$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer File: affa716b-9631-4506-aee5-dc69f79f9fca.cer (raw, json) Hash identifier: OM8BSI1XR1hA5+TPZUpa7CrhcxsZMMzI99vhbXUE8Q4= Subject key identifier: 29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A8E3F287DF11CF31E0C1BA520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Jul 2025 04:32:48 +0000 Certificate not after: Thu 21 Oct 2027 04:32:48 +0000 Subordinate resources: IP: 23.141.212.0/24 IP: 2602:f5db::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:3f:28:7d:f1:1c:f3:1e:0c:1b:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 18 04:32:48 2025 GMT Not After : Oct 21 04:32:48 2027 GMT Subject: CN=affa716b-9631-4506-aee5-dc69f79f9fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:f4:8b:74:14:5c:bb:a9:ff:ed:6d:d1:11: 26:fb:e1:d6:3e:55:fb:4b:c5:45:a8:68:f3:05:e6: bd:35:d7:80:87:f2:5e:56:be:ee:8c:1e:03:7b:ef: ca:8e:b3:0f:64:06:71:22:7e:ca:2c:54:1c:cf:1a: 28:b0:86:fb:9f:22:49:ff:c4:34:d7:4c:0f:3c:c9: 0f:23:2f:87:4a:09:2f:a1:b2:36:6c:6a:56:d0:34: 95:00:f6:7e:81:db:01:e2:11:fe:21:7c:0d:65:d5: 28:cd:3b:17:58:4d:ee:8e:8c:11:15:7b:74:7e:01: 81:f2:79:bd:74:cd:dc:29:5c:f6:ef:54:96:28:75: 83:e3:a9:26:d3:21:08:02:47:c3:79:44:7b:88:b7: 49:21:81:80:d1:b4:3a:43:dc:93:c1:d9:ed:e2:a4: 6b:ef:dd:d6:2d:bf:67:ba:54:05:30:e6:82:ce:15: 60:60:e9:c5:2a:26:ae:94:a8:6a:86:4a:71:e3:ac: 3a:f4:b5:5c:66:36:e3:60:e0:f1:b7:d5:e6:40:68: 20:44:0b:7c:99:f8:42:78:9c:bc:04:eb:db:9f:8c: fd:7c:2a:58:42:75:e2:e8:d0:5a:4e:ee:db:bf:7a: 2e:eb:cc:ac:69:59:d1:ea:3f:c4:b9:71:53:a8:c8: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.212.0/24 IPv6: 2602:f5db::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c9:e8:30:a9:e8:ab:78:1e:67:41:48:84:5a:a0:e9:9c:91: e9:f9:86:3a:d2:df:4d:9b:a9:87:3f:9b:57:81:2a:6d:e1:a4: b1:2d:e8:51:1f:e3:2e:52:71:eb:fb:0c:08:40:32:63:88:6d: a7:b7:d8:1d:3d:04:a1:42:a2:d9:ea:98:41:12:1f:db:a4:4d: 5e:76:c7:97:6b:b7:3d:b4:25:58:e5:93:d4:aa:2d:b5:46:8a: d5:38:d0:30:c0:1a:0f:91:97:21:05:7d:59:f0:6f:59:10:68: 12:17:fb:82:ca:49:13:d6:eb:83:7b:7e:18:32:88:6d:01:c0: 74:32:a1:67:fa:72:4c:78:23:43:be:39:0c:b6:7f:cc:e7:f9: 1a:de:ad:12:02:9b:85:f3:bc:6d:f5:d1:c3:36:35:5d:2b:ef: 8b:d9:17:0f:57:15:8b:c6:89:5e:fd:99:09:fd:b0:f3:31:81: da:09:56:15:d7:19:65:b4:16:8b:05:e3:6d:ff:1a:93:94:d8: e2:be:9d:b1:19:35:f7:82:fa:0d:68:a9:18:48:89:4c:75:0d: 1f:65:9b:d3:70:b3:4e:0b:2a:d4:b1:63:55:2b:1c:66:e1:45: 08:9f:2b:6c:1b:28:64:83:08:13:48:cc:33:fc:d6:9e:96:68: 23:c3:f5:77 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqOPyh98RzzHgwbpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxODA0MzI0OFoXDTI3MTAyMTA0MzI0OFowLzEtMCsGA1UEAxMk YWZmYTcxNmItOTYzMS00NTA2LWFlZTUtZGM2OWY3OWY5ZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2f0i3QUXLup/+1t0REm++HWPlX7S8VFqGjz Bea9NdeAh/JeVr7ujB4De+/KjrMPZAZxIn7KLFQczxoosIb7nyJJ/8Q010wPPMkP Iy+HSgkvobI2bGpW0DSVAPZ+gdsB4hH+IXwNZdUozTsXWE3ujowRFXt0fgGB8nm9 dM3cKVz271SWKHWD46km0yEIAkfDeUR7iLdJIYGA0bQ6Q9yTwdnt4qRr793WLb9n ulQFMOaCzhVgYOnFKiaulKhqhkpx46w69LVcZjbjYODxt9XmQGggRAt8mfhCeJy8 BOvbn4z9fCpYQnXi6NBaTu7bv3ou68ysaVnR6j/EuXFTqMi1UQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCkZggi4dl1brrkuENqMy/KTf6LJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h ZmZhNzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5Zjc5ZjlmY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FmZmE3MTZiLTk2MzEtNDUwNi1h ZWU1LWRjNjlmNzlmOWZjYS9hZmZhNzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5Zjc5 ZjlmY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjdQwDgQCAAIwCAMGACYC9dsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABXJ6DCp6Kt4HmdBSIRaoOmcken5hjrS302bqYc/m1eBKm3hpLEt6FEf4y5Scev7 DAhAMmOIbae32B09BKFCotnqmEESH9ukTV52x5drtz20JVjlk9SqLbVGitU40DDA Gg+RlyEFfVnwb1kQaBIX+4LKSRPW64N7fhgyiG0BwHQyoWf6ckx4I0O+OQy2f8zn +RrerRICm4XzvG310cM2NV0r74vZFw9XFYvGiV79mQn9sPMxgdoJVhXXGWW0FosF 423/GpOU2OK+nbEZNfeC+g1oqRhIiUx1DR9lm9Nws04LKtSxY1UrHGbhRQifK2wb KGSDCBNIzDP81p6WaCPD9Xc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:42 2025 by rpki-client