$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c78a47e0-417f-46de-b8ce-1c4865dd2675.cer File: c78a47e0-417f-46de-b8ce-1c4865dd2675.cer (raw, json) Hash identifier: 84hkuG1BtAuMjjTD/Wgsd5Pgd4k/r+1jF6Ddb2chpMU= Subject key identifier: C4:54:1F:9D:4A:5C:1A:7A:7E:FA:08:FF:44:F9:C6:40:28:42:3A:AA Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A87E066DFD2C5170F8C79A800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c78a47e0-417f-46de-b8ce-1c4865dd2675/c78a47e0-417f-46de-b8ce-1c4865dd2675.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c78a47e0-417f-46de-b8ce-1c4865dd2675/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Jul 2025 21:47:02 +0000 Certificate not after: Mon 18 Oct 2027 21:47:02 +0000 Subordinate resources: AS: 21783 IP: 2607:c540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:e0:66:df:d2:c5:17:0f:8c:79:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 15 21:47:02 2025 GMT Not After : Oct 18 21:47:02 2027 GMT Subject: CN=c78a47e0-417f-46de-b8ce-1c4865dd2675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:ce:ac:38:27:83:b5:b6:e7:af:67:f2:9f: 6e:90:3d:2d:b7:ae:5c:07:e9:55:28:75:98:a8:d1: 6a:75:59:83:41:e4:cf:5e:e0:ab:16:c0:7a:81:49: bd:c7:d5:fc:ea:19:0e:35:53:94:4c:6b:f8:47:74: e5:56:df:84:85:55:33:77:b0:1d:0c:9b:5f:70:aa: df:0e:66:50:17:e2:30:1b:7b:d1:da:76:9b:13:26: 98:3c:1c:21:d3:fa:c4:36:32:3f:a2:ba:1b:3d:c6: 14:93:2a:19:1e:cb:08:a5:d3:be:db:b8:b1:eb:2e: 04:c3:88:51:4a:8d:c4:e1:89:47:6d:fa:ef:16:92: ce:11:07:55:57:c0:40:11:d0:d6:1d:50:2b:03:7f: d6:07:c9:93:74:51:ce:37:81:e7:0b:c3:3e:ff:09: 1b:0b:42:a5:60:6a:66:8e:9b:fc:15:e5:d7:5e:7c: 7b:2d:8b:94:31:cd:90:d3:91:d4:bd:89:9d:3e:f8: 8f:05:6c:a7:24:9c:48:ad:fd:ea:94:50:d8:8a:4c: a5:ab:86:d7:db:11:83:0c:c3:35:d3:f9:d8:60:fa: 0b:b8:74:0b:1f:a3:9c:e7:d5:4b:20:5d:32:5d:a7: 09:55:b5:1e:d8:75:24:31:15:a5:9b:86:ca:d2:4d: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:54:1F:9D:4A:5C:1A:7A:7E:FA:08:FF:44:F9:C6:40:28:42:3A:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c78a47e0-417f-46de-b8ce-1c4865dd2675/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c78a47e0-417f-46de-b8ce-1c4865dd2675/c78a47e0-417f-46de-b8ce-1c4865dd2675.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2607:c540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21783 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c3:c4:dd:20:d5:9f:a0:d1:4a:6d:b6:bc:9b:3f:a5:04:55: b3:39:55:d0:0e:3e:d5:94:37:44:92:a6:4f:37:68:be:68:ab: ec:15:e5:1e:cf:25:ca:a8:04:27:09:6d:7d:6c:d8:05:0f:65: b1:69:c1:3e:80:82:2c:72:5b:3a:48:dd:df:e3:7f:6f:4a:b5: b4:37:3c:d7:a4:12:6a:4a:64:3e:b9:96:91:30:d4:32:42:8a: 45:f1:6f:29:2d:27:32:c6:4c:17:ae:e8:5e:46:15:12:32:64: 4c:03:1b:e1:a3:4a:8b:b5:d6:bd:4e:1c:0e:a4:e6:58:44:4f: 00:c7:27:81:be:74:a8:c9:c7:1a:1e:e4:f9:57:cc:b1:20:2c: dd:ff:cb:10:a7:88:5a:70:78:24:3c:f8:c2:ea:fc:01:81:ed: 3b:a1:4b:a5:8c:06:5c:59:08:f5:90:b2:01:50:40:54:ab:d6: 4e:09:71:9a:28:17:18:25:59:b1:fb:ae:e2:09:9e:f3:f9:66: e4:7a:1e:b0:c0:37:c5:31:45:7b:54:c3:37:51:a2:17:e7:51: 64:22:df:4f:8e:eb:4b:05:49:d7:fd:9e:ac:0a:41:41:72:08: 1f:c7:2f:32:38:8c:fa:8b:97:23:ac:7f:33:a5:47:97:9d:5b: 99:75:fe:95 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqH4Gbf0sUXD4x5qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNTIxNDcwMloXDTI3MTAxODIxNDcwMlowLzEtMCsGA1UEAxMk Yzc4YTQ3ZTAtNDE3Zi00NmRlLWI4Y2UtMWM0ODY1ZGQyNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPHOrDgng7W2569n8p9ukD0tt65cB+lVKHWY qNFqdVmDQeTPXuCrFsB6gUm9x9X86hkONVOUTGv4R3TlVt+EhVUzd7AdDJtfcKrf DmZQF+IwG3vR2nabEyaYPBwh0/rENjI/orobPcYUkyoZHssIpdO+27ix6y4Ew4hR So3E4YlHbfrvFpLOEQdVV8BAEdDWHVArA3/WB8mTdFHON4HnC8M+/wkbC0KlYGpm jpv8FeXXXnx7LYuUMc2Q05HUvYmdPviPBWynJJxIrf3qlFDYikylq4bX2xGDDMM1 0/nYYPoLuHQLH6Oc59VLIF0yXacJVbUe2HUkMRWlm4bK0k30SwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMRUH51KXBp6fvoI/0T5xkAoQjqqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j NzhhNDdlMC00MTdmLTQ2ZGUtYjhjZS0xYzQ4NjVkZDI2NzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2M3OGE0N2UwLTQxN2YtNDZkZS1i OGNlLTFjNDg2NWRkMjY3NS9jNzhhNDdlMC00MTdmLTQ2ZGUtYjhjZS0xYzQ4NjVk ZDI2NzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB8VAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlUXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKXDxN0g1Z+g0UpttrybP6UEVbM5VdAOPtWUN0SSpk83aL5o q+wV5R7PJcqoBCcJbX1s2AUPZbFpwT6AgixyWzpI3d/jf29KtbQ3PNekEmpKZD65 lpEw1DJCikXxbyktJzLGTBeu6F5GFRIyZEwDG+GjSou11r1OHA6k5lhETwDHJ4G+ dKjJxxoe5PlXzLEgLN3/yxCniFpweCQ8+MLq/AGB7TuhS6WMBlxZCPWQsgFQQFSr 1k4JcZooFxglWbH7ruIJnvP5ZuR6HrDAN8UxRXtUwzdRohfnUWQi30+O60sFSdf9 nqwKQUFyCB/HLzI4jPqLlyOsfzOlR5edW5l1/pU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:58 2025 by rpki-client