$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560.cer File: 3cc63d59-ee3c-4449-a0af-cbde753e4560.cer (raw, json) Hash identifier: 8ZmWEFK8I2P3U/137ut3mxqurScGg3q/CstJm39y9W0= Subject key identifier: 33:AD:2A:52:BB:3B:0B:40:04:DC:80:1E:DD:CF:6E:EB:BA:AD:89:16 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ACEEF7319AC446C9147D49600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Aug 2025 08:39:45 +0000 Certificate not after: Sat 13 Nov 2027 09:39:45 +0000 Subordinate resources: AS: 401861 IP: 23.142.180.0/24 IP: 2602:f5bc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:ef:73:19:ac:44:6c:91:47:d4:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 10 08:39:45 2025 GMT Not After : Nov 13 09:39:45 2027 GMT Subject: CN=3cc63d59-ee3c-4449-a0af-cbde753e4560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:43:7e:e1:06:da:70:04:0e:69:a1:3f:d8: 65:fb:b8:d1:b4:d8:11:9a:13:cd:10:67:52:6c:d2: 74:f2:a6:28:5c:9c:32:fa:68:bf:36:f4:2f:d1:1e: 0a:b2:a0:e4:5f:e4:87:0d:bc:bb:cf:88:d3:fe:42: 89:0a:f4:a9:3f:f4:f3:e4:d2:bd:7c:8d:06:06:e6: 36:b0:80:27:d5:24:56:ab:3e:44:9b:f5:91:d7:12: 56:d6:a0:5b:7e:9e:48:07:b8:85:b6:89:4b:8a:0c: a7:18:e9:38:73:8f:4a:6c:9e:02:a1:04:9b:cc:bc: c5:d6:8a:a6:64:79:d0:40:d8:09:53:79:93:f6:bf: e5:37:cd:59:44:9e:18:ad:7d:b9:07:43:f2:15:5c: ce:48:f5:9e:a6:c8:89:25:fc:31:e9:c9:c2:b9:4d: 02:f3:8d:c7:23:35:fc:93:f9:b4:dc:03:22:35:a3: 79:d7:a5:0d:30:39:ba:c0:30:05:05:0b:96:70:c0: 59:11:1b:c1:92:9b:4a:13:a1:cd:c3:e1:4f:99:00: 58:d4:ad:70:c2:ba:3b:a3:15:33:01:60:cb:de:ca: c9:05:5c:1e:5f:3a:55:7c:3b:f1:63:cb:ac:65:af: e2:df:ac:c3:8e:6d:eb:9d:be:5b:e5:ec:a1:1c:a7: c7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AD:2A:52:BB:3B:0B:40:04:DC:80:1E:DD:CF:6E:EB:BA:AD:89:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3cc63d59-ee3c-4449-a0af-cbde753e4560/3cc63d59-ee3c-4449-a0af-cbde753e4560.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.180.0/24 IPv6: 2602:f5bc::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401861 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:12:0d:3a:2a:ac:e8:37:07:1a:b9:0a:43:f9:aa:75:0e:f1: 39:1b:bc:1b:df:66:96:6a:29:25:ba:c5:ba:51:ac:86:39:d4: 91:88:4f:ed:b9:97:e0:46:8a:08:e0:47:26:bb:f4:74:ff:87: c4:28:e6:8d:a1:ba:09:84:82:c3:1f:f6:b7:d6:36:25:5f:25: 01:f7:50:34:62:06:ed:9e:88:df:87:39:f2:46:24:5f:bd:fc: 8d:37:35:ee:2a:6e:5d:cf:0a:a1:84:42:cc:87:bf:37:fb:ae: d9:9a:93:83:66:bb:b5:7b:6c:17:80:11:a9:9a:5c:cd:e1:e6: 1c:ca:38:9c:32:6e:98:95:3c:d4:e2:e1:36:d7:0f:b5:f3:7a: 1f:ed:96:8c:f9:a6:e9:86:d1:04:d9:4c:aa:ef:76:8b:e4:92: c6:0c:07:87:49:26:62:cd:43:ae:c8:aa:ca:d6:21:8d:aa:a3: 93:4a:90:2d:01:20:e7:56:fb:88:0e:00:8d:c0:0e:76:2d:c1: 3e:82:d3:56:ac:4b:71:12:49:a9:a7:71:bd:24:8e:a5:bc:b3: 4d:9c:60:93:a8:a8:6d:fc:ca:de:14:df:db:9e:37:12:0e:74: 6d:79:98:5d:28:e6:7c:5b:73:e2:2f:9c:4d:12:2f:2f:7d:cc: 35:d0:9e:4b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErO73MZrERskUfUlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxMDA4Mzk0NVoXDTI3MTExMzA5Mzk0NVowLzEtMCsGA1UEAxMk M2NjNjNkNTktZWUzYy00NDQ5LWEwYWYtY2JkZTc1M2U0NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfVDfuEG2nAEDmmhP9hl+7jRtNgRmhPNEGdS bNJ08qYoXJwy+mi/NvQv0R4KsqDkX+SHDby7z4jT/kKJCvSpP/Tz5NK9fI0GBuY2 sIAn1SRWqz5Em/WR1xJW1qBbfp5IB7iFtolLigynGOk4c49KbJ4CoQSbzLzF1oqm ZHnQQNgJU3mT9r/lN81ZRJ4YrX25B0PyFVzOSPWepsiJJfwx6cnCuU0C843HIzX8 k/m03AMiNaN516UNMDm6wDAFBQuWcMBZERvBkptKE6HNw+FPmQBY1K1wwro7oxUz AWDL3srJBVweXzpVfDvxY8usZa/i36zDjm3rnb5b5eyhHKfHewIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDOtKlK7OwtABNyAHt3Pbuu6rYkWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z Y2M2M2Q1OS1lZTNjLTQ0NDktYTBhZi1jYmRlNzUzZTQ1NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzNjYzYzZDU5LWVlM2MtNDQ0OS1h MGFmLWNiZGU3NTNlNDU2MC8zY2M2M2Q1OS1lZTNjLTQ0NDktYTBhZi1jYmRlNzUz ZTQ1NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjrQwDgQCAAIwCAMGACYC9bwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYhxTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6Eg06KqzoNwcauQpD+ap1DvE5 G7wb32aWaiklusW6UayGOdSRiE/tuZfgRooI4Ecmu/R0/4fEKOaNoboJhILDH/a3 1jYlXyUB91A0YgbtnojfhznyRiRfvfyNNzXuKm5dzwqhhELMh783+67ZmpODZru1 e2wXgBGpmlzN4eYcyjicMm6YlTzU4uE21w+183of7ZaM+abphtEE2Uyq73aL5JLG DAeHSSZizUOuyKrK1iGNqqOTSpAtASDnVvuIDgCNwA52LcE+gtNWrEtxEkmpp3G9 JI6lvLNNnGCTqKht/MreFN/bnjcSDnRteZhdKOZ8W3PiL5xNEi8vfcw10J5L -----END CERTIFICATE-----Generated at Tue Nov 4 23:21:32 2025 by rpki-client