$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0.cer File: 537b7005-fa22-4089-a512-a57cb14d03e0.cer (raw, json) Hash identifier: ntY3HrvX2hr623iuEExXlCWyAF+8xoXeZ/Oiny7YaYg= Subject key identifier: 47:BA:86:1C:A9:1C:3A:DA:42:72:F1:EA:7B:75:65:8B:60:18:AF:19 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B5F8E192CD60B4094E0034C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/537b7005-fa22-4089-a512-a57cb14d03e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 03:55:48 +0000 Certificate not after: Tue 04 Jan 2028 04:55:48 +0000 Subordinate resources: IP: 23.146.68.0/24 IP: 2602:f546::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:8e:19:2c:d6:0b:40:94:e0:03:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 1 03:55:48 2025 GMT Not After : Jan 4 04:55:48 2028 GMT Subject: CN=537b7005-fa22-4089-a512-a57cb14d03e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:72:79:31:a7:57:ff:81:df:12:67:64:55: 3f:4d:dc:28:fb:0a:d9:20:2c:8e:d0:8a:2e:12:15: f4:8a:a5:69:2d:30:43:ae:e2:83:6b:87:3e:10:15: 95:d0:bb:bd:32:b0:ec:6f:c0:d8:9d:8e:6b:0c:c2: dd:ad:14:4c:a5:34:95:d9:71:68:6c:d4:fd:d9:e8: b4:34:5f:61:c0:1d:c3:9f:ad:1e:a3:a7:50:fb:38: 8e:ac:86:17:b6:5a:f0:47:e5:30:21:f9:57:4f:f5: 9a:1b:b8:a6:d4:c0:56:3a:76:b9:76:ea:2a:32:c0: 4d:ec:f9:1b:7d:3c:8f:20:d3:a0:db:bb:20:3a:ac: 8c:f0:08:20:b4:4d:ec:82:84:39:53:dd:f9:d8:2b: 31:c4:07:20:7a:09:8e:67:54:0a:f0:72:1b:48:a2: 30:4d:03:12:8e:b6:c7:92:f3:14:7d:1e:91:e1:81: eb:6c:bd:1f:dd:93:21:76:24:b8:2e:73:0a:ff:4b: b2:24:42:49:47:14:af:fd:8b:fd:dd:1e:3f:97:6b: 50:55:c6:cb:01:a9:74:54:4f:c5:2b:aa:bf:f7:e5: 0a:d6:a5:15:e8:61:6f:d8:44:de:46:cb:66:29:04: 6c:40:11:68:02:64:fc:1d:31:68:89:81:50:4d:54: 9c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BA:86:1C:A9:1C:3A:DA:42:72:F1:EA:7B:75:65:8B:60:18:AF:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/537b7005-fa22-4089-a512-a57cb14d03e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.146.68.0/24 IPv6: 2602:f546::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b7:f0:18:39:a9:8f:e4:0d:60:50:f3:04:47:d1:67:6d:1a: c0:99:6b:f2:10:39:ab:08:6f:bc:8b:72:53:03:db:64:a8:11: 29:d6:a4:fd:26:c9:2b:40:59:47:b3:b2:b0:22:b2:76:01:5c: 0a:58:2f:52:f9:94:2c:ea:2c:02:3f:38:ac:23:8b:29:47:bc: bc:55:14:92:89:fd:57:e1:a4:fd:ae:f4:77:79:ee:14:a7:83: 31:52:c3:df:4d:53:21:97:c4:88:86:a7:fe:91:43:6b:aa:5f: 07:b7:c6:b6:5b:62:52:79:dc:fb:eb:80:27:ef:05:d5:0b:f6: 55:a2:c4:42:89:76:c8:8c:5a:cc:b6:1d:39:8a:dc:1f:f5:87: ad:b7:c4:76:92:1e:6d:dd:0d:1c:e1:56:24:02:c2:77:06:74: ae:b2:1a:53:27:c5:44:ef:7c:c2:d5:f6:a3:86:2a:18:06:1d: 3d:77:ca:02:54:ed:cc:35:1e:49:90:5a:9c:a8:a0:0b:75:d5: 03:f7:bd:df:38:03:2f:b3:25:e8:82:29:7d:82:e5:b5:f1:55: 02:69:74:31:cf:5d:56:fd:44:c7:a9:83:c3:b9:95:9d:97:00: 97:67:38:a1:88:35:e2:37:90:08:65:f8:e6:20:15:70:fc:ae: cb:37:55:6a -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEtfjhks1gtAlOADTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMTAzNTU0OFoXDTI4MDEwNDA0NTU0OFowLzEtMCsGA1UEAxMk NTM3YjcwMDUtZmEyMi00MDg5LWE1MTItYTU3Y2IxNGQwM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5dyeTGnV/+B3xJnZFU/Tdwo+wrZICyO0Iou EhX0iqVpLTBDruKDa4c+EBWV0Lu9MrDsb8DYnY5rDMLdrRRMpTSV2XFobNT92ei0 NF9hwB3Dn60eo6dQ+ziOrIYXtlrwR+UwIflXT/WaG7im1MBWOna5duoqMsBN7Pkb fTyPINOg27sgOqyM8AggtE3sgoQ5U9352CsxxAcgegmOZ1QK8HIbSKIwTQMSjrbH kvMUfR6R4YHrbL0f3ZMhdiS4LnMK/0uyJEJJRxSv/Yv93R4/l2tQVcbLAal0VE/F K6q/9+UK1qUV6GFv2ETeRstmKQRsQBFoAmT8HTFoiYFQTVSccQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFEe6hhypHDraQnLx6nt1ZYtgGK8ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 MzdiNzAwNS1mYTIyLTQwODktYTUxMi1hNTdjYjE0ZDAzZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzUzN2I3MDA1LWZhMjItNDA4OS1h NTEyLWE1N2NiMTRkMDNlMC81MzdiNzAwNS1mYTIyLTQwODktYTUxMi1hNTdjYjE0 ZDAzZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkkQwDgQCAAIwCAMGACYC9UYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIO38Bg5qY/kDWBQ8wRH0WdtGsCZa/IQOasIb7yLclMD22SoESnWpP0myStAWUez srAisnYBXApYL1L5lCzqLAI/OKwjiylHvLxVFJKJ/VfhpP2u9Hd57hSngzFSw99N UyGXxIiGp/6RQ2uqXwe3xrZbYlJ53PvrgCfvBdUL9lWixEKJdsiMWsy2HTmK3B/1 h623xHaSHm3dDRzhViQCwncGdK6yGlMnxUTvfMLV9qOGKhgGHT13ygJU7cw1HkmQ WpyooAt11QP3vd84Ay+zJeiCKX2C5bXxVQJpdDHPXVb9RMepg8O5lZ2XAJdnOKGI NeI3kAhl+OYgFXD8rss3VWo= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:05 2025 by rpki-client