$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb40f6d2-5540-4532-ae05-60e90713e9b5.cer File: cb40f6d2-5540-4532-ae05-60e90713e9b5.cer (raw, json) Hash identifier: 4JnIrH47bf/xOUkYOKqSGC9Xsk5NzioT7aglYncg5rw= Subject key identifier: 80:87:2C:B1:C3:A6:53:C0:B5:74:55:A2:C8:34:BE:6F:48:11:D8:EB Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B3BCAB8C6AA5A18031B708FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb40f6d2-5540-4532-ae05-60e90713e9b5/cb40f6d2-5540-4532-ae05-60e90713e9b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb40f6d2-5540-4532-ae05-60e90713e9b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Sep 2025 08:28:51 +0000 Certificate not after: Wed 22 Dec 2027 09:28:51 +0000 Subordinate resources: AS: 401960 IP: 23.145.116.0/24 IP: 2602:f568::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3b:ca:b8:c6:aa:5a:18:03:1b:70:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 18 08:28:51 2025 GMT Not After : Dec 22 09:28:51 2027 GMT Subject: CN=cb40f6d2-5540-4532-ae05-60e90713e9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:3d:bc:9c:d3:46:ab:b7:2e:97:a7:59:24: 3a:3c:ff:2c:42:7c:99:5f:25:c1:01:c5:74:e1:9d: ce:44:e3:6c:a7:5a:92:1c:0a:31:b6:2f:86:7c:67: 00:57:df:57:a7:4b:3c:bb:ca:e9:c1:85:2a:48:84: 18:f6:dc:66:5d:ea:a5:a7:fe:b3:eb:cc:dd:c6:49: b0:ac:54:d6:a4:58:3d:6b:e6:6a:22:9f:8a:0a:0b: 64:86:93:60:59:80:78:8a:8e:ec:98:79:f7:a3:a1: 29:6f:07:41:82:ab:f1:20:e3:ae:07:56:0f:95:fc: a9:37:30:e0:a4:3f:d4:6a:27:bb:86:ed:00:b1:0a: 74:f2:59:14:23:63:88:97:92:e5:ee:89:20:3b:54: d2:42:b3:ba:bd:26:fb:eb:76:00:76:44:dd:57:11: 22:b2:31:9d:11:a4:16:72:f4:05:78:1f:ce:e4:6c: 2f:f2:73:06:f9:dc:89:90:39:d2:9d:81:c7:63:b5: 96:73:a0:c4:1d:e2:ce:b6:89:3d:f4:7c:20:12:8c: 9f:fe:2e:32:57:a0:09:e7:73:8e:4e:a0:e9:7f:d2: 65:d2:8d:97:2c:e6:d0:47:6d:2f:ac:57:81:0c:36: 7d:3f:28:71:50:e2:f5:ea:ef:00:41:b0:5d:1e:ae: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:87:2C:B1:C3:A6:53:C0:B5:74:55:A2:C8:34:BE:6F:48:11:D8:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb40f6d2-5540-4532-ae05-60e90713e9b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb40f6d2-5540-4532-ae05-60e90713e9b5/cb40f6d2-5540-4532-ae05-60e90713e9b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.116.0/24 IPv6: 2602:f568::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401960 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:50:50:ce:1a:a6:76:80:c0:70:7d:e9:28:87:00:77:ca:be: 1c:ff:3d:99:d9:71:0b:55:7c:1b:09:34:51:ab:78:a4:3c:bf: 39:3f:96:4a:a5:db:ea:ae:2d:92:8c:b6:23:2a:9a:f0:ad:7a: d6:38:57:d0:ea:13:6f:7b:48:bb:30:5c:fe:a6:69:08:57:af: 62:a0:05:62:ca:7d:c3:5d:79:e8:2a:53:90:a6:42:a8:4a:57: c2:ea:b3:a6:b0:7c:71:9d:59:18:ec:f2:25:33:5e:cb:1a:af: fd:a5:6d:57:72:ea:65:dd:bb:2a:59:65:a2:34:9e:f1:f3:02: 80:77:a7:e1:7f:ab:5b:92:57:9b:c9:1e:52:29:cb:e2:55:9d: 6c:72:2f:78:44:cc:f4:e8:c9:55:32:b8:cf:37:0d:ae:6b:a9: 62:fc:4b:3e:0d:26:52:b5:58:bf:ab:ca:25:f9:64:35:39:5f: bc:4f:51:ae:6c:2f:38:e9:0b:2d:8f:e0:aa:b9:d9:75:29:12: 20:7c:7e:a2:64:d5:71:9f:f0:3d:6a:e1:d2:4a:7f:67:ba:76: bb:ea:cb:66:34:3c:8e:29:4c:dc:8f:f7:69:c2:74:c8:94:ff: c1:e1:b2:d5:1d:ed:de:c3:cc:f5:12:39:59:25:55:1d:cc:23: 98:ae:07:ce -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEs7yrjGqloYAxtwj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxODA4Mjg1MVoXDTI3MTIyMjA5Mjg1MVowLzEtMCsGA1UEAxMk Y2I0MGY2ZDItNTU0MC00NTMyLWFlMDUtNjBlOTA3MTNlOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofI9vJzTRqu3LpenWSQ6PP8sQnyZXyXBAcV0 4Z3ORONsp1qSHAoxti+GfGcAV99Xp0s8u8rpwYUqSIQY9txmXeqlp/6z68zdxkmw rFTWpFg9a+ZqIp+KCgtkhpNgWYB4io7smHn3o6EpbwdBgqvxIOOuB1YPlfypNzDg pD/Uaie7hu0AsQp08lkUI2OIl5Ll7okgO1TSQrO6vSb763YAdkTdVxEisjGdEaQW cvQFeB/O5Gwv8nMG+dyJkDnSnYHHY7WWc6DEHeLOtok99HwgEoyf/i4yV6AJ53OO TqDpf9Jl0o2XLObQR20vrFeBDDZ9PyhxUOL16u8AQbBdHq50hwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFICHLLHDplPAtXRVosg0vm9IEdjrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j YjQwZjZkMi01NTQwLTQ1MzItYWUwNS02MGU5MDcxM2U5YjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NiNDBmNmQyLTU1NDAtNDUzMi1h ZTA1LTYwZTkwNzEzZTliNS9jYjQwZjZkMi01NTQwLTQ1MzItYWUwNS02MGU5MDcx M2U5YjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkXQwDgQCAAIwCAMGACYC9WgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuUFDOGqZ2gMBwfekohwB3yr4c /z2Z2XELVXwbCTRRq3ikPL85P5ZKpdvqri2SjLYjKprwrXrWOFfQ6hNve0i7MFz+ pmkIV69ioAViyn3DXXnoKlOQpkKoSlfC6rOmsHxxnVkY7PIlM17LGq/9pW1Xcupl 3bsqWWWiNJ7x8wKAd6fhf6tbklebyR5SKcviVZ1sci94RMz06MlVMrjPNw2ua6li /Es+DSZStVi/q8ol+WQ1OV+8T1GubC846Qstj+Cqudl1KRIgfH6iZNVxn/A9auHS Sn9nuna76stmNDyOKUzcj/dpwnTIlP/B4bLVHe3ew8z1EjlZJVUdzCOYrgfO -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:04 2025 by rpki-client