$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer File: d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer (raw, json) Hash identifier: 31npX4izeWvG/lM3NMSy+iTTNCKyrbj1hxVzl/V3m0U= Subject key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B2ECDA098F80B8D24A3F89E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Sep 2025 16:49:12 +0000 Certificate not after: Fri 17 Dec 2027 17:49:12 +0000 Subordinate resources: AS: 40536 IP: 23.139.196.0/24 IP: 2602:f629::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:cd:a0:98:f8:0b:8d:24:a3:f8:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 13 16:49:12 2025 GMT Not After : Dec 17 17:49:12 2027 GMT Subject: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:e4:d2:d7:de:b6:a0:49:93:50:3f:1c:9d: 3b:29:9d:0d:9f:69:d9:53:07:9d:e0:b7:b7:01:f1: f0:b4:33:d8:4d:7c:f0:9a:e1:2f:2a:80:6f:ff:71: 58:dd:28:ca:dc:38:79:66:16:c4:ca:e3:78:bd:d2: cc:d5:d6:4b:cf:23:22:8c:02:ff:e1:19:bf:11:01: 54:66:e9:2b:13:9a:8f:a4:5a:06:2d:77:ed:54:50: 80:ce:59:a8:88:d2:49:a6:76:04:8f:81:25:e8:67: fc:30:13:cd:a6:54:b5:ff:e7:79:e8:69:24:65:bf: f9:e8:43:d5:d9:b7:91:32:ac:35:c6:e7:11:11:06: c5:28:f9:d9:4f:28:b9:df:d9:77:89:2d:ed:45:a0: d2:61:5c:20:59:43:6e:4a:ac:b7:4b:c7:56:1a:58: bc:61:99:38:bf:b7:02:de:37:c3:0f:1d:ae:96:89: 35:c2:a0:df:a4:1d:ac:c1:fc:04:0c:f7:f0:ce:6f: 37:d8:1a:2f:37:4e:dd:2c:2b:6f:72:74:f1:43:3b: 0e:e0:e5:9a:dd:00:7d:db:02:7c:e1:76:98:c4:3a: 5e:be:db:af:06:a2:df:70:a6:32:2b:91:5d:e9:cd: 4e:3c:d4:39:c1:71:bf:51:46:6c:0f:f4:05:54:99: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.139.196.0/24 IPv6: 2602:f629::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40536 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e0:65:99:c2:80:d2:d6:99:9a:48:38:2f:2b:12:7c:41:76: ff:0c:8f:55:3c:54:78:70:11:86:8b:6f:4d:69:89:d6:10:59: 0e:77:30:d0:5a:bc:9e:c8:8c:73:30:00:3e:a4:9c:c1:54:74: 74:03:c7:9e:7b:9a:cf:5c:46:ba:60:50:82:32:b1:e9:43:77: 58:51:23:b4:48:9b:0a:b2:af:13:ed:d8:43:fa:4d:ee:94:ad: f0:02:01:21:cd:90:46:e3:7e:5e:d9:8e:e5:b6:36:42:4b:db: b9:29:16:d1:91:93:1b:6c:8d:a6:3b:b3:8c:99:18:30:15:29: aa:3c:9b:93:1d:71:f0:67:ed:02:59:62:b2:72:fc:3e:6c:f3: 1f:9e:23:e6:4a:7d:68:87:b6:4c:13:df:e0:13:01:d8:9e:31: fc:8c:d3:81:e0:d9:1b:7a:a0:b6:07:61:52:a0:6d:99:10:a7: e6:7f:0c:cf:07:82:9f:22:18:16:0a:ce:18:30:69:ba:6a:29: 3d:67:18:27:fd:ac:01:18:a3:da:96:e7:fc:65:77:73:d2:8a: 0f:ab:48:aa:32:de:48:07:ab:d0:28:68:fe:5e:7f:85:e3:e9: e7:64:6d:e8:ff:03:ff:2e:79:c6:a6:70:97:d0:69:29:bc:90: 41:8b:81:51 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEsuzaCY+AuNJKP4noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxMzE2NDkxMloXDTI3MTIxNzE3NDkxMlowLzEtMCsGA1UEAxMk ZDJlNDU5MTItZTZlMy00MDBjLWIwYmUtNGY2YzcwMDFmNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJXk0tfetqBJk1A/HJ07KZ0Nn2nZUwed4Le3 AfHwtDPYTXzwmuEvKoBv/3FY3SjK3Dh5ZhbEyuN4vdLM1dZLzyMijAL/4Rm/EQFU ZukrE5qPpFoGLXftVFCAzlmoiNJJpnYEj4El6Gf8MBPNplS1/+d56GkkZb/56EPV 2beRMqw1xucREQbFKPnZTyi539l3iS3tRaDSYVwgWUNuSqy3S8dWGli8YZk4v7cC 3jfDDx2ulok1wqDfpB2swfwEDPfwzm832BovN07dLCtvcnTxQzsO4OWa3QB92wJ8 4XaYxDpevtuvBqLfcKYyK5Fd6c1OPNQ5wXG/UUZsD/QFVJnunQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKlz/VasYVmD9r8hzLZROIaxLiAfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k MmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAwMWY1Y2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2QyZTQ1OTEyLWU2ZTMtNDAwYy1i MGJlLTRmNmM3MDAxZjVjYi9kMmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAw MWY1Y2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXi8QwDgQCAAIwCAMGBCYC9ikAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCeWDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU4GWZwoDS1pmaSDgvKxJ8QXb/ DI9VPFR4cBGGi29NaYnWEFkOdzDQWryeyIxzMAA+pJzBVHR0A8eee5rPXEa6YFCC MrHpQ3dYUSO0SJsKsq8T7dhD+k3ulK3wAgEhzZBG435e2Y7ltjZCS9u5KRbRkZMb bI2mO7OMmRgwFSmqPJuTHXHwZ+0CWWKycvw+bPMfniPmSn1oh7ZME9/gEwHYnjH8 jNOB4NkbeqC2B2FSoG2ZEKfmfwzPB4KfIhgWCs4YMGm6aik9Zxgn/awBGKPaluf8 ZXdz0ooPq0iqMt5IB6vQKGj+Xn+F4+nnZG3o/wP/LnnGpnCX0GkpvJBBi4FR -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:47 2025 by rpki-client