$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer File: 2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer (raw, json) Hash identifier: hFbQ/2gBzn0mHQmmSQpTXBffC0m7KK3M0ZpXH91owDk= Subject key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AC48D5DD4BC7A1673A66A6580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 15:24:02 +0000 Certificate not after: Tue 09 Nov 2027 16:24:02 +0000 Subordinate resources: AS: 12037 IP: 151.174.0.0/16 IP: 167.176.0.0/16 IP: 192.147.69.0/24 IP: 2602:80c:b000::/40 IP: 2620:0:670::/47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:8d:5d:d4:bc:7a:16:73:a6:6a:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 6 15:24:02 2025 GMT Not After : Nov 9 16:24:02 2027 GMT Subject: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:75:15:f0:71:6a:d7:28:0b:aa:7b:0a:15:d0: d0:56:ce:ad:e4:af:90:8a:dd:08:73:10:55:4c:e3: bc:64:85:99:03:84:5a:47:02:b8:19:94:b0:fb:be: 32:51:74:d9:c1:b9:49:5d:62:5d:92:2f:0a:4b:0f: c0:3f:0e:00:db:34:cc:aa:9a:e4:95:be:79:1f:80: bf:cb:42:a2:5e:c8:cd:13:64:4b:b1:ee:70:04:b5: b8:45:9d:df:6a:9a:a5:38:46:5f:a3:6d:47:83:cd: 74:29:a0:f4:7b:28:b5:85:99:7a:eb:25:27:77:95: f7:8a:d6:62:55:81:40:87:13:5b:39:6c:be:d2:62: 1c:97:1e:c6:15:2c:06:55:ef:32:a5:8b:fa:cf:7b: b2:09:7b:d2:d0:89:42:33:7a:b5:73:6d:e8:67:0b: 74:9c:9c:00:98:10:0f:d9:6b:e7:22:14:e7:17:f0: ec:83:21:74:2c:20:2c:fe:19:16:58:66:cc:5e:bc: 52:c2:6d:97:e8:22:4f:ca:df:0a:9b:79:8e:1e:d3: 2a:15:62:bd:e3:38:90:a3:a8:7d:05:6e:ba:1c:a3: 19:b3:4c:a7:05:70:8e:04:b7:a6:24:6f:29:2b:c5: 0c:89:49:35:c4:0f:33:66:ba:1a:b3:0a:9e:79:f4: 40:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 151.174.0.0/16 167.176.0.0/16 192.147.69.0/24 IPv6: 2602:80c:b000::/40 2620:0:670::/47 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12037 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:4e:77:c5:8f:20:b0:e5:65:08:5d:ac:07:70:22:1f:49:81: e7:15:b1:e8:2b:5d:b5:16:a2:8e:f5:1a:1b:c3:a0:54:76:54: 7b:77:96:50:9b:db:6b:ee:78:1e:3a:6b:f8:ee:de:16:a7:63: 36:3e:d4:29:11:68:b8:32:f9:9d:af:b5:a3:5f:46:3a:69:f2: 72:12:04:ae:b9:49:a0:cb:1b:bf:5c:38:19:91:2a:20:d2:47: 1f:d4:76:5a:2d:c2:85:e7:12:b8:c9:9b:0d:06:f5:42:77:64: 50:85:fb:2b:92:f2:6c:f9:d7:81:33:43:b6:1d:70:51:34:1e: ad:ce:89:87:f0:93:9d:89:b7:39:88:8a:1d:06:f5:6a:44:06: 7f:e1:18:dd:ef:30:3b:f4:07:b9:e4:ae:46:00:da:61:75:05: 38:10:89:5f:59:cf:d7:6f:f4:64:e9:60:d0:e3:87:ea:39:2d: 19:00:8a:0b:b5:c6:0f:75:f6:9c:4b:c0:81:85:12:cb:6c:32: 64:63:46:0d:98:e7:a4:3a:05:3f:72:89:3b:6e:f1:c4:c9:1d: 11:30:30:00:64:c2:7f:ec:31:0b:2e:e2:be:23:79:73:79:70: ed:de:26:54:9b:be:12:1f:25:cf:90:1d:f4:37:ff:dd:b0:60: c1:74:53:81 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWErEjV3UvHoWc6ZqZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwNjE1MjQwMloXDTI3MTEwOTE2MjQwMlowLzEtMCsGA1UEAxMk MmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBmODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3UV8HFq1ygLqnsKFdDQVs6t5K+Qit0IcxBV TOO8ZIWZA4RaRwK4GZSw+74yUXTZwblJXWJdki8KSw/APw4A2zTMqprklb55H4C/ y0KiXsjNE2RLse5wBLW4RZ3fapqlOEZfo21Hg810KaD0eyi1hZl66yUnd5X3itZi VYFAhxNbOWy+0mIclx7GFSwGVe8ypYv6z3uyCXvS0IlCM3q1c23oZwt0nJwAmBAP 2WvnIhTnF/DsgyF0LCAs/hkWWGbMXrxSwm2X6CJPyt8Km3mOHtMqFWK94ziQo6h9 BW66HKMZs0ynBXCOBLemJG8pK8UMiUk1xA8zZroaswqeefRAqwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFNtIi8CekoKRNvmahJ2MBO/4wGg7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y ZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzJkMmNiOWVmLTVmYjctNDNmZS1i Y2M1LTBhMTBiNzUwZjg4YS8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1 MGY4OGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMBYEAgABMBADAwCXrgMDAKewAwQAwJNFMBcEAgACMBEDBgAmAggM sAMHASYgAAAGcDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIvBTBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCt TnfFjyCw5WUIXawHcCIfSYHnFbHoK121FqKO9Robw6BUdlR7d5ZQm9tr7ngeOmv4 7t4Wp2M2PtQpEWi4Mvmdr7WjX0Y6afJyEgSuuUmgyxu/XDgZkSog0kcf1HZaLcKF 5xK4yZsNBvVCd2RQhfsrkvJs+deBM0O2HXBRNB6tzomH8JOdibc5iIodBvVqRAZ/ 4Rjd7zA79Ae55K5GANphdQU4EIlfWc/Xb/Rk6WDQ44fqOS0ZAIoLtcYPdfacS8CB hRLLbDJkY0YNmOekOgU/cok7bvHEyR0RMDAAZMJ/7DELLuK+I3lzeXDt3iZUm74S HyXPkB30N//dsGDBdFOB -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:40 2025 by rpki-client