$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer File: 5ad6fa24-7c60-4275-b208-9a73092370c7.cer (raw, json) Hash identifier: 3Faq5rLCvrWcl/BR1BT611MqYJ6EUK/87pRQE6GtdKY= Subject key identifier: 4D:25:9F:5E:77:79:3E:8E:7F:FD:72:BD:1E:E3:F5:F2:13:93:3F:A6 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B51BBB562477F9A3672CE7500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Sep 2025 05:06:23 +0000 Certificate not after: Thu 30 Dec 2027 06:06:23 +0000 Subordinate resources: AS: 401962 IP: 23.145.92.0/24 IP: 2602:f56c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:bb:b5:62:47:7f:9a:36:72:ce:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 26 05:06:23 2025 GMT Not After : Dec 30 06:06:23 2027 GMT Subject: CN=5ad6fa24-7c60-4275-b208-9a73092370c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:d2:b7:5b:b9:59:f7:4c:28:c0:95:42:61: 35:40:cc:2b:5a:bf:b8:d7:5d:34:74:e3:c9:22:c4: 26:ce:85:fa:58:b9:dd:b8:a6:48:e0:bc:da:8f:2e: 21:15:4a:c8:30:81:cc:ae:30:2a:38:54:32:4e:6f: 21:d9:18:39:58:18:6a:16:48:2c:da:8c:41:0d:fb: b2:70:80:9f:4a:fb:69:f0:08:39:22:d4:2d:dd:52: 96:4b:e9:9e:7a:7e:20:a5:1e:65:ba:7d:86:1c:92: b8:00:87:be:67:f3:fb:cf:7b:ee:b4:a4:98:30:6b: f3:ab:85:a2:67:02:2e:1f:aa:b9:b4:12:5f:ca:c2: 2d:33:4b:0e:04:82:44:5b:2f:94:fd:94:e7:1b:f6: 4d:72:9a:ac:90:d8:0d:89:03:8d:27:a9:74:75:5f: e9:b7:84:84:37:d2:53:8e:a2:cd:15:ab:2b:c4:7d: af:87:20:c2:7c:b6:49:c6:30:44:3b:80:42:07:a1: 52:a0:3a:32:45:df:39:9c:ce:b6:2f:4e:01:a5:f4: 37:3e:f0:12:8e:9a:b2:91:03:7e:40:f4:a9:6f:7a: 6d:f7:9a:30:fe:07:39:ae:df:46:27:ee:d0:f8:5d: eb:9d:bd:d2:54:8f:bc:f4:05:2e:fd:19:79:e8:5c: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:25:9F:5E:77:79:3E:8E:7F:FD:72:BD:1E:E3:F5:F2:13:93:3F:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.92.0/24 IPv6: 2602:f56c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401962 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:0a:e0:a7:ff:43:19:10:df:3c:81:f7:b6:1b:3a:a0:d7:63: b6:1f:0a:16:3b:d1:65:58:a6:76:11:0a:bd:fa:ea:66:d2:2d: e5:5e:c1:b0:7d:ae:69:60:bb:04:48:d9:bc:d7:05:97:c3:b4: 3b:63:39:1b:55:49:7c:b3:62:cd:98:bc:4d:a5:01:ab:82:45: 83:eb:ba:51:33:c3:23:0f:0d:76:e6:40:2c:15:11:02:15:07: 98:32:3b:46:1e:b8:ef:36:e3:c4:f8:de:17:7a:db:bc:5e:98: 19:94:da:20:c6:12:86:5b:09:dd:a9:82:78:1e:8f:a2:df:fa: af:29:a8:64:c7:5b:73:7b:3a:b5:7c:a2:cd:46:94:6d:9f:7f: 30:ae:78:4d:17:bc:99:21:62:11:b5:57:65:3b:3d:8a:a8:44: 10:c6:cb:47:52:90:a1:42:fb:07:4b:44:74:db:00:88:10:ae: 8c:31:1d:42:43:79:a4:22:98:55:19:05:0e:89:bd:26:e9:56: 66:96:84:c8:fb:40:6a:2f:f7:92:63:f0:40:5b:9d:9e:74:a6: 5b:ec:f8:c5:5e:9e:15:3b:60:c2:8e:34:63:98:b1:a1:df:4b: 39:59:73:70:3f:6e:03:68:29:ea:3d:50:66:9f:24:23:e4:d6: 68:57:c7:67 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtRu7ViR3+aNnLOdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyNjA1MDYyM1oXDTI3MTIzMDA2MDYyM1owLzEtMCsGA1UEAxMk NWFkNmZhMjQtN2M2MC00Mjc1LWIyMDgtOWE3MzA5MjM3MGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yTSt1u5WfdMKMCVQmE1QMwrWr+41100dOPJ IsQmzoX6WLnduKZI4Lzajy4hFUrIMIHMrjAqOFQyTm8h2Rg5WBhqFkgs2oxBDfuy cICfSvtp8Ag5ItQt3VKWS+meen4gpR5lun2GHJK4AIe+Z/P7z3vutKSYMGvzq4Wi ZwIuH6q5tBJfysItM0sOBIJEWy+U/ZTnG/ZNcpqskNgNiQONJ6l0dV/pt4SEN9JT jqLNFasrxH2vhyDCfLZJxjBEO4BCB6FSoDoyRd85nM62L04BpfQ3PvASjpqykQN+ QPSpb3pt95ow/gc5rt9GJ+7Q+F3rnb3SVI+89AUu/Rl56FyXEwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFE0ln153eT6Of/1yvR7j9fITkz+mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 YWQ2ZmEyNC03YzYwLTQyNzUtYjIwOC05YTczMDkyMzcwYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzVhZDZmYTI0LTdjNjAtNDI3NS1i MjA4LTlhNzMwOTIzNzBjNy81YWQ2ZmEyNC03YzYwLTQyNzUtYjIwOC05YTczMDky MzcwYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkVwwDgQCAAIwCAMGACYC9WwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiKjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCuCuCn/0MZEN88gfe2Gzqg12O2 HwoWO9FlWKZ2EQq9+upm0i3lXsGwfa5pYLsESNm81wWXw7Q7YzkbVUl8s2LNmLxN pQGrgkWD67pRM8MjDw125kAsFRECFQeYMjtGHrjvNuPE+N4Xetu8XpgZlNogxhKG WwndqYJ4Ho+i3/qvKahkx1tzezq1fKLNRpRtn38wrnhNF7yZIWIRtVdlOz2KqEQQ xstHUpChQvsHS0R02wCIEK6MMR1CQ3mkIphVGQUOib0m6VZmloTI+0BqL/eSY/BA W52edKZb7PjFXp4VO2DCjjRjmLGh30s5WXNwP24DaCnqPVBmnyQj5NZoV8dn -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:40 2025 by rpki-client