$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer File: c424337b-6d69-49df-8a01-857b948a7a5a.cer (raw, json) Hash identifier: 7P4fosqyD68VIJ4FlEbs6HJHrRgnkomxHANU/KSePWA= Subject key identifier: 08:AB:D3:BB:04:B8:74:C8:8D:36:07:46:43:0B:D9:7D:F6:EB:02:22 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A8E40364747948807F6B53000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Jul 2025 04:34:56 +0000 Certificate not after: Thu 21 Oct 2027 04:34:56 +0000 Subordinate resources: IP: 23.141.196.0/24 IP: 2602:f5dd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:40:36:47:47:94:88:07:f6:b5:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 18 04:34:56 2025 GMT Not After : Oct 21 04:34:56 2027 GMT Subject: CN=c424337b-6d69-49df-8a01-857b948a7a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:46:15:8c:c3:9e:d8:70:4a:b6:ac:f4:57: aa:19:f3:30:fa:d5:2c:2f:85:10:3a:f9:50:94:c0: 4d:cb:ce:ae:bc:86:ad:b6:10:49:19:61:53:64:b0: 18:50:09:83:1b:dd:21:d1:55:92:c6:b9:34:f4:b7: 06:0b:1e:25:52:a1:0f:fc:9d:0b:fd:6f:da:52:de: 3c:8e:5a:28:e4:82:12:8e:e5:9e:cb:28:e9:f8:6a: 1d:64:4e:b9:a7:45:01:89:12:56:b2:cc:e0:07:b1: bb:47:94:64:7f:01:d4:2a:f1:4a:fd:ff:7b:08:a5: ef:0f:df:77:4d:d7:4d:07:ac:27:38:c5:7c:73:6e: 7e:9c:40:18:c0:1b:29:9a:1a:94:2c:12:ed:bc:aa: 8a:97:62:b6:3d:45:d4:9a:56:6a:c5:ad:09:57:91: 22:2b:72:b8:1d:43:53:ae:a3:33:10:ec:34:49:78: 5c:81:28:5e:0a:7a:ac:45:3a:6a:f0:6d:eb:64:f8: 7e:fa:0a:95:09:9d:ca:4f:e7:22:62:d9:0e:a6:9d: bb:71:49:65:91:4b:c5:a3:d9:d0:c9:95:26:98:9a: e4:a7:d5:83:7b:5a:f8:76:47:7b:ef:da:6c:5b:0e: bd:b0:2e:76:45:d1:e2:db:c0:c5:bd:94:a0:67:02: cf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AB:D3:BB:04:B8:74:C8:8D:36:07:46:43:0B:D9:7D:F6:EB:02:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.196.0/24 IPv6: 2602:f5dd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:d1:a1:1c:5c:c0:9f:29:37:54:46:6c:37:3a:a4:f4:db:49: e0:cb:a2:5a:28:e9:47:ea:ed:f7:fb:c6:23:25:79:6b:58:58: da:db:0f:0c:d0:0c:38:88:6a:20:8b:e6:fd:ef:00:0c:7c:e1: 60:24:93:c5:58:bf:6e:1b:04:d9:8c:c1:e9:ff:1f:d1:77:37: 15:15:d6:b2:c4:87:98:29:2f:09:92:c6:b6:fe:2b:d1:36:f4: 22:34:f8:dc:65:51:ad:f4:fb:63:5c:83:78:71:3a:85:46:82: 8d:a8:95:fd:8a:5d:21:74:e8:ef:ba:66:40:9e:3e:98:81:2e: 13:78:c8:1b:95:47:2b:97:2c:ab:a8:3a:8a:86:c8:54:7e:3f: 2a:e5:e4:01:30:14:db:49:7a:d2:02:d9:79:85:ce:eb:0b:4f: 8a:42:4d:83:03:2a:6d:d5:16:62:c5:ae:ed:a9:02:c9:ec:e4: 4a:f1:3e:66:d5:40:2a:ec:eb:04:0c:ec:03:b4:ac:71:72:59: 7e:9f:d5:07:01:e3:cf:8c:05:5b:a2:2d:1f:08:9a:96:a6:0c: 15:2f:85:0e:6a:1e:80:d2:97:f8:95:70:0c:f8:86:11:be:c0: 1b:49:56:f7:7b:37:78:db:85:95:05:14:63:90:d1:c2:03:24: b6:ec:dd:5e -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqOQDZHR5SIB/a1MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxODA0MzQ1NloXDTI3MTAyMTA0MzQ1NlowLzEtMCsGA1UEAxMk YzQyNDMzN2ItNmQ2OS00OWRmLThhMDEtODU3Yjk0OGE3YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwRGFYzDnthwSras9FeqGfMw+tUsL4UQOvlQ lMBNy86uvIatthBJGWFTZLAYUAmDG90h0VWSxrk09LcGCx4lUqEP/J0L/W/aUt48 jloo5IISjuWeyyjp+GodZE65p0UBiRJWsszgB7G7R5RkfwHUKvFK/f97CKXvD993 TddNB6wnOMV8c25+nEAYwBspmhqULBLtvKqKl2K2PUXUmlZqxa0JV5EiK3K4HUNT rqMzEOw0SXhcgSheCnqsRTpq8G3rZPh++gqVCZ3KT+ciYtkOpp27cUllkUvFo9nQ yZUmmJrkp9WDe1r4dkd779psWw69sC52RdHi28DFvZSgZwLPCQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFAir07sEuHTIjTYHRkML2X326wIiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j NDI0MzM3Yi02ZDY5LTQ5ZGYtOGEwMS04NTdiOTQ4YTdhNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2M0MjQzMzdiLTZkNjktNDlkZi04 YTAxLTg1N2I5NDhhN2E1YS9jNDI0MzM3Yi02ZDY5LTQ5ZGYtOGEwMS04NTdiOTQ4 YTdhNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjcQwDgQCAAIwCAMGACYC9d0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ALnRoRxcwJ8pN1RGbDc6pPTbSeDLoloo6Ufq7ff7xiMleWtYWNrbDwzQDDiIaiCL 5v3vAAx84WAkk8VYv24bBNmMwen/H9F3NxUV1rLEh5gpLwmSxrb+K9E29CI0+Nxl Ua30+2Ncg3hxOoVGgo2olf2KXSF06O+6ZkCePpiBLhN4yBuVRyuXLKuoOoqGyFR+ Pyrl5AEwFNtJetIC2XmFzusLT4pCTYMDKm3VFmLFru2pAsns5ErxPmbVQCrs6wQM 7AO0rHFyWX6f1QcB48+MBVuiLR8ImpamDBUvhQ5qHoDSl/iVcAz4hhG+wBtJVvd7 N3jbhZUFFGOQ0cIDJLbs3V4= -----END CERTIFICATE-----Generated at Wed Aug 6 18:45:35 2025 by rpki-client