$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer File: 36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer (raw, json) Hash identifier: lZQCndCM4k20WrplNdNCz9R786KDpYetvhuUZF7V0+U= Subject key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3 Authority key identifier: 5F:62:7A:32:F3:6B:A6:D8:48:46:D6:9F:3F:89:DD:9F:DC:7E:6A:70 Certificate issuer: /CN=f70c9613-7def-4bc4-b860-f4e5374d76a7 Certificate serial: 010D0C9F4328584B5D50F73DDEFA1A9730ADBA9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer Manifest: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft caRepository: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 08:41:01 +0000 Certificate not after: Mon 03 Jan 2028 09:41:01 +0000 Subordinate resources: AS: 398991 IP: 130.250.188.0/23 IP: 198.13.16.0/23 IP: 199.245.233.0 -- 199.245.234.255 IP: 206.109.56.0/22 IP: 208.122.16.0/22 IP: 209.131.120.0/22 IP: 2607:a540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:50:f7:3d:de:fa:1a:97:30:ad:ba:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f70c9613-7def-4bc4-b860-f4e5374d76a7 Validity Not Before: Sep 30 08:41:01 2025 GMT Not After : Jan 3 09:41:01 2028 GMT Subject: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:b2:18:15:32:11:70:77:d6:39:f7:63:a0: b3:6e:e8:77:94:d1:e3:d1:e8:e7:f4:f2:6d:5c:8a: 95:47:74:75:32:f3:9c:6e:14:87:b0:9c:7f:69:17: 93:62:44:ef:f1:ae:6a:36:ad:88:87:77:70:e0:10: ed:fd:16:4c:95:93:fe:9d:02:9b:18:78:f2:dc:a6: 7b:2e:fa:a1:1d:cf:12:40:73:fd:c2:7a:6d:51:f3: 0f:74:17:71:94:ba:de:70:30:67:eb:95:91:5d:5f: 1f:02:fd:c4:38:39:1a:b2:18:fa:cd:8c:f6:a6:ad: f8:0d:66:09:6a:64:3e:33:a3:a6:81:ed:47:06:dd: bf:be:87:7e:0e:fb:9b:b2:a4:62:85:8c:1e:f8:64: 77:30:78:5c:00:0d:6b:68:c9:00:6d:cc:d2:1c:3c: 96:15:55:a8:ae:ef:09:55:cf:0d:df:8a:82:b8:05: b2:6c:04:f0:dc:8e:98:f3:93:38:a3:1a:2b:a4:47: a8:56:82:72:90:69:3a:f2:2b:0c:c4:4f:66:5b:74: ae:be:2e:00:a9:6f:f5:8a:63:9d:ee:f4:b5:18:c6: 28:83:73:67:93:cf:14:be:75:83:d6:20:13:53:d5: 88:46:34:80:00:be:eb:80:41:53:4c:c4:a0:d1:d4: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl X509v3 Authority Key Identifier: keyid:5F:62:7A:32:F3:6B:A6:D8:48:46:D6:9F:3F:89:DD:9F:DC:7E:6A:70 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer sbgp-ipAddrBlock: critical IPv4: 130.250.188.0/23 198.13.16.0/23 199.245.233.0-199.245.234.255 206.109.56.0/22 208.122.16.0/22 209.131.120.0/22 IPv6: 2607:a540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398991 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5a:fc:67:26:0c:ff:62:52:6f:f1:49:fa:50:7a:f1:bb:04: 27:66:f5:c6:8d:81:7d:b0:3a:86:81:53:28:66:ed:00:cc:5e: 62:83:aa:ca:32:e5:ba:97:73:1a:81:9d:46:97:c8:2d:1d:b0: 