$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer File: fe86722c-27ec-4059-a1ef-757cf5e15715.cer (raw, json) Hash identifier: 0NLT7NZoLjsoPmQ6xX3oQw5PQghcROhUzLUGpqa/Wlk= Subject key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584A4D98AB27C6C9F714BF4A1680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 00:45:36 +0000 Certificate not after: Tue 28 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 21976 AS: 62532 IP: 130.156.0.0/16 IP: 172.96.130.0/23 IP: 2605:5340::/32 IP: 2607:f3b0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:98:ab:27:c6:c9:f7:14:bf:4a:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 25 00:45:36 2025 GMT Not After : Sep 28 00:45:36 2027 GMT Subject: CN=fe86722c-27ec-4059-a1ef-757cf5e15715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:6e:c9:86:25:f4:f2:09:f5:79:d8:65:fa: 04:2c:2d:9f:16:f2:4f:28:ba:ad:89:38:5b:63:3c: d8:06:a7:8e:11:3c:3e:c9:3b:6a:63:59:03:ae:3b: 42:31:5a:7d:d4:1e:4f:8f:9d:be:c8:3b:ce:0f:ca: 7e:2b:b9:d8:cf:77:d8:d9:fe:af:73:38:10:5e:fd: 9b:d1:4f:d1:61:0c:a7:23:24:81:8c:03:f3:1e:20: 73:8a:5c:03:bc:02:36:82:eb:de:5b:52:c5:32:8c: 22:82:5c:55:1e:13:e4:e3:05:63:1f:c1:ab:ad:5a: bb:e0:40:32:a4:01:89:c8:db:87:90:27:c1:2b:4d: 1c:41:b4:06:22:1c:db:4f:84:aa:86:51:d3:79:3e: 98:39:93:79:93:66:42:13:35:9a:fe:28:8e:ed:57: b6:23:c3:c1:87:62:e7:82:4a:63:99:b6:76:e4:b9: 0c:d7:b3:75:97:00:a5:13:a2:fd:b3:84:93:8b:65: e6:2d:94:8b:1c:0b:bf:a5:a9:32:e1:39:25:e8:ea: ab:b9:68:f6:82:d1:21:f4:52:ea:2e:e9:3c:f4:3f: 5b:66:81:66:aa:61:3b:20:11:88:a7:33:a3:28:1c: c6:ad:70:02:94:b2:47:5f:26:2c:b1:b0:92:52:36: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 130.156.0.0/16 172.96.130.0/23 IPv6: 2605:5340::/32 2607:f3b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21976 62532 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c0:39:63:aa:1f:3f:d9:c0:e6:5e:ea:f3:8f:ee:4b:8d:a4: 60:6e:d2:22:49:b2:ef:12:93:23:d0:40:76:d0:d4:a8:e8:96: d5:13:10:b6:77:82:15:93:19:f4:5f:d9:d5:24:5a:c9:66:be: 36:11:c5:e0:bf:4e:de:8d:80:dc:8a:b2:0c:20:40:6d:0e:a7: 44:03:cf:bf:22:90:7c:78:cf:ba:37:c0:5a:91:e6:eb:eb:36: 69:b5:b8:64:1e:a6:7f:e0:9c:c1:a1:1f:30:83:6f:93:20:9b: d6:70:a9:ec:e7:3c:c3:17:a7:09:c3:53:ac:2d:76:79:f0:01: 1a:fd:5b:46:62:b1:bd:e5:ed:ca:4c:26:63:74:b6:53:84:3b: 44:2f:44:fc:7c:9c:c3:71:9d:d5:3b:4a:21:35:c3:a1:3f:7d: 52:cc:5d:e7:a3:29:0d:fe:bc:80:8e:81:84:0d:39:8f:f5:9e: c4:45:23:74:e5:29:ce:6d:be:56:4f:be:fa:36:95:12:10:b2: f5:b1:68:49:df:be:a6:f8:60:e4:ed:41:61:37:e9:69:f8:d7: 1b:75:a2:cf:01:56:6e:a3:68:2a:aa:76:fb:6e:2b:dd:97:51: d2:62:75:f4:25:96:34:b9:ed:45:48:da:cd:f7:f3:86:24:66: c6:91:65:bb -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEpNmKsnxsn3FL9KFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDYyNTAwNDUzNloXDTI3MDkyODAwNDUzNlowLzEtMCsGA1UEAxMk ZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1NzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d1uyYYl9PIJ9XnYZfoELC2fFvJPKLqtiThb YzzYBqeOETw+yTtqY1kDrjtCMVp91B5Pj52+yDvOD8p+K7nYz3fY2f6vczgQXv2b 0U/RYQynIySBjAPzHiBzilwDvAI2guveW1LFMowiglxVHhPk4wVjH8GrrVq74EAy pAGJyNuHkCfBK00cQbQGIhzbT4SqhlHTeT6YOZN5k2ZCEzWa/iiO7Ve2I8PBh2Ln gkpjmbZ25LkM17N1lwClE6L9s4STi2XmLZSLHAu/paky4Tkl6OqruWj2gtEh9FLq Luk89D9bZoFmqmE7IBGIpzOjKBzGrXAClLJHXyYssbCSUjZsJQIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFJyuo5uBrQDVoFNDvycT7/9H1rj3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m ZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2ZlODY3MjJjLTI3ZWMtNDA1OS1h MWVmLTc1N2NmNWUxNTcxNS9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVl MTU3MTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBEEAgABMAsDAwCCnAMEAaxggjAUBAIAAjAOAwUAJgVTQAMFACYH 87AwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICVdgCAwD0RDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCwDlj qh8/2cDmXurzj+5LjaRgbtIiSbLvEpMj0EB20NSo6JbVExC2d4IVkxn0X9nVJFrJ Zr42EcXgv07ejYDcirIMIEBtDqdEA8+/IpB8eM+6N8Bakebr6zZptbhkHqZ/4JzB oR8wg2+TIJvWcKns5zzDF6cJw1OsLXZ58AEa/VtGYrG95e3KTCZjdLZThDtEL0T8 fJzDcZ3VO0ohNcOhP31SzF3noykN/ryAjoGEDTmP9Z7ERSN05SnObb5WT776NpUS ELL1sWhJ376m+GDk7UFhN+lp+NcbdaLPAVZuo2gqqnb7bivdl1HSYnX0JZY0ue1F SNrN9/OGJGbGkWW7 -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:26 2025 by rpki-client