$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1.cer File: 55198723-cd37-42d0-b009-27a78b15a8f1.cer (raw, json) Hash identifier: Ls0OW8gioL3QRKirzbbtloNvnhjNNQjBSos3WkipKVc= Subject key identifier: 9E:36:D2:CB:2B:D8:98:87:CE:D7:62:5B:48:E8:9A:5F:DD:E6:43:FF Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B5DB418D0028D97CC67F6CBF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/55198723-cd37-42d0-b009-27a78b15a8f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 12:00:45 +0000 Certificate not after: Thu 30 Dec 2027 03:42:35 +0000 Subordinate resources: IP: 23.146.92.0/24 IP: 2620:dd:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:b4:18:d0:02:8d:97:cc:67:f6:cb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 30 12:00:45 2025 GMT Not After : Dec 30 03:42:35 2027 GMT Subject: CN=55198723-cd37-42d0-b009-27a78b15a8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:4e:41:da:9e:e4:c6:8c:7b:33:3d:9d:ac: b6:e0:bf:4a:d3:61:5e:fe:f6:62:37:65:b6:b5:31: 3f:0f:b4:e6:ec:5d:d0:01:b2:c4:0b:2c:6f:b6:65: af:db:c9:66:dc:06:e9:42:91:e2:d3:db:9b:7f:d1: 5e:cf:14:38:49:87:ed:f4:94:89:7a:f7:3f:f8:4e: bc:7b:bd:25:5e:72:cc:48:13:6e:ae:e2:72:9c:fd: 33:f6:61:8f:81:9c:eb:5b:e0:e3:30:5f:57:19:7a: 02:ed:8f:9d:95:47:a3:45:dd:ba:a2:3b:9e:9f:b7: c2:83:27:6f:3b:53:fd:60:ae:1f:8d:0f:b8:20:33: ca:46:35:0a:df:5a:08:81:6b:19:90:66:7b:97:91: 8b:83:1e:cd:8e:b9:a9:b0:44:46:e2:9d:2c:e4:88: e0:e5:61:15:b9:a9:3a:ea:9f:08:55:b8:01:0a:7a: b7:46:6b:43:bf:3d:61:c6:5f:60:4b:c0:62:17:d3: e3:79:54:08:e7:fc:62:e3:23:59:29:23:a3:59:04: e9:ee:b1:2b:9b:71:07:51:74:d5:27:bf:c5:18:2a: cb:d8:6f:74:13:8e:53:eb:c0:ec:f2:83:b1:2a:f3: e0:61:1e:9f:ca:ef:7c:9e:d9:75:17:d0:43:f5:42: 26:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:36:D2:CB:2B:D8:98:87:CE:D7:62:5B:48:E8:9A:5F:DD:E6:43:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55198723-cd37-42d0-b009-27a78b15a8f1/55198723-cd37-42d0-b009-27a78b15a8f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.146.92.0/24 IPv6: 2620:dd:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:19:d9:ab:5e:5e:35:d7:5a:c8:03:d0:d5:93:c9:73:26:18: d6:a5:21:b8:91:83:d8:03:18:c6:37:a3:4f:4a:f6:04:1b:f3: a5:7e:d9:f4:71:86:52:9b:ca:78:4e:cb:64:b4:1c:2c:b3:31: 7c:51:39:2f:11:b5:e1:cb:ca:3c:34:1c:68:aa:91:29:30:e0: 94:2e:dc:32:81:c3:0b:2f:91:38:30:1f:ba:51:a1:dd:96:a6: 33:53:2f:80:a4:3e:7b:d1:6d:0f:8f:c4:6c:ec:f8:94:14:f4: 5a:d2:cf:63:44:e5:2f:16:73:fd:9e:d7:99:40:b4:d8:dc:59: 4d:67:35:42:96:0c:00:38:c5:2f:7a:dd:3b:1b:d1:e2:9a:8a: 50:09:1e:bc:ec:59:d4:bb:1f:ef:66:1f:77:7b:81:df:da:bb: f6:66:58:f3:0c:1b:98:4a:bb:0f:88:b4:e5:97:d2:d9:1c:e5: 0b:ad:0f:c4:8c:c7:9c:dd:40:6a:eb:dc:e9:be:89:f7:11:ad: fd:61:b2:13:5d:66:8c:77:78:4e:a2:3b:62:dd:88:da:3d:da: 3e:5b:dc:d7:4e:e9:24:0f:4f:31:60:65:ae:41:77:d5:78:f7: e3:b0:0e:97:6a:a0:26:6d:d2:1b:c5:52:d5:f5:af:ec:a4:8b: 29:e9:23:f4 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEtdtBjQAo2XzGf2y/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkzMDEyMDA0NVoXDTI3MTIzMDAzNDIzNVowLzEtMCsGA1UEAxMk NTUxOTg3MjMtY2QzNy00MmQwLWIwMDktMjdhNzhiMTVhOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF5OQdqe5MaMezM9nay24L9K02Fe/vZiN2W2 tTE/D7Tm7F3QAbLECyxvtmWv28lm3AbpQpHi09ubf9FezxQ4SYft9JSJevc/+E68 e70lXnLMSBNuruJynP0z9mGPgZzrW+DjMF9XGXoC7Y+dlUejRd26ojuen7fCgydv O1P9YK4fjQ+4IDPKRjUK31oIgWsZkGZ7l5GLgx7NjrmpsERG4p0s5Ijg5WEVuak6 6p8IVbgBCnq3RmtDvz1hxl9gS8BiF9PjeVQI5/xi4yNZKSOjWQTp7rErm3EHUXTV J7/FGCrL2G90E45T68Ds8oOxKvPgYR6fyu98ntl1F9BD9UImwQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFJ420ssr2JiHztdiW0joml/d5kP/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 NTE5ODcyMy1jZDM3LTQyZDAtYjAwOS0yN2E3OGIxNWE4ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzU1MTk4NzIzLWNkMzctNDJkMC1i MDA5LTI3YTc4YjE1YThmMS81NTE5ODcyMy1jZDM3LTQyZDAtYjAwOS0yN2E3OGIx NWE4ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXklwwDwQCAAIwCQMHACYgAN2gADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBIGdmrXl4111rIA9DVk8lzJhjWpSG4kYPYAxjGN6NPSvYEG/Olftn0cYZSm8p4 TstktBwsszF8UTkvEbXhy8o8NBxoqpEpMOCULtwygcMLL5E4MB+6UaHdlqYzUy+A pD570W0Pj8Rs7PiUFPRa0s9jROUvFnP9nteZQLTY3FlNZzVClgwAOMUvet07G9Hi mopQCR687FnUux/vZh93e4Hf2rv2ZljzDBuYSrsPiLTll9LZHOULrQ/EjMec3UBq 69zpvon3Ea39YbITXWaMd3hOojti3YjaPdo+W9zXTukkD08xYGWuQXfVePfjsA6X aqAmbdIbxVLV9a/spIsp6SP0 -----END CERTIFICATE-----Generated at Wed Oct 8 15:35:54 2025 by rpki-client