$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer File: 95cb7d64-2f99-4504-bfba-cddcd6bdf561.cer (raw, json) Hash identifier: DPxvqhRc8LDqx5tqjsmx6YIKUn7gcuOrzzBMgAo1KdM= Subject key identifier: CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AAE03FC94ED6AE54094A81E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Jul 2025 13:39:27 +0000 Certificate not after: Mon 01 Nov 2027 00:48:59 +0000 Subordinate resources: AS: 395141 IP: 66.187.2.0/24 IP: 199.233.14.0/24 IP: 2604:1960::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:03:fc:94:ed:6a:e5:40:94:a8:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 29 13:39:27 2025 GMT Not After : Nov 1 00:48:59 2027 GMT Subject: CN=95cb7d64-2f99-4504-bfba-cddcd6bdf561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:44:8d:80:f4:ed:55:84:93:b7:2e:aa:04: 49:94:4f:82:e5:41:80:54:0d:20:c2:37:a2:50:69: 8d:02:6f:75:16:82:af:4a:02:38:77:8c:f0:48:a4: de:71:db:41:a9:76:f7:22:e6:e4:62:25:a8:8d:c0: 13:8b:d8:92:74:58:ca:76:1d:3d:8b:9f:dc:08:e3: 77:5b:8d:35:1a:d2:54:20:e4:21:fe:f5:9c:df:b6: a7:af:a8:b6:95:8e:f8:11:75:be:38:42:48:2a:d5: 42:a8:81:69:7f:e1:3d:eb:14:54:4e:14:29:d5:52: e1:1c:d4:22:ec:61:19:d2:9f:4b:ab:a5:be:d4:82: a0:23:49:0c:a6:f1:f0:e6:00:84:79:21:06:64:52: 24:57:75:30:48:95:cc:e9:e2:aa:90:ae:6a:57:0e: bb:cd:96:19:5b:64:8a:2b:56:7f:60:6b:05:fc:03: 4f:43:0b:e3:ba:36:f3:c9:02:02:aa:ba:dd:07:c0: e4:68:88:b1:b6:55:80:7c:83:1b:3b:e4:01:d8:38: 1c:d8:f5:82:32:5e:75:b8:d7:3b:a2:ba:b8:5b:73: 2d:5e:10:30:2f:1b:8a:19:1f:14:71:38:90:f5:f0: 2a:86:8c:a2:c2:ba:5f:8d:52:ef:70:95:e5:68:86: 5f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9F:01:50:F2:61:7A:10:A2:5A:BB:CC:0B:9A:80:66:8F:9D:10:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/95cb7d64-2f99-4504-bfba-cddcd6bdf561/95cb7d64-2f99-4504-bfba-cddcd6bdf561.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 66.187.2.0/24 199.233.14.0/24 IPv6: 2604:1960::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395141 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b4:62:7f:fc:9a:be:b2:fe:28:20:7f:54:bc:52:b2:aa:13: 91:44:91:30:31:53:cc:bd:86:fe:39:0f:40:36:f6:ec:2a:6f: 49:07:22:e6:f7:0f:31:7c:1e:42:38:e6:af:56:02:e9:de:03: 89:3d:07:da:3b:30:ad:74:74:a8:8c:97:7d:9a:68:a6:13:21: 0f:93:bb:fb:f2:a1:37:c9:b5:f2:a7:9a:25:18:63:77:4a:8e: 48:24:65:50:71:65:1a:84:fd:58:df:77:91:76:8d:9a:14:0e: e6:10:83:ff:84:37:11:a3:80:69:8e:a4:0f:e1:ed:dd:08:fa: e5:b1:de:5e:1c:68:c0:23:d2:28:1b:d5:60:62:45:2d:67:4e: 3d:db:f5:c6:5a:53:3b:30:7d:bf:29:ac:6d:4f:f7:5e:b2:29: e0:79:44:24:85:82:d7:ec:4c:f0:61:23:83:db:df:08:80:90: 54:66:8b:d7:ad:51:36:a3:39:5c:96:71:54:85:8c:f6:79:5d: 24:50:e4:a2:d4:5e:57:71:50:41:36:99:d0:df:43:66:8c:83: 9c:1b:85:45:47:fd:ab:0c:89:b0:a6:82:dc:57:bd:78:99:c6: bf:c6:71:4c:96:49:41:7f:78:fd:e6:a5:e7:39:e4:b4:9e:48: d5:b3:ca:0d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEquA/yU7WrlQJSoHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyOTEzMzkyN1oXDTI3MTEwMTAwNDg1OVowLzEtMCsGA1UEAxMk OTVjYjdkNjQtMmY5OS00NTA0LWJmYmEtY2RkY2Q2YmRmNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq9EjYD07VWEk7cuqgRJlE+C5UGAVA0gwjei UGmNAm91FoKvSgI4d4zwSKTecdtBqXb3IubkYiWojcATi9iSdFjKdh09i5/cCON3 W401GtJUIOQh/vWc37anr6i2lY74EXW+OEJIKtVCqIFpf+E96xRUThQp1VLhHNQi 7GEZ0p9Lq6W+1IKgI0kMpvHw5gCEeSEGZFIkV3UwSJXM6eKqkK5qVw67zZYZW2SK K1Z/YGsF/ANPQwvjujbzyQICqrrdB8DkaIixtlWAfIMbO+QB2Dgc2PWCMl51uNc7 orq4W3MtXhAwLxuKGR8UcTiQ9fAqhoyiwrpfjVLvcJXlaIZfbwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFM+fAVDyYXoQolq7zAuagGaPnRDrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 NWNiN2Q2NC0yZjk5LTQ1MDQtYmZiYS1jZGRjZDZiZGY1NjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzk1Y2I3ZDY0LTJmOTktNDUwNC1i ZmJhLWNkZGNkNmJkZjU2MS85NWNiN2Q2NC0yZjk5LTQ1MDQtYmZiYS1jZGRjZDZi ZGY1NjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBABCuwIDBADH6Q4wDQQCAAIwBwMFACYEGWAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgeFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEm0Yn/8mr6y/iggf1S8 UrKqE5FEkTAxU8y9hv45D0A29uwqb0kHIub3DzF8HkI45q9WAuneA4k9B9o7MK10 dKiMl32aaKYTIQ+Tu/vyoTfJtfKnmiUYY3dKjkgkZVBxZRqE/Vjfd5F2jZoUDuYQ g/+ENxGjgGmOpA/h7d0I+uWx3l4caMAj0igb1WBiRS1nTj3b9cZaUzswfb8prG1P 916yKeB5RCSFgtfsTPBhI4Pb3wiAkFRmi9etUTajOVyWcVSFjPZ5XSRQ5KLUXldx UEE2mdDfQ2aMg5wbhUVH/asMibCmgtxXvXiZxr/GcUyWSUF/eP3mpec55LSeSNWz yg0= -----END CERTIFICATE-----Generated at Tue Aug 5 23:07:40 2025 by rpki-client