$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer File: 87a7a98d-6ed8-48cc-953b-32292e94edde.cer (raw, json) Hash identifier: yNhxgdjMHWzUEyxGMkVD0CpXdeaxFDRj8lRtfwLi2Ts= Subject key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B52D65F866951C77E2453C940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Sep 2025 14:35:55 +0000 Certificate not after: Thu 30 Dec 2027 15:35:55 +0000 Subordinate resources: AS: 11115 AS: 26719 AS: 26891 AS: 32477 AS: 33443 AS: 53830 AS: 393499 AS: 393640 IP: 64.9.192.0/19 IP: 64.25.224.0/20 IP: 66.110.176.0/20 IP: 72.13.0.0/20 IP: 74.123.84.0/22 IP: 97.64.0.0/20 IP: 104.37.216.0/21 IP: 162.210.176.0/22 IP: 162.251.88.0/22 IP: 192.81.64.0/23 IP: 192.135.200.0/22 IP: 192.199.178.0/23 IP: 192.234.255.0/24 IP: 199.66.80.0/22 IP: 199.66.132.0/22 IP: 199.119.104.0/21 IP: 199.188.152.0/22 IP: 204.13.180.0/22 IP: 205.145.128.0/20 IP: 208.68.132.0/22 IP: 216.71.160.0/19 IP: 2605:4c80::/32 IP: 2606:5200::/32 IP: 2607:3400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:d6:5f:86:69:51:c7:7e:24:53:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 26 14:35:55 2025 GMT Not After : Dec 30 15:35:55 2027 GMT Subject: CN=87a7a98d-6ed8-48cc-953b-32292e94edde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:fb:e2:6e:d6:79:06:9b:ba:e4:a3:17:09: e3:c6:d0:f7:9f:99:db:eb:a3:e0:f7:52:89:33:ac: 52:09:07:67:7e:6c:83:86:1a:49:c0:a6:70:ec:02: 89:06:ac:fe:08:6d:c3:58:9f:be:2f:dd:fb:f9:39: 25:e8:66:88:eb:ac:38:a1:a1:5a:c6:54:f7:0f:cd: 1b:0c:b4:0e:60:fc:ac:4c:7e:2e:98:17:01:78:ff: c9:21:a9:96:41:45:8e:f8:68:da:e6:55:0d:5d:d8: 30:df:cb:e5:2f:3a:55:e4:6f:b8:60:c8:49:ec:8c: 53:49:9a:3e:96:c5:3c:74:82:e4:2d:33:65:c5:b7: a8:53:2b:07:09:59:89:b4:ea:4a:87:ae:1f:8d:81: f9:e6:db:7f:28:c8:da:d0:d9:b4:76:bd:0d:3a:39: ce:99:f0:6c:43:aa:2f:ec:9e:6f:d6:cd:24:68:18: 4e:7a:80:6c:9a:a9:24:6f:a3:67:b5:21:0e:78:a4: ed:3d:f5:48:1c:de:c7:a8:47:d7:54:6c:6d:c1:68: c9:80:0f:f8:84:b8:53:a7:5d:fd:44:41:52:63:24: 33:0b:93:a4:96:fc:a5:19:48:ab:79:22:f8:f3:4d: 02:0f:08:a6:f7:ad:8b:32:39:9c:02:4c:11:37:b6: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.9.192.0/19 64.25.224.0/20 66.110.176.0/20 72.13.0.0/20 74.123.84.0/22 97.64.0.0/20 104.37.216.0/21 162.210.176.0/22 162.251.88.0/22 192.81.64.0/23 192.135.200.0/22 192.199.178.0/23 192.234.255.0/24 199.66.80.0/22 199.66.132.0/22 199.119.104.0/21 199.188.152.0/22 204.13.180.0/22 205.145.128.0/20 208.68.132.0/22 216.71.160.0/19 IPv6: 2605:4c80::/32 2606:5200::/32 2607:3400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11115 26719 26891 32477 33443 53830 393499 393640 