$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95.cer File: 41babb23-89de-46a4-977a-703f3bd0ca95.cer (raw, json) Hash identifier: ORzbMA1HTH8YoIpuQOVVONW2E6poadMNeM+ISldykP4= Subject key identifier: 39:B3:56:8D:D4:61:1C:FA:E3:E9:6A:09:5C:98:6F:82:59:05:D1:3F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B28EFACA50E8114E92E19A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/41babb23-89de-46a4-977a-703f3bd0ca95.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 14:22:57 +0000 Certificate not after: Wed 15 Dec 2027 15:22:57 +0000 Subordinate resources: IP: 23.145.76.0/24 IP: 2602:f566::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:ef:ac:a5:0e:81:14:e9:2e:19:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 11 14:22:57 2025 GMT Not After : Dec 15 15:22:57 2027 GMT Subject: CN=41babb23-89de-46a4-977a-703f3bd0ca95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:3e:2c:21:b0:12:47:61:65:1f:5e:a9:0f: 9b:67:3e:b5:d6:f0:03:51:5a:64:f9:63:d8:64:c4: 1d:af:a4:01:81:c3:06:56:90:95:6e:a7:9e:fc:5d: 1c:67:61:8f:2c:70:56:b8:c2:b3:6d:94:55:e5:42: 39:f6:da:8e:dd:19:d6:ba:f7:34:61:e9:7c:8b:26: 2f:d9:54:fe:0f:88:5d:7d:46:3a:eb:f7:a4:4f:03: 38:c7:50:ce:2d:eb:e0:bb:d5:5c:45:4a:d1:44:3c: 2d:2e:4c:84:16:3e:9c:f5:e7:30:09:dc:7f:38:ba: 36:d1:e4:55:dc:a9:5c:e7:1e:b8:a2:3c:08:95:f9: d9:e1:8a:2c:94:79:cd:d9:4d:3c:2c:6d:96:3c:ad: 91:42:dc:0b:a0:2e:f7:19:8e:56:9f:88:62:24:76: fd:9a:bf:f5:16:22:11:fe:bc:6f:e9:3d:c6:a7:6a: e1:5e:be:4b:48:2a:17:bc:10:5e:ab:e6:66:b8:c7: cd:a5:44:db:0a:3c:5a:67:8f:09:6f:4a:48:40:d6: 5f:0f:50:7c:dc:7a:a4:31:de:24:ba:b0:15:2f:22: 5b:5a:47:c4:04:26:86:e3:f7:ee:4f:d5:c6:cf:db: 94:65:92:1c:ed:eb:64:6a:5d:0b:44:0e:c8:e4:db: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B3:56:8D:D4:61:1C:FA:E3:E9:6A:09:5C:98:6F:82:59:05:D1:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/41babb23-89de-46a4-977a-703f3bd0ca95/41babb23-89de-46a4-977a-703f3bd0ca95.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.76.0/24 IPv6: 2602:f566::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ef:de:f0:5c:ee:7d:2e:b6:0e:9c:20:dd:94:39:ca:b8:24: b0:df:26:d3:6a:7c:4e:66:45:dd:52:78:94:e8:8c:f9:30:1c: 41:ee:a6:20:6d:75:8a:73:db:6a:b6:4a:61:21:0a:e8:a6:d2: 1b:c2:40:da:2e:da:f0:b4:ec:02:a5:6e:26:a4:11:c1:48:98: 22:dc:f6:24:18:3a:fd:20:c1:a2:c6:75:8e:1b:26:81:4d:66: 8c:15:be:6f:37:3d:d7:b3:91:08:9a:00:e2:aa:e8:03:50:2c: ea:a7:97:7d:4e:dc:e7:23:47:af:50:4b:1f:9b:3a:51:78:09: 5f:29:39:1d:2f:d1:59:79:d7:91:dd:92:e9:03:ac:e0:bb:e7: 19:67:fe:a9:f2:d5:03:26:41:bc:b8:3d:89:da:52:fe:04:42: 90:85:5a:ba:2c:f9:17:03:60:e6:9e:87:32:6c:86:ab:f5:fc: 3e:7a:28:07:00:cc:9e:5e:fc:4c:2b:a3:37:8b:ff:b1:42:85: 28:f4:79:92:79:2e:30:f4:5c:26:47:d1:34:a3:75:ce:60:be: 18:78:fc:f9:87:cd:b9:d4:cd:67:b6:d4:b8:72:47:92:c0:62: 16:64:bf:56:c8:99:c4:a3:90:36:b5:36:e3:51:3a:22:fb:68: 77:72:d8:ea -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEso76ylDoEU6S4ZpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxMTE0MjI1N1oXDTI3MTIxNTE1MjI1N1owLzEtMCsGA1UEAxMk NDFiYWJiMjMtODlkZS00NmE0LTk3N2EtNzAzZjNiZDBjYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUg+LCGwEkdhZR9eqQ+bZz611vADUVpk+WPY ZMQdr6QBgcMGVpCVbqee/F0cZ2GPLHBWuMKzbZRV5UI59tqO3RnWuvc0Yel8iyYv 2VT+D4hdfUY66/ekTwM4x1DOLevgu9VcRUrRRDwtLkyEFj6c9ecwCdx/OLo20eRV 3Klc5x64ojwIlfnZ4YoslHnN2U08LG2WPK2RQtwLoC73GY5Wn4hiJHb9mr/1FiIR /rxv6T3Gp2rhXr5LSCoXvBBeq+ZmuMfNpUTbCjxaZ48Jb0pIQNZfD1B83HqkMd4k urAVLyJbWkfEBCaG4/fuT9XGz9uUZZIc7etkal0LRA7I5Nvm+QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDmzVo3UYRz64+lqCVyYb4JZBdE/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 MWJhYmIyMy04OWRlLTQ2YTQtOTc3YS03MDNmM2JkMGNhOTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzQxYmFiYjIzLTg5ZGUtNDZhNC05 NzdhLTcwM2YzYmQwY2E5NS80MWJhYmIyMy04OWRlLTQ2YTQtOTc3YS03MDNmM2Jk MGNhOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkUwwDgQCAAIwCAMGACYC9WYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEPv3vBc7n0utg6cIN2UOcq4JLDfJtNqfE5mRd1SeJTojPkwHEHupiBtdYpz22q2 SmEhCuim0hvCQNou2vC07AKlbiakEcFImCLc9iQYOv0gwaLGdY4bJoFNZowVvm83 PdezkQiaAOKq6ANQLOqnl31O3OcjR69QSx+bOlF4CV8pOR0v0Vl515HdkukDrOC7 5xln/qny1QMmQby4PYnaUv4EQpCFWros+RcDYOaehzJshqv1/D56KAcAzJ5e/Ewr ozeL/7FChSj0eZJ5LjD0XCZH0TSjdc5gvhh4/PmHzbnUzWe21LhyR5LAYhZkv1bI mcSjkDa1NuNROiL7aHdy2Oo= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:42 2025 by rpki-client