$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer File: cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer (raw, json) Hash identifier: Cm4Wa+xXh+TYULMwSG3rhwwU5Q2+1iYbULLWLJcdlsQ= Subject key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ACB084ACB7DF36D513DBCB4E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 23:06:34 +0000 Certificate not after: Fri 12 Nov 2027 00:06:34 +0000 Subordinate resources: AS: 401843 IP: 23.142.12.0/24 IP: 2602:f5d1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:08:4a:cb:7d:f3:6d:51:3d:bc:b4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 8 23:06:34 2025 GMT Not After : Nov 12 00:06:34 2027 GMT Subject: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:1b:02:8c:da:f3:f2:6e:23:d6:f5:dd:2e: 8c:3a:93:fb:40:a7:71:a3:59:a3:e0:a2:96:a7:f4: e6:c8:00:d4:eb:85:91:52:9b:7c:19:7c:4f:a8:51: 04:75:02:a8:82:4f:4d:15:9a:64:8d:35:e1:eb:de: 07:7f:6a:35:ac:5a:29:31:48:79:35:94:8d:6d:f0: 71:33:ff:52:d8:e4:fb:a9:68:f3:63:be:29:c5:a2: 25:b6:fe:78:74:cd:6b:15:c8:60:75:0a:b8:af:8a: f5:36:46:e6:88:21:0c:98:c6:18:63:14:b4:c5:87: 36:33:25:2b:db:ba:4e:8d:72:20:01:ab:9e:ec:bf: dc:b2:60:c9:9b:c8:79:d1:b0:78:1f:5d:b9:ea:fd: 36:9c:51:55:7e:6f:6b:51:ea:e9:fc:a9:48:a4:99: 6b:c5:48:e8:70:26:0a:cd:91:2d:14:13:9b:10:c5: 3c:7d:d0:aa:2f:4b:3c:dd:98:c4:cc:a8:16:22:be: 41:6c:5a:ce:17:b5:c8:2c:06:8b:c1:9b:c3:5d:c5: 2c:ab:e9:a0:f8:75:af:73:2f:12:79:91:b4:83:a9: d1:f0:ea:6c:7b:89:c6:fa:7e:e4:ec:a8:51:9e:81: 79:dd:ce:ae:5c:17:f1:99:bf:f6:03:53:dd:a2:9e: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.12.0/24 IPv6: 2602:f5d1::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401843 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a4:c7:29:dd:aa:05:07:8a:2d:3b:10:b1:fb:ff:2f:02:38: f5:3d:d5:1b:b4:c6:8e:14:ba:8b:66:44:6c:36:af:99:82:bc: be:46:10:d3:59:37:89:8f:69:67:ca:4d:55:fd:96:ff:43:7f: 25:da:bb:66:7a:4e:29:64:75:8a:59:c3:9a:14:26:a4:65:fe: 7b:6b:23:fe:f1:af:95:d4:1c:ff:9b:1b:02:08:f3:52:bc:30: e7:d7:27:69:a2:0e:5a:85:67:a0:a5:07:f8:ed:cd:96:91:3d: c1:24:35:48:67:35:df:c0:7e:df:b5:01:e0:24:19:ca:b2:18: 9f:37:02:26:60:25:22:12:c6:51:30:7a:13:6f:01:99:c5:5d: ed:07:16:3f:9f:87:2e:94:bf:6d:45:18:58:c1:6b:c7:7e:b2: 3e:1d:cf:13:d9:81:68:26:62:ad:29:19:11:52:b9:60:d1:56: fa:b9:d0:12:31:31:9f:5e:20:2b:36:60:6f:e3:e4:6a:14:1f: 57:b0:3a:c2:f3:2a:b8:11:de:79:29:fe:d0:59:32:b2:12:9f: 9e:c0:0b:44:eb:14:41:bf:1e:72:d5:c7:9b:99:0a:c1:79:6f: 2b:7e:30:71:3e:38:7b:25:31:01:d8:5c:9c:23:69:08:5f:d6: c8:c6:cc:34 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErLCErLffNtUT28tOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwODIzMDYzNFoXDTI3MTExMjAwMDYzNFowLzEtMCsGA1UEAxMk Y2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmUbAoza8/JuI9b13S6MOpP7QKdxo1mj4KKW p/TmyADU64WRUpt8GXxPqFEEdQKogk9NFZpkjTXh694Hf2o1rFopMUh5NZSNbfBx M/9S2OT7qWjzY74pxaIltv54dM1rFchgdQq4r4r1NkbmiCEMmMYYYxS0xYc2MyUr 27pOjXIgAaue7L/csmDJm8h50bB4H1256v02nFFVfm9rUerp/KlIpJlrxUjocCYK zZEtFBObEMU8fdCqL0s83ZjEzKgWIr5BbFrOF7XILAaLwZvDXcUsq+mg+HWvcy8S eZG0g6nR8Opse4nG+n7k7KhRnoF53c6uXBfxmb/2A1Pdop6K7QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFENXdvGgkUESiep8MFqt4IEDQF4nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j ZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NmYWFlZDkwLWNlNjgtNGUyMi04 NzBiLTdiN2Q4NmU5NDllMC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZl OTQ5ZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjgwwDgQCAAIwCAMGACYC9dEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhszBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3pMcp3aoFB4otOxCx+/8vAjj1 PdUbtMaOFLqLZkRsNq+Zgry+RhDTWTeJj2lnyk1V/Zb/Q38l2rtmek4pZHWKWcOa FCakZf57ayP+8a+V1Bz/mxsCCPNSvDDn1ydpog5ahWegpQf47c2WkT3BJDVIZzXf wH7ftQHgJBnKshifNwImYCUiEsZRMHoTbwGZxV3tBxY/n4culL9tRRhYwWvHfrI+ Hc8T2YFoJmKtKRkRUrlg0Vb6udASMTGfXiArNmBv4+RqFB9XsDrC8yq4Ed55Kf7Q WTKyEp+ewAtE6xRBvx5y1cebmQrBeW8rfjBxPjh7JTEB2FycI2kIX9bIxsw0 -----END CERTIFICATE-----Generated at Wed Nov 5 03:08:35 2025 by rpki-client