$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer File: c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer (raw, json) Hash identifier: YESM96fRj3izyfHfS8fA0yLDELjaSwYdJ+khlmaIxbI= Subject key identifier: C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B716FCCD2247D062CFECED720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 13:39:18 +0000 Certificate not after: Sun 09 Jan 2028 21:55:12 +0000 Subordinate resources: AS: 402062 IP: 2604:2420::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:6f:cc:d2:24:7d:06:2c:fe:ce:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 7 13:39:18 2025 GMT Not After : Jan 9 21:55:12 2028 GMT Subject: CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ba:99:27:a7:3b:c3:d6:e6:d5:b9:9b:c5:c9: 46:49:c3:14:d9:72:82:6c:63:3e:34:88:51:c0:cd: c7:1f:15:e4:7c:97:b4:0b:f1:16:6c:2e:c0:87:c1: 58:45:b8:d5:e0:30:c5:02:86:d9:7e:43:5c:73:31: a9:e8:c6:6e:ee:1c:26:4b:f5:0c:6c:63:0c:e8:e0: 44:0f:a1:46:b4:10:20:6c:cb:c2:ab:5e:dd:7a:d3: 37:18:c3:5c:d2:45:cb:8d:2b:60:92:fd:d6:b5:b5: ba:24:eb:5c:87:80:37:93:f7:29:f9:4f:e3:1c:03: 50:6a:1c:18:e5:25:21:ab:df:b3:b7:f9:b4:0a:ef: 0c:ae:94:9e:b3:18:03:7b:d1:33:7a:ec:df:44:be: b3:79:f2:71:74:9b:ee:39:b2:84:39:4c:d6:8b:3c: 22:52:ed:09:d3:f1:84:48:00:e4:6f:dc:fd:37:49: c1:46:f0:27:89:1a:91:9c:0a:46:6d:6b:2c:e0:6d: 99:4a:65:85:79:12:2c:25:ec:33:06:2b:9c:dd:20: 32:4e:fe:76:17:7e:f0:f9:90:08:9c:c8:4c:6f:26: aa:ae:10:df:29:3f:a0:94:d0:9b:50:15:fa:29:e1: 7e:48:65:76:65:cb:82:6c:02:48:57:cb:86:3b:90: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2604:2420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402062 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:05:d6:40:dc:23:55:d6:b6:e4:53:4b:ca:e0:74:e5:99:64: 58:ce:de:77:f1:4b:27:c7:69:b8:95:6a:fc:16:36:2a:67:a4: 52:a7:72:61:9a:6e:10:ed:6b:32:b1:1c:ae:bb:6c:45:c9:44: 63:9a:5e:c7:05:b0:e1:18:a6:01:2b:8e:14:be:9f:1f:96:73: 9b:84:2f:9c:86:2c:b6:cc:94:ab:80:44:5e:c0:e1:5c:6b:d2: 4a:00:8d:2f:79:5a:fd:26:24:5b:e7:f7:97:e0:c2:82:a7:0d: 30:f0:73:3b:a3:22:ff:2e:31:52:90:ad:9e:3c:76:b0:98:a0: 19:bd:8e:d1:2d:dd:e7:05:94:1d:29:9a:24:83:a2:07:e4:52: 12:f1:33:dc:e2:14:4c:17:0f:8a:cc:82:cd:de:5b:63:52:94: 36:ce:d2:29:19:85:ef:22:33:6e:66:74:3f:42:43:38:1c:76: f8:3b:67:23:70:1e:a6:29:f9:ff:7e:78:6c:b0:32:c8:30:a5: 6a:63:e9:bc:a5:61:a1:7d:04:78:c4:22:67:f7:a1:cc:8b:d2: 68:f8:57:fd:d8:38:53:47:19:94:10:d4:25:ba:f2:98:a9:7e: 1b:4b:ea:22:b9:5b:27:e4:1c:54:28:5f:b7:65:ac:bf:37:09: 69:4f:20:25 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEtxb8zSJH0GLP7O1yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwNzEzMzkxOFoXDTI4MDEwOTIxNTUxMlowLzEtMCsGA1UEAxMk YzMyNzg4ZTYtN2FiMC00YTMyLThmZjEtM2M4MjY5MGZmYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLqZJ6c7w9bm1bmbxclGScMU2XKCbGM+NIhR wM3HHxXkfJe0C/EWbC7Ah8FYRbjV4DDFAobZfkNcczGp6MZu7hwmS/UMbGMM6OBE D6FGtBAgbMvCq17detM3GMNc0kXLjStgkv3WtbW6JOtch4A3k/cp+U/jHANQahwY 5SUhq9+zt/m0Cu8MrpSesxgDe9EzeuzfRL6zefJxdJvuObKEOUzWizwiUu0J0/GE SADkb9z9N0nBRvAniRqRnApGbWss4G2ZSmWFeRIsJewzBiuc3SAyTv52F37w+ZAI nMhMbyaqrhDfKT+glNCbUBX6KeF+SGV2ZcuCbAJIV8uGO5AMlQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFMcR8OtSQ4Jlma33n8zwXsQDadsMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9j MzI3ODhlNi03YWIwLTRhMzItOGZmMS0zYzgyNjkwZmZhYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2MzMjc4OGU2LTdhYjAtNGEzMi04 ZmYxLTNjODI2OTBmZmFhOS9jMzI3ODhlNi03YWIwLTRhMzItOGZmMS0zYzgyNjkw ZmZhYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBCQgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYijjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBvBdZA3CNV1rbkU0vK4HTlmWRYzt538Usnx2m4lWr8FjYq Z6RSp3Jhmm4Q7WsysRyuu2xFyURjml7HBbDhGKYBK44Uvp8flnObhC+chiy2zJSr gERewOFca9JKAI0veVr9JiRb5/eX4MKCpw0w8HM7oyL/LjFSkK2ePHawmKAZvY7R Ld3nBZQdKZokg6IH5FIS8TPc4hRMFw+KzILN3ltjUpQ2ztIpGYXvIjNuZnQ/QkM4 HHb4O2cjcB6mKfn/fnhssDLIMKVqY+m8pWGhfQR4xCJn96HMi9Jo+Ff92DhTRxmU ENQluvKYqX4bS+oiuVsn5BxUKF+3Zay/NwlpTyAl -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:30 2025 by rpki-client