$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b5808c2-cf79-47f0-81a7-869dc776e01e.cer File: 7b5808c2-cf79-47f0-81a7-869dc776e01e.cer (raw, json) Hash identifier: DZsShNwII9NenXkKPKoJiT+WzM3TnO926SHFsRtuzME= Subject key identifier: 03:FB:2B:C2:91:93:09:8F:2A:22:4A:6A:C9:36:2E:31:8F:75:20:F5 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B743B521DBE3C9ECCD65A8500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b5808c2-cf79-47f0-81a7-869dc776e01e/7b5808c2-cf79-47f0-81a7-869dc776e01e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b5808c2-cf79-47f0-81a7-869dc776e01e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 13:41:00 +0000 Certificate not after: Tue 11 Jan 2028 14:41:00 +0000 Subordinate resources: AS: 401855 IP: 23.143.92.0/24 IP: 2602:f5bf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:3b:52:1d:be:3c:9e:cc:d6:5a:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 8 13:41:00 2025 GMT Not After : Jan 11 14:41:00 2028 GMT Subject: CN=7b5808c2-cf79-47f0-81a7-869dc776e01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:96:c9:27:2b:68:00:9a:92:ce:89:ea:00: da:11:28:bb:00:92:56:61:97:54:ac:23:24:1d:8a: 8a:fb:ed:27:48:98:7d:fc:c1:8d:17:43:db:12:fd: 58:6e:34:05:1e:30:09:c8:42:3f:77:7d:02:2d:1a: 09:a2:97:3c:e7:63:66:86:9f:69:ed:26:0c:27:26: a3:c0:02:06:1f:6e:d2:6e:af:3c:47:94:35:fe:73: 89:a9:4b:3f:52:67:65:01:57:1c:4c:09:1d:0b:8c: 8d:67:83:b1:90:b0:8e:ef:9a:b8:05:39:19:c9:29: 42:7b:0a:8c:0a:d8:6f:06:06:1b:f1:3f:c6:b8:6c: 0e:c9:7e:2a:9d:db:7e:d5:00:47:98:a9:99:ae:f2: 70:66:5e:cf:72:dd:1c:3f:a1:37:a3:01:79:93:1f: 4e:60:f2:5d:ab:76:2a:6b:be:ad:1c:d6:2c:0f:a5: e5:2e:12:0a:c2:25:3b:c1:4f:22:90:42:24:01:d8: 9e:93:bc:bc:9a:29:c9:2a:d0:9b:f9:d7:e7:96:aa: ff:23:9a:b9:e8:fd:c0:0f:d1:b9:06:6e:e4:ce:0e: 75:52:e2:e4:06:82:81:0f:c2:08:66:37:6d:0c:4a: 6d:bf:df:34:06:94:81:c2:a5:1c:0a:ea:0e:43:71: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FB:2B:C2:91:93:09:8F:2A:22:4A:6A:C9:36:2E:31:8F:75:20:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b5808c2-cf79-47f0-81a7-869dc776e01e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7b5808c2-cf79-47f0-81a7-869dc776e01e/7b5808c2-cf79-47f0-81a7-869dc776e01e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.92.0/24 IPv6: 2602:f5bf::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401855 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:88:30:fd:6a:3c:be:00:c5:e5:6d:a3:2a:34:b4:1f:15:3c: be:b5:d7:4c:bd:d1:b6:c2:42:78:15:86:f8:52:e7:06:46:ae: fc:7f:cf:e6:0a:c8:d8:64:6b:a6:5f:f8:36:14:d0:7a:24:43: cb:ad:a7:ad:aa:94:5d:b1:e1:94:83:30:2c:36:88:95:2e:ec: 5c:c0:1e:7f:c5:c3:93:01:f8:01:04:c7:c3:e1:1d:45:e4:15: 60:5a:85:04:c1:15:3c:52:6b:57:8f:9a:79:a8:6b:ae:2f:f5: 64:60:63:9f:d6:4b:49:36:88:eb:5d:c6:29:bb:ff:0e:ee:49: 8e:76:79:99:16:82:cf:4a:91:82:43:33:89:cb:66:00:f2:21: e0:dd:07:44:c5:9a:0c:d5:ba:af:8d:53:33:21:40:50:d8:b0: 8f:d9:ad:ab:76:d2:78:7a:0a:c4:93:53:1a:7b:58:be:5f:21: c9:ae:57:1a:b7:1a:b2:c0:55:ea:ed:4e:08:e7:7d:8f:2c:00: 82:7c:af:6d:97:1b:2f:c7:3e:26:a2:a6:7b:b9:c8:55:e2:c0: ba:4b:21:6c:15:b4:07:88:9e:bc:1e:85:fb:d9:12:d1:00:4c: f7:88:e0:23:99:14:ce:ad:1a:87:67:71:12:20:f2:43:73:c8: 9c:05:e0:52 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEt0O1IdvjyezNZahQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwODEzNDEwMFoXDTI4MDExMTE0NDEwMFowLzEtMCsGA1UEAxMk N2I1ODA4YzItY2Y3OS00N2YwLTgxYTctODY5ZGM3NzZlMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPWWyScraACaks6J6gDaESi7AJJWYZdUrCMk HYqK++0nSJh9/MGNF0PbEv1YbjQFHjAJyEI/d30CLRoJopc852Nmhp9p7SYMJyaj wAIGH27Sbq88R5Q1/nOJqUs/UmdlAVccTAkdC4yNZ4OxkLCO75q4BTkZySlCewqM CthvBgYb8T/GuGwOyX4qndt+1QBHmKmZrvJwZl7Pct0cP6E3owF5kx9OYPJdq3Yq a76tHNYsD6XlLhIKwiU7wU8ikEIkAdiek7y8minJKtCb+dfnlqr/I5q56P3AD9G5 Bm7kzg51UuLkBoKBD8IIZjdtDEptv980BpSBwqUcCuoOQ3GaXwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAP7K8KRkwmPKiJKask2LjGPdSD1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 YjU4MDhjMi1jZjc5LTQ3ZjAtODFhNy04NjlkYzc3NmUwMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdiNTgwOGMyLWNmNzktNDdmMC04 MWE3LTg2OWRjNzc2ZTAxZS83YjU4MDhjMi1jZjc5LTQ3ZjAtODFhNy04NjlkYzc3 NmUwMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXj1wwDgQCAAIwCAMGBCYC9b8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhvzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHiDD9ajy+AMXlbaMqNLQfFTy+ tddMvdG2wkJ4FYb4UucGRq78f8/mCsjYZGumX/g2FNB6JEPLraetqpRdseGUgzAs NoiVLuxcwB5/xcOTAfgBBMfD4R1F5BVgWoUEwRU8UmtXj5p5qGuuL/VkYGOf1ktJ NojrXcYpu/8O7kmOdnmZFoLPSpGCQzOJy2YA8iHg3QdExZoM1bqvjVMzIUBQ2LCP 2a2rdtJ4egrEk1Mae1i+XyHJrlcatxqywFXq7U4I532PLACCfK9tlxsvxz4moqZ7 uchV4sC6SyFsFbQHiJ68HoX72RLRAEz3iOAjmRTOrRqHZ3ESIPJDc8icBeBS -----END CERTIFICATE-----Generated at Sun Oct 19 20:03:41 2025 by rpki-client