$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1ddfbeec-76eb-4d03-95e5-ce2f7d195887.cer File: 1ddfbeec-76eb-4d03-95e5-ce2f7d195887.cer (raw, json) Hash identifier: 00haX3CFjPvuY1RGTA0pTOrSSLLKy1+9xsU58mY8/p4= Subject key identifier: 4D:41:6C:4C:FC:6C:89:3A:54:37:AD:67:AC:D8:03:02:CB:C4:B9:86 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B0FD25B540722AFC227208EC8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1ddfbeec-76eb-4d03-95e5-ce2f7d195887/1ddfbeec-76eb-4d03-95e5-ce2f7d195887.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1ddfbeec-76eb-4d03-95e5-ce2f7d195887/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Sep 2025 14:28:40 +0000 Certificate not after: Mon 06 Dec 2027 15:28:40 +0000 Subordinate resources: AS: 16788 IP: 64.250.32.0/20 IP: 130.51.172.0/22 IP: 2606:6b80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:d2:5b:54:07:22:af:c2:27:20:8e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 2 14:28:40 2025 GMT Not After : Dec 6 15:28:40 2027 GMT Subject: CN=1ddfbeec-76eb-4d03-95e5-ce2f7d195887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3f:22:cc:68:92:bf:a1:c2:62:f5:c9:a9:20: bd:ec:89:ef:40:a8:bd:cd:c5:2d:19:ce:58:fb:26: bb:35:f1:c9:56:c3:4c:0a:fb:79:2f:b7:bf:f8:50: 3d:3b:4d:9a:27:9a:d6:12:68:a5:ac:94:e8:14:e9: 73:f1:a2:bf:a0:c0:4e:2b:a4:f0:98:1b:c2:26:25: 13:25:c0:9d:db:de:74:ff:21:d2:3e:01:ca:c7:25: c1:33:27:6f:d7:b5:f2:11:5e:63:d7:fc:a1:5b:5d: 0d:8d:aa:86:ae:ee:70:78:23:1e:37:8c:7e:31:3e: af:87:6c:ae:a6:d5:1b:88:b4:59:9f:65:8e:db:4a: f7:ae:fe:d2:d6:d3:7d:e7:2a:92:48:3d:73:62:9e: bc:8e:8b:a3:09:0c:b6:5c:c4:47:a0:a2:12:03:ca: b6:9b:59:b6:b7:a4:8e:74:ca:b8:9f:13:08:29:f3: 46:ad:c8:cf:62:b8:bf:a6:a1:82:76:b9:d2:b7:b4: 88:b9:64:32:92:b4:71:db:2a:21:ca:d5:9d:23:74: 1c:c1:a0:49:3b:37:0c:1b:77:71:aa:a2:3d:7c:af: ed:94:9a:e6:3e:e3:92:f7:d9:37:f7:02:06:48:33: 26:f6:9d:50:1c:c8:e6:39:7b:5a:d3:86:48:51:f8: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:41:6C:4C:FC:6C:89:3A:54:37:AD:67:AC:D8:03:02:CB:C4:B9:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1ddfbeec-76eb-4d03-95e5-ce2f7d195887/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1ddfbeec-76eb-4d03-95e5-ce2f7d195887/1ddfbeec-76eb-4d03-95e5-ce2f7d195887.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.250.32.0/20 130.51.172.0/22 IPv6: 2606:6b80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16788 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:68:9a:a9:f8:a8:6e:38:51:16:9d:8f:2c:41:10:07:0c:f8: 17:8c:cf:ec:62:54:e7:1d:9e:23:cd:a9:b8:89:bf:fe:2d:a4: ba:be:ce:4e:de:cc:80:55:da:9d:08:97:da:c6:f8:41:a5:74: 4e:d2:8f:9c:c5:c3:65:b5:62:00:32:a9:65:b2:aa:55:59:cc: ab:82:da:ad:23:3c:f3:d4:24:9f:c4:85:81:cd:ec:2e:34:52: 65:6e:36:de:f3:53:21:75:a5:22:3b:ad:26:b4:ee:0a:30:57: 2f:d9:10:27:04:a0:56:c3:7a:8e:4c:c1:96:a6:57:e2:fc:54: 34:5d:81:60:58:5e:72:81:23:7e:ff:13:6b:39:2e:3b:f4:3c: 6d:ef:75:15:30:d5:65:4d:33:7d:98:4b:19:ae:7e:b9:af:58: b4:9f:df:34:80:51:a5:50:62:e3:ea:43:8b:dd:24:5c:41:bc: 02:05:b8:f4:08:fd:a9:38:44:77:45:d2:cf:c8:f6:15:08:e6: 3f:a9:18:b2:e7:4a:02:84:94:2f:ad:4c:fa:68:47:8f:5f:08: 64:0e:83:f6:2a:10:c3:91:34:59:09:a6:55:85:45:54:8d:ae: 45:25:d3:2d:55:03:db:4a:d9:7e:fb:16:f1:c0:6e:75:bd:e0: 8a:7d:ae:72 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEsP0ltUByKvwicgjsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwMjE0Mjg0MFoXDTI3MTIwNjE1Mjg0MFowLzEtMCsGA1UEAxMk MWRkZmJlZWMtNzZlYi00ZDAzLTk1ZTUtY2UyZjdkMTk1ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz8izGiSv6HCYvXJqSC97InvQKi9zcUtGc5Y +ya7NfHJVsNMCvt5L7e/+FA9O02aJ5rWEmilrJToFOlz8aK/oMBOK6TwmBvCJiUT JcCd2950/yHSPgHKxyXBMydv17XyEV5j1/yhW10NjaqGru5weCMeN4x+MT6vh2yu ptUbiLRZn2WO20r3rv7S1tN95yqSSD1zYp68joujCQy2XMRHoKISA8q2m1m2t6SO dMq4nxMIKfNGrcjPYri/pqGCdrnSt7SIuWQykrRx2yohytWdI3QcwaBJOzcMG3dx qqI9fK/tlJrmPuOS99k39wIGSDMm9p1QHMjmOXta04ZIUfgoFwIDAQABo4IELzCC BCswHQYDVR0OBBYEFE1BbEz8bIk6VDetZ6zYAwLLxLmGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8x ZGRmYmVlYy03NmViLTRkMDMtOTVlNS1jZTJmN2QxOTU4ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzFkZGZiZWVjLTc2ZWItNGQwMy05 NWU1LWNlMmY3ZDE5NTg4Ny8xZGRmYmVlYy03NmViLTRkMDMtOTVlNS1jZTJmN2Qx OTU4ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARA+iADBAKCM6wwDQQCAAIwBwMFACYGa4AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICQZQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGWiaqfiobjhRFp2PLEEQ Bwz4F4zP7GJU5x2eI82puIm//i2kur7OTt7MgFXanQiX2sb4QaV0TtKPnMXDZbVi ADKpZbKqVVnMq4LarSM889Qkn8SFgc3sLjRSZW423vNTIXWlIjutJrTuCjBXL9kQ JwSgVsN6jkzBlqZX4vxUNF2BYFhecoEjfv8TazkuO/Q8be91FTDVZU0zfZhLGa5+ ua9YtJ/fNIBRpVBi4+pDi90kXEG8AgW49Aj9qThEd0XSz8j2FQjmP6kYsudKAoSU L61M+mhHj18IZA6D9ioQw5E0WQmmVYVFVI2uRSXTLVUD20rZfvsW8cBudb3gin2u cg== -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:00 2025 by rpki-client