$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer File: 5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.cer (raw, json) Hash identifier: zrOc2siNazv/vHam7m8jHArVjiUak0O9/brWOCDKZ6M= Subject key identifier: B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B75FA6DB1F708557F19C471A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 04:41:52 +0000 Certificate not after: Wed 12 Jan 2028 05:41:52 +0000 Subordinate resources: IP: 23.146.76.0/24 IP: 2602:f548::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:fa:6d:b1:f7:08:55:7f:19:c4:71:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 9 04:41:52 2025 GMT Not After : Jan 12 05:41:52 2028 GMT Subject: CN=5eb25b6b-8fdf-49aa-8b83-595a94f44f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:83:97:86:ac:70:7a:3b:87:9c:29:e4:9a: fc:2d:c2:80:11:25:93:3b:af:19:6c:15:14:ea:7e: 03:15:ef:10:bd:81:0c:f3:70:78:44:0c:fc:bb:e2: 99:7f:91:32:72:8b:ae:cb:e2:53:94:0a:6f:3d:87: a0:59:fd:77:3e:b7:3c:21:9e:57:36:d9:e3:1e:04: 9f:ae:c0:f8:19:35:d1:79:07:9a:61:81:fb:2b:df: 69:f8:0c:59:4e:6e:fa:0d:14:d4:d0:af:ee:4e:f9: d0:5c:f9:72:6b:3f:c6:a7:34:98:d8:17:30:38:8b: 09:21:37:3c:0f:6f:1d:ef:1c:3d:31:4e:36:80:5e: 16:28:19:17:bf:28:74:7e:8b:bf:be:9e:4d:e1:1a: 00:21:8e:35:62:2d:c0:be:56:eb:66:dc:bf:f3:2f: 14:9f:c3:91:8d:ae:68:15:4c:37:da:53:0c:d4:55: dd:b1:ba:cf:23:d7:d8:58:b0:d0:dd:28:b3:77:5f: 3a:11:96:70:01:50:2a:b6:e0:05:c4:e9:bc:61:49: a7:d8:1a:23:2f:3d:72:b3:5a:5e:38:dd:43:b4:b0: b6:df:c9:3e:bf:0d:05:70:14:ea:4e:f4:e6:69:2e: 51:30:00:77:96:ec:9f:b8:38:46:d6:eb:2d:31:56: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B3:73:3A:63:3A:CA:AD:FC:C8:68:DE:5D:28:5E:70:AC:92:35:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e/5eb25b6b-8fdf-49aa-8b83-595a94f44f7e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.146.76.0/24 IPv6: 2602:f548::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a4:47:cf:88:a6:0d:49:66:a4:29:9a:38:40:c0:67:dd:dd: ed:8e:fb:76:e0:53:1b:f2:99:e3:21:86:42:f7:31:a5:b8:06: b1:b8:8c:1c:69:7d:eb:8a:a4:9f:88:4d:2e:34:5f:fa:99:f1: 62:30:18:16:ee:ca:28:12:ef:8b:6e:58:34:6d:5e:bc:f9:0b: 26:91:06:9f:86:cc:a8:f6:f7:d3:19:4e:69:d4:cf:7d:42:f3: 8f:22:ae:2e:d1:12:a1:d4:12:a4:a3:a1:26:83:7b:e9:5e:05: 44:f7:9f:14:41:11:d7:74:c0:86:86:c4:e9:df:96:db:54:c4: 5b:de:0f:f9:61:1f:e6:ea:87:66:fd:13:94:72:1d:8b:72:e5: 3c:a0:0a:2e:51:3b:73:3b:62:60:1b:46:50:3e:01:44:ce:50: 00:df:e5:51:bb:72:3e:b1:3c:fd:45:dc:52:40:12:12:23:dd: 84:4e:2a:db:c7:07:54:88:1b:94:c1:d1:bd:e6:56:ad:52:c4: d1:14:b6:37:6b:ef:b5:7d:39:c9:f5:de:90:d3:37:e6:4c:cd: 57:c9:25:10:2a:b8:bb:0c:20:07:49:e6:43:ce:c1:95:fc:75: fa:be:05:f4:40:f5:2a:2f:c3:7f:fd:a9:5f:ed:7c:48:a5:89: 3f:3b:d0:6e -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEt1+m2x9whVfxnEcagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwOTA0NDE1MloXDTI4MDExMjA1NDE1MlowLzEtMCsGA1UEAxMk NWViMjViNmItOGZkZi00OWFhLThiODMtNTk1YTk0ZjQ0ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1+Dl4ascHo7h5wp5Jr8LcKAESWTO68ZbBUU 6n4DFe8QvYEM83B4RAz8u+KZf5Eycouuy+JTlApvPYegWf13Prc8IZ5XNtnjHgSf rsD4GTXReQeaYYH7K99p+AxZTm76DRTU0K/uTvnQXPlyaz/GpzSY2BcwOIsJITc8 D28d7xw9MU42gF4WKBkXvyh0fou/vp5N4RoAIY41Yi3AvlbrZty/8y8Un8ORja5o FUw32lMM1FXdsbrPI9fYWLDQ3Sizd186EZZwAVAqtuAFxOm8YUmn2BojLz1ys1pe ON1DtLC238k+vw0FcBTqTvTmaS5RMAB3luyfuDhG1ustMVYxLQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLOzczpjOsqt/Mho3l0oXnCskjUqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81 ZWIyNWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVhOTRmNDRmN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzVlYjI1YjZiLThmZGYtNDlhYS04 YjgzLTU5NWE5NGY0NGY3ZS81ZWIyNWI2Yi04ZmRmLTQ5YWEtOGI4My01OTVhOTRm NDRmN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkkwwDgQCAAIwCAMGACYC9UgAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIakR8+Ipg1JZqQpmjhAwGfd3e2O+3bgUxvymeMhhkL3MaW4BrG4jBxpfeuKpJ+I TS40X/qZ8WIwGBbuyigS74tuWDRtXrz5CyaRBp+GzKj299MZTmnUz31C848iri7R EqHUEqSjoSaDe+leBUT3nxRBEdd0wIaGxOnflttUxFveD/lhH+bqh2b9E5RyHYty 5TygCi5RO3M7YmAbRlA+AUTOUADf5VG7cj6xPP1F3FJAEhIj3YROKtvHB1SIG5TB 0b3mVq1SxNEUtjdr77V9Ocn13pDTN+ZMzVfJJRAquLsMIAdJ5kPOwZX8dfq+BfRA 9Sovw3/9qV/tfEiliT870G4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:22 2025 by rpki-client