$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer File: cd2e63d2-d07f-4959-8fde-569fd1767d7b.cer (raw, json) Hash identifier: pyuEgg9bQaVXOYCdfCGtu8+YqzLcLFxmam91SZR9K20= Subject key identifier: 44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AA4462962608E06DBF0112380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Jul 2025 01:54:42 +0000 Certificate not after: Fri 29 Oct 2027 01:54:42 +0000 Subordinate resources: IP: 23.142.204.0/24 IP: 2602:f5ba::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:46:29:62:60:8e:06:db:f0:11:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 26 01:54:42 2025 GMT Not After : Oct 29 01:54:42 2027 GMT Subject: CN=cd2e63d2-d07f-4959-8fde-569fd1767d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:d8:81:f6:e4:0a:18:26:a9:b6:db:97:81: ae:09:2a:bf:23:5e:55:44:8f:16:0c:b2:f1:da:23: e0:6d:ed:11:ac:34:e6:a7:fb:75:01:23:86:46:fd: 9d:5b:7f:6e:ff:76:f8:3e:48:15:5e:11:3f:bd:13: 06:76:b8:c7:b8:de:03:7d:1d:55:11:18:bd:22:9a: c1:2a:8c:fa:b8:d4:50:0b:e5:a0:d7:28:df:00:0a: 2d:ed:4b:e1:3f:c9:ba:2a:57:66:85:54:b3:83:b8: 34:48:88:b7:af:44:f6:09:24:aa:e2:e3:c6:e4:6c: 1e:07:5e:3d:d8:e9:8c:82:a7:47:1d:1d:03:d5:9e: c2:9f:50:cd:2f:9f:63:a7:67:b8:6e:fd:d4:82:31: b8:af:62:f8:15:a0:22:b8:d0:6d:3a:68:0c:2b:36: d2:3e:76:a3:90:fe:4d:2e:b7:10:af:92:7b:5c:36: 3b:f4:46:8c:bb:03:1a:f3:de:69:57:63:29:21:a9: 48:16:da:27:1f:9e:1d:5e:dc:ae:b0:48:39:a1:e5: cc:9a:6e:11:28:26:8b:da:b0:22:7d:cc:ce:05:bd: c6:fa:56:5b:ef:6b:33:88:6b:fa:41:d1:77:5e:b0: 52:ed:29:91:6b:cf:61:8f:c7:e6:90:74:b3:7a:97: ea:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1C:55:7C:61:E2:E7:B1:7E:68:1D:03:FC:47:39:9A:F5:A7:12:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cd2e63d2-d07f-4959-8fde-569fd1767d7b/cd2e63d2-d07f-4959-8fde-569fd1767d7b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.204.0/24 IPv6: 2602:f5ba::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c1:c8:cb:e6:a3:f2:4d:86:db:49:42:15:cf:97:fb:2b:2c: f7:9b:51:5b:1a:6b:40:ea:29:6e:97:25:d1:08:47:34:90:0a: 4d:5d:f4:8f:62:c2:76:00:b2:95:aa:3c:13:7a:61:5b:83:8c: a9:04:f1:da:ec:05:03:e0:f3:05:16:1e:42:85:17:a0:d5:a7: af:0c:f4:f3:57:7a:18:6b:ce:4a:8a:98:2c:bf:33:b5:df:7a: f1:e3:8f:2a:3f:51:69:a3:6f:e2:8e:73:1d:72:e0:00:0e:c7: 9d:54:15:e7:84:0e:06:cb:7f:e3:66:f8:d4:1a:e6:2f:40:d6: ae:eb:3c:3c:09:6e:63:87:a5:42:40:e3:6b:6c:ae:e2:9d:7a: 5a:1d:11:97:60:e5:cc:27:89:bd:39:7b:62:5d:e5:cb:7d:b2: 53:14:82:bb:e5:e6:a6:cb:c2:2a:0e:bd:d0:47:4a:0f:7a:9c: 7c:ac:8a:92:5c:14:2a:71:39:f4:92:b0:07:9b:6e:35:90:ba: f3:03:7c:be:cf:7d:30:7e:9b:fe:15:66:be:c1:39:52:e4:1a: 62:fc:22:8b:5f:78:58:48:16:74:eb:a6:c5:ce:54:76:51:90: a0:d3:a5:82:f9:87:eb:a0:4c:bc:c0:60:3f:63:ff:ea:6d:73: 31:fc:e7:f5 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqkRiliYI4G2/ARI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyNjAxNTQ0MloXDTI3MTAyOTAxNTQ0MlowLzEtMCsGA1UEAxMk Y2QyZTYzZDItZDA3Zi00OTU5LThmZGUtNTY5ZmQxNzY3ZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyofYgfbkChgmqbbbl4GuCSq/I15VRI8WDLLx 2iPgbe0RrDTmp/t1ASOGRv2dW39u/3b4PkgVXhE/vRMGdrjHuN4DfR1VERi9IprB Koz6uNRQC+Wg1yjfAAot7UvhP8m6KldmhVSzg7g0SIi3r0T2CSSq4uPG5GweB149 2OmMgqdHHR0D1Z7Cn1DNL59jp2e4bv3UgjG4r2L4FaAiuNBtOmgMKzbSPnajkP5N LrcQr5J7XDY79EaMuwMa895pV2MpIalIFtonH54dXtyusEg5oeXMmm4RKCaL2rAi fczOBb3G+lZb72sziGv6QdF3XrBS7SmRa89hj8fmkHSzepfqmQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFEQcVXxh4uexfmgdA/xHOZr1pxIeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j ZDJlNjNkMi1kMDdmLTQ5NTktOGZkZS01NjlmZDE3NjdkN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NkMmU2M2QyLWQwN2YtNDk1OS04 ZmRlLTU2OWZkMTc2N2Q3Yi9jZDJlNjNkMi1kMDdmLTQ5NTktOGZkZS01NjlmZDE3 NjdkN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjswwDgQCAAIwCAMGACYC9boAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIvByMvmo/JNhttJQhXPl/srLPebUVsaa0DqKW6XJdEIRzSQCk1d9I9iwnYAspWq PBN6YVuDjKkE8drsBQPg8wUWHkKFF6DVp68M9PNXehhrzkqKmCy/M7XfevHjjyo/ UWmjb+KOcx1y4AAOx51UFeeEDgbLf+Nm+NQa5i9A1q7rPDwJbmOHpUJA42tsruKd elodEZdg5cwnib05e2Jd5ct9slMUgrvl5qbLwioOvdBHSg96nHysipJcFCpxOfSS sAebbjWQuvMDfL7PfTB+m/4VZr7BOVLkGmL8IotfeFhIFnTrpsXOVHZRkKDTpYL5 h+ugTLzAYD9j/+ptczH85/U= -----END CERTIFICATE-----Generated at Wed Aug 6 12:41:41 2025 by rpki-client