$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer File: cb00fdf5-e28b-4e9d-9620-9504972438e2.cer (raw, json) Hash identifier: JY3rJL9aCX8bub0QfuuoW5x6wKuJ7x+4/6/EcU2+LHg= Subject key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A89CFD0698E9A5DF960A00B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 14:25:14 +0000 Certificate not after: Tue 19 Oct 2027 14:25:14 +0000 Subordinate resources: IP: 23.141.132.0/24 IP: 2602:f5e6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:cf:d0:69:8e:9a:5d:f9:60:a0:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 16 14:25:14 2025 GMT Not After : Oct 19 14:25:14 2027 GMT Subject: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:61:be:40:14:aa:5a:e4:37:dd:aa:e1:9e:1f: ea:fe:0d:df:d6:33:89:cd:79:d5:aa:62:4c:90:77: c0:a2:24:7d:5e:55:57:5a:ac:92:95:9b:50:93:ee: bf:66:82:75:91:7e:a7:8a:59:35:f8:ff:90:b8:cf: 06:e2:58:51:90:85:8d:55:82:b0:2f:3d:84:21:79: 06:3c:b6:eb:97:94:b5:df:47:9b:cc:5d:85:d7:d7: 0c:1b:6a:6a:d2:e4:ec:c2:17:3a:9a:9e:a9:ff:0c: c5:45:0a:6e:09:89:c9:35:c0:ab:99:96:d4:02:eb: 8f:bb:70:64:c3:92:d6:95:e3:9f:36:2e:81:8c:80: d7:10:dd:9a:02:07:df:33:43:60:93:ae:76:85:ff: 68:05:61:f7:7e:ec:cc:b8:92:5d:09:73:73:bb:95: b5:b9:cd:6e:56:45:14:cf:d7:a0:d3:e1:9e:9a:0d: b6:f0:c7:6a:79:50:b2:41:bf:80:fa:2f:12:0e:5c: 20:91:d3:ba:26:6f:ea:6a:81:cf:48:93:95:af:df: a3:7f:14:01:1a:d5:13:ee:be:d5:67:4a:2d:22:e5: 3b:2f:e5:c9:ab:58:29:d8:4e:e5:6e:24:05:50:d0: 47:4c:dc:4d:f9:47:3b:19:d7:16:35:8f:6f:b1:e1: 0b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.141.132.0/24 IPv6: 2602:f5e6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c0:ef:89:72:fc:6a:91:43:1f:c8:25:5c:3d:31:f3:d1:9d: f8:fd:91:ac:57:55:b2:1a:fb:b2:a7:ae:48:b5:c3:71:28:19: d4:84:08:aa:39:fe:12:d6:fb:0f:6a:6d:4b:bc:45:11:9e:80: 1b:4a:20:c2:a6:81:62:16:dd:37:e8:ce:20:ed:0c:5f:8b:97: 28:f0:d5:e0:49:4d:ce:6b:53:98:fa:ea:ae:57:25:18:2b:eb: 48:1f:ef:26:5f:cd:31:a1:e1:93:a3:96:27:40:fc:8c:b3:4d: 6c:dd:31:e2:56:d5:2b:62:9c:19:e2:3f:2b:87:0d:28:c5:b6: 33:b8:cc:e8:b9:2a:dd:ca:dc:8b:6d:1f:f9:57:2a:67:6c:dd: 9c:43:02:51:84:b1:6b:ca:e7:20:7c:b8:a4:e9:48:f3:2a:5f: bd:85:7e:8b:a7:d1:33:09:bc:7d:02:0a:63:c3:ee:bd:9e:3d: ac:55:8b:63:d4:c4:77:6c:5d:6e:a7:c0:09:51:1b:65:bf:1c: 03:94:9a:5f:01:6b:f2:e0:3e:9a:2e:3c:2e:d3:d4:42:e9:ba: 8a:fc:a0:6f:03:48:7d:0b:f7:65:a4:01:5b:83:98:b5:1e:8f: 26:b0:03:ea:43:ab:e2:72:82:f9:9a:62:7f:ad:b5:94:33:5f: 9a:21:68:c7 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqJz9Bpjppd+WCgC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNjE0MjUxNFoXDTI3MTAxOTE0MjUxNFowLzEtMCsGA1UEAxMk Y2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQzOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWG+QBSqWuQ33arhnh/q/g3f1jOJzXnVqmJM kHfAoiR9XlVXWqySlZtQk+6/ZoJ1kX6nilk1+P+QuM8G4lhRkIWNVYKwLz2EIXkG PLbrl5S130ebzF2F19cMG2pq0uTswhc6mp6p/wzFRQpuCYnJNcCrmZbUAuuPu3Bk w5LWleOfNi6BjIDXEN2aAgffM0Ngk652hf9oBWH3fuzMuJJdCXNzu5W1uc1uVkUU z9eg0+Gemg228MdqeVCyQb+A+i8SDlwgkdO6Jm/qaoHPSJOVr9+jfxQBGtUT7r7V Z0otIuU7L+XJq1gp2E7lbiQFUNBHTNxN+Uc7GdcWNY9vseELbQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFEkIOMSts2TQow3U97ZAL8koULiMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j YjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NiMDBmZGY1LWUyOGItNGU5ZC05 NjIwLTk1MDQ5NzI0MzhlMi9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcy NDM4ZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjYQwDgQCAAIwCAMGACYC9eYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AL/A74ly/GqRQx/IJVw9MfPRnfj9kaxXVbIa+7Knrki1w3EoGdSECKo5/hLW+w9q bUu8RRGegBtKIMKmgWIW3TfoziDtDF+Llyjw1eBJTc5rU5j66q5XJRgr60gf7yZf zTGh4ZOjlidA/IyzTWzdMeJW1StinBniPyuHDSjFtjO4zOi5Kt3K3IttH/lXKmds 3ZxDAlGEsWvK5yB8uKTpSPMqX72Ffoun0TMJvH0CCmPD7r2ePaxVi2PUxHdsXW6n wAlRG2W/HAOUml8Ba/LgPpouPC7T1ELpuor8oG8DSH0L92WkAVuDmLUejyawA+pD q+JygvmaYn+ttZQzX5ohaMc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:43:22 2025 by rpki-client