$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer File: f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer (raw, json) Hash identifier: wSSCYrpXgfJfhWNaKf0bkZ2OqKbiUqbzKJqfIgpM/fw= Subject key identifier: AF:45:3B:DA:71:F1:EF:6D:46:01:0D:83:9D:F5:74:B3:DD:41:DD:16 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B103CEB3F0B0EF01D02585880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Sep 2025 18:03:23 +0000 Certificate not after: Thu 02 Dec 2027 17:40:36 +0000 Subordinate resources: IP: 23.144.196.0/24 IP: 2602:f57d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:3c:eb:3f:0b:0e:f0:1d:02:58:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 2 18:03:23 2025 GMT Not After : Dec 2 17:40:36 2027 GMT Subject: CN=f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:f5:50:c4:45:79:26:61:b2:1a:55:35:63: c1:0f:4a:b9:bc:6a:4d:0a:f4:86:9b:f0:c6:6e:6a: 23:44:dd:19:6a:18:d6:43:66:1d:6f:0c:47:94:13: 68:1e:df:2b:96:08:7d:5c:63:03:0b:dc:44:c3:4d: 80:c6:47:d1:12:9e:c7:11:57:fa:71:7b:5f:dd:28: 4d:a0:79:93:07:16:3a:57:f8:15:aa:0c:6d:f5:e4: 9a:51:0d:53:3e:7a:59:9b:3c:c2:e2:97:c8:0e:73: 03:37:41:1b:c8:a7:37:f4:e1:ad:0d:4f:80:30:fd: 9c:ae:1d:16:32:f3:9e:da:81:48:cc:1d:9c:eb:bf: de:a0:45:ec:16:ec:d9:b5:4d:d2:54:e0:5f:da:7a: 1c:a1:51:e1:e2:fb:0a:0a:aa:c5:97:37:1c:c2:27: 2d:42:cd:84:fb:9e:4b:da:a2:fd:d9:43:95:92:d7: 9e:4d:5e:39:a0:f5:b6:31:65:d3:3a:b7:f2:12:d0: 60:16:ab:f4:f7:fc:94:43:ce:22:b7:e1:22:df:1d: 7b:63:98:dc:60:24:bd:36:10:0e:0c:7c:3d:e5:06: 28:2e:bb:8c:89:a8:d6:57:3a:f8:27:43:89:8e:3f: 47:f7:a0:42:79:ad:fb:72:49:49:e8:c3:42:42:bd: 3c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:45:3B:DA:71:F1:EF:6D:46:01:0D:83:9D:F5:74:B3:DD:41:DD:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.144.196.0/24 IPv6: 2602:f57d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b9:43:db:75:96:d7:40:84:36:b1:64:b3:75:d2:5f:bd:2b: 06:d6:2f:fd:0d:b6:f5:eb:73:5e:63:f9:62:e9:4c:48:6a:46: 83:a3:36:72:17:0a:84:6a:79:c7:90:22:42:2c:1f:35:df:bd: 26:4b:cf:60:5c:c2:be:21:a7:0e:3f:68:3f:7f:bb:6d:a0:eb: 30:ab:c8:0d:fe:35:49:e6:59:66:2e:e0:b3:f7:81:92:ff:e4: 54:46:a1:ab:91:45:55:c4:5f:8f:f3:ba:01:d6:fc:b4:4d:b7: 43:3c:5d:43:e4:cf:4c:7b:89:3e:e4:42:ed:50:de:e9:0d:33: 2e:5d:7c:47:55:f0:39:41:d2:a2:8b:7c:1a:37:6a:26:6d:14: 11:94:cf:1a:e7:ce:42:e3:26:7a:46:e8:18:cd:a2:89:09:a3: be:e7:ff:cf:f3:f0:16:01:c4:58:ca:10:ac:86:1e:f2:98:fd: 86:31:9a:dd:7c:11:82:2b:74:14:05:0e:e8:e3:0a:9c:a5:fc: 0c:c3:cc:97:65:d7:f6:fc:cd:ce:ba:79:f5:3c:37:75:1d:17: 2f:23:09:04:11:85:c0:23:b8:53:56:01:99:25:10:46:23:da: d5:b0:2b:38:1e:a8:26:f6:fe:f7:80:ba:3f:22:8c:bc:a9:14: bb:be:0d:b2 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEsQPOs/Cw7wHQJYWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwMjE4MDMyM1oXDTI3MTIwMjE3NDAzNlowLzEtMCsGA1UEAxMk ZjFiZDQ3MmMtYjBjOC00YmEwLWE1ZDItZmZmY2JlNGQyNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifX1UMRFeSZhshpVNWPBD0q5vGpNCvSGm/DG bmojRN0ZahjWQ2YdbwxHlBNoHt8rlgh9XGMDC9xEw02AxkfREp7HEVf6cXtf3ShN oHmTBxY6V/gVqgxt9eSaUQ1TPnpZmzzC4pfIDnMDN0EbyKc39OGtDU+AMP2crh0W MvOe2oFIzB2c67/eoEXsFuzZtU3SVOBf2nocoVHh4vsKCqrFlzccwictQs2E+55L 2qL92UOVkteeTV45oPW2MWXTOrfyEtBgFqv09/yUQ84it+Ei3x17Y5jcYCS9NhAO DHw95QYoLruMiajWVzr4J0OJjj9H96BCea37cklJ6MNCQr08zwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFK9FO9px8e9tRgENg531dLPdQd0WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9m MWJkNDcyYy1iMGM4LTRiYTAtYTVkMi1mZmZjYmU0ZDI3NTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2YxYmQ0NzJjLWIwYzgtNGJhMC1h NWQyLWZmZmNiZTRkMjc1My9mMWJkNDcyYy1iMGM4LTRiYTAtYTVkMi1mZmZjYmU0 ZDI3NTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkMQwDgQCAAIwCAMGACYC9X0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ALS5Q9t1ltdAhDaxZLN10l+9KwbWL/0NtvXrc15j+WLpTEhqRoOjNnIXCoRqeceQ IkIsHzXfvSZLz2Bcwr4hpw4/aD9/u22g6zCryA3+NUnmWWYu4LP3gZL/5FRGoauR RVXEX4/zugHW/LRNt0M8XUPkz0x7iT7kQu1Q3ukNMy5dfEdV8DlB0qKLfBo3aiZt FBGUzxrnzkLjJnpG6BjNookJo77n/8/z8BYBxFjKEKyGHvKY/YYxmt18EYIrdBQF DujjCpyl/AzDzJdl1/b8zc66efU8N3UdFy8jCQQRhcAjuFNWAZklEEYj2tWwKzge qCb2/veAuj8ijLypFLu+DbI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:45 2025 by rpki-client