$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer File: 43ba2928-8b99-4e95-865c-b82d26de7be9.cer (raw, json) Hash identifier: ym2wzs9rN+EzKMwu1OR9mcw8FCEoZwNiRDJcp2Do1ik= Subject key identifier: E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A89CD868DAE67C58D91460B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 14:20:37 +0000 Certificate not after: Tue 19 Oct 2027 14:20:37 +0000 Subordinate resources: IP: 23.140.124.0/24 IP: 2602:f610::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:cd:86:8d:ae:67:c5:8d:91:46:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 16 14:20:37 2025 GMT Not After : Oct 19 14:20:37 2027 GMT Subject: CN=43ba2928-8b99-4e95-865c-b82d26de7be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9b:e4:01:df:31:11:a1:58:c8:ee:9f:9f:d4: 0d:2c:91:fe:9e:98:11:e8:9f:09:b3:af:1b:e8:03: eb:a8:a5:a6:a1:58:c3:ee:81:8d:c8:74:71:db:b0: 21:5e:b3:6a:11:0b:97:f7:af:ee:57:4a:c8:48:73: 49:d7:a9:8e:10:49:3b:d1:2b:4f:5a:08:c4:86:df: be:fc:48:e8:f6:be:ed:b6:db:e4:42:55:d4:4d:26: b3:6c:3d:b2:27:70:20:18:1c:10:6b:0c:e1:15:2f: 17:00:62:10:f5:04:85:c0:8b:f2:3e:69:ef:1f:5c: d7:29:b1:ab:dc:f3:4d:81:17:4c:95:81:82:cb:0a: 01:47:6e:f8:88:e2:53:81:71:5b:74:2b:39:6b:89: 6b:0a:64:bd:53:b4:a0:40:7c:4b:a6:c4:99:0a:0a: 97:23:dd:8f:1e:af:8f:82:2b:6a:43:70:c4:d2:0e: f9:c7:5e:2d:a6:05:5e:77:dc:d8:65:22:6a:dd:d2: 76:28:14:d4:2b:d4:18:17:9f:bc:5b:df:1e:be:69: 9f:81:90:5f:f5:23:6e:97:24:4b:ed:14:87:c0:45: 3f:b6:9c:29:c4:57:41:36:3d:82:a2:93:e6:c4:b1: 17:f8:a3:3e:67:50:a5:9c:35:d4:46:19:72:e4:be: 42:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.140.124.0/24 IPv6: 2602:f610::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:35:37:70:4f:fd:91:fe:0b:b3:65:76:dc:69:e7:57:46:75: 22:74:14:0b:15:2a:3d:52:80:69:4a:4a:f7:a6:f2:fa:18:b9: a8:eb:44:32:d4:d9:8c:03:15:0f:55:7a:a0:72:1c:91:22:69: 63:9d:f2:0b:a8:0d:7f:56:de:82:ab:06:2f:75:80:c5:97:cc: 8e:bb:e5:e4:cf:5c:07:52:e2:9b:5b:c1:27:18:b1:be:b8:67: 28:08:b1:82:08:79:c1:62:d9:6c:a3:0b:7d:e3:4a:52:54:94: 5d:5f:95:40:54:c5:29:1e:33:f1:c4:2f:6b:53:0c:a6:ec:f4: 99:59:50:c5:7b:03:02:e3:1e:8f:f6:f9:4a:0a:36:42:27:08: a5:54:ff:65:f9:a3:09:da:34:e9:32:35:01:dc:6c:43:63:b8: 31:ac:a3:06:02:e7:dd:23:3b:54:70:3b:08:90:ea:5c:9e:2b: 2f:7f:90:64:2a:41:ed:e9:50:70:0d:cd:18:ad:42:8b:29:43: c6:81:7e:4a:5a:31:bc:bf:5f:21:40:39:fc:67:31:2f:6e:9e: 5a:d1:fe:c1:df:32:8b:07:78:1f:ca:d2:29:00:03:04:d5:05: 52:c9:c4:8c:08:e7:55:ed:8f:32:a1:3d:36:92:ec:c7:98:a7: e2:a7:e3:dd -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqJzYaNrmfFjZFGC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcxNjE0MjAzN1oXDTI3MTAxOTE0MjAzN1owLzEtMCsGA1UEAxMk NDNiYTI5MjgtOGI5OS00ZTk1LTg2NWMtYjgyZDI2ZGU3YmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZvkAd8xEaFYyO6fn9QNLJH+npgR6J8Js68b 6APrqKWmoVjD7oGNyHRx27AhXrNqEQuX96/uV0rISHNJ16mOEEk70StPWgjEht++ /Ejo9r7tttvkQlXUTSazbD2yJ3AgGBwQawzhFS8XAGIQ9QSFwIvyPmnvH1zXKbGr 3PNNgRdMlYGCywoBR274iOJTgXFbdCs5a4lrCmS9U7SgQHxLpsSZCgqXI92PHq+P gitqQ3DE0g75x14tpgVed9zYZSJq3dJ2KBTUK9QYF5+8W98evmmfgZBf9SNulyRL 7RSHwEU/tpwpxFdBNj2CopPmxLEX+KM+Z1ClnDXURhly5L5C+wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOEjDx0Qd8tFdahfNVY+QK+4GcKBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 M2JhMjkyOC04Yjk5LTRlOTUtODY1Yy1iODJkMjZkZTdiZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzQzYmEyOTI4LThiOTktNGU5NS04 NjVjLWI4MmQyNmRlN2JlOS80M2JhMjkyOC04Yjk5LTRlOTUtODY1Yy1iODJkMjZk ZTdiZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjHwwDgQCAAIwCAMGACYC9hAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAY1N3BP/ZH+C7Nldtxp51dGdSJ0FAsVKj1SgGlKSvem8voYuajrRDLU2YwDFQ9V eqByHJEiaWOd8guoDX9W3oKrBi91gMWXzI675eTPXAdS4ptbwScYsb64ZygIsYII ecFi2WyjC33jSlJUlF1flUBUxSkeM/HEL2tTDKbs9JlZUMV7AwLjHo/2+UoKNkIn CKVU/2X5ownaNOkyNQHcbENjuDGsowYC590jO1RwOwiQ6lyeKy9/kGQqQe3pUHAN zRitQospQ8aBfkpaMby/XyFAOfxnMS9unlrR/sHfMosHeB/K0ikAAwTVBVLJxIwI 51XtjzKhPTaS7MeYp+Kn490= -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:43 2025 by rpki-client