$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer File: baa47c38-d554-4849-bca9-e7ed28932034.cer (raw, json) Hash identifier: 2jTab631iaTQWHCmLl/oKPmUC8462owtbeLAvc1Sx18= Subject key identifier: 03:DB:4C:F5:7B:C3:7D:0B:92:F7:C5:3C:20:BF:41:F4:23:7B:77:93 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B28E5B37566DB4DF44CF8BCE8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 14:02:51 +0000 Certificate not after: Wed 15 Dec 2027 15:02:51 +0000 Subordinate resources: IP: 23.145.68.0/24 IP: 2602:f56b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:e5:b3:75:66:db:4d:f4:4c:f8:bc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 11 14:02:51 2025 GMT Not After : Dec 15 15:02:51 2027 GMT Subject: CN=baa47c38-d554-4849-bca9-e7ed28932034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:30:b0:a4:67:56:bc:9b:44:18:60:9c:7f: d0:e6:3b:a1:03:05:7f:1f:4f:b2:42:51:9c:e4:40: ee:25:19:6e:e6:03:49:6a:23:4a:9a:72:79:7e:b3: 6f:1c:dc:bb:cc:31:0b:47:a5:c7:54:22:27:b9:24: 29:b6:61:24:13:77:4a:8a:cd:2e:38:a2:e2:2c:19: 0d:fd:a7:20:f2:29:61:3a:54:5d:f1:e5:ed:57:c7: e2:26:49:f6:0d:2b:31:a1:36:c0:0d:49:26:fa:8c: ba:cb:64:45:f7:85:0b:82:c5:22:ee:9e:f2:82:4b: bc:5f:78:10:91:95:c5:97:cf:25:7a:b9:e4:58:a1: a4:73:d9:11:3f:af:af:ea:6d:60:59:e4:c3:0d:81: 5c:39:24:39:87:ab:a6:c3:57:c0:e8:5b:0a:7e:c7: bf:15:12:e6:31:9f:fe:53:9c:4f:75:1c:6d:d0:9d: 8f:4d:01:7b:ad:4c:eb:da:dc:af:02:82:0c:fc:06: bd:d5:7b:35:60:de:d0:a4:16:83:a1:b8:d3:8b:3e: 46:51:7d:21:d3:4b:b8:f3:1b:ca:aa:cc:de:83:4b: 7f:b7:db:98:86:10:42:7d:1d:a5:b8:a2:8f:16:dc: 34:19:78:20:e3:41:fa:c9:fa:5f:24:94:a6:f0:70: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DB:4C:F5:7B:C3:7D:0B:92:F7:C5:3C:20:BF:41:F4:23:7B:77:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.68.0/24 IPv6: 2602:f56b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d3:82:90:de:a2:bb:4d:2f:1f:b1:9d:6b:05:a7:7f:25:d4: 6a:06:1f:91:b3:ad:e8:f8:28:99:bc:a8:42:25:82:4a:b7:ba: 59:fa:d4:96:2f:33:17:68:f5:9f:d8:27:78:9c:51:fe:88:ec: d1:06:71:f4:1b:70:ab:68:38:92:56:05:ff:82:ae:96:af:cd: 8a:99:f6:05:4b:c0:eb:0b:5b:bd:6a:30:81:86:44:1f:6b:41: 92:fc:f7:8f:5f:e0:e7:a8:e8:1c:93:34:01:c6:63:fa:ea:a0: e9:e9:71:12:d8:59:86:ae:ce:01:70:7d:cc:01:e7:7b:fe:92: e7:19:63:6b:0e:4e:a0:d2:cb:9d:98:bc:ec:f1:d2:85:0c:4d: e8:a5:dd:a9:f5:51:fe:d3:6d:87:ad:0b:5f:ba:32:e6:4a:d0: ae:f0:4b:e5:c6:ea:66:45:45:86:ed:cf:45:9e:aa:eb:ea:57: bc:52:1c:2b:13:63:8d:d9:53:83:df:7a:87:f4:a9:e0:e2:42: e6:bd:ce:8c:f6:47:39:7f:a0:7d:75:58:21:b1:ef:1f:78:4e: c6:dc:9e:da:ec:3e:b8:04:05:a7:50:49:6f:72:10:52:43:cf: 96:bd:ab:31:dc:4c:ca:e3:b4:c1:8f:2f:26:f2:32:30:45:ed: 9d:50:f6:c4 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEso5bN1ZttN9Ez4vOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxMTE0MDI1MVoXDTI3MTIxNTE1MDI1MVowLzEtMCsGA1UEAxMk YmFhNDdjMzgtZDU1NC00ODQ5LWJjYTktZTdlZDI4OTMyMDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBkwsKRnVrybRBhgnH/Q5juhAwV/H0+yQlGc 5EDuJRlu5gNJaiNKmnJ5frNvHNy7zDELR6XHVCInuSQptmEkE3dKis0uOKLiLBkN /acg8ilhOlRd8eXtV8fiJkn2DSsxoTbADUkm+oy6y2RF94ULgsUi7p7ygku8X3gQ kZXFl88lernkWKGkc9kRP6+v6m1gWeTDDYFcOSQ5h6umw1fA6FsKfse/FRLmMZ/+ U5xPdRxt0J2PTQF7rUzr2tyvAoIM/Aa91Xs1YN7QpBaDobjTiz5GUX0h00u48xvK qszeg0t/t9uYhhBCfR2luKKPFtw0GXgg40H6yfpfJJSm8HDTywIDAQABo4IEDzCC BAswHQYDVR0OBBYEFAPbTPV7w30LkvfFPCC/QfQje3eTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i YWE0N2MzOC1kNTU0LTQ4NDktYmNhOS1lN2VkMjg5MzIwMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2JhYTQ3YzM4LWQ1NTQtNDg0OS1i Y2E5LWU3ZWQyODkzMjAzNC9iYWE0N2MzOC1kNTU0LTQ4NDktYmNhOS1lN2VkMjg5 MzIwMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkUQwDgQCAAIwCAMGACYC9WsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHvTgpDeortNLx+xnWsFp38l1GoGH5Gzrej4KJm8qEIlgkq3uln61JYvMxdo9Z/Y J3icUf6I7NEGcfQbcKtoOJJWBf+CrpavzYqZ9gVLwOsLW71qMIGGRB9rQZL8949f 4Oeo6ByTNAHGY/rqoOnpcRLYWYauzgFwfcwB53v+kucZY2sOTqDSy52YvOzx0oUM Teil3an1Uf7TbYetC1+6MuZK0K7wS+XG6mZFRYbtz0WequvqV7xSHCsTY43ZU4Pf eof0qeDiQua9zoz2Rzl/oH11WCGx7x94TsbcntrsPrgEBadQSW9yEFJDz5a9qzHc TMrjtMGPLybyMjBF7Z1Q9sQ= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:06 2025 by rpki-client