$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.cer File: 0591b5c7-e4bf-4dcf-902b-b6fd12c339af.cer (raw, json) Hash identifier: tIXADKIQouNCBaMERY1brVeGysC0Rhyk8LxXH54DTFw= Subject key identifier: 61:E3:D3:75:35:7B:B7:0B:F6:20:1A:82:2C:94:32:85:66:02:85:5F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A6FCD166DC384A22A9D6F3C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 06:48:43 +0000 Certificate not after: Sun 10 Oct 2027 06:48:43 +0000 Subordinate resources: AS: 401096 IP: 23.179.72.0/24 IP: 2602:f8e0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:cd:16:6d:c3:84:a2:2a:9d:6f:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 7 06:48:43 2025 GMT Not After : Oct 10 06:48:43 2027 GMT Subject: CN=0591b5c7-e4bf-4dcf-902b-b6fd12c339af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:aa:dc:44:23:f8:1a:4c:58:c3:41:45:e9: a7:1b:f4:b8:5e:d7:e4:63:c8:88:bc:42:88:ae:43: 43:9e:da:c0:30:de:70:2f:e1:3a:75:54:0f:e2:59: 91:ed:12:96:c2:8e:69:55:eb:13:39:45:c2:81:41: 05:c9:cb:6a:cd:e0:d7:a1:ae:f3:6c:81:89:72:22: 8d:9a:b0:2f:00:af:1f:ed:b6:2a:8f:ad:84:2f:2e: 0d:ac:4b:ac:06:37:37:f0:07:28:31:b0:ae:7d:00: 4a:0d:02:a7:72:18:86:69:be:93:2d:0d:aa:0d:88: 3e:02:21:02:03:91:41:b8:0e:d0:d1:a2:07:a3:34: e3:cb:f9:d1:38:61:3c:17:0e:9e:3d:ba:99:e2:07: a0:48:5f:7b:57:fb:51:39:2a:2d:26:3f:2e:84:83: 81:63:dc:73:66:e6:aa:78:e7:02:cf:82:df:1c:bf: 8c:6e:0d:d9:16:81:0a:50:d3:46:df:d8:d7:a6:ae: 6c:21:79:c9:eb:65:a1:1c:8a:3a:fb:3e:52:84:02: a6:c8:b9:c7:74:99:a7:1e:9f:8f:1c:17:a5:4a:5c: f3:9b:5c:21:e5:c7:0d:e9:16:d2:2a:f1:d3:b2:4a: 81:7f:80:27:f4:4b:97:6d:a9:35:f5:d6:f0:c8:ce: dc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E3:D3:75:35:7B:B7:0B:F6:20:1A:82:2C:94:32:85:66:02:85:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.179.72.0/24 IPv6: 2602:f8e0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401096 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fc:53:ca:06:e3:c8:fa:9c:33:20:b8:9b:42:ce:bc:e2:84: c4:0c:33:6a:f2:be:f6:e4:9d:e1:0f:ac:fa:49:62:d3:c9:0e: 09:6b:2e:a1:01:8a:0b:d2:a4:a5:dc:d5:15:12:7f:19:f1:f2: 48:16:e7:55:d1:37:bf:0d:21:14:e9:4b:c7:86:01:24:f5:61: 7b:cd:30:48:d5:fa:83:66:a7:4c:5d:b8:96:19:39:f9:09:2e: bd:b2:ae:f9:35:f7:30:10:77:ce:87:02:fa:da:bb:f0:a7:2f: d2:c0:89:74:94:d0:4e:fd:54:15:59:1f:cc:87:15:60:b5:55: c7:07:55:43:cd:8d:13:fb:c5:c9:2f:1c:d2:16:cb:31:5e:45: 1c:43:c3:74:f3:c2:ec:be:2f:c3:e4:5c:0e:9f:9b:14:48:9e: c2:df:d0:b2:69:67:38:6d:f3:11:14:60:94:99:ff:8c:dd:e8: 45:aa:9c:ed:e1:a1:b6:30:c5:16:a4:9d:3f:11:18:77:24:84: f9:63:96:74:03:07:9a:70:f1:c3:5f:7c:83:d0:e1:20:84:a4: ec:42:48:00:93:0a:59:b2:ea:d4:4a:63:a7:c0:d0:24:17:9a: d2:96:2a:3c:b3:1a:13:63:96:de:49:0e:54:12:cb:fc:96:db: 4a:a5:69:81 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEpvzRZtw4SiKp1vPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcwNzA2NDg0M1oXDTI3MTAxMDA2NDg0M1owLzEtMCsGA1UEAxMk MDU5MWI1YzctZTRiZi00ZGNmLTkwMmItYjZmZDEyYzMzOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42eq3EQj+BpMWMNBRemnG/S4XtfkY8iIvEKI rkNDntrAMN5wL+E6dVQP4lmR7RKWwo5pVesTOUXCgUEFyctqzeDXoa7zbIGJciKN mrAvAK8f7bYqj62ELy4NrEusBjc38AcoMbCufQBKDQKnchiGab6TLQ2qDYg+AiEC A5FBuA7Q0aIHozTjy/nROGE8Fw6ePbqZ4gegSF97V/tROSotJj8uhIOBY9xzZuaq eOcCz4LfHL+Mbg3ZFoEKUNNG39jXpq5sIXnJ62WhHIo6+z5ShAKmyLnHdJmnHp+P HBelSlzzm1wh5ccN6RbSKvHTskqBf4An9EuXbak19dbwyM7c4QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGHj03U1e7cL9iAagiyUMoVmAoVfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8w NTkxYjVjNy1lNGJmLTRkY2YtOTAyYi1iNmZkMTJjMzM5YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzA1OTFiNWM3LWU0YmYtNGRjZi05 MDJiLWI2ZmQxMmMzMzlhZi8wNTkxYjVjNy1lNGJmLTRkY2YtOTAyYi1iNmZkMTJj MzM5YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXs0gwDgQCAAIwCAMGACYC+OAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYeyDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh/FPKBuPI+pwzILibQs684oTE DDNq8r725J3hD6z6SWLTyQ4Jay6hAYoL0qSl3NUVEn8Z8fJIFudV0Te/DSEU6UvH hgEk9WF7zTBI1fqDZqdMXbiWGTn5CS69sq75NfcwEHfOhwL62rvwpy/SwIl0lNBO /VQVWR/MhxVgtVXHB1VDzY0T+8XJLxzSFssxXkUcQ8N088Lsvi/D5FwOn5sUSJ7C 39CyaWc4bfMRFGCUmf+M3ehFqpzt4aG2MMUWpJ0/ERh3JIT5Y5Z0AweacPHDX3yD 0OEghKTsQkgAkwpZsurUSmOnwNAkF5rSlio8sxoTY5beSQ5UEsv8lttKpWmB -----END CERTIFICATE-----Generated at Sat Aug 2 05:30:30 2025 by rpki-client