$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.cer File: ac2e2011-65d2-4c1e-87c4-772ec37e8e19.cer (raw, json) Hash identifier: sI2lX1zuoSW7LUFoAKotT4rfpoE0bxtbcSJ7N5q269U= Subject key identifier: EE:98:1D:F8:D1:CF:E3:56:D8:21:51:DF:47:16:F7:C5:43:05:0B:21 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B74635B40C01703C4D35A7900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 15:01:40 +0000 Certificate not after: Tue 11 Jan 2028 16:01:40 +0000 Subordinate resources: AS: 399348 IP: 169.197.128.0/24 IP: 2605:e1c0::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:63:5b:40:c0:17:03:c4:d3:5a:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 8 15:01:40 2025 GMT Not After : Jan 11 16:01:40 2028 GMT Subject: CN=ac2e2011-65d2-4c1e-87c4-772ec37e8e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:32:a9:44:1d:c0:bb:ce:b6:7a:f3:59:aa: 78:a6:91:df:74:cb:cc:f2:0c:4a:5e:15:06:45:ea: aa:c7:b3:ca:97:f4:83:bb:fa:08:39:8d:f3:e0:8f: bb:a7:af:d4:9e:5b:b2:b8:b7:f7:f3:15:1f:00:be: a3:a8:de:8c:11:a8:c4:4d:70:1d:f1:26:26:4f:01: 23:5c:9d:85:16:1d:a6:d2:45:d2:08:83:66:e7:ac: 69:3d:90:00:3b:30:f4:aa:24:8a:d9:bf:05:7d:ea: ac:66:85:31:c8:8b:5d:66:4c:95:bb:64:a4:e8:07: f4:72:59:4c:51:55:9e:82:76:94:d3:c4:03:20:99: 4d:1d:ba:8c:d2:61:c5:30:64:ad:62:c4:cf:ba:fe: 71:40:c2:e0:58:e7:b1:b1:80:16:89:69:73:a7:1f: c7:fc:53:43:ed:cc:3e:ce:2e:23:41:af:31:21:14: 7e:a5:db:f6:c5:29:63:4e:4c:76:cc:08:d0:0e:0d: 6e:c2:0f:60:8a:76:4c:49:ec:47:91:0b:51:fc:cb: 0b:75:68:68:d1:64:c0:a5:7b:b6:3c:67:2b:6e:68: df:25:cf:b0:c4:7b:dc:e9:16:47:2d:6e:8d:c3:02: 62:22:ae:9f:df:a9:98:26:bd:b6:49:c6:ab:24:d3: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:98:1D:F8:D1:CF:E3:56:D8:21:51:DF:47:16:F7:C5:43:05:0B:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac2e2011-65d2-4c1e-87c4-772ec37e8e19/ac2e2011-65d2-4c1e-87c4-772ec37e8e19.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 169.197.128.0/24 IPv6: 2605:e1c0::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399348 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:cb:7c:28:9f:2c:fa:f9:62:b8:89:16:fb:4a:67:c7:73:50: eb:fc:d6:6e:e8:6b:ff:82:8c:d5:73:85:9b:f9:a6:22:2a:10: 54:9c:8e:49:28:4b:d1:f8:00:0c:ef:04:78:1b:37:45:56:a2: 7d:fa:8b:f3:7d:25:48:79:a8:01:e5:de:88:e0:3b:ff:84:6b: dc:9e:2c:d4:45:82:df:f6:b1:80:4c:61:58:71:c4:43:c0:34: a4:27:7c:63:9c:3c:df:c0:78:a7:d0:fd:7d:c4:8d:cb:47:05: b8:9d:7e:56:25:25:6c:00:1d:24:f2:21:51:55:da:0e:1e:90: 9b:06:a3:c0:8f:07:70:98:22:3b:57:8d:bf:87:30:8d:c9:a2: ba:00:32:82:18:0a:f4:2d:7b:b9:dd:fc:b1:16:18:b1:53:ec: f9:79:4d:e4:c4:7e:25:21:bf:6f:0b:d5:51:d6:1e:e6:48:fb: 78:b1:8b:5b:be:2d:e8:64:d5:ac:c6:14:80:33:d0:10:6f:74: 04:50:18:e8:20:bf:d4:3e:a2:bc:ff:9c:d4:14:eb:09:6a:2e: c9:7e:6a:c1:5d:15:98:f8:ba:be:d7:64:24:31:5f:34:5c:7c: 68:23:7c:a7:f2:c3:e0:d2:16:54:0a:71:76:70:61:71:88:13: 67:b7:5e:97 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEt0Y1tAwBcDxNNaeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwODE1MDE0MFoXDTI4MDExMTE2MDE0MFowLzEtMCsGA1UEAxMk YWMyZTIwMTEtNjVkMi00YzFlLTg3YzQtNzcyZWMzN2U4ZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRMyqUQdwLvOtnrzWap4ppHfdMvM8gxKXhUG Reqqx7PKl/SDu/oIOY3z4I+7p6/UnluyuLf38xUfAL6jqN6MEajETXAd8SYmTwEj XJ2FFh2m0kXSCINm56xpPZAAOzD0qiSK2b8FfeqsZoUxyItdZkyVu2Sk6Af0cllM UVWegnaU08QDIJlNHbqM0mHFMGStYsTPuv5xQMLgWOexsYAWiWlzpx/H/FND7cw+ zi4jQa8xIRR+pdv2xSljTkx2zAjQDg1uwg9ginZMSexHkQtR/MsLdWho0WTApXu2 PGcrbmjfJc+wxHvc6RZHLW6NwwJiIq6f36mYJr22ScarJNN29QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFO6YHfjRz+NW2CFR30cW98VDBQshMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9h YzJlMjAxMS02NWQyLTRjMWUtODdjNC03NzJlYzM3ZThlMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2FjMmUyMDExLTY1ZDItNGMxZS04 N2M0LTc3MmVjMzdlOGUxOS9hYzJlMjAxMS02NWQyLTRjMWUtODdjNC03NzJlYzM3 ZThlMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBACpxYAwDQQCAAIwBwMFBCYF4cAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhf0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAHLfCifLPr5YriJFvtKZ8dzUOv8 1m7oa/+CjNVzhZv5piIqEFScjkkoS9H4AAzvBHgbN0VWon36i/N9JUh5qAHl3ojg O/+Ea9yeLNRFgt/2sYBMYVhxxEPANKQnfGOcPN/AeKfQ/X3EjctHBbidflYlJWwA HSTyIVFV2g4ekJsGo8CPB3CYIjtXjb+HMI3JoroAMoIYCvQte7nd/LEWGLFT7Pl5 TeTEfiUhv28L1VHWHuZI+3ixi1u+Lehk1azGFIAz0BBvdARQGOggv9Q+orz/nNQU 6wlqLsl+asFdFZj4ur7XZCQxXzRcfGgjfKfyw+DSFlQKcXZwYXGIE2e3Xpc= -----END CERTIFICATE-----Generated at Wed Nov 5 19:05:11 2025 by rpki-client