$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer File: 25a4f200-c007-4476-b7c6-b306830b991d.cer (raw, json) Hash identifier: W2tVUfbSJNZa+wkeYBm+MUqjGK6SCOQSF45A/8TZ/hQ= Subject key identifier: A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AE9556B1CEA08A8D4E1C5A480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 Aug 2025 19:36:13 +0000 Certificate not after: Mon 22 Nov 2027 20:36:13 +0000 Subordinate resources: AS: 36303 IP: 23.169.104.0/24 IP: 167.253.29.0/24 IP: 2602:fabe::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:55:6b:1c:ea:08:a8:d4:e1:c5:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 19 19:36:13 2025 GMT Not After : Nov 22 20:36:13 2027 GMT Subject: CN=25a4f200-c007-4476-b7c6-b306830b991d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ae:38:94:f9:78:ff:fd:d2:38:7d:f3:ba:4f: 69:61:d3:49:c6:14:bf:d6:d9:0b:55:ef:97:c7:8c: 68:08:39:d0:c8:86:ac:3d:3e:0f:17:1f:74:eb:ce: 8c:f1:6c:ff:cf:d7:3a:7a:07:7f:42:10:b8:90:63: 7e:ca:88:fc:c9:cd:fa:a2:5e:2b:e3:97:00:31:9e: 46:5b:86:e9:3d:f2:6f:23:37:82:f9:1a:d6:23:a9: 1f:99:8e:ea:d5:42:f4:bf:d1:88:a8:e7:2d:ed:30: f3:a0:22:98:e4:65:90:34:01:68:1b:6e:9b:95:35: 3e:3a:c4:ef:46:bb:82:28:41:c2:da:86:02:9f:76: 35:bf:be:fa:bd:8f:cd:c7:55:ae:52:a1:c2:5c:dc: 45:58:fb:6a:bf:ed:9c:4e:52:39:89:ac:a9:5f:d5: f5:03:86:fa:43:e3:81:dc:97:15:5d:16:e3:82:b4: c9:4a:d5:e0:6e:6b:96:ff:ed:a8:ac:53:15:c9:e5: ba:10:1f:36:a9:8f:66:f8:57:9c:3e:0a:1b:b7:1c: e1:20:da:8b:e3:31:4a:c6:ce:51:e4:df:49:0e:f6: 04:8b:81:51:a8:70:be:43:1a:df:9e:d9:d6:85:6d: 30:83:05:fa:e4:98:1c:5b:22:5b:ab:7c:9f:b2:3c: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.169.104.0/24 167.253.29.0/24 IPv6: 2602:fabe::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36303 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:86:64:28:95:d7:80:ed:ff:77:e1:b0:72:06:bc:82:c3:c5: 52:a5:9a:bc:17:b2:72:10:03:94:3a:09:25:59:76:fa:a5:7d: ff:a8:fd:06:b6:0c:f1:21:36:b0:74:73:6c:d8:53:75:da:78: f2:cd:c1:21:29:40:dd:8a:69:4d:3b:79:9c:33:f9:30:ce:34: f3:07:d7:82:e5:26:4f:e2:4f:84:cc:23:c1:e7:5a:ff:55:5c: bf:4b:3b:6d:26:b2:7f:5d:1d:78:e3:bb:c8:c6:62:45:3c:eb: f2:de:4c:95:59:13:5b:fe:6e:4b:4b:28:b0:d7:62:db:9e:3f: 8b:bc:99:9e:0b:6d:84:bc:20:f3:79:48:f2:64:0f:79:9a:f8: 53:13:a6:8f:14:a4:bb:53:12:dd:45:33:ee:7e:b5:e3:3f:c3: 87:a9:70:d1:fb:d5:c4:ae:a1:62:21:da:42:f2:4e:1f:a2:1a: 7b:ef:39:70:a0:c9:0e:6e:7b:df:89:6b:b9:df:64:92:4c:de: 24:68:6e:6f:2b:70:76:9e:be:26:6b:12:ab:6a:94:d6:ac:a3: 88:a2:70:b8:ed:31:0d:c8:02:54:58:de:88:5f:0e:5b:45:c2: ce:4c:45:04:6b:42:6b:84:09:38:55:44:34:18:ea:ac:4a:66: 23:82:1c:c5 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWErpVWsc6gio1OHFpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxOTE5MzYxM1oXDTI3MTEyMjIwMzYxM1owLzEtMCsGA1UEAxMk MjVhNGYyMDAtYzAwNy00NDc2LWI3YzYtYjMwNjgzMGI5OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga44lPl4//3SOH3zuk9pYdNJxhS/1tkLVe+X x4xoCDnQyIasPT4PFx90686M8Wz/z9c6egd/QhC4kGN+yoj8yc36ol4r45cAMZ5G W4bpPfJvIzeC+RrWI6kfmY7q1UL0v9GIqOct7TDzoCKY5GWQNAFoG26blTU+OsTv RruCKEHC2oYCn3Y1v776vY/Nx1WuUqHCXNxFWPtqv+2cTlI5iaypX9X1A4b6Q+OB 3JcVXRbjgrTJStXgbmuW/+2orFMVyeW6EB82qY9m+FecPgobtxzhINqL4zFKxs5R 5N9JDvYEi4FRqHC+QxrfntnWhW0wgwX65JgcWyJbq3yfsjwcKQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFKDZBFiT2deo6KB6sgO0ForYFyLsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y NWE0ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2ODMwYjk5MWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzI1YTRmMjAwLWMwMDctNDQ3Ni1i N2M2LWIzMDY4MzBiOTkxZC8yNWE0ZjIwMC1jMDA3LTQ0NzYtYjdjNi1iMzA2ODMw Yjk5MWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXqWgDBACn/R0wDgQCAAIwCAMGACYC+r4AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCNzzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIhmQoldeA7f934bBy BryCw8VSpZq8F7JyEAOUOgklWXb6pX3/qP0GtgzxITawdHNs2FN12njyzcEhKUDd imlNO3mcM/kwzjTzB9eC5SZP4k+EzCPB51r/VVy/SzttJrJ/XR1447vIxmJFPOvy 3kyVWRNb/m5LSyiw12Lbnj+LvJmeC22EvCDzeUjyZA95mvhTE6aPFKS7UxLdRTPu frXjP8OHqXDR+9XErqFiIdpC8k4fohp77zlwoMkObnvfiWu532SSTN4kaG5vK3B2 nr4maxKrapTWrKOIonC47TENyAJUWN6IXw5bRcLOTEUEa0JrhAk4VUQ0GOqsSmYj ghzF -----END CERTIFICATE-----Generated at Sat Aug 23 15:13:25 2025 by rpki-client