$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer File: 3e5c42ff-624e-4419-832c-8d3b65c73dad.cer (raw, json) Hash identifier: 8ajqb1PnHL++CzEM2tkqsnA7HPUYacWdq+ONNwVu+5A= Subject key identifier: D2:99:03:42:E5:0B:F9:2A:F2:11:F6:9B:F5:1D:B5:87:2D:65:DB:D2 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B2980D4E9FDA109DA9B6B2200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 19:15:25 +0000 Certificate not after: Wed 15 Dec 2027 20:15:25 +0000 Subordinate resources: AS: 401965 IP: 72.35.208.0/20 IP: 192.231.213.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:80:d4:e9:fd:a1:09:da:9b:6b:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 11 19:15:25 2025 GMT Not After : Dec 15 20:15:25 2027 GMT Subject: CN=3e5c42ff-624e-4419-832c-8d3b65c73dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:22:e5:36:5d:9d:de:d4:13:59:d8:68:c0:37: a0:d9:b0:6c:e4:3a:13:d7:c7:21:d8:cb:87:6c:83: 9e:42:30:a6:6c:79:88:9d:f6:36:11:0d:b6:95:50: f4:67:03:63:69:f0:4a:d0:a4:21:5a:c3:d9:c4:6e: 1d:b6:08:2c:96:df:31:1f:fb:9c:55:6b:5c:79:7b: cd:fe:08:94:6e:54:81:00:06:67:86:20:4f:f1:ab: 7b:ae:52:ad:95:86:ac:64:e7:10:f9:7a:cb:25:8a: 5c:e8:dc:89:7e:00:00:20:91:47:9e:77:ce:ec:b1: 75:e8:57:1f:90:4b:9c:75:a8:a1:b9:d3:41:68:e9: 32:36:50:fe:67:84:2e:a0:09:83:9c:8f:1d:49:d9: 7a:2d:1d:28:cd:45:e1:e7:e1:87:f1:37:c1:24:5f: fd:52:9c:81:91:e7:de:63:8e:f9:5e:fc:83:64:da: fd:ed:38:0c:ed:2f:56:e6:7b:02:91:2b:dd:cf:3b: b6:95:ae:b2:c9:fe:7f:13:57:fe:a5:45:2c:10:de: 63:79:c8:9b:6b:23:33:ee:1f:42:b0:21:b6:67:ed: 4d:46:2f:68:68:7d:0e:81:2b:24:e6:3c:71:b3:03: ee:1c:2a:ac:86:60:47:d2:a9:91:31:81:02:e0:1b: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:99:03:42:E5:0B:F9:2A:F2:11:F6:9B:F5:1D:B5:87:2D:65:DB:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 72.35.208.0/20 192.231.213.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401965 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a6:9a:18:cf:bf:55:63:5a:d2:e8:87:63:4c:9e:f0:da:be: 08:36:53:4c:89:2c:1d:29:0d:9f:4b:35:3a:dc:01:23:84:89: b1:55:65:0e:5b:0a:4a:33:77:56:63:6b:fc:e5:72:3f:e2:14: 1a:59:ba:8f:ed:43:cd:3f:1c:6d:3c:2b:0f:e2:a7:2d:54:e0: cd:ce:cb:f9:5b:a2:60:ab:29:b3:7f:9f:fb:96:3f:00:0d:6b: bf:7a:a0:9b:56:7b:2b:3e:70:11:9e:12:0c:a9:29:f4:bb:f6: f4:f7:c2:75:a5:3d:df:70:ae:31:70:cf:0e:21:54:4c:cb:b3: 41:73:f6:70:66:d2:d7:38:a0:d4:b7:68:4b:57:16:9b:c3:45: a5:66:72:ba:ef:95:3e:e7:ed:b2:e6:9d:21:0a:49:f3:da:32: 3e:48:66:c6:ae:2f:10:08:a9:17:03:a9:72:5f:2a:c9:b4:18: 64:75:b6:73:9d:98:46:26:21:3c:a9:56:0e:dd:9d:b8:57:10: 50:bf:dc:41:47:39:02:57:57:c7:55:0c:6f:1c:ec:72:8f:95: 9f:f8:96:7e:b7:ab:90:49:a5:1b:b8:7a:b9:db:6b:60:09:11: e2:4d:e1:a8:bd:11:63:0b:65:26:0f:18:bc:45:87:d9:cc:42: b5:76:7f:1a -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEspgNTp/aEJ2ptrIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxMTE5MTUyNVoXDTI3MTIxNTIwMTUyNVowLzEtMCsGA1UEAxMk M2U1YzQyZmYtNjI0ZS00NDE5LTgzMmMtOGQzYjY1YzczZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iLlNl2d3tQTWdhowDeg2bBs5DoT18ch2MuH bIOeQjCmbHmInfY2EQ22lVD0ZwNjafBK0KQhWsPZxG4dtggslt8xH/ucVWtceXvN /giUblSBAAZnhiBP8at7rlKtlYasZOcQ+XrLJYpc6NyJfgAAIJFHnnfO7LF16Fcf kEucdaihudNBaOkyNlD+Z4QuoAmDnI8dSdl6LR0ozUXh5+GH8TfBJF/9UpyBkefe Y475XvyDZNr97TgM7S9W5nsCkSvdzzu2la6yyf5/E1f+pUUsEN5jecibayMz7h9C sCG2Z+1NRi9oaH0OgSsk5jxxswPuHCqshmBH0qmRMYEC4BsEcQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFNKZA0LlC/kq8hH2m/UdtYctZdvSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z ZTVjNDJmZi02MjRlLTQ0MTktODMyYy04ZDNiNjVjNzNkYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzNlNWM0MmZmLTYyNGUtNDQxOS04 MzJjLThkM2I2NWM3M2RhZC8zZTVjNDJmZi02MjRlLTQ0MTktODMyYy04ZDNiNjVj NzNkYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARII9ADBADA59UwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBiItMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEWmmhjPv1VjWtLoh2NMnvDavgg2U0yJLB0pDZ9L NTrcASOEibFVZQ5bCkozd1Zja/zlcj/iFBpZuo/tQ80/HG08Kw/ipy1U4M3Oy/lb omCrKbN/n/uWPwANa796oJtWeys+cBGeEgypKfS79vT3wnWlPd9wrjFwzw4hVEzL s0Fz9nBm0tc4oNS3aEtXFpvDRaVmcrrvlT7n7bLmnSEKSfPaMj5IZsauLxAIqRcD qXJfKsm0GGR1tnOdmEYmITypVg7dnbhXEFC/3EFHOQJXV8dVDG8c7HKPlZ/4ln63 q5BJpRu4ernba2AJEeJN4ai9EWMLZSYPGLxFh9nMQrV2fxo= -----END CERTIFICATE-----Generated at Wed Nov 5 03:06:11 2025 by rpki-client