$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer File: 761d4038-2e12-4354-ba44-f50a79f7d209.cer (raw, json) Hash identifier: /CB/JDLZTR2psx8v8fSafDT5JOn6rpv3XmeI/OQ1Epw= Subject key identifier: 42:D5:52:37:D1:E1:55:24:91:88:61:70:62:AB:06:B5:00:42:83:2F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B611CD2FB241E1A890360FD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 17:19:11 +0000 Certificate not after: Tue 04 Jan 2028 18:19:11 +0000 Subordinate resources: AS: 21807 IP: 23.143.172.0/24 IP: 2602:f5a5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:1c:d2:fb:24:1e:1a:89:03:60:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 1 17:19:11 2025 GMT Not After : Jan 4 18:19:11 2028 GMT Subject: CN=761d4038-2e12-4354-ba44-f50a79f7d209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:13:d7:e7:4a:9e:8d:99:f5:f9:13:b6:c2:8f: 1a:9d:66:a5:36:db:65:8b:87:ad:8b:7e:ed:4a:a4: 27:7d:b1:d0:ba:22:7b:2e:33:62:2f:8a:b3:77:0e: 37:48:2b:dd:29:a1:87:5f:7d:4f:bd:82:f5:83:8d: f1:2a:6d:21:7a:cc:8b:80:a4:95:ce:9e:61:55:91: 46:45:86:4c:b9:cc:fe:15:b9:6a:3b:67:97:91:37: d2:9a:b5:5b:b9:45:61:dc:4d:80:b4:cc:81:81:11: 88:ba:34:db:85:fc:90:93:73:95:fe:ec:4c:c5:ee: 61:71:85:8f:39:68:54:35:27:c2:af:c7:84:49:e5: 6f:d9:43:06:63:44:fa:ba:cf:90:72:94:c6:1f:c2: b7:c2:69:23:dc:e7:ae:61:53:b9:82:e2:db:79:fc: 0e:b5:b9:6d:6f:4a:d1:13:da:ae:75:31:e6:21:3c: 3c:d2:d1:21:cb:e5:5e:e3:98:c7:5b:1a:7d:07:38: 3a:3f:4e:d6:fc:15:d4:03:9e:a5:cc:13:82:0b:74: d0:32:cb:7d:4c:5f:cd:b9:e8:f6:12:16:bb:ce:41: b1:c5:b4:a3:2e:b3:05:00:ef:61:d6:6f:12:5b:5c: d5:f1:f4:03:f7:10:a9:8b:66:43:17:3c:eb:c9:27: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D5:52:37:D1:E1:55:24:91:88:61:70:62:AB:06:B5:00:42:83:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.172.0/24 IPv6: 2602:f5a5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21807 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:6f:e8:e7:da:68:5c:10:3b:58:d2:02:f9:9b:f3:82:ed:d0: 60:81:4c:37:bb:f4:12:00:4d:9a:cd:0e:62:f0:1a:a5:5d:e0: 37:7b:18:5a:07:c2:fb:dd:07:2b:22:b0:38:23:de:a7:17:c9: 39:0d:32:0e:50:0f:7f:ed:77:dc:18:68:12:a6:da:9c:9c:da: 59:3f:a5:28:04:53:21:e8:f2:44:1b:17:fe:a6:94:97:08:56: d2:d3:a1:4d:f0:ae:16:cf:e5:ab:7b:4c:bd:70:ad:e9:ba:18: fd:66:99:46:35:e7:38:c9:d5:f1:b1:c0:a9:db:f4:8e:99:77: f5:e9:32:e8:a4:29:f5:1d:30:5e:17:83:d5:2a:1e:7e:5b:55: d8:dd:b7:08:d1:28:45:f6:ce:53:d3:ad:fe:6c:94:9c:2c:13: 7f:e1:0f:3e:9e:9b:d7:44:36:23:15:69:6c:b7:34:01:be:77: 03:b7:0e:10:6b:d3:08:d4:37:76:b5:29:90:84:48:c2:57:fd: 10:45:39:07:79:95:16:b3:bc:e5:63:a7:8e:33:eb:38:7b:44: b0:68:3c:09:41:91:30:47:97:57:c9:2e:c2:31:b0:17:c8:6c: d1:e2:ca:3d:c5:5a:56:c0:94:c0:f1:c0:c9:96:96:57:92:e5: aa:37:2e:99 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEthHNL7JB4aiQNg/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMTE3MTkxMVoXDTI4MDEwNDE4MTkxMVowLzEtMCsGA1UEAxMk NzYxZDQwMzgtMmUxMi00MzU0LWJhNDQtZjUwYTc5ZjdkMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxPX50qejZn1+RO2wo8anWalNttli4eti37t SqQnfbHQuiJ7LjNiL4qzdw43SCvdKaGHX31PvYL1g43xKm0hesyLgKSVzp5hVZFG RYZMucz+FblqO2eXkTfSmrVbuUVh3E2AtMyBgRGIujTbhfyQk3OV/uxMxe5hcYWP OWhUNSfCr8eESeVv2UMGY0T6us+QcpTGH8K3wmkj3OeuYVO5guLbefwOtbltb0rR E9qudTHmITw80tEhy+Ve45jHWxp9Bzg6P07W/BXUA56lzBOCC3TQMst9TF/Nuej2 Eha7zkGxxbSjLrMFAO9h1m8SW1zV8fQD9xCpi2ZDFzzrySe5iQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFELVUjfR4VUkkYhhcGKrBrUAQoMvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 NjFkNDAzOC0yZTEyLTQzNTQtYmE0NC1mNTBhNzlmN2QyMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzc2MWQ0MDM4LTJlMTItNDM1NC1i YTQ0LWY1MGE3OWY3ZDIwOS83NjFkNDAzOC0yZTEyLTQzNTQtYmE0NC1mNTBhNzlm N2QyMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXj6wwDgQCAAIwCAMGACYC9aUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlUvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMFv6OfaaFwQO1jSAvmb84Lt0GCB TDe79BIATZrNDmLwGqVd4Dd7GFoHwvvdBysisDgj3qcXyTkNMg5QD3/td9wYaBKm 2pyc2lk/pSgEUyHo8kQbF/6mlJcIVtLToU3wrhbP5at7TL1wrem6GP1mmUY15zjJ 1fGxwKnb9I6Zd/XpMuikKfUdMF4Xg9UqHn5bVdjdtwjRKEX2zlPTrf5slJwsE3/h Dz6em9dENiMVaWy3NAG+dwO3DhBr0wjUN3a1KZCESMJX/RBFOQd5lRazvOVjp44z 6zh7RLBoPAlBkTBHl1fJLsIxsBfIbNHiyj3FWlbAlMDxwMmWlleS5ao3Lpk= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:39 2025 by rpki-client