$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer File: 68e8d38b-0b87-495a-96cc-346ddf0d5802.cer (raw, json) Hash identifier: LlRU67Xpd0cxM0uXSPhxDL8kW3nhv8nE4p9ns5HVSJg= Subject key identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B3C6514479E09A15843847480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Sep 2025 13:39:52 +0000 Certificate not after: Wed 22 Dec 2027 14:39:52 +0000 Subordinate resources: IP: 23.145.196.0/24 IP: 2602:f55c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:65:14:47:9e:09:a1:58:43:84:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 18 13:39:52 2025 GMT Not After : Dec 22 14:39:52 2027 GMT Subject: CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:f8:85:df:dc:57:e9:3b:c5:2b:97:24:00: 8b:a2:d6:d0:59:d8:ac:20:5c:3d:99:de:7d:61:ff: 56:c0:13:71:bc:d7:27:91:37:b4:7e:39:8e:24:f9: 92:7f:39:7a:03:b9:f7:60:04:fe:5f:99:0b:fa:59: 0c:bf:22:b8:e7:ab:5c:be:9b:a0:62:2e:6b:ea:19: a2:51:b4:01:a5:60:ec:c9:b1:55:ac:2f:41:ac:c6: 42:14:57:0a:6f:b8:b7:ed:e2:24:42:27:77:74:9a: b7:61:4d:c7:6a:79:8e:68:97:e6:21:de:f9:8b:3c: 77:78:c5:d4:92:64:c9:5f:b5:1e:2d:9d:52:09:a0: d1:f7:c6:ae:4f:73:af:a2:e2:2f:98:b2:93:b7:af: d2:9b:db:dd:4e:5d:a7:8a:20:43:15:09:e7:ab:c0: 7e:11:e6:9c:b1:57:2e:43:7a:17:7b:d7:03:83:91: a0:0e:22:86:1d:48:1d:8c:ac:d2:52:01:30:dc:7a: 0d:ec:0f:33:94:3e:7c:36:9f:36:90:3a:8b:77:c9: 05:1c:58:ad:eb:35:c5:32:04:c1:d0:5d:58:01:44: b6:d6:06:1b:44:24:f1:6c:5e:0e:48:7e:2c:f4:de: 35:2b:99:3b:89:a9:96:95:38:2f:cb:e9:de:25:0e: b2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.196.0/24 IPv6: 2602:f55c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c7:94:e6:f2:5b:0d:3f:52:49:3c:e8:69:6d:8d:64:b0:27: a8:c6:78:2b:b2:cc:b5:a6:49:7e:0a:0c:c4:b2:75:9a:45:c6: 32:51:ca:1e:03:66:b8:51:3f:23:0e:36:e4:e6:59:ee:aa:d1: 96:df:ef:44:a2:43:41:13:c8:a1:bf:98:ad:f9:89:61:74:d6: 04:b8:0b:fe:db:93:df:77:79:ac:50:b4:76:74:50:90:cf:18: 6d:f7:d9:bc:aa:ca:a3:2e:91:08:08:04:78:ad:c9:70:6d:94: 67:55:b6:0c:07:a5:95:5f:b9:4d:6c:ce:39:4d:ae:4f:b6:0d: 0c:99:50:df:66:e6:59:49:4e:2a:66:57:9b:40:d3:77:19:20: 3f:d8:76:5d:d6:ec:af:1f:33:18:a5:08:c9:c3:54:03:01:99: c3:43:d1:63:27:7e:4d:a2:1f:07:55:ec:c3:2e:a1:5f:e6:a1: d7:f5:82:58:9c:d8:9f:df:44:9e:59:92:dd:d6:d7:c7:36:59: 1d:ce:37:1c:b0:0b:23:b1:5a:bb:df:95:91:af:e5:14:0e:5b: 05:c8:69:e7:e1:ac:82:aa:8a:1a:23:ec:f2:49:c8:54:06:f3: 4a:da:fb:e8:87:d5:4f:bf:95:aa:fd:8b:93:63:73:4b:0d:7d: 0a:4a:76:68 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEs8ZRRHngmhWEOEdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxODEzMzk1MloXDTI3MTIyMjE0Mzk1MlowLzEtMCsGA1UEAxMk NjhlOGQzOGItMGI4Ny00OTVhLTk2Y2MtMzQ2ZGRmMGQ1ODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVD4hd/cV+k7xSuXJACLotbQWdisIFw9md59 Yf9WwBNxvNcnkTe0fjmOJPmSfzl6A7n3YAT+X5kL+lkMvyK456tcvpugYi5r6hmi UbQBpWDsybFVrC9BrMZCFFcKb7i37eIkQid3dJq3YU3HanmOaJfmId75izx3eMXU kmTJX7UeLZ1SCaDR98auT3OvouIvmLKTt6/Sm9vdTl2niiBDFQnnq8B+EeacsVcu Q3oXe9cDg5GgDiKGHUgdjKzSUgEw3HoN7A8zlD58Np82kDqLd8kFHFit6zXFMgTB 0F1YAUS21gYbRCTxbF4OSH4s9N41K5k7iamWlTgvy+neJQ6y7QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFL2BLKNOklWWzRO12VyukuBNGWcEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82 OGU4ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZkZGYwZDU4MDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzY4ZThkMzhiLTBiODctNDk1YS05 NmNjLTM0NmRkZjBkNTgwMi82OGU4ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZkZGYw ZDU4MDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkcQwDgQCAAIwCAMGACYC9VwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEbHlObyWw0/Ukk86GltjWSwJ6jGeCuyzLWmSX4KDMSydZpFxjJRyh4DZrhRPyMO NuTmWe6q0Zbf70SiQ0ETyKG/mK35iWF01gS4C/7bk993eaxQtHZ0UJDPGG332byq yqMukQgIBHityXBtlGdVtgwHpZVfuU1szjlNrk+2DQyZUN9m5llJTipmV5tA03cZ ID/Ydl3W7K8fMxilCMnDVAMBmcND0WMnfk2iHwdV7MMuoV/modf1glic2J/fRJ5Z kt3W18c2WR3ONxywCyOxWrvflZGv5RQOWwXIaefhrIKqihoj7PJJyFQG80ra++iH 1U+/lar9i5Njc0sNfQpKdmg= -----END CERTIFICATE-----Generated at Wed Oct 8 15:35:59 2025 by rpki-client