$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798.cer File: 85283290-bdb9-441f-99c2-e0b387f44798.cer (raw, json) Hash identifier: F+dJrV/24Z8BslP1fFr4abfUGX3O+5wJh2mAhu2TAH8= Subject key identifier: 0E:89:7F:77:3C:54:8D:A3:C5:19:24:C4:82:79:47:0E:68:A7:AF:B7 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ACEEC18182DD18E7A5F696F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/85283290-bdb9-441f-99c2-e0b387f44798.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Aug 2025 08:32:59 +0000 Certificate not after: Sat 13 Nov 2027 09:32:59 +0000 Subordinate resources: AS: 401856 IP: 23.142.108.0/24 IP: 2602:f5c3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:ec:18:18:2d:d1:8e:7a:5f:69:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 10 08:32:59 2025 GMT Not After : Nov 13 09:32:59 2027 GMT Subject: CN=85283290-bdb9-441f-99c2-e0b387f44798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:61:65:d4:61:bd:fb:94:35:f9:eb:45:b3: 3d:5b:7c:f8:4c:0e:7c:78:49:e0:77:37:f8:63:d8: 17:3f:80:28:39:c6:8c:4f:89:da:e0:73:32:81:11: 93:8f:d8:fe:2a:02:25:b4:0e:53:3f:60:2c:24:ff: 67:16:b7:65:9d:b2:55:53:48:93:d3:ec:0a:7b:a5: 42:56:77:20:cf:e3:9c:85:c3:f9:89:30:b8:6d:b3: 86:c2:ab:be:76:01:4b:02:f4:86:65:c0:54:5a:01: dd:1b:38:1e:ad:ea:f0:a5:ac:00:39:41:26:07:b7: e4:5c:50:d6:de:2e:e8:d7:68:91:a5:05:3f:b7:93: c9:ec:25:99:df:04:96:38:8f:02:3c:4f:9e:bf:32: 3e:da:51:5c:fc:43:3d:69:16:b3:46:72:24:e7:86: 66:22:7d:18:e5:12:cc:64:f8:f1:23:b5:a1:00:52: f4:2e:8f:eb:91:ba:44:49:b1:f2:b3:b4:7b:72:9d: 25:64:48:cd:1f:32:f0:f4:a7:69:59:6f:8b:4e:9f: 1d:c6:08:2c:26:8b:22:01:a3:69:63:b5:f7:01:e5: f8:88:3b:56:08:34:68:89:cb:55:01:83:27:24:f7: 5a:13:8a:1c:42:87:43:2c:d4:7b:ec:80:2a:40:d8: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:89:7F:77:3C:54:8D:A3:C5:19:24:C4:82:79:47:0E:68:A7:AF:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/85283290-bdb9-441f-99c2-e0b387f44798/85283290-bdb9-441f-99c2-e0b387f44798.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.108.0/24 IPv6: 2602:f5c3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401856 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:81:d9:7f:b8:73:df:fe:ca:1e:32:b9:5c:21:1f:80:27:58: 91:99:c0:1b:ab:e4:e4:06:05:1b:c5:2a:d7:c7:b5:57:e3:70: 33:29:b8:fc:fc:41:84:47:69:d0:3d:65:64:d0:75:da:bc:95: a7:70:71:56:d4:9b:d6:ef:a0:72:06:9e:a9:42:9d:42:b8:c2: a2:46:2e:16:ac:81:e3:45:0b:19:fe:52:61:18:57:4f:f2:4f: 92:ee:ee:6a:28:9f:4b:d9:50:47:76:62:fc:56:5d:2e:a2:4d: 6e:ff:e1:aa:0b:63:52:bf:e1:88:64:db:09:74:e3:9a:db:c8: 0a:f9:75:4c:c6:54:b9:13:cb:69:82:fd:2c:08:6f:07:24:e6: ad:9a:20:13:ca:f9:b8:74:38:b8:a5:13:13:17:81:81:ab:c7: d7:70:4c:16:58:34:f0:bf:20:0e:4b:24:e5:50:e2:db:8b:ff: e3:eb:6e:8d:aa:a2:55:0f:7a:8e:2f:b7:00:f2:e6:26:00:be: 48:da:58:a9:b2:87:4a:1a:8e:e1:f3:e2:26:1b:f8:d9:26:a6: 15:c9:a1:2f:fd:10:a8:72:d5:5e:9a:ea:e3:19:0f:35:7e:b5: fd:c5:c4:5a:a6:62:34:18:aa:c0:0a:25:72:43:ca:53:4d:cc: 67:00:fc:6f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErO7BgYLdGOel9pbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxMDA4MzI1OVoXDTI3MTExMzA5MzI1OVowLzEtMCsGA1UEAxMk ODUyODMyOTAtYmRiOS00NDFmLTk5YzItZTBiMzg3ZjQ0Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRdhZdRhvfuUNfnrRbM9W3z4TA58eEngdzf4 Y9gXP4AoOcaMT4na4HMygRGTj9j+KgIltA5TP2AsJP9nFrdlnbJVU0iT0+wKe6VC Vncgz+OchcP5iTC4bbOGwqu+dgFLAvSGZcBUWgHdGzgererwpawAOUEmB7fkXFDW 3i7o12iRpQU/t5PJ7CWZ3wSWOI8CPE+evzI+2lFc/EM9aRazRnIk54ZmIn0Y5RLM ZPjxI7WhAFL0Lo/rkbpESbHys7R7cp0lZEjNHzLw9KdpWW+LTp8dxggsJosiAaNp Y7X3AeX4iDtWCDRoictVAYMnJPdaE4ocQodDLNR77IAqQNh61wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFA6Jf3c8VI2jxRkkxIJ5Rw5op6+3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 NTI4MzI5MC1iZGI5LTQ0MWYtOTljMi1lMGIzODdmNDQ3OTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzg1MjgzMjkwLWJkYjktNDQxZi05 OWMyLWUwYjM4N2Y0NDc5OC84NTI4MzI5MC1iZGI5LTQ0MWYtOTljMi1lMGIzODdm NDQ3OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjmwwDgQCAAIwCAMGACYC9cMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhwDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIgdl/uHPf/soeMrlcIR+AJ1iR mcAbq+TkBgUbxSrXx7VX43AzKbj8/EGER2nQPWVk0HXavJWncHFW1JvW76ByBp6p Qp1CuMKiRi4WrIHjRQsZ/lJhGFdP8k+S7u5qKJ9L2VBHdmL8Vl0uok1u/+GqC2NS v+GIZNsJdOOa28gK+XVMxlS5E8tpgv0sCG8HJOatmiATyvm4dDi4pRMTF4GBq8fX cEwWWDTwvyAOSyTlUOLbi//j626NqqJVD3qOL7cA8uYmAL5I2lipsodKGo7h8+Im G/jZJqYVyaEv/RCoctVemurjGQ81frX9xcRapmI0GKrACiVyQ8pTTcxnAPxv -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:59 2025 by rpki-client