$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94.cer File: e010bbaf-5843-4b16-89f9-4401d345db94.cer (raw, json) Hash identifier: lPgiV+iDaiHmKvXp9UFPxHJkgNFkXWONOWMZG664Iy4= Subject key identifier: 61:D5:B9:92:11:DF:90:C2:D3:44:48:10:2E:44:6E:E3:4C:28:65:B7 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B6404E0C43C83A0E225D06680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/e010bbaf-5843-4b16-89f9-4401d345db94.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Oct 2025 18:18:22 +0000 Certificate not after: Sun 19 Dec 2027 15:40:18 +0000 Subordinate resources: AS: 401973 IP: 23.146.172.0/24 IP: 2602:f535::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:04:e0:c4:3c:83:a0:e2:25:d0:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 2 18:18:22 2025 GMT Not After : Dec 19 15:40:18 2027 GMT Subject: CN=e010bbaf-5843-4b16-89f9-4401d345db94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:86:76:cd:14:25:8f:a8:43:de:a1:a3:24: 51:97:49:0f:62:ee:78:76:9d:2c:b9:62:0c:ea:45: 49:6b:cb:4d:7c:17:59:30:53:99:30:d1:ae:44:e4: 36:9a:55:bc:32:d7:05:a3:a6:5d:82:2b:c3:3a:77: 93:8a:cf:9c:da:f7:11:b5:ac:e5:b9:31:63:ba:8a: e2:67:43:72:cb:73:7b:f2:6e:82:5a:d0:96:da:af: 91:60:e1:60:3c:8a:6e:c2:28:f2:69:91:ad:4e:62: 2f:69:73:95:f4:25:09:f7:00:2e:79:40:18:fe:b8: 65:10:c9:ab:d4:c8:60:5a:e6:d9:68:43:72:a7:7b: b6:61:16:2e:00:03:6c:89:2c:cb:a3:bc:87:82:e3: 95:00:d2:87:90:5d:45:7e:0c:3d:d8:ac:7b:81:e7: 79:e1:aa:9a:07:74:51:97:dd:18:ef:26:be:72:20: b7:db:31:e2:41:f8:5f:99:6d:68:a0:f1:0e:a3:58: 9c:df:36:54:57:0b:29:37:fd:14:0d:2b:a5:d2:7e: de:c1:01:fc:5d:77:62:04:0e:80:bb:d9:66:27:a5: f6:cb:3e:d6:d5:93:2b:d3:49:d9:87:c4:08:ed:ed: f5:8c:2a:e9:52:b4:e3:c8:d9:38:43:5e:9d:00:69: e1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D5:B9:92:11:DF:90:C2:D3:44:48:10:2E:44:6E:E3:4C:28:65:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e010bbaf-5843-4b16-89f9-4401d345db94/e010bbaf-5843-4b16-89f9-4401d345db94.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.146.172.0/24 IPv6: 2602:f535::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401973 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:93:28:d3:c7:0e:ea:14:1d:03:e6:04:62:28:4f:22:07:b1: c7:dd:5b:ef:1b:6c:31:0b:b3:fc:2f:ea:a6:67:a6:04:81:6b: 3f:0b:98:d5:27:35:d7:d0:4b:21:35:1a:59:59:9f:38:43:b6: fc:55:d2:f3:67:f3:a9:4f:86:62:85:c7:34:32:05:35:91:0a: 4e:db:9d:2b:38:95:aa:86:bf:45:c9:f1:07:cc:fb:69:5f:e1: 4c:3f:42:30:df:35:d5:9d:94:71:18:83:bb:8a:0a:e5:53:90: a1:77:68:3b:57:8b:59:ad:1f:d6:0d:b5:a2:ce:db:f5:d9:8f: f6:40:2d:39:3b:5f:ba:c5:2e:ba:28:45:67:16:93:41:13:58: ad:a3:10:a6:d1:49:3f:48:34:59:1b:98:6b:58:7f:4d:09:01: ba:9d:8e:1e:f5:f3:15:ab:32:b8:47:df:99:29:b2:29:30:97: 77:33:c4:c7:6b:99:0a:ec:f0:91:1c:0f:e6:76:da:e7:b5:71: e7:d2:01:39:8d:de:27:11:22:a5:dc:91:cf:9e:b7:9f:57:87: b1:de:9f:7c:71:62:47:2f:6b:73:a6:9b:ab:3c:2d:bc:3a:72: 2a:67:02:6d:67:d2:9b:31:f8:fd:b0:2e:3b:33:6f:a1:31:6a: ef:9f:9d:52 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtkBODEPIOg4iXQZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMjE4MTgyMloXDTI3MTIxOTE1NDAxOFowLzEtMCsGA1UEAxMk ZTAxMGJiYWYtNTg0My00YjE2LTg5ZjktNDQwMWQzNDVkYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjziGds0UJY+oQ96hoyRRl0kPYu54dp0suWIM 6kVJa8tNfBdZMFOZMNGuROQ2mlW8MtcFo6ZdgivDOneTis+c2vcRtazluTFjuori Z0Nyy3N78m6CWtCW2q+RYOFgPIpuwijyaZGtTmIvaXOV9CUJ9wAueUAY/rhlEMmr 1MhgWubZaENyp3u2YRYuAANsiSzLo7yHguOVANKHkF1Ffgw92Kx7ged54aqaB3RR l90Y7ya+ciC32zHiQfhfmW1ooPEOo1ic3zZUVwspN/0UDSul0n7ewQH8XXdiBA6A u9lmJ6X2yz7W1ZMr00nZh8QI7e31jCrpUrTjyNk4Q16dAGnhpQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGHVuZIR35DC00RIEC5EbuNMKGW3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l MDEwYmJhZi01ODQzLTRiMTYtODlmOS00NDAxZDM0NWRiOTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2UwMTBiYmFmLTU4NDMtNGIxNi04 OWY5LTQ0MDFkMzQ1ZGI5NC9lMDEwYmJhZi01ODQzLTRiMTYtODlmOS00NDAxZDM0 NWRiOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkqwwDgQCAAIwCAMGACYC9TUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiNTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQkyjTxw7qFB0D5gRiKE8iB7HH 3VvvG2wxC7P8L+qmZ6YEgWs/C5jVJzXX0EshNRpZWZ84Q7b8VdLzZ/OpT4Zihcc0 MgU1kQpO250rOJWqhr9FyfEHzPtpX+FMP0Iw3zXVnZRxGIO7igrlU5Chd2g7V4tZ rR/WDbWiztv12Y/2QC05O1+6xS66KEVnFpNBE1itoxCm0Uk/SDRZG5hrWH9NCQG6 nY4e9fMVqzK4R9+ZKbIpMJd3M8THa5kK7PCRHA/mdtrntXHn0gE5jd4nESKl3JHP nrefV4ex3p98cWJHL2tzppurPC28OnIqZwJtZ9KbMfj9sC47M2+hMWrvn51S -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:38 2025 by rpki-client