$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer File: d1d57239-6176-4c8d-9a7e-f9fea380a1a2.cer (raw, json) Hash identifier: JDUXQi6PSlWa61sK5wwN/ynrSakXWOm4+cbuFLnnE7w= Subject key identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AB6D8DE32F0294D996BDA2A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 17:34:51 +0000 Certificate not after: Thu 04 Nov 2027 17:34:51 +0000 Subordinate resources: AS: 12167 AS: 26527 IP: 69.166.96.0/21 IP: 104.232.32.0/22 IP: 107.161.144.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:d8:de:32:f0:29:4d:99:6b:da:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 1 17:34:51 2025 GMT Not After : Nov 4 17:34:51 2027 GMT Subject: CN=d1d57239-6176-4c8d-9a7e-f9fea380a1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:37:d8:cc:b5:a0:42:07:c2:2c:94:96:6a: ed:1f:68:42:34:ae:dc:85:eb:fe:7e:00:91:91:60: 77:54:6c:5a:ca:cd:73:40:06:74:24:ef:84:43:43: d7:2e:ae:5f:ae:e2:42:27:73:03:40:ee:eb:56:07: 17:c4:3e:6e:06:bc:4e:33:e5:a1:55:91:73:fe:5c: fb:1c:5f:57:a7:72:60:f5:4f:f9:72:bd:88:c0:b1: bc:6a:0f:35:6f:03:44:26:de:77:95:c9:e2:7a:bf: b4:bc:e4:b1:08:0b:17:cf:90:46:cf:59:0c:64:c0: d6:87:ba:6d:05:ea:65:68:56:15:57:5d:ac:b6:b4: d8:f1:e4:da:f2:8a:47:43:4c:49:39:63:9b:de:3e: 0d:de:c9:e0:06:0f:bc:e2:67:23:f4:fa:9e:9b:7e: 60:9f:a1:7d:f0:5c:12:8f:57:df:eb:d6:fe:d8:66: 9d:d6:87:e6:1f:22:82:99:8a:27:a3:b7:20:de:24: 20:8c:62:c7:ff:8b:e8:c9:b0:90:55:35:fb:c9:0a: cf:71:be:2f:29:ff:70:83:17:e7:b8:eb:d9:51:ec: c8:19:6d:06:84:0d:09:d5:0f:8f:5d:4d:33:0e:c1: 87:45:c5:d6:6d:07:f6:59:cd:7e:e9:d5:c5:ff:7b: 28:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0E:19:88:64:18:83:E1:80:8D:48:79:CD:51:23:88:2E:59:37:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1d57239-6176-4c8d-9a7e-f9fea380a1a2/d1d57239-6176-4c8d-9a7e-f9fea380a1a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 69.166.96.0/21 104.232.32.0/22 107.161.144.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12167 26527 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:76:27:f2:0d:6c:4a:50:b2:6e:c1:48:96:23:6f:38:2f:91: 0e:0e:2a:03:16:80:d8:30:56:4a:28:cc:79:b7:fd:78:b2:0a: 69:d0:0b:38:f7:0c:f2:11:a0:9a:d5:97:19:14:8a:df:c0:17: 99:2f:6b:b5:b4:e2:bc:04:f3:ee:39:2a:3a:af:30:33:2b:db: 77:a9:43:9f:45:c4:af:1e:18:11:11:c5:9a:73:e7:f9:4a:72: 41:26:f3:9d:ec:07:c0:9b:8e:e3:87:95:01:5a:d2:60:48:7d: 7f:4f:b0:bf:7a:cc:1a:04:b6:67:0d:66:b6:72:b1:ed:d7:20: 0c:de:2f:4b:24:ba:91:c7:f5:aa:41:93:0a:13:0b:c3:eb:51: 1e:29:53:91:1d:a5:a2:0f:5b:dc:f3:a4:74:b3:0a:a9:7f:60: c3:ca:70:bc:c6:45:c4:bc:dc:00:5a:6c:f6:37:f4:04:1f:ed: fc:91:23:00:66:92:7d:79:da:8e:d0:f1:92:33:a4:a2:d6:b1: 8c:73:b1:4c:2c:a5:d1:92:aa:6b:9c:7a:67:da:05:59:ef:c3: 49:2e:66:5f:9c:93:f8:ab:28:ef:d3:d4:1b:83:1b:02:bb:a0: 97:24:79:29:4c:7e:0e:7f:e0:4f:5f:3f:b6:9c:72:9a:9e:a9: 23:02:48:36 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEq22N4y8ClNmWvaKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgwMTE3MzQ1MVoXDTI3MTEwNDE3MzQ1MVowLzEtMCsGA1UEAxMk ZDFkNTcyMzktNjE3Ni00YzhkLTlhN2UtZjlmZWEzODBhMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyos32My1oEIHwiyUlmrtH2hCNK7chev+fgCR kWB3VGxays1zQAZ0JO+EQ0PXLq5fruJCJ3MDQO7rVgcXxD5uBrxOM+WhVZFz/lz7 HF9Xp3Jg9U/5cr2IwLG8ag81bwNEJt53lcnier+0vOSxCAsXz5BGz1kMZMDWh7pt BeplaFYVV12strTY8eTa8opHQ0xJOWOb3j4N3sngBg+84mcj9Pqem35gn6F98FwS j1ff69b+2Gad1ofmHyKCmYono7cg3iQgjGLH/4voybCQVTX7yQrPcb4vKf9wgxfn uOvZUezIGW0GhA0J1Q+PXU0zDsGHRcXWbQf2Wc1+6dXF/3so5QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFG0OGYhkGIPhgI1Iec1RI4guWTehMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k MWQ1NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZlYTM4MGExYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2QxZDU3MjM5LTYxNzYtNGM4ZC05 YTdlLWY5ZmVhMzgwYTFhMi9kMWQ1NzIzOS02MTc2LTRjOGQtOWE3ZS1mOWZlYTM4 MGExYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBANFpmADBAJo6CADBAJroZAwHQYIKwYBBQUHAQgB Af8EDjAMoAowCAICL4cCAmefMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE52J/INbEpQsm7BSJYjbzgvkQ4O KgMWgNgwVkoozHm3/XiyCmnQCzj3DPIRoJrVlxkUit/AF5kva7W04rwE8+45Kjqv MDMr23epQ59FxK8eGBERxZpz5/lKckEm853sB8CbjuOHlQFa0mBIfX9PsL96zBoE tmcNZrZyse3XIAzeL0skupHH9apBkwoTC8PrUR4pU5EdpaIPW9zzpHSzCql/YMPK cLzGRcS83ABabPY39AQf7fyRIwBmkn152o7Q8ZIzpKLWsYxzsUwspdGSqmucemfa BVnvw0kuZl+ck/irKO/T1BuDGwK7oJckeSlMfg5/4E9fP7accpqeqSMCSDY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:49:23 2025 by rpki-client