$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24.cer File: d6aca04b-8aac-451b-b19d-c3675177ed24.cer (raw, json) Hash identifier: NDTEVSQRa6nOqQhLURAojgSYxTZ1bDGY+rC8SxnEtsU= Subject key identifier: F4:ED:4E:95:83:27:9C:61:70:F4:06:E4:26:5E:D9:9B:B6:F8:E2:84 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B2CE0562900DF819CED358500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Sep 2025 00:15:17 +0000 Certificate not after: Fri 17 Dec 2027 01:15:17 +0000 Subordinate resources: IP: 23.145.124.0/24 IP: 2602:f564::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:e0:56:29:00:df:81:9c:ed:35:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 13 00:15:17 2025 GMT Not After : Dec 17 01:15:17 2027 GMT Subject: CN=d6aca04b-8aac-451b-b19d-c3675177ed24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:9a:ce:28:3b:b1:8d:f3:82:8c:a0:a9:42: 4b:8d:b8:a0:70:8a:ba:38:3d:fc:cc:43:a8:b0:06: 30:21:f1:dd:cf:25:66:77:2d:f9:24:3c:01:35:6b: d6:bc:ae:11:25:cc:03:8a:e5:95:c9:f4:3b:d9:58: 07:2b:ff:97:6c:4a:39:b2:41:59:c4:e9:a4:fe:f6: c1:72:08:2f:f1:32:eb:06:6c:8b:0d:eb:0a:73:d0: bb:07:8f:34:86:ab:1b:75:05:0d:14:c5:bc:b8:a8: 4a:e1:33:da:db:b0:9e:a5:95:46:2e:fb:c2:4f:f6: a4:cf:77:aa:b4:85:af:5a:57:1b:37:0a:9d:8b:90: d1:19:2e:18:89:87:be:49:1c:ad:c2:20:5f:66:8d: df:9e:15:3a:d8:70:14:53:0e:d0:d2:e0:45:94:45: 1f:84:0f:92:41:a8:51:76:d9:98:e6:71:01:d4:c4: f4:27:af:fb:85:81:3a:86:27:28:f9:20:fb:02:15: 2f:53:1b:b1:35:c5:a9:46:ce:f9:ba:4b:ec:eb:7c: 0c:b9:8a:46:26:bb:17:aa:53:b8:3a:43:b4:a9:d9: dc:e9:30:05:a2:24:2b:0b:4d:3f:34:85:76:0e:f4: c3:d3:f0:30:6e:19:f1:29:3b:67:5f:ae:27:0c:88: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:ED:4E:95:83:27:9C:61:70:F4:06:E4:26:5E:D9:9B:B6:F8:E2:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d6aca04b-8aac-451b-b19d-c3675177ed24/d6aca04b-8aac-451b-b19d-c3675177ed24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.124.0/24 IPv6: 2602:f564::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e4:61:a9:9e:77:18:14:1b:82:3d:e4:54:8e:23:84:86:67: f6:63:fc:c6:e7:b0:7f:04:24:53:b6:8b:11:86:e9:48:f4:a9: 5a:90:4f:e1:24:68:87:79:9e:eb:5a:e8:f9:86:4c:65:44:5d: c9:59:05:53:b3:b8:46:46:6e:0f:03:fc:40:60:c4:70:a9:23: 66:fa:4c:0c:ba:00:b9:5e:4d:79:5a:8c:1a:62:9f:cb:14:6e: 83:e2:60:68:f2:81:4a:c9:8f:23:e7:74:b4:1a:bb:95:9c:b5: fb:f4:55:1f:39:9c:40:0a:f4:c7:60:ed:3d:38:d7:9b:54:84: 26:9c:6c:9c:36:80:3f:cc:8b:9e:3f:38:7e:75:0d:fb:ee:4b: 7e:04:97:47:28:c8:a1:14:a2:45:f4:43:aa:12:d9:49:1e:62: 0d:a5:ba:ae:05:0f:0f:c8:55:23:88:70:04:8a:88:ae:49:b6: ab:e1:d5:c4:e1:a3:21:c9:02:69:65:c2:d6:4e:d3:ad:18:8f: f1:86:1d:8a:71:ed:a1:b4:75:c2:37:7a:e7:2d:b5:5a:24:c4: 75:96:28:b1:20:c3:7d:b7:d3:46:9f:07:c3:4c:74:7e:59:51: 79:88:85:4b:e0:0e:c2:48:ef:13:90:0b:8c:99:37:70:c8:62: 13:2a:d4:2b -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEss4FYpAN+BnO01hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxMzAwMTUxN1oXDTI3MTIxNzAxMTUxN1owLzEtMCsGA1UEAxMk ZDZhY2EwNGItOGFhYy00NTFiLWIxOWQtYzM2NzUxNzdlZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlaazig7sY3zgoygqUJLjbigcIq6OD38zEOo sAYwIfHdzyVmdy35JDwBNWvWvK4RJcwDiuWVyfQ72VgHK/+XbEo5skFZxOmk/vbB cggv8TLrBmyLDesKc9C7B480hqsbdQUNFMW8uKhK4TPa27CepZVGLvvCT/akz3eq tIWvWlcbNwqdi5DRGS4YiYe+SRytwiBfZo3fnhU62HAUUw7Q0uBFlEUfhA+SQahR dtmY5nEB1MT0J6/7hYE6hico+SD7AhUvUxuxNcWpRs75ukvs63wMuYpGJrsXqlO4 OkO0qdnc6TAFoiQrC00/NIV2DvTD0/AwbhnxKTtnX64nDIj1EQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPTtTpWDJ5xhcPQG5CZe2Zu2+OKEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k NmFjYTA0Yi04YWFjLTQ1MWItYjE5ZC1jMzY3NTE3N2VkMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2Q2YWNhMDRiLThhYWMtNDUxYi1i MTlkLWMzNjc1MTc3ZWQyNC9kNmFjYTA0Yi04YWFjLTQ1MWItYjE5ZC1jMzY3NTE3 N2VkMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkXwwDgQCAAIwCAMGACYC9WQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHPkYamedxgUG4I95FSOI4SGZ/Zj/MbnsH8EJFO2ixGG6Uj0qVqQT+EkaId5nuta 6PmGTGVEXclZBVOzuEZGbg8D/EBgxHCpI2b6TAy6ALleTXlajBpin8sUboPiYGjy gUrJjyPndLQau5Wctfv0VR85nEAK9Mdg7T0415tUhCacbJw2gD/Mi54/OH51Dfvu S34El0coyKEUokX0Q6oS2UkeYg2luq4FDw/IVSOIcASKiK5Jtqvh1cThoyHJAmll wtZO060Yj/GGHYpx7aG0dcI3eucttVokxHWWKLEgw32300afB8NMdH5ZUXmIhUvg DsJI7xOQC4yZN3DIYhMq1Cs= -----END CERTIFICATE-----Generated at Wed Oct 8 15:35:51 2025 by rpki-client