$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer File: cc43c894-0822-4819-9b8f-df16b53cf6de.cer (raw, json) Hash identifier: Z+HUES54kV8qE221eCGrUAn/n58IJZyrBbfniI3lqCY= Subject key identifier: 9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A64D0D73A6D9BA364337668E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Jul 2025 08:22:23 +0000 Certificate not after: Wed 06 Oct 2027 08:22:23 +0000 Subordinate resources: AS: 401536 IP: 23.130.20.0/24 IP: 2602:f786::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:64:d0:d7:3a:6d:9b:a3:64:33:76:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 3 08:22:23 2025 GMT Not After : Oct 6 08:22:23 2027 GMT Subject: CN=cc43c894-0822-4819-9b8f-df16b53cf6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:4d:df:8a:0c:0d:ce:3a:ac:4d:af:d5:1e: 30:1e:72:5f:2b:da:0f:76:7e:59:41:06:6c:02:30: ba:9b:fd:92:f6:bb:10:14:d9:14:8a:ad:99:9b:d8: db:f7:4a:cf:b7:58:38:fe:57:56:d3:25:24:6e:01: 58:fa:e1:39:65:ca:02:ff:33:54:49:30:a9:dc:98: 36:75:37:fa:cb:7c:d6:1d:4a:ad:55:95:be:b7:f3: f1:2b:80:61:06:49:b3:6a:49:0b:ca:ea:17:c6:ba: 9c:b1:a6:8c:8a:d2:3b:98:48:c8:9d:ba:39:e7:7f: 8d:b0:9a:10:5b:00:8f:ce:d0:33:fd:9c:80:11:4c: 42:ff:c4:2a:80:de:1a:6d:b8:12:1f:c2:5a:70:4a: cb:a5:0b:96:93:c6:3c:ef:bc:b5:91:73:37:e5:36: c2:e6:15:be:59:b2:3a:5d:c7:6a:7f:9a:77:62:91: 15:d9:e0:24:8f:60:e9:13:d7:b2:f4:4e:ad:84:cd: b6:82:69:49:ab:ff:0d:9e:3a:1b:27:1d:a4:87:f4: b7:29:41:c0:b6:be:5b:72:71:17:a9:e5:bb:7e:23: 15:1f:7a:53:ac:04:4b:ab:b9:f8:99:92:91:6d:62: e7:1f:17:0c:28:2a:0a:92:40:d2:2e:1b:85:c5:fc: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.130.20.0/24 IPv6: 2602:f786::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401536 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c6:5c:54:f3:18:d8:43:a7:7f:2c:23:ba:cd:e9:b1:cd:0b: 6b:6e:ba:2b:85:fa:6e:41:60:13:64:01:1a:42:95:7d:70:31: fd:a4:8f:0f:96:c2:9b:da:96:61:5d:35:af:10:50:de:72:44: 78:84:6f:3f:88:54:5f:30:11:0e:b0:37:12:c2:76:f9:4b:14: 7e:c2:85:d9:0f:83:1d:c2:04:9b:2a:79:ac:d4:d7:1c:80:4e: fd:14:ff:ac:f7:6c:0e:c8:99:f4:e5:0b:4f:ba:b6:18:f8:20: 98:84:e2:44:73:0e:ca:af:c3:e7:d7:10:58:53:1a:c1:19:55: 2b:74:4f:ac:e9:0f:d5:6e:6c:36:2f:9f:ee:94:fc:37:47:b8: d9:fe:df:34:78:d4:6e:43:e1:9c:28:c8:c7:74:74:29:1e:c7: 94:d5:43:ae:96:2f:9e:4d:3f:52:ea:5e:8a:64:6a:9e:b0:c9: ac:a1:61:62:48:fa:31:b2:1b:fd:41:7d:f7:bb:43:17:e2:f1: d8:bf:05:82:a5:b3:be:cd:14:6a:1e:e6:78:88:49:e6:b4:c6: 48:60:a8:f8:bd:b1:bd:6c:54:7e:e6:80:e4:46:8d:24:81:f9: 5b:20:b4:a0:e0:49:d4:01:e8:38:08:21:d9:8e:5e:66:55:c0: be:df:57:5a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEpk0Nc6bZujZDN2aOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcwMzA4MjIyM1oXDTI3MTAwNjA4MjIyM1owLzEtMCsGA1UEAxMk Y2M0M2M4OTQtMDgyMi00ODE5LTliOGYtZGYxNmI1M2NmNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPRN34oMDc46rE2v1R4wHnJfK9oPdn5ZQQZs AjC6m/2S9rsQFNkUiq2Zm9jb90rPt1g4/ldW0yUkbgFY+uE5ZcoC/zNUSTCp3Jg2 dTf6y3zWHUqtVZW+t/PxK4BhBkmzakkLyuoXxrqcsaaMitI7mEjInbo553+NsJoQ WwCPztAz/ZyAEUxC/8QqgN4abbgSH8JacErLpQuWk8Y877y1kXM35TbC5hW+WbI6 Xcdqf5p3YpEV2eAkj2DpE9ey9E6thM22gmlJq/8NnjobJx2kh/S3KUHAtr5bcnEX qeW7fiMVH3pTrARLq7n4mZKRbWLnHxcMKCoKkkDSLhuFxfx7EQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJt0I9C9UIg/RXLfzmy+3HQPivQ6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j YzQzYzg5NC0wODIyLTQ4MTktOWI4Zi1kZjE2YjUzY2Y2ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NjNDNjODk0LTA4MjItNDgxOS05 YjhmLWRmMTZiNTNjZjZkZS9jYzQzYzg5NC0wODIyLTQ4MTktOWI4Zi1kZjE2YjUz Y2Y2ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXghQwDgQCAAIwCAMGBCYC94YAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYggDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxxlxU8xjYQ6d/LCO6zemxzQtr brorhfpuQWATZAEaQpV9cDH9pI8PlsKb2pZhXTWvEFDeckR4hG8/iFRfMBEOsDcS wnb5SxR+woXZD4MdwgSbKnms1NccgE79FP+s92wOyJn05QtPurYY+CCYhOJEcw7K r8Pn1xBYUxrBGVUrdE+s6Q/Vbmw2L5/ulPw3R7jZ/t80eNRuQ+GcKMjHdHQpHseU 1UOuli+eTT9S6l6KZGqesMmsoWFiSPoxshv9QX33u0MX4vHYvwWCpbO+zRRqHuZ4 iEnmtMZIYKj4vbG9bFR+5oDkRo0kgflbILSg4EnUAeg4CCHZjl5mVcC+31da -----END CERTIFICATE-----Generated at Fri Jul 4 06:45:52 2025 by rpki-client