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:eb:11:bf:d4:e0:e5:18:65:c8:bd:b9:98:b4:58:a2:34:7d: 76:31:12:07:97:be:ae:04:9d:32:65:9a:d2:93:f2:1e:2b:e8: 11:bf:ab:bc:43:04:59:63:9b:98:88:be:f9:78:9c:82:6e:1f: 6d:dc:06:cd:8d:09:bc:be:fc:e2:98:5e:1d:4c:30:3a:73:bc: 30:e0:35:28:03:1d:ed:2d:ab:05:9b:66:db:a6:6a:f1:de:12: d5:27:6e:92:dd:c3:9f:00:59:92:d1:92:4c:a6:bd:58:48:3e: ec:09:cd:b0:de:1e:38:22:88:7e:80:3a:c9:02:68:fa:75:b5: a0:cc:51:ff:6a:ce:0b:3a:ad:a0:ea:37:e6:0b:5e:1c:f3:97: 3f:fa:41:59:f0:a5:65:3a:f7:ed:60:04:9b:8e:c9:9d:ac:a3: 37:23:46:64:62:78:82:4a:8c:d2:0f:a9:8b:55:2a:63:bd:52: d4:03:06:1b:c9:ad:1b:ce:a0:f0:d0:82:0b:38:c7:98:84:ee: a3:56:ca:88:24:bf:77:98:a6:1d:66:c0:08:ae:76:7a:68:36: 0f:37:d4:b1:a7:37:a3:a0:b1:bf:fa:95:d3:88:62:13:c6:58: 4f:27:9b:e5:90:e7:11:ba:c7:40:c2:95:fa:bb:71:f2:45:89: e9:a2:9a:2e -----BEGIN CERTIFICATE----- MIIHwTCCBqmgAwIBAgIUAQ0Mn0MoWEtS1l+GaVHHfiRTyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyNjE0MzU1NVoXDTI3MTIzMDE1MzU1NVowLzEtMCsGA1UEAxMk ODdhN2E5OGQtNmVkOC00OGNjLTk1M2ItMzIyOTJlOTRlZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/X74m7WeQabuuSjFwnjxtD3n5nb66Pg91KJ M6xSCQdnfmyDhhpJwKZw7AKJBqz+CG3DWJ++L937+Tkl6GaI66w4oaFaxlT3D80b DLQOYPysTH4umBcBeP/JIamWQUWO+Gja5lUNXdgw38vlLzpV5G+4YMhJ7IxTSZo+ lsU8dILkLTNlxbeoUysHCVmJtOpKh64fjYH55tt/KMja0Nm0dr0NOjnOmfBsQ6ov 7J5v1s0kaBhOeoBsmqkkb6NntSEOeKTtPfVIHN7HqEfXVGxtwWjJgA/4hLhTp139 REFSYyQzC5OklvylGUireSL4800CDwim962LMjmcAkwRN7aedwIDAQABo4IE0zCC BM8wHQYDVR0OBBYEFLNI/mOh/kdXZP9EUwZVwFdFJd/NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5NGVkZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzg3YTdhOThkLTZlZDgtNDhjYy05 NTNiLTMyMjkyZTk0ZWRkZS84N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5 NGVkZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwgbcGCCsGAQUF BwEHAQH/BIGnMIGkMIGEBAIAATB+AwQFQAnAAwQEQBngAwQEQm6wAwQESA0AAwQC SntUAwQEYUAAAwQDaCXYAwQCotKwAwQCovtYAwQBwFFAAwQCwIfIAwQBwMeyAwQA wOr/AwQCx0JQAwQCx0KEAwQDx3doAwQCx7yYAwQCzA20AwQEzZGAAwQC0ESEAwQF 2EegMBsEAgACMBUDBQAmBUyAAwUAJgZSAAMFACYHNAAwOQYIKwYBBQUHAQgBAf8E KjAooCYwJAICK2sCAmhfAgJpCwICft0CAwCCowIDANJGAgMGARsCAwYBqDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQDF6xG/1ODlGGXIvbmYtFiiNH12MRIHl76uBJ0yZZrSk/IeK+gRv6u8QwRZ Y5uYiL75eJyCbh9t3AbNjQm8vvzimF4dTDA6c7ww4DUoAx3tLasFm2bbpmrx3hLV J26S3cOfAFmS0ZJMpr1YSD7sCc2w3h44Ioh+gDrJAmj6dbWgzFH/as4LOq2g6jfm C14c85c/+kFZ8KVlOvftYASbjsmdrKM3I0ZkYniCSozSD6mLVSpjvVLUAwYbya0b zqDw0IILOMeYhO6jVsqIJL93mKYdZsAIrnZ6aDYPN9SxpzejoLG/+pXTiGITxlhP J5vlkOcRusdAwpX6u3HyRYnpopou -----END CERTIFICATE-----Generated at Wed Nov 5 03:07:49 2025 by rpki-client