$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer File: af3da563-8689-4ebd-a553-31a2f310113a.cer (raw, json) Hash identifier: NVN36jcNEimRpNiTSWkRT5jkLaubMk8pmnuDCprTdNQ= Subject key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AEB4E3B7FD666A99F6000CB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Aug 2025 12:33:21 +0000 Certificate not after: Mon 25 Oct 2027 17:01:53 +0000 Subordinate resources: AS: 399688 IP: 23.144.44.0/24 IP: 108.174.70.0/24 IP: 2602:fb21::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:4e:3b:7f:d6:66:a9:9f:60:00:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 20 12:33:21 2025 GMT Not After : Oct 25 17:01:53 2027 GMT Subject: CN=af3da563-8689-4ebd-a553-31a2f310113a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:db:4a:93:7b:2c:4a:a7:a8:f3:7a:5a:89:a5: 06:ec:48:01:e6:50:d9:20:c2:58:3e:67:da:e4:bd: 9a:ff:f2:dd:14:3f:cf:1e:cc:6b:d2:19:c5:4e:04: d6:f9:d6:6f:fa:d7:22:7a:f1:d3:44:a8:25:0c:14: 76:d3:15:92:90:38:59:c7:20:26:9b:73:22:ad:81: ed:61:9a:da:c8:58:6c:2b:52:f0:c9:b7:dc:3f:af: 7c:24:e9:82:50:1b:43:e2:36:68:c0:7e:ba:3e:a7: 30:36:e1:99:18:88:45:17:3e:70:64:94:50:cc:28: 7f:bd:0f:3e:c7:6f:a5:56:fd:19:4b:00:fd:e5:a5: de:c3:39:c1:6b:76:93:41:2a:6b:a8:64:57:74:dc: a7:9a:3f:80:57:ae:d2:7b:97:05:f2:e3:1c:6e:3b: 5f:64:f6:26:89:11:f2:8c:1d:db:53:51:91:2d:0b: 95:8d:ed:47:33:c9:f9:07:d9:5f:5e:12:c8:0a:f3: 73:04:c7:82:ea:ab:7a:ab:6f:63:a0:d3:88:f4:ab: b6:59:37:f5:90:13:f0:fd:c7:f3:22:53:a0:07:9d: f7:da:0c:57:3f:e6:c0:42:d1:a7:b0:88:41:17:ca: e8:1b:3a:2d:2d:7a:ba:49:57:6c:7d:e5:fd:a2:1f: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.144.44.0/24 108.174.70.0/24 IPv6: 2602:fb21::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399688 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c0:04:bc:9a:58:56:b9:45:7b:18:07:2f:78:36:1d:e9:51: 5a:e8:fe:f3:a8:2f:39:9d:c3:37:47:63:71:80:28:a6:5d:de: 15:c9:c9:59:27:61:7e:34:8c:f2:59:8f:fa:f2:1c:ca:7c:67: 8a:3c:66:97:ab:f4:c8:eb:27:56:e9:1f:36:d2:25:00:47:62: e7:c6:7b:1c:26:b5:fe:45:e7:24:9e:9a:e5:e5:20:a8:e4:52: 2b:8a:e6:23:70:0f:35:25:f9:77:d2:32:5f:cd:83:2c:a6:05: c0:35:23:99:47:c1:58:51:aa:5c:21:8a:49:a4:eb:90:6f:66: 5d:1a:0c:b5:d5:58:e5:d4:21:77:e6:d9:65:94:44:28:b1:94: 0e:89:ed:94:20:22:11:c9:1c:f9:38:75:13:dd:64:35:78:ce: 3c:c7:8b:31:76:71:4c:a5:40:2b:4e:c0:68:c6:d3:2d:9c:c0: 2b:69:c9:db:7f:a2:03:59:86:83:6a:e0:10:75:53:e1:54:9e: 97:fb:0c:24:93:dc:8d:49:35:93:0b:83:24:ae:61:cc:04:67: 8c:ee:4b:4d:35:67:b2:f1:a4:53:69:bc:8b:bc:f5:b4:22:ce: 9f:c2:c4:f5:67:f0:40:71:9b:eb:0e:84:e1:cf:7e:fe:03:f1: 2a:47:e6:cf -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWErrTjt/1mapn2AAywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyMDEyMzMyMVoXDTI3MTAyNTE3MDE1M1owLzEtMCsGA1UEAxMk YWYzZGE1NjMtODY4OS00ZWJkLWE1NTMtMzFhMmYzMTAxMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNtKk3ssSqeo83paiaUG7EgB5lDZIMJYPmfa 5L2a//LdFD/PHsxr0hnFTgTW+dZv+tcievHTRKglDBR20xWSkDhZxyAmm3MirYHt YZrayFhsK1LwybfcP698JOmCUBtD4jZowH66PqcwNuGZGIhFFz5wZJRQzCh/vQ8+ x2+lVv0ZSwD95aXewznBa3aTQSprqGRXdNynmj+AV67Se5cF8uMcbjtfZPYmiRHy jB3bU1GRLQuVje1HM8n5B9lfXhLICvNzBMeC6qt6q29joNOI9Ku2WTf1kBPw/cfz IlOgB5332gxXP+bAQtGnsIhBF8roGzotLXq6SVdsfeX9oh9zIwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFKav27y2vQfE/FCAu9pt3DfgaZLgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h ZjNkYTU2My04Njg5LTRlYmQtYTU1My0zMWEyZjMxMDExM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FmM2RhNTYzLTg2ODktNGViZC1h NTUzLTMxYTJmMzEwMTEzYS9hZjNkYTU2My04Njg5LTRlYmQtYTU1My0zMWEyZjMx MDExM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkCwDBABsrkYwDgQCAAIwCAMGACYC+yEAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYZSDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQClwAS8mlhWuUV7GAcv eDYd6VFa6P7zqC85ncM3R2NxgCimXd4VyclZJ2F+NIzyWY/68hzKfGeKPGaXq/TI 6ydW6R820iUAR2LnxnscJrX+Recknprl5SCo5FIriuYjcA81Jfl30jJfzYMspgXA NSOZR8FYUapcIYpJpOuQb2ZdGgy11Vjl1CF35tlllEQosZQOie2UICIRyRz5OHUT 3WQ1eM48x4sxdnFMpUArTsBoxtMtnMAracnbf6IDWYaDauAQdVPhVJ6X+wwkk9yN STWTC4MkrmHMBGeM7ktNNWey8aRTabyLvPW0Is6fwsT1Z/BAcZvrDoThz37+A/Eq R+bP -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:52 2025 by rpki-client