$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer File: 9caf1aed-80da-474d-8e77-0000ca0d6025.cer (raw, json) Hash identifier: qXrhRYGYrINudH+Wd/CdSQ+mzOFBJQ4jBt5LRUtxPPg= Subject key identifier: 10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AD91F4F8D836468F5630C4E1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 00:14:16 +0000 Certificate not after: Wed 17 Nov 2027 01:14:16 +0000 Subordinate resources: AS: 401911 IP: 23.143.116.0/24 IP: 2602:f5a7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:1f:4f:8d:83:64:68:f5:63:0c:4e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 14 00:14:16 2025 GMT Not After : Nov 17 01:14:16 2027 GMT Subject: CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:46:a2:3e:87:21:15:33:03:d1:a7:53:c2:f0: a2:42:62:5e:83:03:f6:f3:7e:98:41:a2:ac:ed:6f: 8c:73:34:21:f8:ec:d5:cb:7d:67:0d:d0:13:d0:a4: 63:bc:d5:8f:b2:ce:07:f3:f0:cb:01:57:25:61:bc: 46:2b:2e:12:02:a2:c5:ad:21:59:62:bd:17:c0:7e: 18:2e:59:b4:97:90:f6:85:0d:35:ac:31:2f:00:d2: 3b:a1:88:fc:94:c4:58:8a:b5:70:2e:a7:dd:5a:3b: d2:73:7c:2a:6a:bd:34:42:0a:b5:e3:c7:39:a2:83: 84:ca:b5:30:5e:47:b4:02:dc:00:e1:a0:7d:e6:fc: dd:97:9c:91:95:ec:4f:16:e8:f0:bd:89:07:47:b9: 19:9e:13:60:d2:67:f2:b0:4f:1e:48:16:a6:23:0e: bb:73:e3:c4:1a:1f:e4:e2:f8:bc:33:c6:7e:1b:a8: f5:0e:15:ef:c1:ec:47:59:33:c9:0e:d3:82:79:a1: 69:a9:ee:63:00:02:21:af:75:de:5b:7b:60:f7:f6: d0:3e:2f:50:1b:b5:b8:d9:bf:20:09:0d:61:d6:92: da:7f:c6:94:12:66:2c:93:0d:fa:6b:39:ee:bc:d3: 93:a5:bc:5d:1d:c2:a9:56:b5:1a:82:cd:71:7e:77: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.143.116.0/24 IPv6: 2602:f5a7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401911 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c4:6e:28:68:81:58:ed:1f:09:50:a0:a4:90:4c:5c:ad:23: 22:63:36:01:5a:e2:ed:cd:1f:97:d7:eb:e7:3e:f0:55:12:65: 59:7e:ff:d4:24:c9:79:aa:45:a5:5c:4a:5f:88:f2:ea:6e:04: 52:b5:af:c8:07:13:7e:63:2d:f7:20:0d:ac:fc:0d:78:1f:37: d1:e1:a9:41:ae:fe:67:99:17:3b:b1:1c:20:3e:db:00:2c:a6: a1:ad:81:c9:fa:d8:10:47:94:a9:b6:5e:9d:33:0e:fd:e5:b6: 51:9f:56:f3:e1:9b:46:c6:9c:80:f4:2b:c2:c7:d3:9b:b4:d8: 50:20:b9:9e:2c:72:2b:7c:e7:3c:8c:1d:a1:21:61:9b:37:e2: 6d:b9:84:38:60:1e:72:e0:8a:5f:b0:44:e3:e1:28:2b:73:51: 1a:99:2f:08:40:7a:16:fe:0f:34:8d:b3:ac:e4:e3:62:45:a4: fe:49:81:6b:9f:9b:8b:07:83:6e:73:ff:c6:8e:98:8e:22:5e: 6a:7a:5b:3e:e6:53:a0:1d:50:be:3d:dc:4c:bb:9e:49:3a:87: 96:99:e7:e8:58:8d:9b:25:b5:cd:5d:d3:7a:d2:84:1e:ef:e4: ac:9e:e1:55:39:5f:24:60:4c:41:e5:f2:6f:5c:b9:20:72:0b: 92:ec:f0:0c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErZH0+Ng2Ro9WMMTh8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxNDAwMTQxNloXDTI3MTExNzAxMTQxNlowLzEtMCsGA1UEAxMk OWNhZjFhZWQtODBkYS00NzRkLThlNzctMDAwMGNhMGQ2MDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UaiPochFTMD0adTwvCiQmJegwP2836YQaKs 7W+MczQh+OzVy31nDdAT0KRjvNWPss4H8/DLAVclYbxGKy4SAqLFrSFZYr0XwH4Y Llm0l5D2hQ01rDEvANI7oYj8lMRYirVwLqfdWjvSc3wqar00Qgq148c5ooOEyrUw Xke0AtwA4aB95vzdl5yRlexPFujwvYkHR7kZnhNg0mfysE8eSBamIw67c+PEGh/k 4vi8M8Z+G6j1DhXvwexHWTPJDtOCeaFpqe5jAAIhr3XeW3tg9/bQPi9QG7W42b8g CQ1h1pLaf8aUEmYskw36aznuvNOTpbxdHcKpVrUags1xfnco/QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBDrOT+GyGZTxkEe1I2X63GZTOYrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 Y2FmMWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAwY2EwZDYwMjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzljYWYxYWVkLTgwZGEtNDc0ZC04 ZTc3LTAwMDBjYTBkNjAyNS85Y2FmMWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAwY2Ew ZDYwMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXj3QwDgQCAAIwCAMGBCYC9acAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYh9zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUxG4oaIFY7R8JUKCkkExcrSMi YzYBWuLtzR+X1+vnPvBVEmVZfv/UJMl5qkWlXEpfiPLqbgRSta/IBxN+Yy33IA2s /A14HzfR4alBrv5nmRc7sRwgPtsALKahrYHJ+tgQR5Sptl6dMw795bZRn1bz4ZtG xpyA9CvCx9ObtNhQILmeLHIrfOc8jB2hIWGbN+JtuYQ4YB5y4IpfsETj4Sgrc1Ea mS8IQHoW/g80jbOs5ONiRaT+SYFrn5uLB4Nuc//GjpiOIl5qels+5lOgHVC+PdxM u55JOoeWmefoWI2bJbXNXdN60oQe7+SsnuFVOV8kYExB5fJvXLkgcguS7PAM -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:19 2025 by rpki-client