$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer File: 0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer (raw, json) Hash identifier: s983f430VlV2XFvTKR2NoBGLXKho0/YGkxaVYJSWgK8= Subject key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B63A5952456EF32C0404F4380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Oct 2025 15:06:21 +0000 Certificate not after: Mon 29 Nov 2027 14:37:51 +0000 Subordinate resources: AS: 21939 AS: 402048 -- 402049 IP: 23.144.148.0/24 IP: 2602:f586::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:a5:95:24:56:ef:32:c0:40:4f:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 2 15:06:21 2025 GMT Not After : Nov 29 14:37:51 2027 GMT Subject: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:2f:ce:1f:6c:08:12:c9:03:f9:8f:92:70: 30:44:c9:5a:9a:2f:09:ea:77:1c:35:92:ea:b2:b6: 4f:12:7d:de:52:b8:8d:a8:4b:93:bc:56:46:ef:57: 46:13:28:da:b2:aa:62:bf:ad:b7:ed:bb:f8:60:ef: dc:78:6a:f9:40:ae:0d:25:e2:36:6e:a9:48:3f:ce: 45:48:67:7a:bf:16:76:41:ff:17:54:23:f0:8d:1a: 17:67:5d:61:eb:41:70:cc:37:09:d3:cd:37:68:5a: 7d:0a:ea:43:c2:0c:d7:53:e7:7e:63:90:40:26:57: bc:b9:4a:a2:5d:f5:8d:f4:8e:0c:9d:82:1f:68:d6: ef:2c:a1:df:71:e5:4e:13:ec:43:76:1f:4e:9f:aa: e6:6d:d2:ee:f9:96:71:e3:46:9d:77:61:b7:65:c4: be:77:c0:a4:c2:8b:13:44:1e:6b:96:f2:76:19:df: f3:14:76:1d:3c:66:ed:51:13:e4:9f:d9:66:1e:9d: e9:7a:c4:c1:de:da:90:1b:fa:d6:c0:13:f7:61:99: 42:25:3e:ce:f2:9c:31:39:67:2c:00:a8:c3:0a:74: cd:b5:80:74:76:de:d4:3f:cc:79:52:c9:af:28:24: 6d:9d:65:9e:e2:90:3b:9f:39:90:4f:bf:3d:cf:71: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.144.148.0/24 IPv6: 2602:f586::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21939 402048-402049 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:4a:6b:42:99:70:22:ab:60:70:83:39:d1:66:fe:c5:0f:be: 22:a8:de:96:83:cb:72:23:e3:bd:90:eb:c7:1e:7d:64:b4:e6: 5a:ed:7f:46:c3:2c:d7:54:7d:ad:68:58:ed:a2:67:6d:c2:ff: 14:65:7d:53:ba:0e:43:e1:e1:ac:8e:c8:d8:22:93:6e:02:5d: fc:1a:18:f6:cc:53:ba:cb:4b:62:5c:1d:ce:db:28:14:6a:ba: 33:15:0c:19:aa:ee:44:f6:fa:38:29:90:a9:eb:6f:cc:fd:44: 71:42:42:49:dd:48:d2:15:fc:89:9f:84:5a:19:18:57:0c:67: c2:ae:ac:6f:ae:c7:31:3c:95:9d:9f:6b:71:e9:e5:7e:2b:91: f3:f8:6b:3d:5f:6f:24:f1:5c:75:4a:06:df:a1:77:95:09:d2: 1d:f2:6d:5d:66:64:56:5e:59:2a:fb:c8:76:5d:b1:f0:fd:63: e0:d2:60:8c:9c:da:b4:2b:be:70:d0:a9:d3:39:49:9a:d6:1f: f4:b5:f6:c7:d5:00:95:fa:59:ea:f0:da:68:e7:ca:b5:37:53: 85:4e:17:01:a0:5a:04:dc:63:59:12:11:f2:81:d1:25:ca:97: 90:5d:39:4e:61:55:81:a5:bd:4c:7a:09:fc:ee:47:8f:2f:43: 48:47:ca:6b -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEtjpZUkVu8ywEBPQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMjE1MDYyMVoXDTI3MTEyOTE0Mzc1MVowLzEtMCsGA1UEAxMk MGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEzZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOYvzh9sCBLJA/mPknAwRMlami8J6nccNZLq srZPEn3eUriNqEuTvFZG71dGEyjasqpiv6237bv4YO/ceGr5QK4NJeI2bqlIP85F SGd6vxZ2Qf8XVCPwjRoXZ11h60FwzDcJ0803aFp9CupDwgzXU+d+Y5BAJle8uUqi XfWN9I4MnYIfaNbvLKHfceVOE+xDdh9On6rmbdLu+ZZx40add2G3ZcS+d8CkwosT RB5rlvJ2Gd/zFHYdPGbtURPkn9lmHp3pesTB3tqQG/rWwBP3YZlCJT7O8pwxOWcs AKjDCnTNtYB0dt7UP8x5UsmvKCRtnWWe4pA7nzmQT789z3H4ZQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFHUtKqGbWVUFmAtuBYzdNPX6/jJPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w YjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzBiNjFkYjhiLTUxZDYtNDY0Yy05 ZGU5LTZlMGE3YjZhM2Y1ZS8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2 YTNmNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkJQwDgQCAAIwCAMGACYC9YYAMCUGCCsGAQUF BwEIAQH/BBYwFKASMBACAlWzMAoCAwYigAIDBiKBMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABFKa0KZcCKr YHCDOdFm/sUPviKo3paDy3Ij472Q68cefWS05lrtf0bDLNdUfa1oWO2iZ23C/xRl fVO6DkPh4ayOyNgik24CXfwaGPbMU7rLS2JcHc7bKBRqujMVDBmq7kT2+jgpkKnr b8z9RHFCQkndSNIV/ImfhFoZGFcMZ8KurG+uxzE8lZ2fa3Hp5X4rkfP4az1fbyTx XHVKBt+hd5UJ0h3ybV1mZFZeWSr7yHZdsfD9Y+DSYIyc2rQrvnDQqdM5SZrWH/S1 9sfVAJX6Werw2mjnyrU3U4VOFwGgWgTcY1kSEfKB0SXKl5BdOU5hVYGlvUx6Cfzu R48vQ0hHyms= -----END CERTIFICATE-----Generated at Wed Oct 8 17:00:07 2025 by rpki-client