$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468.cer File: e02eda8d-679a-4d59-95c2-5097086d9468.cer (raw, json) Hash identifier: OMwK0i+0aahfvtv2kPhxJFK0e/gMtrzl4Lckn1CBSzQ= Subject key identifier: EB:CC:92:05:D7:EB:EE:E2:83:D2:F3:66:F4:6B:35:74:41:D6:E0:6E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AAE45D97BE453ED00BCE01C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Jul 2025 15:52:09 +0000 Certificate not after: Mon 01 Nov 2027 15:52:09 +0000 Subordinate resources: AS: 33647 IP: 66.44.240.0/20 IP: 66.226.32.0/19 IP: 67.213.32.0/19 IP: 2604:7200::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ae:45:d9:7b:e4:53:ed:00:bc:e0:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 29 15:52:09 2025 GMT Not After : Nov 1 15:52:09 2027 GMT Subject: CN=e02eda8d-679a-4d59-95c2-5097086d9468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:04:3b:c4:24:66:37:dc:1f:7e:43:d8:62: 65:19:9e:bf:3b:e4:a4:26:bb:38:bb:99:56:83:51: ba:24:d2:48:c2:07:86:a4:c3:88:9a:f7:a8:34:b6: b2:e9:ae:c8:3b:f5:6a:8d:1c:c1:60:09:06:7d:75: 97:97:13:4e:71:2c:67:d6:68:0d:14:20:47:19:8c: 26:f5:d7:95:e6:35:b3:88:de:79:ec:6b:c6:44:e8: c3:0e:db:bb:81:62:05:9f:83:19:0d:fd:1c:5f:fb: 7a:dd:d7:e3:b0:8c:b3:27:2e:a3:8b:10:d0:eb:25: 6f:1b:21:61:a1:e8:d5:22:de:f8:92:00:8d:b9:9f: 18:a6:e7:fe:b5:94:03:6a:74:c7:69:c9:1d:1b:b7: cd:eb:03:72:b6:d0:c5:3b:a9:64:98:ca:1f:78:89: a5:2d:d6:51:cf:72:bb:ef:1a:0b:cf:40:d0:67:e9: b6:3f:50:e8:f0:27:34:a3:2e:44:04:3e:bd:91:a0: 7a:d9:5d:14:e9:70:cd:df:bb:84:74:a3:cd:d8:a2: a8:9b:e6:62:00:8a:d7:ac:ee:81:bd:36:29:e6:a4: f0:39:e9:5c:55:b4:2d:07:f8:9b:91:51:17:0f:d4: 2a:df:67:57:3e:a0:5a:55:07:09:61:d6:51:39:42: 39:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CC:92:05:D7:EB:EE:E2:83:D2:F3:66:F4:6B:35:74:41:D6:E0:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e02eda8d-679a-4d59-95c2-5097086d9468/e02eda8d-679a-4d59-95c2-5097086d9468.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 66.44.240.0/20 66.226.32.0/19 67.213.32.0/19 IPv6: 2604:7200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33647 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:05:9b:47:d9:0b:ce:92:9f:5d:8e:81:a2:4f:68:fb:6b:13: 0e:4d:fb:64:76:c4:b9:af:cd:e4:11:0c:b1:91:3b:43:e6:88: 9f:55:2e:23:f0:09:d8:7b:ec:22:34:40:81:e5:92:a6:9e:82: d1:ca:14:6c:92:50:c3:46:01:2e:00:0b:2c:11:8c:94:d5:f5: 95:35:49:ca:13:aa:e6:a5:bc:4d:67:6b:0b:70:ae:25:20:87: 04:f8:9b:f0:69:7d:9b:31:a4:6a:d1:33:39:3f:a3:fb:be:eb: e4:40:b6:00:1d:eb:c7:62:9e:da:17:63:cb:d2:1c:c4:1c:c9: fd:18:03:31:db:2b:6f:d2:1f:8f:90:63:a4:3f:3b:7f:9e:4f: 36:42:93:5e:e4:9e:cb:ec:6f:0c:9f:0b:13:7b:6a:53:41:8f: 74:19:79:cf:1b:12:8d:2b:71:e6:0d:59:69:a5:4e:c5:2c:e0: b4:95:68:ac:20:cc:45:87:aa:61:0d:c6:ce:68:45:eb:94:23: 0e:6e:9c:35:2b:bd:10:b4:69:6d:b2:3f:b6:ca:4b:94:e4:07: a3:89:db:63:e4:52:eb:04:11:14:5e:95:66:08:1e:b9:53:02: dc:22:d1:bd:42:6c:c1:83:12:a8:75:3d:cd:b9:49:ce:c8:c0: 2b:8d:09:27 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEquRdl75FPtALzgHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyOTE1NTIwOVoXDTI3MTEwMTE1NTIwOVowLzEtMCsGA1UEAxMk ZTAyZWRhOGQtNjc5YS00ZDU5LTk1YzItNTA5NzA4NmQ5NDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2UEO8QkZjfcH35D2GJlGZ6/O+SkJrs4u5lW g1G6JNJIwgeGpMOImveoNLay6a7IO/VqjRzBYAkGfXWXlxNOcSxn1mgNFCBHGYwm 9deV5jWziN557GvGROjDDtu7gWIFn4MZDf0cX/t63dfjsIyzJy6jixDQ6yVvGyFh oejVIt74kgCNuZ8Ypuf+tZQDanTHackdG7fN6wNyttDFO6lkmMofeImlLdZRz3K7 7xoLz0DQZ+m2P1Do8Cc0oy5EBD69kaB62V0U6XDN37uEdKPN2KKom+ZiAIrXrO6B vTYp5qTwOelcVbQtB/ibkVEXD9Qq32dXPqBaVQcJYdZROUI5uQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFOvMkgXX6+7ig9LzZvRrNXRB1uBuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l MDJlZGE4ZC02NzlhLTRkNTktOTVjMi01MDk3MDg2ZDk0NjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2UwMmVkYThkLTY3OWEtNGQ1OS05 NWMyLTUwOTcwODZkOTQ2OC9lMDJlZGE4ZC02NzlhLTRkNTktOTVjMi01MDk3MDg2 ZDk0NjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARCLPADBAVC4iADBAVD1SAwDQQCAAIwBwMFACYE cgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAINvMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADEFm0fZC86S n12OgaJPaPtrEw5N+2R2xLmvzeQRDLGRO0PmiJ9VLiPwCdh77CI0QIHlkqaegtHK FGySUMNGAS4ACywRjJTV9ZU1ScoTqualvE1nawtwriUghwT4m/BpfZsxpGrRMzk/ o/u+6+RAtgAd68dintoXY8vSHMQcyf0YAzHbK2/SH4+QY6Q/O3+eTzZCk17knsvs bwyfCxN7alNBj3QZec8bEo0rceYNWWmlTsUs4LSVaKwgzEWHqmENxs5oReuUIw5u nDUrvRC0aW2yP7bKS5TkB6OJ22PkUusEERRelWYIHrlTAtwi0b1CbMGDEqh1Pc25 Sc7IwCuNCSc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:19 2025 by rpki-client