$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.cer File: 9d2a8ad1-bebe-444b-bb31-0d266efbde9e.cer (raw, json) Hash identifier: vcoXuYtqXduqOukKrM6CdIexnatbRl9hJYKDVRj+lG8= Subject key identifier: 29:82:77:D5:CE:BA:AA:F9:5A:EE:FA:C8:CE:E6:9C:BB:C4:D8:BB:14 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B60EF46C03DA86BC4667D9400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 15:47:25 +0000 Certificate not after: Tue 04 Jan 2028 16:47:25 +0000 Subordinate resources: IP: 23.146.124.0/24 IP: 2602:f540::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:ef:46:c0:3d:a8:6b:c4:66:7d:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 1 15:47:25 2025 GMT Not After : Jan 4 16:47:25 2028 GMT Subject: CN=9d2a8ad1-bebe-444b-bb31-0d266efbde9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:1a:eb:ce:53:84:cb:ad:7a:59:71:13:b2: ca:26:92:4c:40:b2:06:41:d7:ef:dc:3e:76:c5:a3: 2c:79:15:f2:4e:83:e1:ed:16:89:ca:22:c6:4c:68: c3:f4:4f:56:1e:2b:bc:c0:19:b4:7d:1e:ab:27:50: 2d:fc:96:cd:22:5e:16:7e:97:ce:10:9b:10:6d:43: 84:07:37:72:e9:c1:68:35:5f:b2:36:82:68:2e:ba: bb:92:ba:fa:55:ca:f2:ac:59:0a:79:0f:42:62:c7: 1a:7d:c2:b8:0d:af:e4:0b:78:b5:32:36:58:e0:e6: 0b:6d:44:31:24:fd:a5:15:ed:51:88:53:a9:f8:ba: 49:0e:85:13:5f:98:42:f3:f4:28:e5:1e:af:81:c7: 21:ae:4b:c7:46:14:c1:30:16:df:d4:96:70:65:a7: a8:c4:6b:0d:dd:60:e8:e2:98:5c:be:bf:2f:dd:2f: 32:4e:bf:06:e1:f5:3f:7f:6c:41:d9:80:52:d3:5d: 25:b0:36:ff:b4:3a:05:91:a1:62:c3:ea:5f:a6:e1: 3d:8b:77:bb:a0:06:f2:ae:a2:a1:c9:a7:dd:3e:5f: ac:b4:ac:bf:8e:8a:26:89:92:77:21:df:2c:12:12: 56:dc:20:5d:65:e2:b6:ba:e8:c2:ec:c5:81:47:59: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:82:77:D5:CE:BA:AA:F9:5A:EE:FA:C8:CE:E6:9C:BB:C4:D8:BB:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.146.124.0/24 IPv6: 2602:f540::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2e:52:e2:6f:07:e6:db:97:df:f8:b1:b4:a9:64:b1:0a:88: 4f:c3:d9:2c:17:89:02:df:e6:15:48:4e:96:a4:88:13:a3:35: 94:66:ae:88:16:6f:e6:11:33:8b:53:6b:e2:a9:4b:ee:36:33: 16:b5:e2:cb:8a:f4:7c:37:7f:1a:e2:44:67:e8:3b:75:62:f4: 73:18:c9:e7:2e:3f:29:d7:4a:2b:2b:53:00:3c:55:fc:07:3f: a9:48:6e:d4:32:12:63:2c:85:30:2b:b3:88:fc:58:fa:05:6a: 31:41:03:06:56:e1:2a:8f:7b:42:54:8a:e1:22:35:3b:a1:e2: ef:94:cf:09:5f:88:a9:d0:29:3f:c3:c5:05:b6:40:ca:d8:fa: fe:fc:b4:b7:ef:23:76:50:68:46:bb:6e:7d:3c:6a:86:dc:bf: 19:b6:38:91:32:92:ef:9c:ef:7e:6b:96:fe:4e:ca:0c:08:6d: 29:5b:20:be:16:e4:60:84:65:e7:af:fb:c2:3a:72:fb:55:91: 10:9e:6a:e9:59:04:d5:21:97:cf:1d:4b:1f:82:c5:4f:ed:66: 2e:47:8e:26:f4:65:f6:45:d8:f2:a5:db:b7:68:47:68:b0:cf: 6b:13:02:47:a5:94:42:37:19:12:4f:b7:58:40:8e:ee:57:4c: 9f:51:c1:ca -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEtg70bAPahrxGZ9lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMTE1NDcyNVoXDTI4MDEwNDE2NDcyNVowLzEtMCsGA1UEAxMk OWQyYThhZDEtYmViZS00NDRiLWJiMzEtMGQyNjZlZmJkZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo8a685ThMutellxE7LKJpJMQLIGQdfv3D52 xaMseRXyToPh7RaJyiLGTGjD9E9WHiu8wBm0fR6rJ1At/JbNIl4WfpfOEJsQbUOE Bzdy6cFoNV+yNoJoLrq7krr6VcryrFkKeQ9CYscafcK4Da/kC3i1MjZY4OYLbUQx JP2lFe1RiFOp+LpJDoUTX5hC8/Qo5R6vgcchrkvHRhTBMBbf1JZwZaeoxGsN3WDo 4phcvr8v3S8yTr8G4fU/f2xB2YBS010lsDb/tDoFkaFiw+pfpuE9i3e7oAbyrqKh yafdPl+stKy/joomiZJ3Id8sEhJW3CBdZeK2uujC7MWBR1ktdwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFCmCd9XOuqr5Wu76yM7mnLvE2LsUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 ZDJhOGFkMS1iZWJlLTQ0NGItYmIzMS0wZDI2NmVmYmRlOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzlkMmE4YWQxLWJlYmUtNDQ0Yi1i YjMxLTBkMjY2ZWZiZGU5ZS85ZDJhOGFkMS1iZWJlLTQ0NGItYmIzMS0wZDI2NmVm YmRlOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXknwwDgQCAAIwCAMGACYC9UAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AE0uUuJvB+bbl9/4sbSpZLEKiE/D2SwXiQLf5hVITpakiBOjNZRmrogWb+YRM4tT a+KpS+42Mxa14suK9Hw3fxriRGfoO3Vi9HMYyecuPynXSisrUwA8VfwHP6lIbtQy EmMshTArs4j8WPoFajFBAwZW4SqPe0JUiuEiNTuh4u+UzwlfiKnQKT/DxQW2QMrY +v78tLfvI3ZQaEa7bn08aobcvxm2OJEyku+c735rlv5OygwIbSlbIL4W5GCEZeev +8I6cvtVkRCeaulZBNUhl88dSx+CxU/tZi5Hjib0ZfZF2PKl27doR2iwz2sTAkel lEI3GRJPt1hAju5XTJ9Rwco= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:00 2025 by rpki-client