$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer File: e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.cer (raw, json) Hash identifier: Lykp+CY4lwMehchWVSbUCHZH+HIp5aOHi1d1/D1QX5w= Subject key identifier: EA:EC:28:51:68:FE:14:53:E5:D4:06:E6:0E:C4:79:48:02:39:05:BC Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584A9F35EC36D25795825C35B100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Jul 2025 06:22:56 +0000 Certificate not after: Wed 27 Oct 2027 06:22:56 +0000 Subordinate resources: AS: 4905 AS: 46891 IP: 74.114.32.0/22 IP: 74.120.16.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:35:ec:36:d2:57:95:82:5c:35:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Jul 24 06:22:56 2025 GMT Not After : Oct 27 06:22:56 2027 GMT Subject: CN=e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f9:bd:a2:ab:bd:b9:2d:6c:82:2a:eb:e6:19: 96:91:d9:f5:a0:81:c2:8f:a7:fd:1b:8a:6d:9e:05: 63:c7:22:c2:25:5a:8d:13:88:f3:bd:45:c4:59:9e: 63:ec:73:36:73:fe:ad:05:59:f6:fd:4a:6e:89:59: ad:2b:c1:c4:a6:73:e1:82:b3:8a:bd:d3:c1:01:1a: 22:ba:ee:88:36:05:4d:22:c0:e6:0d:62:b4:90:5d: b4:5f:b0:4f:bc:19:54:60:06:b1:e6:1b:e1:5d:97: 18:8f:a7:04:19:6b:4b:28:f0:55:39:7e:03:da:f5: 05:af:3c:85:13:a2:45:bf:f8:8a:6c:17:3b:a7:5f: c2:a4:9a:b3:bc:ab:2c:87:46:af:42:d5:33:04:6c: 2e:5b:b7:ef:b8:4f:3a:e9:17:b5:fe:46:90:aa:95: b7:32:27:97:0b:78:03:e5:f6:f7:a8:6c:f4:71:cd: 4e:28:73:74:3c:04:df:ee:d3:53:1a:7f:07:e4:95: b3:46:ca:d1:17:d9:ad:ab:b3:76:6f:a1:91:4b:8c: 73:ea:02:a5:b7:2b:21:63:b5:50:d3:79:e3:b7:3d: 48:86:1f:0f:ef:5c:93:58:25:e6:6a:c5:43:f3:e7: 78:a6:a4:ff:aa:0a:7c:3f:ff:c2:f8:f8:18:c3:8b: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:28:51:68:FE:14:53:E5:D4:06:E6:0E:C4:79:48:02:39:05:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 74.114.32.0/22 74.120.16.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4905 46891 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:0a:76:cd:47:af:68:13:fc:6b:fa:28:a9:29:86:83:02:a6: c7:d1:f4:2f:bd:29:14:47:b0:71:8f:e7:b9:5f:22:8f:ca:c7: 38:54:c4:61:b7:67:22:a4:3c:da:0e:b0:26:eb:d2:7b:63:77: 3e:c4:48:48:de:58:c3:61:82:38:0e:2d:16:f6:b0:11:37:df: 4e:a9:cd:80:4f:5c:a9:cb:bb:93:d6:06:d1:d7:41:70:27:70: 11:c5:78:bd:3f:16:7a:5c:6f:0b:9d:a6:a5:ec:10:da:ae:8c: ab:bb:78:78:9f:68:14:29:b5:70:db:d8:41:1f:df:7e:9f:b1: fc:93:f6:cd:02:18:64:b0:d0:0b:17:8d:56:51:23:3a:e4:37: a6:aa:1f:9e:ac:ac:71:0e:92:ad:41:a3:f2:0b:c8:02:49:62: 7d:7f:00:14:6f:2f:78:02:1e:a4:4e:f3:a1:36:98:32:f8:c3: 70:7e:fa:e5:c8:a2:9f:76:21:fd:2e:15:99:dc:1b:4a:f2:cc: 8c:03:07:17:8a:f4:74:85:4c:43:04:a3:fa:27:2c:6e:42:47: 6c:24:fe:d6:4e:c0:09:bd:7e:f2:e4:67:71:98:89:4c:b4:d0: 12:76:00:2d:bf:1c:f6:70:6e:15:ba:36:93:d5:d9:d6:a4:6d: 4e:77:66:5b -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEqfNew20leVglw1sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDcyNDA2MjI1NloXDTI3MTAyNzA2MjI1NlowLzEtMCsGA1UEAxMk ZTNmMjFiZDktMjkxMy00ZDIzLWI5ZDEtMjBkZWI5YjRmYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPm9oqu9uS1sgirr5hmWkdn1oIHCj6f9G4pt ngVjxyLCJVqNE4jzvUXEWZ5j7HM2c/6tBVn2/UpuiVmtK8HEpnPhgrOKvdPBARoi uu6INgVNIsDmDWK0kF20X7BPvBlUYAax5hvhXZcYj6cEGWtLKPBVOX4D2vUFrzyF E6JFv/iKbBc7p1/CpJqzvKssh0avQtUzBGwuW7fvuE866Re1/kaQqpW3MieXC3gD 5fb3qGz0cc1OKHN0PATf7tNTGn8H5JWzRsrRF9mtq7N2b6GRS4xz6gKltyshY7VQ 03njtz1Ihh8P71yTWCXmasVD8+d4pqT/qgp8P//C+PgYw4vm4QIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFOrsKFFo/hRT5dQG5g7EeUgCOQW8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l M2YyMWJkOS0yOTEzLTRkMjMtYjlkMS0yMGRlYjliNGZjN2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2UzZjIxYmQ5LTI5MTMtNGQyMy1i OWQxLTIwZGViOWI0ZmM3Zi9lM2YyMWJkOS0yOTEzLTRkMjMtYjlkMS0yMGRlYjli NGZjN2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJKciADBAJKeBAwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICEykCAwC3KzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnCnbNR69oE/xr+iipKYaDAqbH0fQvvSkU R7Bxj+e5XyKPysc4VMRht2cipDzaDrAm69J7Y3c+xEhI3ljDYYI4Di0W9rARN99O qc2AT1ypy7uT1gbR10FwJ3ARxXi9PxZ6XG8Lnaal7BDaroyru3h4n2gUKbVw29hB H99+n7H8k/bNAhhksNALF41WUSM65Demqh+erKxxDpKtQaPyC8gCSWJ9fwAUby94 Ah6kTvOhNpgy+MNwfvrlyKKfdiH9LhWZ3BtK8syMAwcXivR0hUxDBKP6JyxuQkds JP7WTsAJvX7y5GdxmIlMtNASdgAtvxz2cG4VujaT1dnWpG1Od2Zb -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:33 2025 by rpki-client