$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7.cer File: e96285ea-5cb8-44da-b665-eabe5aa637c7.cer (raw, json) Hash identifier: gnVp90vc5gMbuCsrv8lg/o00lVflmooCU/aQB00kj2o= Subject key identifier: DB:92:19:BF:AD:B4:FA:12:24:20:E9:7F:82:CB:B5:8C:E5:00:68:79 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AF9E8F98967F034780AE29A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/e96285ea-5cb8-44da-b665-eabe5aa637c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Aug 2025 18:06:27 +0000 Certificate not after: Sun 28 Nov 2027 19:06:27 +0000 Subordinate resources: AS: 400443 IP: 23.132.152.0/24 IP: 141.193.44.0/22 IP: 2606:b7c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:e8:f9:89:67:f0:34:78:0a:e2:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 25 18:06:27 2025 GMT Not After : Nov 28 19:06:27 2027 GMT Subject: CN=e96285ea-5cb8-44da-b665-eabe5aa637c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:67:fe:b0:44:5f:9e:dc:43:96:f0:1e:e4:c2: 08:63:7f:e0:53:dd:f3:c2:f3:69:98:32:30:e7:ee: 2b:7f:e1:3f:a8:a2:a4:63:b2:e8:3c:b6:02:b3:e4: 0d:0e:23:6e:40:14:32:d6:ec:a1:9f:42:c7:ce:c1: 0e:26:5e:b2:e5:10:8f:af:30:51:6f:6e:7e:dc:14: 84:3a:49:7c:48:d1:72:8f:40:a8:06:cc:ce:ad:13: bf:e7:04:72:01:a1:bb:1c:e3:94:83:0b:44:7d:ea: 79:c0:48:6e:09:2f:82:7e:83:0c:86:06:c3:3c:e3: ff:e0:1d:aa:16:c4:54:c9:1b:1e:67:02:e4:e0:61: 8b:cd:6c:df:b7:82:e3:59:b7:a4:9e:cb:ce:81:eb: 38:0d:a9:6b:0a:49:43:09:bc:17:5f:8d:07:80:d2: 0e:4a:9f:8e:0f:62:0b:6a:2d:12:52:9f:4e:77:c5: f4:2d:86:27:53:b6:a8:f3:00:d7:81:d2:bc:57:f7: dd:9d:51:15:81:e1:1c:1c:3c:b4:6b:17:12:9e:7f: 62:de:e0:53:96:ff:d7:ec:92:ec:28:d7:e3:86:e7: 32:5b:ea:45:96:44:f4:4a:dd:5c:86:3e:1f:73:91: bc:74:3e:ff:0e:48:71:6a:9e:4a:b7:1a:ac:d2:3e: 80:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:92:19:BF:AD:B4:FA:12:24:20:E9:7F:82:CB:B5:8C:E5:00:68:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/e96285ea-5cb8-44da-b665-eabe5aa637c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 23.132.152.0/24 141.193.44.0/22 IPv6: 2606:b7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400443 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:0d:81:bf:d5:61:f0:fb:e8:49:2c:ab:ba:68:7a:08:c6:2d: c5:75:a0:c8:e1:2a:9d:52:9c:60:cb:a3:0e:a5:a3:a2:9c:61: 41:d7:e9:b0:34:71:c3:6a:3b:2a:a9:44:74:89:ae:77:ff:f0: c2:c8:3e:79:cf:9a:aa:bb:df:8a:fa:e0:99:be:60:43:ea:f7: 3b:1f:f2:2c:19:14:71:b0:a5:f4:43:85:d5:38:34:32:1f:0f: 5a:51:d2:09:d0:aa:dd:be:89:45:12:a2:02:5d:aa:90:a5:79: 83:2e:00:0c:90:f6:8c:8d:dc:1c:19:ae:05:4c:5e:15:a1:68: 2b:d4:3b:a3:1a:c9:0e:dd:aa:bb:d9:85:2b:ce:a3:f8:1f:e6: 7a:be:c5:6a:a5:c3:80:6a:92:a0:82:9b:6f:fd:99:2d:5e:2a: 21:18:64:4a:de:ee:6e:5f:0c:a8:7f:41:b4:e5:1b:6a:52:00: d1:11:1d:f7:6e:87:2f:d8:78:a1:2b:37:81:0e:d9:24:dd:de: f0:a5:fc:8d:ba:d3:bd:09:64:f0:ab:0d:35:0a:7b:af:d7:0e: 25:b9:e0:86:44:a9:32:d1:be:00:e7:f9:96:3b:38:10:2a:5b: a1:fb:5c:cb:79:ca:5d:d4:18:20:18:e8:21:d9:d3:e2:8e:26: f9:91:b1:b6 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEr56PmJZ/A0eArimoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyNTE4MDYyN1oXDTI3MTEyODE5MDYyN1owLzEtMCsGA1UEAxMk ZTk2Mjg1ZWEtNWNiOC00NGRhLWI2NjUtZWFiZTVhYTYzN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mf+sERfntxDlvAe5MIIY3/gU93zwvNpmDIw 5+4rf+E/qKKkY7LoPLYCs+QNDiNuQBQy1uyhn0LHzsEOJl6y5RCPrzBRb25+3BSE Okl8SNFyj0CoBszOrRO/5wRyAaG7HOOUgwtEfep5wEhuCS+CfoMMhgbDPOP/4B2q FsRUyRseZwLk4GGLzWzft4LjWbeknsvOges4DalrCklDCbwXX40HgNIOSp+OD2IL ai0SUp9Od8X0LYYnU7ao8wDXgdK8V/fdnVEVgeEcHDy0axcSnn9i3uBTlv/X7JLs KNfjhucyW+pFlkT0St1chj4fc5G8dD7/Dkhxap5Ktxqs0j6AywIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFNuSGb+ttPoSJCDpf4LLtYzlAGh5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9l OTYyODVlYS01Y2I4LTQ0ZGEtYjY2NS1lYWJlNWFhNjM3YzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2U5NjI4NWVhLTVjYjgtNDRkYS1i NjY1LWVhYmU1YWE2MzdjNy9lOTYyODVlYS01Y2I4LTQ0ZGEtYjY2NS1lYWJlNWFh NjM3YzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXhJgDBAKNwSwwDQQCAAIwBwMFACYGt8AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhw7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMENgb/VYfD76Eksq7po egjGLcV1oMjhKp1SnGDLow6lo6KcYUHX6bA0ccNqOyqpRHSJrnf/8MLIPnnPmqq7 34r64Jm+YEPq9zsf8iwZFHGwpfRDhdU4NDIfD1pR0gnQqt2+iUUSogJdqpCleYMu AAyQ9oyN3BwZrgVMXhWhaCvUO6MayQ7dqrvZhSvOo/gf5nq+xWqlw4BqkqCCm2/9 mS1eKiEYZEre7m5fDKh/QbTlG2pSANERHfduhy/YeKErN4EO2STd3vCl/I26070J ZPCrDTUKe6/XDiW54IZEqTLRvgDn+ZY7OBAqW6H7XMt5yl3UGCAY6CHZ0+KOJvmR sbY= -----END CERTIFICATE-----Generated at Wed Nov 5 13:41:06 2025 by rpki-client