$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer File: bff64bc2-33e0-4980-b94c-1b0369245ea4.cer (raw, json) Hash identifier: mXoucS7sFqPma9wB71I+3mORL4gxvlRn0llLuT2TZ20= Subject key identifier: FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A76A1DF641734625ED149FD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Jul 2025 17:32:18 +0000 Certificate not after: Tue 12 Oct 2027 17:32:18 +0000 Subordinate resources: AS: 215129 IP: 23.135.52.0/24 IP: 2602:f6d8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:a1:df:64:17:34:62:5e:d1:49:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 9 17:32:18 2025 GMT Not After : Oct 12 17:32:18 2027 GMT Subject: CN=bff64bc2-33e0-4980-b94c-1b0369245ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:d8:51:9b:78:25:35:ae:31:10:5e:f7:a2: e9:4a:c0:26:9c:c5:21:45:7d:02:15:54:be:7c:44: 2c:f6:af:82:61:ce:46:4d:4e:95:38:f9:a1:44:6e: 02:f4:a8:15:04:48:b6:e4:18:c9:e9:76:5d:ae:38: 12:07:54:83:56:7a:b7:fc:12:71:21:c5:32:4c:2e: d2:f7:1f:4f:e7:34:e8:cc:83:dc:dd:eb:d9:ac:80: 46:77:b7:3e:80:a6:c8:e5:e6:dc:f5:a6:fb:c2:c7: 98:3b:73:94:e0:21:65:f7:0f:45:85:47:7f:c3:94: 74:92:e0:f3:f9:40:ee:74:0a:ca:5b:f6:df:4a:0c: 2f:ba:41:e8:2a:46:83:cd:e1:04:27:ca:b7:94:95: 5a:92:fb:90:99:ba:bc:cf:eb:7b:4d:3a:aa:ec:cf: 59:61:f1:b6:db:24:a4:b1:32:72:0b:cd:32:87:c4: 93:2b:45:e6:33:61:66:bb:e4:30:ac:69:a4:fe:18: 76:65:54:5d:70:5c:f9:1e:88:ea:eb:f4:33:d8:e1: 2e:fb:ef:49:f4:dd:4d:0f:41:a7:d3:2a:f8:61:42: 39:4e:91:20:f6:88:e3:93:81:07:40:5e:33:3b:82: 89:91:80:5e:1e:ab:97:d7:74:7e:e7:57:a3:a9:b4: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.135.52.0/24 IPv6: 2602:f6d8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215129 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:84:91:ab:ac:c9:d2:c7:86:73:5f:34:3f:4d:39:f1:74:53: 6e:ac:21:57:24:12:b9:a4:25:8e:78:b1:e9:da:38:cd:19:19: be:51:be:89:51:0d:7f:26:1d:ef:5e:89:49:e1:c9:78:cd:5d: d9:c9:38:70:cb:91:73:c4:ce:37:fe:02:dc:ca:e5:fd:58:6a: 6e:bc:ec:2b:c8:4d:88:ad:9a:12:70:b9:d8:e7:20:f6:f6:f5: ff:51:45:b2:3a:e4:9e:27:00:7d:98:fb:5e:50:c9:b4:f8:e8: e9:9d:49:2e:ee:92:64:e2:97:38:98:d7:f9:71:f3:dd:53:f0: 1e:f1:0a:1c:2b:1a:db:3d:6b:f6:ec:a1:e7:ff:68:3c:ca:5f: 43:bd:f5:05:df:5a:d1:7e:9f:84:d9:93:24:bc:58:bc:c8:a1: 10:9a:07:d1:99:76:2e:49:7c:04:a8:26:bc:6d:3b:af:64:4f: eb:35:ef:73:d4:1e:c9:47:af:ef:bb:32:2c:28:31:0c:84:12: 6f:5e:d0:10:dc:d3:b2:d1:72:5a:5a:d4:4a:3d:c8:a5:04:4f: 17:97:8a:38:5a:2a:ed:f0:2f:5c:ba:61:be:0b:47:81:4a:f8: 35:d1:0f:c0:78:9e:19:bf:89:1f:cb:ac:94:16:a5:a0:a0:ca: 0b:55:ad:ce -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEp2od9kFzRiXtFJ/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcwOTE3MzIxOFoXDTI3MTAxMjE3MzIxOFowLzEtMCsGA1UEAxMk YmZmNjRiYzItMzNlMC00OTgwLWI5NGMtMWIwMzY5MjQ1ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HLYUZt4JTWuMRBe96LpSsAmnMUhRX0CFVS+ fEQs9q+CYc5GTU6VOPmhRG4C9KgVBEi25BjJ6XZdrjgSB1SDVnq3/BJxIcUyTC7S 9x9P5zTozIPc3evZrIBGd7c+gKbI5ebc9ab7wseYO3OU4CFl9w9FhUd/w5R0kuDz +UDudArKW/bfSgwvukHoKkaDzeEEJ8q3lJVakvuQmbq8z+t7TTqq7M9ZYfG22ySk sTJyC80yh8STK0XmM2Fmu+QwrGmk/hh2ZVRdcFz5Hojq6/Qz2OEu++9J9N1ND0Gn 0yr4YUI5TpEg9ojjk4EHQF4zO4KJkYBeHquX13R+51ejqbTv2wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPvyS29ch2OYTm6OIH5FQ+nlPQx3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i ZmY2NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAzNjkyNDVlYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2JmZjY0YmMyLTMzZTAtNDk4MC1i OTRjLTFiMDM2OTI0NWVhNC9iZmY2NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAzNjky NDVlYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhzQwDgQCAAIwCAMGBCYC9tgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNIWTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCphJGrrMnSx4ZzXzQ/TTnxdFNu rCFXJBK5pCWOeLHp2jjNGRm+Ub6JUQ1/Jh3vXolJ4cl4zV3ZyThwy5FzxM43/gLc yuX9WGpuvOwryE2IrZoScLnY5yD29vX/UUWyOuSeJwB9mPteUMm0+OjpnUku7pJk 4pc4mNf5cfPdU/Ae8QocKxrbPWv27KHn/2g8yl9DvfUF31rRfp+E2ZMkvFi8yKEQ mgfRmXYuSXwEqCa8bTuvZE/rNe9z1B7JR6/vuzIsKDEMhBJvXtAQ3NOy0XJaWtRK PcilBE8Xl4o4Wirt8C9cumG+C0eBSvg10Q/AeJ4Zv4kfy6yUFqWgoMoLVa3O -----END CERTIFICATE-----Generated at Wed Nov 5 05:09:06 2025 by rpki-client