$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer File: 5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer (raw, json) Hash identifier: 7O2H7LBlA1tR/ZJLAy8wyWnDfP9ejE2hYfLoFs1TAu0= Subject key identifier: 9E:F1:29:BA:15:89:35:A6:0D:BE:AC:19:3D:61:1E:86:19:E5:D8:EC Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B4DA99492AAF36CA789F1B500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Sep 2025 18:06:38 +0000 Certificate not after: Tue 28 Dec 2027 19:06:38 +0000 Subordinate resources: AS: 401997 IP: 23.145.220.0/24 IP: 2602:f556::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:a9:94:92:aa:f3:6c:a7:89:f1:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 24 18:06:38 2025 GMT Not After : Dec 28 19:06:38 2027 GMT Subject: CN=5abd481c-a75f-4f76-a08e-be7629dc5c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:b1:d7:48:82:35:8c:ff:b9:09:14:4b:9d: 59:66:d1:58:d5:cf:2a:10:9c:e1:f0:8a:5b:a1:13: f6:77:d6:48:3d:47:b6:b8:2c:13:98:17:e1:65:97: b7:44:eb:b2:3c:36:3b:af:c9:dd:b3:99:f0:55:14: 6f:d2:be:50:9a:17:68:b2:78:27:45:5a:2f:57:63: 6c:cf:64:22:e7:97:49:a6:98:4c:77:f4:b0:7f:30: b2:96:02:3d:c5:66:25:68:61:57:62:83:3c:c4:b9: b9:50:c9:11:14:a1:44:74:09:0d:54:1c:04:51:42: 2b:64:e4:cd:e4:d4:b2:e2:22:9e:57:74:1d:bd:4e: e9:fb:e9:fe:ba:8a:9d:c3:9f:78:70:de:35:41:0d: 23:9c:2e:82:2c:71:af:c0:9b:a4:d6:f6:71:bc:49: de:6c:96:8d:e4:8a:c0:e6:19:99:2a:8f:91:9f:ad: f1:45:89:b0:94:3f:89:15:e1:97:d2:50:82:58:53: 36:98:d6:2a:a1:19:68:4d:d3:56:c9:8e:8f:9c:57: cd:d9:41:db:be:b9:6f:81:73:16:e4:5b:ec:63:a2: 2e:f9:83:b8:5a:b3:c6:14:e9:db:5b:ef:79:f0:04: a8:99:d5:36:91:e3:05:f1:37:56:fe:b4:86:29:3b: 51:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F1:29:BA:15:89:35:A6:0D:BE:AC:19:3D:61:1E:86:19:E5:D8:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.220.0/24 IPv6: 2602:f556::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401997 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:1d:99:64:58:b9:5e:84:92:05:c9:6c:ab:72:11:d3:2f:b7: ff:d2:ca:3f:4b:c9:59:1f:38:0d:28:b8:8c:7a:25:77:e4:e9: 6d:28:e3:73:29:5b:a8:4b:1a:e7:8a:e7:5a:c9:08:ae:a2:81: ef:1c:89:d9:70:6a:b4:68:de:c3:62:e2:06:a6:c0:2e:60:cf: 16:c8:25:4c:bb:b2:44:3d:06:1d:16:88:22:b8:50:2c:5c:fe: 3d:e9:27:e4:2d:a6:31:75:45:2c:28:ec:02:b8:a3:e5:26:16: 74:b2:61:0f:b2:24:21:b4:92:0f:19:bd:22:e9:7d:2f:18:e5: 74:ab:f3:8f:80:ed:b5:d3:aa:67:b2:bd:3c:30:c6:f7:ca:02: 45:57:75:d5:b7:15:52:6d:83:d8:bb:f2:9b:2e:06:04:b3:a9: 59:8e:99:d4:41:d6:22:f3:53:69:99:b4:a2:f4:b9:9a:10:4b: 0b:2a:3a:a1:33:91:78:1d:1b:23:8b:6e:10:bf:7f:ba:69:f2: 33:1a:6b:81:78:07:8b:e9:e1:2b:6f:00:a4:90:13:c5:e5:52: e2:98:7b:04:9e:81:3c:ce:f3:f7:0e:f1:04:88:d3:e0:c4:60: bb:f2:a8:ea:05:d4:29:dc:f7:1b:f6:03:a2:11:e6:e2:09:0e: 27:b1:d5:ad -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtNqZSSqvNsp4nxtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyNDE4MDYzOFoXDTI3MTIyODE5MDYzOFowLzEtMCsGA1UEAxMk NWFiZDQ4MWMtYTc1Zi00Zjc2LWEwOGUtYmU3NjI5ZGM1YzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9ex10iCNYz/uQkUS51ZZtFY1c8qEJzh8Ipb oRP2d9ZIPUe2uCwTmBfhZZe3ROuyPDY7r8nds5nwVRRv0r5QmhdosngnRVovV2Ns z2Qi55dJpphMd/SwfzCylgI9xWYlaGFXYoM8xLm5UMkRFKFEdAkNVBwEUUIrZOTN 5NSy4iKeV3QdvU7p++n+uoqdw594cN41QQ0jnC6CLHGvwJuk1vZxvEnebJaN5IrA 5hmZKo+Rn63xRYmwlD+JFeGX0lCCWFM2mNYqoRloTdNWyY6PnFfN2UHbvrlvgXMW 5FvsY6Iu+YO4WrPGFOnbW+958ASomdU2keMF8TdW/rSGKTtRsQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJ7xKboViTWmDb6sGT1hHoYZ5djsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 YWJkNDgxYy1hNzVmLTRmNzYtYTA4ZS1iZTc2MjlkYzVjOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzVhYmQ0ODFjLWE3NWYtNGY3Ni1h MDhlLWJlNzYyOWRjNWM5ZC81YWJkNDgxYy1hNzVmLTRmNzYtYTA4ZS1iZTc2Mjlk YzVjOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkdwwDgQCAAIwCAMGACYC9VYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiTTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUHZlkWLlehJIFyWyrchHTL7f/ 0so/S8lZHzgNKLiMeiV35OltKONzKVuoSxrniudayQiuooHvHInZcGq0aN7DYuIG psAuYM8WyCVMu7JEPQYdFogiuFAsXP496SfkLaYxdUUsKOwCuKPlJhZ0smEPsiQh tJIPGb0i6X0vGOV0q/OPgO2106pnsr08MMb3ygJFV3XVtxVSbYPYu/KbLgYEs6lZ jpnUQdYi81NpmbSi9LmaEEsLKjqhM5F4HRsji24Qv3+6afIzGmuBeAeL6eErbwCk kBPF5VLimHsEnoE8zvP3DvEEiNPgxGC78qjqBdQp3Pcb9gOiEebiCQ4nsdWt -----END CERTIFICATE-----Generated at Wed Oct 8 17:08:44 2025 by rpki-client