37:73:92:b0:43:bf:38:08:62:be:a6:98:60:cb:d5:82:f5:eb: c9:cf:23:a8:d8:b6:67:fe:24:dc:5c:52:41:92:a2:e4:15:b4: 38:8c:49:ca:de:fe:a2:d9:f3:ea:7f:09:09:3e:1f:95:b1:2a: b3:57:29:bb:73:db:34:d0:06:39:25:bb:c7:c3:82:06:3c:dc: 33:01:42:97:6c:d4:cd:cd:c7:56:92:fc:34:44:09:b2:6d:63: b0:fd:52:65:24:3f:8b:d1:df:bd:21:6b:9a:17:55:57:75:5a: e0:30:91:68:b1:6d:d3:b4:ed:29:9c:b1:08:24:0b:4b:43:ef: 64:4f:01:e2:19:2d:29:44:74:b6:e6:95:86:9d:3b:ab:39:88: 16:dd:45:bd:da:a4:bb:5d:d5:9b:19:d5:b9:de:0f:8b:f4:25: f3:9f:72:53:1f:b9:cb:be:43:7c:a0:52:e7:ef:b0:eb:f3:c6: 13:fd:ef:11:9d:10:35:43:7c:ef:4b:3e:be:56:7d:a3:00:51: 33:04:a5:f7 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEtdUPc93voalzCtupwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcwYzk2MTMtN2RlZi00YmM0LWI4NjAtZjRlNTM3NGQ3 NmE3MB4XDTI1MDkzMDA4NDEwMVoXDTI4MDEwMzA5NDEwMVowPTE7MDkGA1UEAxMy MzZmYzAzYzJlMTE2NzEyYzIzMjE0OTcxMGRlYTFiOTU0OTdmMDIwMDM4MWZjMjg3 NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs37IYFTIRcHfWOfdj oLNu6HeU0ePR6Of08m1cipVHdHUy85xuFIewnH9pF5NiRO/xrmo2rYiHd3DgEO39 FkyVk/6dApsYePLcpnsu+qEdzxJAc/3Cem1R8w90F3GUut5wMGfrlZFdXx8C/cQ4 ORqyGPrNjPamrfgNZglqZD4zo6aB7UcG3b++h34O+5uypGKFjB74ZHcweFwADWto yQBtzNIcPJYVVaiu7wlVzw3fioK4BbJsBPDcjpjzkzijGiukR6hWgnKQaTryKwzE T2ZbdK6+LgCpb/WKY53u9LUYxiiDc2eTzxS+dYPWIBNT1YhGNIAAvuuAQVNMxKDR 1LyTAgMBAAGjggP2MIID8jAdBgNVHQ4EFgQU4VQIwxCwbpqV7RLOLukzK3LC2dMw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvNWJjODcyODk0NzNiNDNjNWE2Y2VlOTE5 ZTZkZWIwOTAvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvNWJjODcyODk0NzNiNDNjNWE2Y2VlOTE5ZTZkZWIwOTAv MC9FMTU0MDhDMzEwQjA2RTlBOTVFRDEyQ0UyRUU5MzMyQjcyQzJEOUQzLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBk Mi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2Y3MGM5NjEzLTdkZWYtNGJjNC1iODYw LWY0ZTUzNzRkNzZhNy9mNzBjOTYxMy03ZGVmLTRiYzQtYjg2MC1mNGU1Mzc0ZDc2 YTcuY3JsMB8GA1UdIwQYMBaAFF9iejLza6bYSEbWnz+J3Z/cfmpwMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1kMGQyLTQxNjUt ODMwOC1kZjI1OTdlMzQzZjgvZjcwYzk2MTMtN2RlZi00YmM0LWI4NjAtZjRlNTM3 NGQ3NmE3LmNlcjBUBggrBgEFBQcBBwEB/wRFMEMwMgQCAAEwLAMEAYL6vAMEAcYN EDAMAwQAx/XpAwQAx/XqAwQCzm04AwQC0HoQAwQC0YN4MA0EAgACMAcDBQAmB6VA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWjzBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvWvxnJgz/YlJv 8Un6UHrxuwQnZvXGjYF9sDqGgVMoZu0AzF5ig6rKMuW6l3MagZ1Gl8gtHbA3c5Kw Q784CGK+pphgy9WC9evJzyOo2LZn/iTcXFJBkqLkFbQ4jEnK3v6i2fPqfwkJPh+V sSqzVym7c9s00AY5JbvHw4IGPNwzAUKXbNTNzcdWkvw0RAmybWOw/VJlJD+L0d+9 IWuaF1VXdVrgMJFosW3TtO0pnLEIJAtLQ+9kTwHiGS0pRHS25pWGnTurOYgW3UW9 2qS7XdWbGdW53g+L9CXzn3JTH7nLvkN8oFLn77Dr88YT/e8RnRA1Q3zvSz6+Vn2j AFEzBKX3 -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:03 2025 by rpki-client