$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer File: 2831c461-e175-4265-a0ea-565d8e6179b8.cer (raw, json) Hash identifier: TNbAYhK/Q87LMswSoQr5anslVdejxzetptebIMtuIEY= Subject key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AF109A418821386DF175E3240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Aug 2025 13:50:00 +0000 Certificate not after: Thu 25 Nov 2027 14:50:00 +0000 Subordinate resources: AS: 36610 IP: 74.119.112.0/22 IP: 199.68.144.0/21 IP: 199.127.208.0/21 IP: 208.77.120.0/21 IP: 208.94.200.0/21 IP: 2607:fd08::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:09:a4:18:82:13:86:df:17:5e:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 22 13:50:00 2025 GMT Not After : Nov 25 14:50:00 2027 GMT Subject: CN=2831c461-e175-4265-a0ea-565d8e6179b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cd:85:f3:ba:5c:d6:26:9c:e9:88:b0:81:ab: 75:a9:bd:78:3b:c0:eb:67:1a:fe:7b:c7:c8:8c:8f: 4b:35:99:81:9b:59:a7:b7:4c:66:ac:e9:77:d1:39: fb:8e:27:07:b8:9b:2c:68:2a:07:0a:c8:f3:da:58: 31:ad:76:8d:18:2b:32:73:b9:f0:d4:db:8c:54:04: 67:1e:3e:6a:62:70:a9:f8:7a:16:4b:1b:4a:ad:f3: 31:ca:ed:cd:05:3b:f2:4a:e7:55:20:63:da:1c:ce: 6d:c4:52:fa:8a:d7:05:c8:d4:30:6e:1b:dc:02:45: fb:ce:f0:88:b1:16:fa:7a:95:c1:d4:81:f6:6f:a1: 79:3b:d6:2d:a2:c4:e1:1a:ef:e1:fb:0e:bd:77:d3: 92:0d:60:86:cb:6a:6b:8a:68:58:68:e4:ae:d1:ec: 21:82:7e:e3:c4:55:ac:9a:92:91:ce:90:8d:ee:fc: 9d:80:92:7a:ee:8a:66:f6:5f:58:4c:7d:59:db:e8: 79:dc:1f:da:f3:39:db:24:22:79:a1:84:cf:69:72: 94:23:84:bd:ee:cc:e9:04:f2:6b:da:ad:81:cc:91: 0c:fe:b0:6b:7a:a0:1e:93:3b:f6:04:33:38:1f:38: 45:80:ef:f2:1e:90:f7:c3:c1:b4:2e:c6:20:90:d2: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 74.119.112.0/22 199.68.144.0/21 199.127.208.0/21 208.77.120.0/21 208.94.200.0/21 IPv6: 2607:fd08::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36610 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:61:67:e0:91:dd:dd:33:91:31:da:db:4c:f4:d4:10:b5:42: ad:f0:60:b3:54:41:d2:aa:08:0c:b7:19:d5:4e:5a:ec:9a:35: 1d:ff:46:a3:4e:0b:c7:4a:31:94:c7:86:fa:5a:b2:f0:b9:18: 43:8c:07:3a:3f:a5:5e:36:dc:98:3c:5d:df:11:d9:db:72:a3: d0:ae:21:66:75:c5:c7:67:1e:d9:5a:3e:8c:23:4b:eb:bd:bc: 8d:1b:bc:e5:82:c5:6a:df:91:11:29:78:2b:41:5d:c5:dd:6f: af:44:1c:58:39:02:ab:8e:6e:cf:13:9f:5e:15:bd:6c:4d:5e: b7:f0:79:e7:11:8e:08:e6:85:fe:13:1e:5b:31:d4:ad:d8:60: 05:53:bf:9f:09:ba:3f:cf:47:0e:df:f2:0f:7e:fd:c4:0b:9d: b2:51:28:13:cc:bd:dd:6f:22:8b:e3:97:3e:ae:f7:3d:7e:e2: 20:f1:ef:f8:ad:36:7b:ee:7e:d4:2d:99:57:73:c5:f4:9e:1f: 95:d1:96:8f:b1:39:78:8d:cf:87:c9:ca:fc:1d:93:46:aa:df: 58:67:ff:59:7a:96:3a:9f:ac:42:63:14:f7:b7:aa:5b:e9:a5: 0f:80:a6:f0:c4:37:c3:0a:b2:06:d7:f2:fc:97:de:b8:73:db: c2:8b:9e:cc -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWErxCaQYghOG3xdeMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyMjEzNTAwMFoXDTI3MTEyNTE0NTAwMFowLzEtMCsGA1UEAxMk MjgzMWM0NjEtZTE3NS00MjY1LWEwZWEtNTY1ZDhlNjE3OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc2F87pc1iac6Yiwgat1qb14O8DrZxr+e8fI jI9LNZmBm1mnt0xmrOl30Tn7jicHuJssaCoHCsjz2lgxrXaNGCsyc7nw1NuMVARn Hj5qYnCp+HoWSxtKrfMxyu3NBTvySudVIGPaHM5txFL6itcFyNQwbhvcAkX7zvCI sRb6epXB1IH2b6F5O9YtosThGu/h+w69d9OSDWCGy2primhYaOSu0ewhgn7jxFWs mpKRzpCN7vydgJJ67opm9l9YTH1Z2+h53B/a8znbJCJ5oYTPaXKUI4S97szpBPJr 2q2BzJEM/rBreqAekzv2BDM4HzhFgO/yHpD3w8G0LsYgkNJ+mwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFD2083qtknN0KKflTYQj89Sfn4XvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y ODMxYzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVkOGU2MTc5YjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzI4MzFjNDYxLWUxNzUtNDI2NS1h MGVhLTU2NWQ4ZTYxNzliOC8yODMxYzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVkOGU2 MTc5YjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAJKd3ADBAPHRJADBAPHf9ADBAPQTXgDBAPQXsgw DQQCAAIwBwMFACYH/QgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAI8CMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAAFhZ+CR3d0zkTHa20z01BC1Qq3wYLNUQdKqCAy3GdVOWuyaNR3/RqNOC8dK MZTHhvpasvC5GEOMBzo/pV423Jg8Xd8R2dtyo9CuIWZ1xcdnHtlaPowjS+u9vI0b vOWCxWrfkREpeCtBXcXdb69EHFg5AquObs8Tn14VvWxNXrfweecRjgjmhf4THlsx 1K3YYAVTv58Juj/PRw7f8g9+/cQLnbJRKBPMvd1vIovjlz6u9z1+4iDx7/itNnvu ftQtmVdzxfSeH5XRlo+xOXiNz4fJyvwdk0aq31hn/1l6ljqfrEJjFPe3qlvppQ+A pvDEN8MKsgbX8vyX3rhz28KLnsw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:11:37 2025 by rpki-client