$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer File: 21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer (raw, json) Hash identifier: IwJVd/h1s7XIzk//raZ9U59I4Ut8dwcNdxu/v3wfYxI= Subject key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ACAE0A52B79016A9E3AE8D700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 21:46:41 +0000 Certificate not after: Thu 11 Nov 2027 22:46:41 +0000 Subordinate resources: AS: 16557 IP: 66.103.128.0 -- 66.103.151.255 IP: 66.103.156.0/23 IP: 72.21.8.0/23 IP: 72.21.12.0/22 IP: 72.21.20.0/24 IP: 72.21.22.0/24 IP: 2607:f528::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:e0:a5:2b:79:01:6a:9e:3a:e8:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 8 21:46:41 2025 GMT Not After : Nov 11 22:46:41 2027 GMT Subject: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6a:de:58:3a:b8:e5:a1:ac:00:73:5f:d0:bd: a8:e8:50:21:cc:ed:96:88:ea:39:a0:66:00:4a:39: a2:7f:19:a0:9b:dd:72:1f:92:c5:e3:87:0d:f4:10: 86:86:83:5c:01:0e:d3:13:d8:52:48:ae:97:4f:2d: e2:83:9c:30:75:24:8c:19:3e:58:a0:fc:f1:da:86: cf:91:47:1b:65:0a:71:9d:c3:65:6c:0b:68:39:f6: 7b:bb:98:7b:be:4a:9b:dd:88:7b:91:d0:5c:f6:b2: 10:3d:14:6b:93:a8:d9:c9:c2:58:3d:0d:6e:04:92: 24:77:36:ca:e6:ce:3b:d8:9b:57:d6:43:15:6e:f7: 3b:37:d2:92:8a:f0:bb:41:b3:30:10:81:b2:cb:d9: 7a:15:39:d4:38:35:37:3b:a9:82:7e:96:ce:50:d4: 57:26:d1:f9:b6:72:8a:f6:e4:3d:34:6a:f5:84:25: 60:49:bf:76:05:80:8b:59:34:94:82:3f:97:aa:13: 42:31:42:21:e2:a3:97:65:09:c1:bd:7f:55:ea:e6: 9c:61:50:b5:a7:18:e3:2d:5f:43:f0:7a:42:81:08: ec:59:3d:2d:0d:c6:fa:c6:24:66:b7:2e:41:af:b6: c0:7b:ae:f0:d7:56:19:df:88:2d:e5:f0:d5:14:05: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 66.103.128.0-66.103.151.255 66.103.156.0/23 72.21.8.0/23 72.21.12.0/22 72.21.20.0/24 72.21.22.0/24 IPv6: 2607:f528::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16557 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c0:57:88:92:3e:cb:70:22:a8:9d:19:0b:9b:e8:d2:f9:57: 67:6a:4d:d2:02:43:0b:d4:ca:97:f4:34:1a:a5:49:e5:53:aa: 46:6d:3b:75:cd:8b:53:1d:a7:e1:ce:bb:6d:ab:3c:48:bc:34: c2:0e:1b:ad:5e:68:7d:b5:79:91:a4:79:30:d7:67:d6:03:f4: 52:dd:3d:92:19:1d:96:16:97:35:22:0d:53:df:56:e5:fa:45: fa:1b:8c:ae:c0:bb:dd:16:e3:37:12:14:49:ac:da:ac:69:01: 6f:3a:f4:59:5b:86:82:5a:a5:7d:26:e3:ad:63:1a:07:14:ea: 1f:e3:32:79:42:e1:55:4d:77:c2:8f:72:f0:dd:95:42:85:6f: 6e:46:74:f9:1a:6b:94:f2:9a:2e:95:d6:28:02:b8:e5:83:bd: b0:51:bb:ad:0a:75:ad:f4:1a:10:20:61:e8:95:13:bd:b2:29: e0:5d:e3:86:48:96:4d:91:c1:c7:01:09:ab:4f:27:72:6a:dc: bc:08:c4:9b:5c:98:93:a5:6e:58:a2:08:a7:49:d1:76:f8:1c: 10:b5:7b:d2:b5:92:6f:bd:71:f6:c7:35:14:97:b0:85:c1:72: d8:28:9c:1d:57:96:33:f5:19:e6:e5:2e:d5:ad:86:85:20:69: 28:5a:8a:de -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWErK4KUreQFqnjro1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwODIxNDY0MVoXDTI3MTExMTIyNDY0MVowLzEtMCsGA1UEAxMk MjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGreWDq45aGsAHNf0L2o6FAhzO2WiOo5oGYA Sjmifxmgm91yH5LF44cN9BCGhoNcAQ7TE9hSSK6XTy3ig5wwdSSMGT5YoPzx2obP kUcbZQpxncNlbAtoOfZ7u5h7vkqb3Yh7kdBc9rIQPRRrk6jZycJYPQ1uBJIkdzbK 5s472JtX1kMVbvc7N9KSivC7QbMwEIGyy9l6FTnUODU3O6mCfpbOUNRXJtH5tnKK 9uQ9NGr1hCVgSb92BYCLWTSUgj+XqhNCMUIh4qOXZQnBvX9V6uacYVC1pxjjLV9D 8HpCgQjsWT0tDcb6xiRmty5Br7bAe67w11YZ34gt5fDVFAVqRQIDAQABo4IETzCC BEswHQYDVR0OBBYEFLbsYiDz8UeT25WIx0PMV9pybg5LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y MWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzIxYTNhMTVmLWU2ZWEtNDM4Mi04 M2NkLWYzOWNlY2U5N2IyZS8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNl OTdiMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMDIEAgABMCwwDAMEB0JngAMEA0JnkAMEAUJnnAMEAUgVCAMEAkgV DAMEAEgVFAMEAEgVFjANBAIAAjAHAwUAJgf1KDAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgJArTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAFwFeIkj7LcCKonRkLm+jS+Vdnak3SAkML1MqX9DQa pUnlU6pGbTt1zYtTHafhzrttqzxIvDTCDhutXmh9tXmRpHkw12fWA/RS3T2SGR2W Fpc1Ig1T31bl+kX6G4yuwLvdFuM3EhRJrNqsaQFvOvRZW4aCWqV9JuOtYxoHFOof 4zJ5QuFVTXfCj3Lw3ZVChW9uRnT5GmuU8pouldYoArjlg72wUbutCnWt9BoQIGHo lRO9singXeOGSJZNkcHHAQmrTydyaty8CMSbXJiTpW5YoginSdF2+BwQtXvStZJv vXH2xzUUl7CFwXLYKJwdV5Yz9Rnm5S7VrYaFIGkoWore -----END CERTIFICATE-----Generated at Wed Nov 5 04:35:51 2025 by rpki-client