$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer File: f5f37851-5580-4893-8a07-8693f2521f18.cer (raw, json) Hash identifier: dlFcZGTY+FPwuETWtOak5oVu/fxA7su5giYK9BL436o= Subject key identifier: 67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB68F497008337407C9E2DA4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 15:06:35 +0000 Certificate not after: Thu 04 Nov 2027 15:06:35 +0000 Subordinate resources: AS: 401897 IP: 23.143.20.0/24 IP: 2604:19e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:8f:49:70:08:33:74:07:c9:e2:da:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 1 15:06:35 2025 GMT Not After : Nov 4 15:06:35 2027 GMT Subject: CN=f5f37851-5580-4893-8a07-8693f2521f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:34:54:d4:7d:bc:4c:57:cf:b9:e4:da:26:5a: dd:25:bd:7c:5d:0f:c7:86:aa:b6:40:69:14:fe:4d: da:dc:43:7d:5d:0d:61:cf:18:ca:fe:6a:3b:88:28: 11:1e:c2:11:5f:45:b4:f3:68:5e:4a:0b:62:b4:67: 24:86:27:1e:37:7e:44:88:c8:55:8f:9a:db:07:9a: 7b:3c:51:3b:e6:1e:58:27:fa:99:93:22:64:d6:6b: a9:8e:00:73:61:9a:bf:63:a8:7c:98:b8:0b:5a:01: b8:0b:b7:f2:a2:de:f2:1f:90:b6:91:b3:63:cb:79: 71:6f:56:a5:61:99:e0:6f:c0:5f:2d:3e:80:c1:12: d9:42:b1:9d:2f:5a:bb:9a:97:e6:a1:5b:15:ca:4a: 08:3d:ea:36:b3:b0:f1:41:3f:ce:c3:40:66:09:f1: 48:0b:c2:04:eb:5e:ad:f4:89:97:ba:7d:33:d6:3c: 6a:e5:88:cb:7a:6d:68:c8:0f:e2:9d:f4:97:9e:f9: 7e:52:b3:e3:54:f9:57:6f:5d:0a:77:aa:39:49:d8: 2a:fc:98:09:ef:8b:31:ff:b4:9c:a3:73:0f:0b:9d: b3:cd:14:e1:d9:c5:e4:15:1a:2e:74:b0:df:74:84: 77:7b:2c:13:1d:fb:da:e5:ee:92:9d:cf:bc:6b:c4: 2e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.20.0/24 IPv6: 2604:19e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401897 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c6:d4:b8:2c:bf:29:e5:2f:c7:b6:df:dc:78:a3:84:ca:64: 05:0e:23:2b:bb:aa:e0:bd:e2:e9:cf:ac:59:de:db:63:7c:0c: e5:0e:bc:12:ad:8f:ca:e0:79:4c:45:cd:ae:0e:5a:0a:7d:8a: e7:4d:bc:eb:1f:fa:a7:b0:3d:87:bf:1a:cb:fc:7f:59:91:76: 70:82:8f:dd:e0:6e:1e:39:33:2f:7e:b6:34:7c:b6:03:ab:23: bf:c4:3b:d5:aa:b4:9f:cc:cc:cf:2c:4e:13:51:43:35:fb:a4: c4:c3:ff:a6:06:7c:30:44:a5:82:6e:e4:34:65:7b:3c:25:72: 43:fe:0f:53:ce:e7:e5:a3:ee:f7:98:29:1c:72:d9:4b:7f:87: 5a:0a:78:c5:8d:c9:14:16:57:2b:c7:35:53:1a:f8:e8:d4:4b: d3:f8:df:f8:75:56:13:e2:80:b5:39:bc:21:91:20:06:98:56: 01:14:74:06:91:65:91:a5:ed:06:ba:15:31:65:59:10:0c:5e: 7e:9c:75:88:18:8b:88:56:7e:ec:23:71:ba:d4:81:e1:31:ef: 6a:32:85:9a:06:5e:78:d3:ae:b7:92:38:7a:ad:7c:69:51:29: 95:44:49:ae:f6:65:61:78:8d:d8:2d:54:d3:28:3e:f5:ac:6c: c6:61:eb:fc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEq2j0lwCDN0B8ni2kwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwMTE1MDYzNVoXDTI3MTEwNDE1MDYzNVowLzEtMCsGA1UEAxMk ZjVmMzc4NTEtNTU4MC00ODkzLThhMDctODY5M2YyNTIxZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzRU1H28TFfPueTaJlrdJb18XQ/Hhqq2QGkU /k3a3EN9XQ1hzxjK/mo7iCgRHsIRX0W082heSgtitGckhiceN35EiMhVj5rbB5p7 PFE75h5YJ/qZkyJk1mupjgBzYZq/Y6h8mLgLWgG4C7fyot7yH5C2kbNjy3lxb1al YZngb8BfLT6AwRLZQrGdL1q7mpfmoVsVykoIPeo2s7DxQT/Ow0BmCfFIC8IE616t 9ImXun0z1jxq5YjLem1oyA/infSXnvl+UrPjVPlXb10Kd6o5Sdgq/JgJ74sx/7Sc o3MPC52zzRTh2cXkFRoudLDfdIR3eywTHfva5e6Snc+8a8QuVQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGcfjKU1GUFWkvaW3/oxN6iMC9s4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9m NWYzNzg1MS01NTgwLTQ4OTMtOGEwNy04NjkzZjI1MjFmMTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2Y1ZjM3ODUxLTU1ODAtNDg5My04 YTA3LTg2OTNmMjUyMWYxOC9mNWYzNzg1MS01NTgwLTQ4OTMtOGEwNy04NjkzZjI1 MjFmMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXjxQwDQQCAAIwBwMFACYEGeAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiHpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHrG1LgsvynlL8e239x4o4TKZAUO Iyu7quC94unPrFne22N8DOUOvBKtj8rgeUxFza4OWgp9iudNvOsf+qewPYe/Gsv8 f1mRdnCCj93gbh45My9+tjR8tgOrI7/EO9WqtJ/MzM8sThNRQzX7pMTD/6YGfDBE pYJu5DRlezwlckP+D1PO5+Wj7veYKRxy2Ut/h1oKeMWNyRQWVyvHNVMa+OjUS9P4 3/h1VhPigLU5vCGRIAaYVgEUdAaRZZGl7Qa6FTFlWRAMXn6cdYgYi4hWfuwjcbrU geEx72oyhZoGXnjTrreSOHqtfGlRKZVESa72ZWF4jdgtVNMoPvWsbMZh6/w= -----END CERTIFICATE-----Generated at Sat Aug 9 10:41:49 2025 by rpki-client