$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188.cer File: be801a76-17f5-4096-843c-c6728fe01188.cer (raw, json) Hash identifier: 9Zdp6+azEU23BXn8jcZMJW2sTv9xSo4ZKm80rlQkRFw= Subject key identifier: E1:D4:EF:5C:27:04:BE:B9:BE:A6:F9:B5:66:F6:A1:95:28:BE:C1:C0 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A97B2E9B8D65FD1744566BC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188/be801a76-17f5-4096-843c-c6728fe01188.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Jul 2025 13:48:19 +0000 Certificate not after: Sun 24 Oct 2027 13:48:19 +0000 Subordinate resources: IP: 23.142.60.0/24 IP: 2602:f5cd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:b2:e9:b8:d6:5f:d1:74:45:66:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 21 13:48:19 2025 GMT Not After : Oct 24 13:48:19 2027 GMT Subject: CN=be801a76-17f5-4096-843c-c6728fe01188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:41:49:3f:ab:35:eb:ac:9b:ce:46:95:cb:f5: 4b:83:28:81:b7:80:41:b6:30:c4:c9:8b:9f:a2:dd: 16:55:c9:b3:48:6d:81:35:fa:8c:4e:d5:cd:b2:24: ef:a7:4c:a7:d0:14:ca:0f:35:38:a3:f6:ca:33:7f: 13:96:e4:6a:9e:25:ad:94:51:3e:9b:7d:aa:f3:ae: c7:91:66:67:44:55:d8:f0:fe:82:1b:6c:75:eb:53: 4e:1d:12:c7:95:32:23:e6:65:c4:40:bd:5e:6d:ba: 58:97:7e:5e:59:cc:e9:18:af:19:36:23:cf:0d:a2: 09:ac:cd:c9:86:44:84:7b:8c:b6:94:85:f5:8f:66: 29:c9:0b:ec:e1:29:f3:b5:44:71:74:87:89:a3:9a: 52:37:ec:4c:e9:be:67:1e:fb:40:b4:fa:ce:b0:2c: c4:59:8f:f5:43:d3:5e:c5:fb:66:52:e1:09:bd:97: 8c:b9:00:03:4e:2f:2a:e5:b7:cb:dd:89:51:10:30: e2:b5:6d:f3:8f:cc:82:1b:5b:cb:49:54:1e:1a:c4: 88:76:86:ef:f6:71:63:4e:47:3f:d3:a8:8c:fa:57: f0:2e:e3:ee:8e:98:b1:9f:d9:db:54:df:9d:ea:ab: 7f:0d:8b:cf:38:cf:f1:ce:da:d4:69:f6:09:89:15: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D4:EF:5C:27:04:BE:B9:BE:A6:F9:B5:66:F6:A1:95:28:BE:C1:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/be801a76-17f5-4096-843c-c6728fe01188/be801a76-17f5-4096-843c-c6728fe01188.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.60.0/24 IPv6: 2602:f5cd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:29:5a:83:96:33:c3:fb:9c:f5:2b:1b:4f:69:e1:69:7e:39: b9:e6:f6:d8:bf:29:01:85:dd:4b:03:99:c4:a4:83:0c:65:c8: f8:95:2d:25:2e:71:24:c5:bd:9c:b6:68:d9:97:19:d8:6e:6d: 22:81:cb:87:70:5b:e7:cc:a3:30:d5:7a:f9:97:6f:82:8a:21: 5b:0e:a7:80:3a:26:f9:41:ee:26:cf:f7:3a:ee:9f:4b:87:8d: a7:92:8c:0f:0e:2d:7b:9a:ac:44:f8:aa:fd:30:5e:1d:b7:ad: 66:43:40:e3:c2:9a:6a:33:ef:43:dd:5e:11:f2:af:0e:8a:e9: 46:54:7b:1d:e9:71:11:f9:69:e6:47:fa:0e:c6:b6:08:52:8f: 97:1c:82:a0:42:83:ed:f8:03:fc:f7:c3:1b:89:7a:2e:19:28: 06:11:59:b1:e5:4f:db:57:0f:b9:f7:7e:ec:f8:12:97:0e:64: b1:85:79:fa:0a:9f:d3:0f:a6:f0:00:02:33:dc:fd:d3:3f:74: c5:2c:7c:fe:d0:47:10:41:83:4f:f8:07:c9:9d:c0:24:c2:2b: 7e:4d:60:51:83:e4:b6:59:78:03:f6:7c:43:f9:10:66:07:6e: c3:ab:f4:d9:9a:76:8f:63:13:6e:08:8b:aa:5a:9d:6f:04:18: 94:37:ec:de -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqXsum41l/RdEVmvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyMTEzNDgxOVoXDTI3MTAyNDEzNDgxOVowLzEtMCsGA1UEAxMk YmU4MDFhNzYtMTdmNS00MDk2LTg0M2MtYzY3MjhmZTAxMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0FJP6s166ybzkaVy/VLgyiBt4BBtjDEyYuf ot0WVcmzSG2BNfqMTtXNsiTvp0yn0BTKDzU4o/bKM38TluRqniWtlFE+m32q867H kWZnRFXY8P6CG2x161NOHRLHlTIj5mXEQL1ebbpYl35eWczpGK8ZNiPPDaIJrM3J hkSEe4y2lIX1j2YpyQvs4SnztURxdIeJo5pSN+xM6b5nHvtAtPrOsCzEWY/1Q9Ne xftmUuEJvZeMuQADTi8q5bfL3YlREDDitW3zj8yCG1vLSVQeGsSIdobv9nFjTkc/ 06iM+lfwLuPujpixn9nbVN+d6qt/DYvPOM/xztrUafYJiRXMdQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOHU71wnBL65vqb5tWb2oZUovsHAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i ZTgwMWE3Ni0xN2Y1LTQwOTYtODQzYy1jNjcyOGZlMDExODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2JlODAxYTc2LTE3ZjUtNDA5Ni04 NDNjLWM2NzI4ZmUwMTE4OC9iZTgwMWE3Ni0xN2Y1LTQwOTYtODQzYy1jNjcyOGZl MDExODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjjwwDgQCAAIwCAMGACYC9c0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIYpWoOWM8P7nPUrG09p4Wl+Obnm9ti/KQGF3UsDmcSkgwxlyPiVLSUucSTFvZy2 aNmXGdhubSKBy4dwW+fMozDVevmXb4KKIVsOp4A6JvlB7ibP9zrun0uHjaeSjA8O LXuarET4qv0wXh23rWZDQOPCmmoz70PdXhHyrw6K6UZUex3pcRH5aeZH+g7GtghS j5ccgqBCg+34A/z3wxuJei4ZKAYRWbHlT9tXD7n3fuz4EpcOZLGFefoKn9MPpvAA AjPc/dM/dMUsfP7QRxBBg0/4B8mdwCTCK35NYFGD5LZZeAP2fEP5EGYHbsOr9Nma do9jE24Ii6panW8EGJQ37N4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:59:00 2025 by rpki-client