8f:da:bb:79:78:8c:09:10:b6:ee:4b:07:a8:ff:9a:51:5b: 76:89:14:0d:9d:f4:03:70:dc:60:76:cd:f8:04:2f:f3:b3:70: 24:1f:aa:e6:83:38:ca:d6:b0:93:43:24:a3:77:84:97:95:88: d7:96:dd:02:07:b2:f5:66:0e:f7:39:63:a2:b3:eb:89:92:65: 19:f7:ba:77:2d:96:4e:86:d5:e3:2c:85:8c:e7:32:55:a3:6e: cc:d8:b2:53:89:3b:cc:60:c3:33:94:7f:eb:c9:ea:17:51:52: fe:6e:6d:fa:e9:a7:bb:a3:c5:fd:1f:12:7f:e2:fc:52:5f:c5: 40:35:31:71:19:35:53:2e:0b:15:95:3e:ce:ea:d5:f1:87:8c: 87:85:14:3c:a1:6c:34:8a:4b:d1:fc:e2:dc:25:18:4f:70:cb: 55:b9:e0:b6:2f:ed:79:75:ae:eb:60:c2:67:00:0f:77:6c:a3: c1:6f:16:97:e6:9c:7c:0e:cb:da:cc:f1:10:52:83:1d:94:7c: ab:48:70:e0:ad:25:d6:1d:fe:22:c2:7e:3c:74:a6:e8:09:d4: 27:ef:46:c8:12:25:80:51:09:8a:db:ad:e9:9a:da:9d:d7:20: 14:ca:f6:0a -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWErDEva6U3+J8mGMRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNjAyNDEzNloXDTI3MTEwOTAzNDEzNlowLzEtMCsGA1UEAxMk OWMzYzYwZDMtMjI4MC00YzRlLWE2ZjQtYmYxNmQ5NmI0ODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnrQHLgaasMGt5A1UVppyAaJu+vU8jVBiFOW 1gVbjMeOPOVhVLooVTNYB4xEq8hvgUDo2HTJ8vYU3OINVBrsD2jnTNSK0fCtWa7g Hyn8N9Ze5ZL4T/0hQ4IYflwc9BOlkAlJsJc4TStgh20JVIN6JofTABb1LdCCDwVL HLzb+5SW+vrMG9RMsW5zZNpLd7suMqsMKqRSo9LLsOoO0XI5wF5z44aEX5diyFIK dvmfn4AfUVdhcukMxpSQMEXhjCn+z9ylJy10/fBYhhAU3s44DX2S/YDzxUKOIhl3 GXW38CiLRzCHOlGtNEmxUKoAYQKYFaE+fp65oiOP8+I554iwTwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNQ1+UWEttM5S/qjMeIlht/ZL1ZYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 YzNjNjBkMy0yMjgwLTRjNGUtYTZmNC1iZjE2ZDk2YjQ4OTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzljM2M2MGQzLTIyODAtNGM0ZS1h NmY0LWJmMTZkOTZiNDg5Ni85YzNjNjBkMy0yMjgwLTRjNGUtYTZmNC1iZjE2ZDk2 YjQ4OTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXj2QwDgQCAAIwCAMGACYC9aoAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ALu0JsUAyr8PM19jxF2FSuS2IOWP2rt5eIwJELbuSweo/5pRW3aJFA2d9ANw3GB2 zfgEL/OzcCQfquaDOMrWsJNDJKN3hJeViNeW3QIHsvVmDvc5Y6Kz64mSZRn3unct lk6G1eMshYznMlWjbszYslOJO8xgwzOUf+vJ6hdRUv5ubfrpp7ujxf0fEn/i/FJf xUA1MXEZNVMuCxWVPs7q1fGHjIeFFDyhbDSKS9H84twlGE9wy1W54LYv7Xl1rutg wmcAD3dso8FvFpfmnHwOy9rM8RBSgx2UfKtIcOCtJdYd/iLCfjx0pugJ1CfvRsgS JYBRCYrbrema2p3XIBTK9go= -----END CERTIFICATE-----Generated at Tue Nov 4 23:37:00 2025 by rpki-client