$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer File: f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer (raw, json) Hash identifier: qJxFLDtzfa/YDgVmZfvyleFNJ1gIlQ4d7JvM5Tk3BfQ= Subject key identifier: 7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B4B368840AAC2C1A76C1CC900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Sep 2025 21:03:12 +0000 Certificate not after: Mon 27 Dec 2027 22:03:12 +0000 Subordinate resources: AS: 401834 IP: 64.89.144.0/20 IP: 2620:c5:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:36:88:40:aa:c2:c1:a7:6c:1c:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 23 21:03:12 2025 GMT Not After : Dec 27 22:03:12 2027 GMT Subject: CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:61:59:cd:93:47:64:ef:85:2e:80:b9:b1:e6: f5:0c:8d:5f:eb:0b:2c:a4:d0:d6:f9:6b:c7:42:6f: 50:09:03:77:51:be:91:1b:6a:ff:63:12:c0:9d:c9: 04:aa:78:c2:46:96:6d:2a:9a:f7:d2:b4:47:9e:a5: 7d:f7:cb:e9:7b:9a:9e:e2:f4:e4:63:7d:9e:ec:a3: aa:e4:6a:64:43:48:5b:e9:16:dc:24:93:ab:06:b6: ea:d6:af:45:7d:a8:5f:d7:cc:b6:a2:fe:da:8f:93: 42:b5:71:f2:b6:c5:d8:00:89:f0:e6:6b:ad:43:b8: a2:cd:d7:5d:6d:94:09:97:c1:d1:1b:30:0e:bf:ea: f0:24:d0:33:8b:9f:fb:65:f0:a5:bf:06:62:86:20: c6:bc:44:b0:dd:18:97:2d:00:15:ed:6a:66:6f:7b: 1d:8a:fc:55:ae:28:1a:01:36:a5:fe:ed:cd:ff:45: 5d:ef:9d:c9:1e:bf:7c:cb:e2:bf:28:9d:ba:44:57: 1c:45:6e:3f:60:10:87:b1:e1:2f:10:3d:e1:15:2e: 71:71:17:ae:ac:e6:2b:f7:1c:13:00:b6:2a:ac:c8: d2:70:29:4c:f0:0e:80:ec:08:77:dc:15:f4:6b:2c: f7:25:80:c3:b1:4c:16:02:d5:44:ee:69:40:68:bc: 29:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.89.144.0/20 IPv6: 2620:c5:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401834 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ea:20:a1:75:94:ef:31:5d:00:73:a0:cd:fa:6c:5b:8d:c8: 50:78:5e:52:0e:86:2a:47:89:1b:a0:e3:b8:93:67:cf:bd:ec: 58:2f:4a:c8:df:c1:44:c6:af:6d:d2:c1:d3:06:9c:09:2c:e6: a1:e5:ad:fd:4f:67:64:d4:95:9d:9e:a0:76:de:25:18:69:f4: e8:dd:65:df:c8:38:70:d7:b1:3d:35:e7:11:4b:66:56:84:63: ad:7b:d6:72:7c:02:9e:46:7f:f7:63:05:1d:93:7e:af:28:29: e7:2d:82:11:1b:1f:cf:e5:14:b7:5c:ab:03:ab:b4:a4:ba:bc: 74:e1:30:2b:f8:2f:99:1a:6f:8e:eb:44:d4:33:0b:2b:90:6d: 34:19:74:cc:1d:27:2d:91:07:a6:da:30:0d:c3:7a:e4:43:1f: 15:70:11:aa:23:16:85:cd:07:b5:c0:d0:51:f2:87:00:8f:f0: 47:d6:59:27:2c:aa:ca:ea:d6:01:24:1f:c8:0e:9a:9e:06:14: be:fe:4f:78:c2:21:14:61:6a:58:67:c8:01:ab:ab:49:02:a1: 1a:2c:0c:6d:de:bb:f7:86:69:9a:23:ca:16:4c:2b:a1:84:e2: 95:0a:95:34:6c:b5:9e:7c:c8:61:59:12:95:d8:5e:72:21:4f: 9f:78:ce:75 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEtLNohAqsLBp2wcyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyMzIxMDMxMloXDTI3MTIyNzIyMDMxMlowLzEtMCsGA1UEAxMk ZjJhMWYxNDktYmMwYy00ZjZjLTlmYjUtZTY1NjUxNWQxOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGFZzZNHZO+FLoC5seb1DI1f6wsspNDW+WvH Qm9QCQN3Ub6RG2r/YxLAnckEqnjCRpZtKpr30rRHnqV998vpe5qe4vTkY32e7KOq 5GpkQ0hb6RbcJJOrBrbq1q9Ffahf18y2ov7aj5NCtXHytsXYAInw5mutQ7iizddd bZQJl8HRGzAOv+rwJNAzi5/7ZfClvwZihiDGvESw3RiXLQAV7Wpmb3sdivxVriga ATal/u3N/0Vd753JHr98y+K/KJ26RFccRW4/YBCHseEvED3hFS5xcReurOYr9xwT ALYqrMjScClM8A6A7Ah33BX0ayz3JYDDsUwWAtVE7mlAaLwpbwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFH+9Sy9cQkRtDMdaPyDsw3aM9TLaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9m MmExZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2NTE1ZDE5N2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2YyYTFmMTQ5LWJjMGMtNGY2Yy05 ZmI1LWU2NTY1MTVkMTk3Yi9mMmExZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2NTE1 ZDE5N2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBARAWZAwDwQCAAIwCQMHACYgAMVAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGIaowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeOogoXWU7zFdAHOgzfpsW43I UHheUg6GKkeJG6DjuJNnz73sWC9KyN/BRMavbdLB0wacCSzmoeWt/U9nZNSVnZ6g dt4lGGn06N1l38g4cNexPTXnEUtmVoRjrXvWcnwCnkZ/92MFHZN+rygp5y2CERsf z+UUt1yrA6u0pLq8dOEwK/gvmRpvjutE1DMLK5BtNBl0zB0nLZEHptowDcN65EMf FXARqiMWhc0HtcDQUfKHAI/wR9ZZJyyqyurWASQfyA6angYUvv5PeMIhFGFqWGfI AaurSQKhGiwMbd6794ZpmiPKFkwroYTilQqVNGy1nnzIYVkSldheciFPn3jOdQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:07:00 2025 by rpki-client