$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523.cer File: 34cfb9ea-f5ae-47b0-a218-623411b66523.cer (raw, json) Hash identifier: 8nq4ddssYo09CPi665e5jggRgXAQAq0MCFeMKDmFjFg= Subject key identifier: 95:37:A5:7A:08:AA:B3:28:E4:44:04:16:39:C0:62:BB:0B:4A:B6:F6 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B613ACD2AD4C92FA79E88FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/34cfb9ea-f5ae-47b0-a218-623411b66523.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 18:19:35 +0000 Certificate not after: Tue 04 Jan 2028 19:19:35 +0000 Subordinate resources: AS: 11175 AS: 11814 AS: 14595 AS: 21677 AS: 21936 AS: 32580 IP: 23.91.224.0/19 IP: 45.42.96.0/19 IP: 66.11.160.0/19 IP: 66.49.128.0/18 IP: 66.49.208.0 -- 66.49.251.255 IP: 66.49.255.0/24 IP: 67.55.0.0/23 IP: 67.55.4.0 -- 67.55.63.255 IP: 68.232.80.0/20 IP: 69.171.128.0/19 IP: 69.173.32.0/19 IP: 72.53.0.0 -- 72.53.159.255 IP: 172.97.128.0/17 IP: 174.138.192.0/19 IP: 198.91.128.0/17 IP: 198.200.64.0/18 IP: 204.11.120.0/22 IP: 206.80.240.0/20 IP: 206.188.64.0/19 IP: 208.68.16.0/22 IP: 209.195.64.0/18 IP: 209.197.128.0/18 IP: 216.48.160.0/20 IP: 216.58.0.0/17 IP: 216.246.224.0/19 IP: 2610:1e8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:3a:cd:2a:d4:c9:2f:a7:9e:88:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 1 18:19:35 2025 GMT Not After : Jan 4 19:19:35 2028 GMT Subject: CN=34cfb9ea-f5ae-47b0-a218-623411b66523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:fa:ca:a2:d1:5d:f5:81:f4:6b:65:50:a3: 70:c7:0e:18:74:34:31:50:bf:18:41:85:62:73:df: 43:f4:ab:18:75:a0:62:37:28:14:cb:3d:e8:c3:22: c7:c4:f0:85:a9:81:b6:97:78:29:f8:9f:6f:b3:a7: 0e:1c:a3:dc:db:61:67:91:ee:31:89:0e:8a:9b:aa: 99:42:b6:73:d1:17:bd:ae:fd:e3:51:87:55:24:e2: 2f:99:74:eb:eb:da:63:7a:c8:be:42:4d:4b:6a:8f: 11:48:75:55:7d:ca:79:48:fe:21:ca:1e:17:ff:a0: df:fc:45:0c:d1:95:30:54:20:34:8a:7e:8d:c6:47: 82:99:b8:bb:d9:30:8f:82:34:3c:67:0d:5d:fe:77: c2:1f:cc:0e:23:b8:d0:46:c7:39:13:64:45:2d:a6: 81:ed:aa:3f:16:15:41:5a:f1:43:f2:29:e7:b5:9a: 07:e2:89:49:86:c0:aa:ae:ef:63:7d:ab:a9:bb:33: 3a:6f:75:7b:e9:5c:a5:40:73:c9:94:fa:6b:35:b9: 33:b8:86:cf:e3:92:0f:10:a0:cf:74:65:9b:87:f9: d9:f2:20:64:41:b4:d9:5b:5f:91:07:28:42:f8:83: 9c:74:40:82:b7:ad:28:d7:e2:fc:1b:70:c6:20:18: 2d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:37:A5:7A:08:AA:B3:28:E4:44:04:16:39:C0:62:BB:0B:4A:B6:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/34cfb9ea-f5ae-47b0-a218-623411b66523.