$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85.cer File: 4b3d45e3-ef41-40af-afdc-841ce5179b85.cer (raw, json) Hash identifier: p+KhlHEis6Avu+u/mpDWldv9ZEbvJZcLmBrTOEF746k= Subject key identifier: F4:73:CA:2D:03:77:26:2D:70:74:73:E5:4A:56:B9:97:0D:F8:27:2D Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B369E0EA1A5AECF46A08E9E48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Sep 2025 11:59:49 +0000 Certificate not after: Mon 20 Dec 2027 12:59:49 +0000 Subordinate resources: AS: 401476 IP: 2602:f5c0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:9e:0e:a1:a5:ae:cf:46:a0:8e:9e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 16 11:59:49 2025 GMT Not After : Dec 20 12:59:49 2027 GMT Subject: CN=4b3d45e3-ef41-40af-afdc-841ce5179b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4f:f9:ad:5b:ed:79:f8:6c:13:3f:47:54:81: 06:d8:f3:f2:24:6f:21:14:d8:40:86:80:2b:03:2f: 8c:58:ce:4c:7a:36:de:89:41:7e:12:59:8a:37:97: 15:fd:af:2d:c3:21:6c:92:b5:58:78:bd:47:5e:37: 51:19:70:1f:eb:4c:a0:1f:93:ec:f5:ce:85:47:af: 94:ec:3f:d2:fb:b0:95:92:78:ae:5a:3f:7c:a8:96: 23:5d:5f:48:c8:41:d4:5b:43:eb:9a:43:c8:6c:50: 81:89:d6:98:f7:c6:a3:fe:73:ba:19:68:3c:71:e5: ea:62:ef:4a:76:5b:d9:bd:0b:54:04:d1:30:b2:8b: 8b:47:97:2b:be:08:1f:0f:cc:7a:8c:52:f6:42:c1: 86:f7:82:f8:61:c5:4c:7c:30:34:25:89:99:d9:09: 08:da:5b:1f:3e:5e:5c:22:6e:50:07:28:66:49:09: 0a:fd:4e:b5:f2:ec:26:82:2d:f6:03:3c:4b:43:e9: 96:49:f1:db:7e:66:a4:05:b4:9b:14:a3:3a:74:3e: f7:06:59:50:1b:8c:26:44:f9:d6:58:67:fe:54:34: 0e:a9:a0:a8:84:be:95:25:3d:e1:c6:ee:98:46:a2: 5d:84:9e:d2:ac:5a:ce:1e:31:46:e8:38:97:ff:45: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:73:CA:2D:03:77:26:2D:70:74:73:E5:4A:56:B9:97:0D:F8:27:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4b3d45e3-ef41-40af-afdc-841ce5179b85/4b3d45e3-ef41-40af-afdc-841ce5179b85.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401476 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b8:62:2c:fc:77:4c:23:93:51:6d:46:9c:5b:39:0f:ba:54: cb:9f:ba:37:6c:66:35:6b:a5:25:57:29:28:1b:a2:c7:0a:4b: 76:f8:5e:87:37:9b:55:96:a7:9f:e7:a0:13:74:37:c0:ea:4c: fb:d7:4d:fe:1d:e8:fb:2a:c8:c3:27:1f:b1:52:dd:8a:98:fa: 69:83:00:99:aa:c1:66:d9:0a:47:62:02:e7:ba:70:3f:a0:ad: 94:02:b1:77:06:1f:8d:f1:03:81:19:ab:3f:48:71:6d:6f:6d: 44:cb:40:fe:fc:37:fd:82:75:06:90:f4:75:a5:dc:66:61:2b: 52:dd:dd:1f:9b:62:d4:da:89:a1:39:2e:77:f0:cc:f3:d6:e4: 98:2a:fc:eb:19:76:7c:2b:d8:52:23:88:1f:6c:00:05:42:e8: 0d:d3:59:03:00:a6:12:0a:d0:f4:21:b2:12:0b:e5:81:91:70: 77:ed:96:2d:71:31:09:82:13:a2:5a:7f:ac:4a:a5:e0:72:08: e2:f8:32:fd:9a:08:c6:5a:5c:39:d5:ac:8a:60:db:2d:13:dc: d2:73:45:17:dd:7d:68:56:b3:b3:c4:c8:a8:d7:e7:6e:dc:bb: d0:de:d4:60:0f:76:60:08:22:ad:05:0a:9c:d4:ef:0e:70:10: 5d:8c:25:43 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEs2ng6hpa7PRqCOnkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxNjExNTk0OVoXDTI3MTIyMDEyNTk0OVowLzEtMCsGA1UEAxMk NGIzZDQ1ZTMtZWY0MS00MGFmLWFmZGMtODQxY2U1MTc5Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0/5rVvtefhsEz9HVIEG2PPyJG8hFNhAhoAr Ay+MWM5MejbeiUF+ElmKN5cV/a8twyFskrVYeL1HXjdRGXAf60ygH5Ps9c6FR6+U 7D/S+7CVkniuWj98qJYjXV9IyEHUW0PrmkPIbFCBidaY98aj/nO6GWg8ceXqYu9K dlvZvQtUBNEwsouLR5crvggfD8x6jFL2QsGG94L4YcVMfDA0JYmZ2QkI2lsfPl5c Im5QByhmSQkK/U618uwmgi32AzxLQ+mWSfHbfmakBbSbFKM6dD73BllQG4wmRPnW WGf+VDQOqaCohL6VJT3hxu6YRqJdhJ7SrFrOHjFG6DiX/0WugQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFPRzyi0DdyYtcHRz5UpWuZcN+CctMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 YjNkNDVlMy1lZjQxLTQwYWYtYWZkYy04NDFjZTUxNzliODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzRiM2Q0NWUzLWVmNDEtNDBhZi1h ZmRjLTg0MWNlNTE3OWI4NS80YjNkNDVlMy1lZjQxLTQwYWYtYWZkYy04NDFjZTUx NzliODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvXAADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIEQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAA7hiLPx3TCOTUW1GnFs5D7pUy5+6N2xmNWulJVcpKBui xwpLdvhehzebVZann+egE3Q3wOpM+9dN/h3o+yrIwycfsVLdipj6aYMAmarBZtkK R2IC57pwP6CtlAKxdwYfjfEDgRmrP0hxbW9tRMtA/vw3/YJ1BpD0daXcZmErUt3d H5ti1NqJoTkud/DM89bkmCr86xl2fCvYUiOIH2wABULoDdNZAwCmEgrQ9CGyEgvl gZFwd+2WLXExCYITolp/rEql4HII4vgy/ZoIxlpcOdWsimDbLRPc0nNFF919aFaz s8TIqNfnbty70N7UYA92YAgirQUKnNTvDnAQXYwlQw== -----END CERTIFICATE-----Generated at Tue Nov 4 17:55:08 2025 by rpki-client