$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer File: 9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer (raw, json) Hash identifier: G+NTvS9D7xByMeG9AEEE+kjWDYuR8Pnu2cZpJmwKR6Q= Subject key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B48CEB7C750B11B596CAC0A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Sep 2025 00:22:25 +0000 Certificate not after: Mon 27 Dec 2027 01:22:25 +0000 Subordinate resources: AS: 402006 IP: 23.145.244.0/24 IP: 2602:f552::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:ce:b7:c7:50:b1:1b:59:6c:ac:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 23 00:22:25 2025 GMT Not After : Dec 27 01:22:25 2027 GMT Subject: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:ff:32:51:20:75:3e:70:61:b6:7c:f6:ba: 94:b7:89:26:df:a6:97:e2:08:e6:64:86:87:cf:41: db:69:6b:78:9b:93:8d:23:ac:4b:47:09:41:1c:2b: 1c:43:f2:88:2a:4a:96:99:70:e6:5d:97:1a:c7:5f: f6:86:5c:ec:a6:83:85:3d:eb:ee:53:c4:e1:27:c2: 5e:b6:2c:d4:80:0a:2f:84:00:0d:2a:25:71:5a:82: a8:5d:bb:36:1b:4e:32:da:f5:46:6b:c4:b2:7e:a8: b6:c8:4c:a2:1b:1e:0f:bf:71:9b:52:c9:88:51:e9: b6:9b:81:23:b3:2f:cb:a4:16:df:c5:74:60:00:2d: 65:88:b8:64:18:25:9e:3c:ef:14:93:58:00:72:a0: eb:81:cb:80:90:bf:01:c7:33:25:b0:79:44:9f:ed: 78:7d:f9:0e:ba:6c:1c:b5:51:fd:ef:ae:b0:64:32: 48:a3:86:6e:6e:fb:ce:f6:aa:2d:8b:b2:e3:c1:c0: b2:a9:8c:c7:9d:53:83:69:2c:6d:f8:5a:45:98:d8: e6:59:d9:11:af:7e:86:2d:7f:0a:93:2e:5a:99:99: a2:47:44:89:c2:a4:b5:13:0e:fe:95:03:6f:bd:eb: 01:f2:d6:ac:97:20:e5:84:9e:db:f4:09:c0:0f:dd: 92:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.244.0/24 IPv6: 2602:f552::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402006 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3c:81:29:e6:7a:1d:a6:1c:1e:94:2d:59:ae:cd:67:f7:1c: 60:d3:d9:5a:6f:3d:41:ab:f1:a0:ce:a1:7f:e8:fe:a5:69:45: ff:d2:70:6a:df:dd:e6:45:76:9c:8a:d1:4a:90:51:01:b1:e9: cd:83:13:ba:13:e4:24:0f:0d:9b:85:29:e7:a5:a1:91:9e:4c: 7c:17:c1:d8:cc:10:1e:40:00:35:74:7f:25:22:dd:86:3f:9e: 65:33:73:86:cd:d5:e2:9b:58:b6:ca:94:5f:f6:5d:bc:91:76: b4:75:11:c8:23:73:54:87:34:98:4c:9d:5f:d3:cc:a6:d7:7e: e6:c6:65:a5:be:a1:72:c6:26:8c:3f:10:55:37:d7:79:7e:a7: da:44:b7:86:03:1c:ee:37:3a:69:7a:95:13:79:68:c9:83:5b: b5:5b:51:6b:24:ed:a3:7c:60:93:61:f9:fd:37:5a:5f:70:75: 29:2c:97:c3:d5:52:d2:f8:e3:4e:17:c2:99:22:a9:3f:d0:e7: d8:eb:0f:b5:d1:e0:28:8d:05:f3:b2:34:9c:2f:57:7e:a4:ac: ec:40:b2:d9:95:7f:1e:36:0c:94:6b:40:1d:12:53:84:24:e9: 2b:02:c7:3f:2d:f8:9b:01:0b:59:f4:2e:0b:26:76:c7:67:be: 72:1d:fa:7b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtIzrfHULEbWWysCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyMzAwMjIyNVoXDTI3MTIyNzAxMjIyNVowLzEtMCsGA1UEAxMk OWNmYWFiNGItN2Q0OS00M2I3LTgwZGQtODRhYjBlYmViMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/X/MlEgdT5wYbZ89rqUt4km36aX4gjmZIaH z0HbaWt4m5ONI6xLRwlBHCscQ/KIKkqWmXDmXZcax1/2hlzspoOFPevuU8ThJ8Je tizUgAovhAANKiVxWoKoXbs2G04y2vVGa8Syfqi2yEyiGx4Pv3GbUsmIUem2m4Ej sy/LpBbfxXRgAC1liLhkGCWePO8Uk1gAcqDrgcuAkL8BxzMlsHlEn+14ffkOumwc tVH9766wZDJIo4ZubvvO9qoti7LjwcCyqYzHnVODaSxt+FpFmNjmWdkRr36GLX8K ky5amZmiR0SJwqS1Ew7+lQNvvesB8taslyDlhJ7b9AnAD92ScQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGGd17myNQWEpaxKXtuBDgDGOCQtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 Y2ZhYWI0Yi03ZDQ5LTQzYjctODBkZC04NGFiMGViZWIyMTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzljZmFhYjRiLTdkNDktNDNiNy04 MGRkLTg0YWIwZWJlYjIxNC85Y2ZhYWI0Yi03ZDQ5LTQzYjctODBkZC04NGFiMGVi ZWIyMTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkfQwDgQCAAIwCAMGACYC9VIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiVjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJPIEp5nodphwelC1Zrs1n9xxg 09labz1Bq/GgzqF/6P6laUX/0nBq393mRXacitFKkFEBsenNgxO6E+QkDw2bhSnn paGRnkx8F8HYzBAeQAA1dH8lIt2GP55lM3OGzdXim1i2ypRf9l28kXa0dRHII3NU hzSYTJ1f08ym137mxmWlvqFyxiaMPxBVN9d5fqfaRLeGAxzuNzppepUTeWjJg1u1 W1FrJO2jfGCTYfn9N1pfcHUpLJfD1VLS+ONOF8KZIqk/0OfY6w+10eAojQXzsjSc L1d+pKzsQLLZlX8eNgyUa0AdElOEJOkrAsc/LfibAQtZ9C4LJnbHZ75yHfp7 -----END CERTIFICATE-----Generated at Wed Oct 8 15:35:58 2025 by rpki-client