$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer File: ce78c233-fea8-412e-b7ae-1080a457c01e.cer (raw, json) Hash identifier: lZqBep4rlTWhWE00bgHCfFVoNdDB4Tu7t7nuEs5MbQM= Subject key identifier: 4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AEBE70DB19FA458EC6946C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Aug 2025 17:41:16 +0000 Certificate not after: Tue 23 Nov 2027 18:41:16 +0000 Subordinate resources: AS: 22210 IP: 2602:f669::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:e7:0d:b1:9f:a4:58:ec:69:46:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 20 17:41:16 2025 GMT Not After : Nov 23 18:41:16 2027 GMT Subject: CN=ce78c233-fea8-412e-b7ae-1080a457c01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9d:f7:cd:86:24:3e:21:60:86:61:ce:96:1b: 22:1b:54:e0:c6:84:e2:a9:32:c8:0c:7a:12:31:e1: 27:b8:e8:6d:b3:65:93:10:73:94:72:0a:36:be:97: f9:88:4c:07:5a:94:ec:2c:0c:9b:34:c2:02:17:d8: 7e:fc:45:f9:aa:e8:89:7c:91:b8:55:59:f2:d0:97: ab:1d:cf:45:da:d6:15:ee:3b:50:67:a4:e7:bf:1c: e0:6a:c5:ff:f8:54:6b:b1:b8:89:49:19:81:5f:9f: 7e:64:77:c1:ae:5f:4f:11:86:b3:26:6a:f0:cd:db: f2:1a:db:29:a0:84:1c:da:0b:5a:0e:9b:b4:89:be: 1d:ce:6d:21:0e:06:84:23:4b:f5:4a:bb:5f:0d:48: 2b:fc:f9:bf:aa:91:0d:c5:b8:ad:87:05:a3:18:71: 4b:41:3d:d8:4f:9a:39:c8:2d:45:9f:5f:8d:9f:ef: ff:9c:09:c3:e8:2d:3b:cd:cb:8b:4f:27:92:3f:a2: 9a:25:c5:d2:75:98:d7:55:52:47:ea:99:b0:f9:bb: 7d:b1:5a:2d:26:4c:bf:f5:e6:79:e9:97:b7:f1:8d: c9:c4:c0:4c:9d:e3:ee:10:25:0b:0c:3b:dc:f3:df: 9c:4e:4d:a7:c6:4d:ad:b7:a0:fc:d7:78:b3:59:73: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f669::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22210 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4c:3a:25:f8:f9:6e:95:96:0e:42:e4:f2:12:bb:0e:29:dc: 88:25:ed:5d:e9:23:e2:38:45:5e:7f:08:08:04:2e:65:15:84: 80:dd:7f:cb:10:fc:d1:c2:05:d6:de:a3:bf:56:eb:c5:22:8e: f8:0b:3a:a5:17:bd:ee:fb:a4:52:a8:56:38:50:84:76:47:03: 45:db:b5:f2:01:f8:3e:74:fa:41:c0:0d:10:04:21:d2:42:24: f4:49:b4:a2:ea:61:91:d8:34:27:ef:ec:ed:37:73:00:a3:90: 44:de:71:0f:f8:3c:78:25:68:42:1d:96:0d:e0:d2:d2:e8:f0: b2:e5:d1:a2:31:db:c4:8f:a8:e6:78:e6:ec:08:12:54:78:9a: 2f:db:66:a2:83:64:de:b6:ab:fa:d0:90:8d:ea:37:ad:5d:a9: 57:e1:f1:4f:ac:32:77:65:bb:c7:6c:4b:c1:39:e2:1c:5b:f6: 90:b7:29:37:31:3c:b4:b3:f2:af:c0:6b:9d:c6:95:3e:37:37: 7a:5e:06:20:a4:0c:d1:c4:2b:35:9f:98:7c:76:dd:c4:b6:18: c5:46:60:94:9a:4d:22:14:bb:f9:be:7b:4a:8b:06:1d:34:9d: a9:a8:92:65:9b:72:27:3b:a1:db:7e:e2:f0:de:d5:27:e3:1f: 51:50:6b:f1 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWErr5w2xn6RY7GlGxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyMDE3NDExNloXDTI3MTEyMzE4NDExNlowLzEtMCsGA1UEAxMk Y2U3OGMyMzMtZmVhOC00MTJlLWI3YWUtMTA4MGE0NTdjMDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ33zYYkPiFghmHOlhsiG1TgxoTiqTLIDHoS MeEnuOhts2WTEHOUcgo2vpf5iEwHWpTsLAybNMICF9h+/EX5quiJfJG4VVny0Jer Hc9F2tYV7jtQZ6TnvxzgasX/+FRrsbiJSRmBX59+ZHfBrl9PEYazJmrwzdvyGtsp oIQc2gtaDpu0ib4dzm0hDgaEI0v1SrtfDUgr/Pm/qpENxbithwWjGHFLQT3YT5o5 yC1Fn1+Nn+//nAnD6C07zcuLTyeSP6KaJcXSdZjXVVJH6pmw+bt9sVotJky/9eZ5 6Ze38Y3JxMBMnePuECULDDvc89+cTk2nxk2tt6D813izWXPVKQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFEzqakFt5aWcxHCRcgPyymC/cpZiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j ZTc4YzIzMy1mZWE4LTQxMmUtYjdhZS0xMDgwYTQ1N2MwMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2NlNzhjMjMzLWZlYTgtNDEyZS1i N2FlLTEwODBhNDU3YzAxZS9jZTc4YzIzMy1mZWE4LTQxMmUtYjdhZS0xMDgwYTQ1 N2MwMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvZpADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJWwjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCqTDol+PlulZYOQuTyErsOKdyIJe1d6SPiOEVefwgIBC5l FYSA3X/LEPzRwgXW3qO/VuvFIo74CzqlF73u+6RSqFY4UIR2RwNF27XyAfg+dPpB wA0QBCHSQiT0SbSi6mGR2DQn7+ztN3MAo5BE3nEP+Dx4JWhCHZYN4NLS6PCy5dGi MdvEj6jmeObsCBJUeJov22aig2Tetqv60JCN6jetXalX4fFPrDJ3ZbvHbEvBOeIc W/aQtyk3MTy0s/KvwGudxpU+Nzd6XgYgpAzRxCs1n5h8dt3EthjFRmCUmk0iFLv5 vntKiwYdNJ2pqJJlm3InO6HbfuLw3tUn4x9RUGvx -----END CERTIFICATE-----Generated at Sat Aug 23 11:39:31 2025 by rpki-client