$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer File: a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer (raw, json) Hash identifier: UhH8BnyzMlqIXvjsYbm3T/Voh6cuV90Jb2HOQS12r3M= Subject key identifier: 08:09:C9:3C:04:70:4F:15:96:45:EE:2F:5D:45:5B:62:14:2C:15:8D Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A8E3938914DF3C45EEA52A260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Jul 2025 04:20:50 +0000 Certificate not after: Thu 21 Oct 2027 04:20:50 +0000 Subordinate resources: IP: 23.142.4.0/24 IP: 2602:f5d6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:39:38:91:4d:f3:c4:5e:ea:52:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 18 04:20:50 2025 GMT Not After : Oct 21 04:20:50 2027 GMT Subject: CN=a11e93e6-ff05-4cb5-ad52-34caa087b7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7d:b3:7e:68:f2:5c:40:02:ec:1a:47:4e:2e: c4:32:31:9b:4d:10:9b:1d:50:f6:69:63:5a:ae:6b: f4:e5:77:6b:00:dc:b5:56:4f:db:c5:d9:54:6c:f5: 73:95:17:29:04:2f:43:e0:9d:7d:02:26:2d:8d:31: 77:2e:23:c4:8c:16:ec:e0:c0:ec:e6:2b:1f:f5:e1: 11:91:6b:71:7f:2e:7a:58:f7:27:d9:75:23:d3:8a: 68:13:d4:ee:6a:55:f2:af:19:4a:d4:b5:d8:13:47: 03:ec:22:7b:a0:be:62:7d:f4:2c:54:16:7f:85:9f: b0:92:64:ea:88:7b:80:6f:2c:3a:2f:ce:a9:67:86: 6a:7f:ca:b9:ca:74:90:46:9b:03:a7:c2:0a:12:5b: d6:a5:4f:5a:28:08:06:56:38:69:7f:a2:b0:38:25: da:c0:91:90:6f:87:78:19:b1:a1:86:5d:64:7b:37: 89:58:6c:54:ae:44:4d:79:3d:0f:62:e4:78:7b:50: cd:94:22:60:be:e3:b9:46:17:8b:06:42:a0:0b:27: e4:83:30:ab:10:36:f0:b8:14:00:99:22:bd:a4:53: 43:16:f6:57:da:b1:dc:2e:27:ca:c6:37:9f:5c:a5: 65:a9:78:c2:d4:55:bf:dc:d0:5f:11:9c:29:4c:5d: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:09:C9:3C:04:70:4F:15:96:45:EE:2F:5D:45:5B:62:14:2C:15:8D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.4.0/24 IPv6: 2602:f5d6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:aa:5d:c4:df:6b:1c:44:7d:39:3b:71:cd:56:c4:db:03:cb: 20:8a:46:61:8a:ba:35:22:c0:91:23:2e:b6:0d:bb:f3:f3:1d: 56:73:d1:21:ff:3c:53:a7:a9:c1:fe:ef:c1:5d:2a:cd:46:99: 66:cb:be:8e:ea:dc:5e:30:72:70:72:c4:45:50:c6:6e:21:1f: 4d:0e:ec:92:e6:fd:89:02:64:bc:8d:84:e6:60:4a:31:c1:61: 7c:db:8f:c8:50:8d:f9:8d:df:97:4b:26:ee:50:aa:df:c0:06: 23:ee:60:c0:2a:68:81:b1:1c:55:15:d7:a5:80:2a:5a:25:ee: 76:09:1c:09:a6:74:6f:54:4d:33:6e:43:fc:9d:8b:cc:7d:a3: e6:2f:cb:51:0f:c2:50:7d:f2:41:df:d2:0f:3d:48:32:8d:a4: 37:b7:5d:6b:78:69:42:a4:65:dd:bc:8e:6a:6f:02:ca:9e:94: 0e:94:e9:e7:16:3c:f5:fb:d1:0d:b0:12:59:57:1f:f2:a4:dd: 3d:1d:2f:61:34:b9:72:96:3a:ac:77:8e:64:cd:52:d8:d6:96: ea:1f:74:38:86:b0:41:7b:aa:33:50:32:b4:c6:af:35:1c:60: 0a:25:c1:85:df:85:be:52:a7:59:3e:ef:f2:f8:8a:b2:8c:b7: 9b:58:19:28 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqOOTiRTfPEXupSomAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxODA0MjA1MFoXDTI3MTAyMTA0MjA1MFowLzEtMCsGA1UEAxMk YTExZTkzZTYtZmYwNS00Y2I1LWFkNTItMzRjYWEwODdiN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX2zfmjyXEAC7BpHTi7EMjGbTRCbHVD2aWNa rmv05XdrANy1Vk/bxdlUbPVzlRcpBC9D4J19AiYtjTF3LiPEjBbs4MDs5isf9eER kWtxfy56WPcn2XUj04poE9TualXyrxlK1LXYE0cD7CJ7oL5iffQsVBZ/hZ+wkmTq iHuAbyw6L86pZ4Zqf8q5ynSQRpsDp8IKElvWpU9aKAgGVjhpf6KwOCXawJGQb4d4 GbGhhl1kezeJWGxUrkRNeT0PYuR4e1DNlCJgvuO5RheLBkKgCyfkgzCrEDbwuBQA mSK9pFNDFvZX2rHcLifKxjefXKVlqXjC1FW/3NBfEZwpTF1ICwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFAgJyTwEcE8VlkXuL11FW2IULBWNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h MTFlOTNlNi1mZjA1LTRjYjUtYWQ1Mi0zNGNhYTA4N2I3YjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2ExMWU5M2U2LWZmMDUtNGNiNS1h ZDUyLTM0Y2FhMDg3YjdiMy9hMTFlOTNlNi1mZjA1LTRjYjUtYWQ1Mi0zNGNhYTA4 N2I3YjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjgQwDgQCAAIwCAMGACYC9dYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJmqXcTfaxxEfTk7cc1WxNsDyyCKRmGKujUiwJEjLrYNu/PzHVZz0SH/PFOnqcH+ 78FdKs1GmWbLvo7q3F4wcnByxEVQxm4hH00O7JLm/YkCZLyNhOZgSjHBYXzbj8hQ jfmN35dLJu5Qqt/ABiPuYMAqaIGxHFUV16WAKlol7nYJHAmmdG9UTTNuQ/ydi8x9 o+Yvy1EPwlB98kHf0g89SDKNpDe3XWt4aUKkZd28jmpvAsqelA6U6ecWPPX70Q2w EllXH/Kk3T0dL2E0uXKWOqx3jmTNUtjWluofdDiGsEF7qjNQMrTGrzUcYAolwYXf hb5Sp1k+7/L4irKMt5tYGSg= -----END CERTIFICATE-----Generated at Thu Jul 24 00:05:35 2025 by rpki-client