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.91.224.0/19 45.42.96.0/19 66.11.160.0/19 66.49.128.0/18 66.49.208.0-66.49.251.255 66.49.255.0/24 67.55.0.0/23 67.55.4.0-67.55.63.255 68.232.80.0/20 69.171.128.0/19 69.173.32.0/19 72.53.0.0-72.53.159.255 172.97.128.0/17 174.138.192.0/19 198.91.128.0/17 198.200.64.0/18 204.11.120.0/22 206.80.240.0/20 206.188.64.0/19 208.68.16.0/22 209.195.64.0/18 209.197.128.0/18 216.48.160.0/20 216.58.0.0/17 216.246.224.0/19 IPv6: 2610:1e8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11175 11814 14595 21677 21936 32580 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6f:01:39:ee:30:d2:01:e9:55:e8:e9:cf:69:c2:91:d2:bb: b4:c0:6f:ac:55:97:43:fd:ae:a3:39:51:86:78:f2:24:b8:ab: 8f:d6:b7:c3:0e:4a:30:67:42:d6:e4:3b:b3:64:13:6b:19:cf: 8a:32:8a:65:39:25:f8:ef:9b:ab:35:f7:c2:cc:11:78:f5:ad: c2:57:21:92:13:dd:50:c1:07:94:88:e9:44:e9:8b:14:d6:78: 30:c0:d8:9d:71:b6:21:80:ee:25:ac:3c:b0:47:6f:4a:a0:f8: 69:7e:ce:c1:5c:b9:51:72:8c:fc:7e:ce:9f:da:11:1f:a0:fd: 80:9b:89:5d:8c:5b:82:17:ed:de:65:76:01:3d:c1:0f:55:6e: e2:5a:92:c9:44:f1:6a:52:ce:ca:a5:f0:80:68:7f:4a:2c:66: fc:c5:61:51:aa:73:2a:ae:f9:5a:41:4b:78:e7:56:7f:56:55: 0c:97:96:63:53:92:ff:15:30:8a:22:75:dc:ac:5c:70:c6:2b: 2a:6b:ab:1d:ab:f2:99:bc:1f:3c:dd:e0:eb:4b:aa:32:9f:a5: d4:fd:b4:17:a9:75:68:9b:a1:02:42:26:6c:9f:84:a5:f3:a7: c1:1a:9f:72:71:0f:d2:cb:b0:56:e3:8d:ee:b7:cd:3d:06:4e: c3:2d:c2:0d -----BEGIN CERTIFICATE----- MIIH1zCCBr+gAwIBAgIUAQ0Mn0MoWEthOs0q1Mkvp56I/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMTE4MTkzNVoXDTI4MDEwNDE5MTkzNVowLzEtMCsGA1UEAxMk MzRjZmI5ZWEtZjVhZS00N2IwLWEyMTgtNjIzNDExYjY2NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLn6yqLRXfWB9GtlUKNwxw4YdDQxUL8YQYVi c99D9KsYdaBiNygUyz3owyLHxPCFqYG2l3gp+J9vs6cOHKPc22Fnke4xiQ6Km6qZ QrZz0Re9rv3jUYdVJOIvmXTr69pjesi+Qk1Lao8RSHVVfcp5SP4hyh4X/6Df/EUM 0ZUwVCA0in6NxkeCmbi72TCPgjQ8Zw1d/nfCH8wOI7jQRsc5E2RFLaaB7ao/FhVB WvFD8inntZoH4olJhsCqru9jfaupuzM6b3V76VylQHPJlPprNbkzuIbP45IPEKDP dGWbh/nZ8iBkQbTZW1+RByhC+IOcdECCt60o1+L8G3DGIBgtsQIDAQABo4IE6TCC BOUwHQYDVR0OBBYEFJU3pXoIqrMo5EQEFjnAYrsLSrb2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z NGNmYjllYS1mNWFlLTQ3YjAtYTIxOC02MjM0MTFiNjY1MjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzM0Y2ZiOWVhLWY1YWUtNDdiMC1h MjE4LTYyMzQxMWI2NjUyMy8zNGNmYjllYS1mNWFlLTQ3YjAtYTIxOC02MjM0MTFi NjY1MjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwgdkGCCsGAQUF BwEHAQH/BIHJMIHGMIG0BAIAATCBrQMEBRdb4AMEBS0qYAMEBUILoAMEBkIxgDAM AwQEQjHQAwQCQjH4AwQAQjH/AwQBQzcAMAwDBAJDNwQDBAZDNwADBARE6FADBAVF q4ADBAVFrSAwCwMDAEg1AwQFSDWAAwQHrGGAAwQFrorAAwQHxluAAwQGxshAAwQC zAt4AwQEzlDwAwQFzrxAAwQC0EQQAwQG0cNAAwQG0cWAAwQE2DCgAwQH2DoAAwQF 2PbgMA0EAgACMAcDBQAmEAHoMC0GCCsGAQUFBwEIAQH/BB4wHKAaMBgCAiunAgIu JgICOQMCAlStAgJVsAICf0QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGG8BOe4w0gHpVejpz2nCkdK7tMBv rFWXQ/2uozlRhnjyJLirj9a3ww5KMGdC1uQ7s2QTaxnPijKKZTkl+O+bqzX3wswR ePWtwlchkhPdUMEHlIjpROmLFNZ4MMDYnXG2IYDuJaw8sEdvSqD4aX7OwVy5UXKM /H7On9oRH6D9gJuJXYxbghft3mV2AT3BD1Vu4lqSyUTxalLOyqXwgGh/Sixm/MVh UapzKq75WkFLeOdWf1ZVDJeWY1OS/xUwiiJ13KxccMYrKmurHavymbwfPN3g60uq Mp+l1P20F6l1aJuhAkImbJ+EpfOnwRqfcnEP0suwVuON7rfNPQZOwy3CDQ== -----END CERTIFICATE-----Generated at Wed Nov 5 00:04:02 2025 by rpki-client