$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112.cer File: 9d18a72d-9615-46c9-abe8-3d815ac0b112.cer (raw, json) Hash identifier: /rFCZiWPXfv5unxrx38c07elGTMuwqRHEYnyUn0Wk4M= Subject key identifier: 77:E1:F6:19:48:6D:F8:3D:E9:41:04:51:00:9F:09:72:5A:5A:2E:59 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B6F1F34CBEA53DCD21DE77640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 17:45:18 +0000 Certificate not after: Sun 09 Jan 2028 17:51:18 +0000 Subordinate resources: AS: 402061 IP: 23.146.220.0/24 IP: 2620:de:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:1f:34:cb:ea:53:dc:d2:1d:e7:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 6 17:45:18 2025 GMT Not After : Jan 9 17:51:18 2028 GMT Subject: CN=9d18a72d-9615-46c9-abe8-3d815ac0b112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:6b:0e:f0:c7:4a:a5:83:84:11:b1:fe:fc: 88:f9:10:be:9d:13:49:2c:8c:c7:c3:13:ca:81:cb: c0:71:59:2e:bf:3d:32:50:a2:5c:21:87:24:38:a0: af:dc:41:61:dd:7d:9c:27:6a:3f:08:dc:c1:4d:cb: a6:e4:49:00:e7:7d:74:e1:12:7e:92:9b:8e:90:71: 56:64:8b:a8:1b:f1:fa:0c:31:74:0a:3c:45:d8:de: b5:57:cc:51:43:65:27:1b:b2:fc:95:a8:ff:99:c2: b6:e8:a3:df:4f:07:14:60:52:78:96:5f:e2:98:11: 0f:ab:a8:e1:79:70:ec:8b:45:4b:3f:55:00:14:28: 41:eb:3c:b4:51:a4:52:22:b1:c6:64:bc:bb:48:30: 42:26:10:50:24:54:90:ac:59:f2:26:45:81:f0:95: 4f:8b:ae:ab:04:f0:cf:b8:2b:85:32:44:58:b3:9c: 62:da:a8:73:a5:f0:94:19:3c:5f:f9:83:67:39:1b: 5c:6e:db:f3:35:2c:37:4e:ff:3d:95:41:1c:be:ec: ac:70:9f:71:9e:99:65:df:7d:6d:42:36:84:f3:3f: ed:cb:97:c3:ba:dd:c3:a6:8d:9c:44:b5:a5:9c:7d: 1e:8a:86:aa:53:32:5c:1f:44:8f:76:23:52:fd:b8: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E1:F6:19:48:6D:F8:3D:E9:41:04:51:00:9F:09:72:5A:5A:2E:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.146.220.0/24 IPv6: 2620:de:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402061 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:79:3e:b7:de:48:97:85:84:8e:c7:ba:0a:26:97:d9:af:91: 15:96:19:29:99:7c:06:0e:e4:ef:65:ab:ed:03:83:52:8b:6e: 8b:ce:30:36:f4:b7:5c:38:17:b8:1a:79:d7:f3:c6:cd:09:75: 5b:ec:ea:84:c3:85:74:75:2e:c7:d5:bb:d7:5b:10:fd:11:36: 2d:5d:13:de:db:5e:49:57:b3:6d:5d:75:49:04:35:fa:a5:34: fb:c9:c2:b6:f4:90:ea:9b:2d:e5:2e:f3:42:e8:71:1b:ec:a2: 16:15:bc:29:64:5a:e0:37:09:63:f9:01:48:68:28:3f:c5:07: 73:96:b0:fd:79:16:32:85:0b:29:f3:9a:bd:bf:ca:ec:83:3b: 53:6e:99:92:5c:99:7f:4e:b8:96:c0:67:44:fa:df:b4:ac:aa: 16:2e:61:5a:ef:1e:d7:50:4f:c3:cc:e7:e5:40:39:b8:86:af: 5b:49:20:97:c1:47:0d:5b:bc:0c:88:b8:69:7b:ab:38:4a:b0: 08:1d:d4:10:7c:05:dd:65:12:ef:d0:b8:e7:e5:a9:9f:3d:7b: e6:15:c0:3e:39:90:c2:6e:df:3f:32:f7:9e:8e:ad:2b:51:c7: 75:de:eb:43:e9:44:2c:f9:aa:8e:8c:83:f0:2b:fd:99:a4:13: 51:1b:ea:25 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEtvHzTL6lPc0h3ndkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwNjE3NDUxOFoXDTI4MDEwOTE3NTExOFowLzEtMCsGA1UEAxMk OWQxOGE3MmQtOTYxNS00NmM5LWFiZTgtM2Q4MTVhYzBiMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE9rDvDHSqWDhBGx/vyI+RC+nRNJLIzHwxPK gcvAcVkuvz0yUKJcIYckOKCv3EFh3X2cJ2o/CNzBTcum5EkA53104RJ+kpuOkHFW ZIuoG/H6DDF0CjxF2N61V8xRQ2UnG7L8laj/mcK26KPfTwcUYFJ4ll/imBEPq6jh eXDsi0VLP1UAFChB6zy0UaRSIrHGZLy7SDBCJhBQJFSQrFnyJkWB8JVPi66rBPDP uCuFMkRYs5xi2qhzpfCUGTxf+YNnORtcbtvzNSw3Tv89lUEcvuyscJ9xnpll331t QjaE8z/ty5fDut3Dpo2cRLWlnH0eioaqUzJcH0SPdiNS/bh00QIDAQABo4IELDCC BCgwHQYDVR0OBBYEFHfh9hlIbfg96UEEUQCfCXJaWi5ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 ZDE4YTcyZC05NjE1LTQ2YzktYWJlOC0zZDgxNWFjMGIxMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzlkMThhNzJkLTk2MTUtNDZjOS1h YmU4LTNkODE1YWMwYjExMi85ZDE4YTcyZC05NjE1LTQ2YzktYWJlOC0zZDgxNWFj MGIxMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXktwwDwQCAAIwCQMHACYgAN4gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGIo0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlHk+t95Il4WEjse6CiaX2a+R FZYZKZl8Bg7k72Wr7QODUotui84wNvS3XDgXuBp51/PGzQl1W+zqhMOFdHUux9W7 11sQ/RE2LV0T3tteSVezbV11SQQ1+qU0+8nCtvSQ6pst5S7zQuhxG+yiFhW8KWRa 4DcJY/kBSGgoP8UHc5aw/XkWMoULKfOavb/K7IM7U26ZklyZf064lsBnRPrftKyq Fi5hWu8e11BPw8zn5UA5uIavW0kgl8FHDVu8DIi4aXurOEqwCB3UEHwF3WUS79C4 5+Wpnz175hXAPjmQwm7fPzL3no6tK1HHdd7rQ+lELPmqjoyD8Cv9maQTURvqJQ== -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:02 2025 by rpki-client