$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce.cer File: 563a7f22-13a9-45ac-b309-56ee9c8904ce.cer (raw, json) Hash identifier: wHr+5AkPcT3vyIB27Mluem+5u3Izfi4l70DTA/t5czg= Subject key identifier: 3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC41073E90E2C9303C91D6900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 11:12:21 +0000 Certificate not after: Wed 20 Oct 2027 22:34:37 +0000 Subordinate resources: AS: 401840 IP: 23.143.108.0/24 IP: 2602:f5c6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:10:73:e9:0e:2c:93:03:c9:1d:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 6 11:12:21 2025 GMT Not After : Oct 20 22:34:37 2027 GMT Subject: CN=563a7f22-13a9-45ac-b309-56ee9c8904ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6d:e4:74:09:40:c9:40:b7:49:21:ca:2f:ac: fb:7d:7b:18:a3:62:d4:c3:23:b1:a5:b1:24:3b:76: fb:ca:b7:46:d4:c5:04:e0:e0:25:1e:61:e8:61:dd: ec:30:63:87:2d:8b:ed:15:25:7f:ca:b5:73:4c:c5: c5:2a:c0:b6:c1:df:60:e2:71:09:ec:b3:d8:70:ab: ce:9d:77:2d:86:d1:f0:8a:a3:47:07:8d:e0:79:d3: 92:61:f1:e9:df:05:0d:c5:d5:a9:3d:7b:2a:c0:4d: 02:a7:0a:f8:47:8a:b2:04:50:3b:76:57:22:50:49: 9f:25:7a:91:43:d8:1b:3e:b8:5d:eb:ec:eb:8b:30: 96:b5:e6:06:61:d5:d8:58:4b:9e:cd:17:b7:fc:5f: 22:a0:24:b3:02:33:1b:3e:12:61:e4:c3:f5:d5:31: b6:06:3c:04:fc:0b:08:5a:bd:14:e1:29:7a:cc:90: 11:5e:96:e7:28:c7:61:a8:81:82:76:99:6b:e4:dd: 56:12:c0:e9:7d:b1:57:42:ee:ce:80:34:34:3d:98: c5:c0:3f:9e:c4:3c:37:bf:b5:34:b0:73:d8:a9:b6: d8:31:1d:72:1c:48:ce:39:78:19:75:fc:06:da:4c: b2:e4:5a:f4:9d:bf:07:93:aa:eb:4e:aa:9b:f0:67: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6F:CB:F4:3B:06:63:F1:05:5C:AE:1A:2C:B7:BF:05:69:8D:77:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/563a7f22-13a9-45ac-b309-56ee9c8904ce/563a7f22-13a9-45ac-b309-56ee9c8904ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.108.0/24 IPv6: 2602:f5c6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401840 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:fa:83:9d:9c:1f:6a:50:c4:83:35:6f:08:48:9b:55:e4:d0: b7:bb:1e:08:a3:79:84:8c:0e:83:cd:33:98:47:47:93:ea:9e: 73:62:37:48:07:18:4e:17:5b:68:55:27:a3:f4:43:ac:db:4b: 85:24:f1:d8:73:de:95:25:a1:c9:7f:6a:85:4d:b6:3a:47:36: c1:02:83:85:54:93:d2:2a:6c:6e:09:4b:69:48:3f:c1:1f:6c: 75:c0:a9:a9:28:b2:0d:56:68:31:65:ba:dc:f4:0f:c7:ad:0d: 37:ef:da:a3:a0:9b:6b:af:74:15:93:26:78:99:74:47:9b:c0: d8:c4:e5:67:ec:5d:92:52:fb:d1:3a:96:a7:21:82:df:79:c5: 52:08:4b:64:e4:ec:7d:b4:4b:cc:78:d4:e6:85:cd:84:3f:91: ea:b4:bc:44:5a:35:47:09:c0:15:74:1c:ac:09:ad:ea:d9:ea: 23:00:c8:75:1f:4a:cb:bc:6a:46:ff:39:d2:cf:55:7b:fc:d2: 1f:9d:99:bd:75:77:b5:75:78:b6:59:96:7a:b2:df:8f:44:d2: 3f:75:02:89:14:08:f2:b6:5d:f6:b6:bb:7e:f3:f2:a6:30:c7: 67:9c:8f:a5:1c:fb:89:5c:bb:9a:d5:0f:ce:1e:7e:c2:1a:81: 28:bb:0b:b6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErEEHPpDiyTA8kdaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNjExMTIyMVoXDTI3MTAyMDIyMzQzN1owLzEtMCsGA1UEAxMk NTYzYTdmMjItMTNhOS00NWFjLWIzMDktNTZlZTljODkwNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m3kdAlAyUC3SSHKL6z7fXsYo2LUwyOxpbEk O3b7yrdG1MUE4OAlHmHoYd3sMGOHLYvtFSV/yrVzTMXFKsC2wd9g4nEJ7LPYcKvO nXcthtHwiqNHB43gedOSYfHp3wUNxdWpPXsqwE0Cpwr4R4qyBFA7dlciUEmfJXqR Q9gbPrhd6+zrizCWteYGYdXYWEuezRe3/F8ioCSzAjMbPhJh5MP11TG2BjwE/AsI Wr0U4Sl6zJARXpbnKMdhqIGCdplr5N1WEsDpfbFXQu7OgDQ0PZjFwD+exDw3v7U0 sHPYqbbYMR1yHEjOOXgZdfwG2kyy5Fr0nb8Hk6rrTqqb8GefFwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFD5vy/Q7BmPxBVyuGiy3vwVpjXdSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 NjNhN2YyMi0xM2E5LTQ1YWMtYjMwOS01NmVlOWM4OTA0Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzU2M2E3ZjIyLTEzYTktNDVhYy1i MzA5LTU2ZWU5Yzg5MDRjZS81NjNhN2YyMi0xM2E5LTQ1YWMtYjMwOS01NmVlOWM4 OTA0Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXj2wwDgQCAAIwCAMGACYC9cYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhsDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf+oOdnB9qUMSDNW8ISJtV5NC3 ux4Io3mEjA6DzTOYR0eT6p5zYjdIBxhOF1toVSej9EOs20uFJPHYc96VJaHJf2qF TbY6RzbBAoOFVJPSKmxuCUtpSD/BH2x1wKmpKLINVmgxZbrc9A/HrQ0379qjoJtr r3QVkyZ4mXRHm8DYxOVn7F2SUvvROpanIYLfecVSCEtk5Ox9tEvMeNTmhc2EP5Hq tLxEWjVHCcAVdBysCa3q2eojAMh1H0rLvGpG/znSz1V7/NIfnZm9dXe1dXi2WZZ6 st+PRNI/dQKJFAjytl32trt+8/KmMMdnnI+lHPuJXLua1Q/OHn7CGoEouwu2 -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:16 2025 by rpki-client