$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer File: cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer (raw, json) Hash identifier: 228C5DJPE/GLKlxOAX/VbnjHoVzJfpfUk5PVDVQ9MjE= Subject key identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A89D7AAD1D661B6467F17B280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 14:41:03 +0000 Certificate not after: Tue 19 Oct 2027 14:41:03 +0000 Subordinate resources: IP: 23.140.148.0/24 IP: 2602:f60a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:d7:aa:d1:d6:61:b6:46:7f:17:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 16 14:41:03 2025 GMT Not After : Oct 19 14:41:03 2027 GMT Subject: CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:58:93:e2:8e:c7:eb:af:d5:f1:53:3b:f8: a3:a0:ee:d6:cb:f6:bb:4a:c4:83:d3:61:f8:7e:7d: 41:f6:bc:d9:17:cb:a9:72:c5:70:ac:2d:73:39:27: 37:88:fe:90:c2:e5:44:b9:39:b6:48:d6:92:e6:b0: 7a:1b:aa:5f:fc:e6:99:c6:25:03:1b:d4:3d:94:86: 96:c2:70:be:4b:f7:48:98:86:1a:ee:05:8d:62:ed: fa:63:d5:58:e3:d2:b6:05:00:12:61:c2:bb:59:81: 9b:b8:a7:c3:49:f3:67:63:db:21:77:e8:48:80:cb: 4c:fd:cc:69:9e:ba:48:6f:b7:33:e3:44:48:7a:67: 5f:02:27:c0:17:a8:d5:56:2f:e0:15:d6:ab:19:50: 6f:49:1b:83:ec:66:51:45:66:4e:6b:51:ab:dc:34: 53:b9:84:cc:04:be:e0:ff:01:32:26:28:21:6e:41: ad:02:3a:40:bd:cd:dd:ba:03:8c:54:20:fc:32:a0: a3:5b:a1:6e:af:6a:a3:c5:0e:a3:ae:08:30:47:c2: 39:b1:2a:47:90:8f:6c:84:c2:78:13:a7:72:83:35: a8:4d:bf:78:af:19:b5:a8:7d:42:b7:04:4d:70:09: c8:c5:22:1f:50:50:e7:36:2e:cf:80:63:20:f4:fd: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.140.148.0/24 IPv6: 2602:f60a::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0f:eb:94:09:19:59:73:df:05:e0:2b:18:6b:21:da:37:c2: 63:bb:f4:c5:6a:ed:eb:f3:94:ad:d8:75:96:8b:6c:00:62:ca: 9c:30:f8:ca:62:f8:c5:80:40:89:50:98:a9:ec:48:44:cd:bf: 80:c1:39:5a:cf:b9:dd:49:3c:28:a3:60:a3:ae:17:df:74:4c: 8d:49:30:1f:2a:34:ed:1a:fe:b0:32:51:f1:1f:0a:df:ba:a4: 8e:27:28:96:e1:ac:96:13:49:95:bd:7d:9e:06:94:d7:21:85: 0f:73:10:e9:eb:69:05:45:bc:1a:be:fc:11:0c:f0:15:a9:44: 61:00:97:c7:cf:df:7b:32:5f:32:d1:bb:60:89:ed:cd:1a:74: 87:56:aa:01:84:1a:0b:01:ea:57:80:d9:ae:9d:9e:91:ce:22: 27:35:1d:bd:06:93:fc:ee:ee:56:3d:e2:b9:a1:65:fd:99:e5: 6e:be:f1:23:4e:9a:9c:a3:39:f1:35:6e:02:93:84:da:05:db: 14:10:3f:ba:50:a5:00:80:db:0c:a5:13:0f:a2:f9:44:d6:88: b8:a5:5d:8f:9b:14:91:87:59:ea:81:b5:77:5e:a0:50:cd:0c: a0:59:0c:d5:af:a6:8f:e2:c2:e8:9a:05:ff:69:9c:71:c0:e7: 44:e0:90:a0 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqJ16rR1mG2Rn8XsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNjE0NDEwM1oXDTI3MTAxOTE0NDEwM1owLzEtMCsGA1UEAxMk Y2RiZTVkZDQtYjlmYS00MDIxLTg3YTEtMzAwMmY4MGNjNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6BYk+KOx+uv1fFTO/ijoO7Wy/a7SsSD02H4 fn1B9rzZF8upcsVwrC1zOSc3iP6QwuVEuTm2SNaS5rB6G6pf/OaZxiUDG9Q9lIaW wnC+S/dImIYa7gWNYu36Y9VY49K2BQASYcK7WYGbuKfDSfNnY9shd+hIgMtM/cxp nrpIb7cz40RIemdfAifAF6jVVi/gFdarGVBvSRuD7GZRRWZOa1Gr3DRTuYTMBL7g /wEyJighbkGtAjpAvc3dugOMVCD8MqCjW6Fur2qjxQ6jrggwR8I5sSpHkI9shMJ4 E6dygzWoTb94rxm1qH1CtwRNcAnIxSIfUFDnNi7PgGMg9P3+HQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFI/ghg+L+1qtad4U8bdJDZBqYcMrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j ZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgwY2M0NDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NkYmU1ZGQ0LWI5ZmEtNDAyMS04 N2ExLTMwMDJmODBjYzQ0OS9jZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgw Y2M0NDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjJQwDgQCAAIwCAMGACYC9goAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABIP65QJGVlz3wXgKxhrIdo3wmO79MVq7evzlK3YdZaLbABiypww+Mpi+MWAQIlQ mKnsSETNv4DBOVrPud1JPCijYKOuF990TI1JMB8qNO0a/rAyUfEfCt+6pI4nKJbh rJYTSZW9fZ4GlNchhQ9zEOnraQVFvBq+/BEM8BWpRGEAl8fP33syXzLRu2CJ7c0a dIdWqgGEGgsB6leA2a6dnpHOIic1Hb0Gk/zu7lY94rmhZf2Z5W6+8SNOmpyjOfE1 bgKThNoF2xQQP7pQpQCA2wylEw+i+UTWiLilXY+bFJGHWeqBtXdeoFDNDKBZDNWv po/iwuiaBf9pnHHA50TgkKA= -----END CERTIFICATE-----Generated at Thu Aug 7 05:11:22 2025 by rpki-client