$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer File: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (raw, json) Hash identifier: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE= Subject key identifier: D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9 Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Certificate issuer: /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Certificate serial: 010D0C9F4328584B4BCF8B344C12103908C41C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer Manifest: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft caRepository: rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 24 Sep 2025 02:11:30 +0000 Certificate not after: Tue 28 Dec 2027 03:11:30 +0000 Subordinate resources: AS: 396509 IP: 45.42.160.0/22 IP: 2602:fa0e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:cf:8b:34:4c:12:10:39:08:c4:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Validity Not Before: Sep 24 02:11:30 2025 GMT Not After : Dec 28 03:11:30 2027 GMT Subject: CN=4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:7e:32:fd:a2:74:d0:f4:0d:0c:f0:fa:89: 09:3d:ce:b1:99:40:90:8c:fc:57:28:fd:89:8e:6d: be:df:b8:c4:f6:c1:84:23:c8:67:22:67:85:5e:2c: d7:1b:06:40:85:fd:07:9b:11:d6:af:39:10:1b:aa: ff:55:d1:03:fb:30:a5:55:b6:5f:41:0c:17:30:4b: bb:fe:e7:c3:7e:fa:4a:85:a6:00:1a:19:5d:90:bc: 5c:f3:30:db:54:23:cd:ff:ce:64:d9:b6:0d:7c:3f: 4d:bb:94:a7:97:a1:08:31:8f:5e:09:35:62:e9:4b: 6d:96:89:e3:68:f2:b7:eb:07:da:61:ce:b5:ab:63: 86:50:17:90:14:b8:8f:b1:12:c8:6e:41:93:72:7e: d4:2f:f0:9a:ba:40:f6:e9:da:e8:80:85:1e:48:e7: 86:1e:68:dc:d3:a9:a1:cf:1d:b6:ae:18:f7:4d:3b: 5f:42:ea:44:d9:e0:79:1d:ef:1d:37:66:9a:ad:46: ed:64:93:06:41:5b:de:75:89:da:b0:80:1c:cc:ba: f8:04:17:ac:cb:47:c7:5a:1d:d1:e9:09:f2:08:ca: be:e6:e8:7b:3a:d1:7d:de:47:80:80:76:fc:cf:4c: 62:4a:e5:7f:4b:2f:1d:d3:eb:70:c1:11:e8:b9:47: a7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:79:09:F7:13:CB:E9:89:D0:A9:93:E0:FC:6E:6A:45:70:B0:59:F9 Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/1/D37909F713CBE989D0A993E0FC6E6A4570B059F9.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl X509v3 Authority Key Identifier: keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer sbgp-ipAddrBlock: critical IPv4: 45.42.160.0/22 IPv6: 2602:fa0e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396509 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:64:e0:f7:17:b8:48:1a:fb:97:e9:23:bf:16:f6:52:b2:98: 45:d9:1c:2d:99:44:74:19:6c:f6:b5:90:80:ae:29:00:2c:49: a4:54:ba:a5:54:25:04:e1:92:f8:79:a7:07:d2:ae:cc:19:b1: 8f:e9:85:90:88:a6:8b:af:c6:99:9c:d1:76:90:62:aa:bd:9d: d7:ad:1c:e0:8e:c4:1b:a6:b2:e3:5d:ca:17:de:0a:80:27:f7: b8:c9:cf:e4:80:a5:f7:75:56:95:85:02:32:a7:ca:a0:bc:7e: fa:b7:1a:1d:7d:95:5f:07:df:ae:6a:31:b1:96:b2:0a:b9:97: 7a:25:c2:66:00:26:a1:0a:c6:ee:c8:37:bc:4d:f1:0c:02:5b: 86:83:25:13:fa:bd:31:95:3c:16:c0:bf:ea:1d:45:e8:7c:60: 11:c5:4f:15:fb:45:c8:3f:0b:9e:55:6e:13:e4:f2:f0:bf:8c: 0e:07:37:3d:47:a8:d3:c6:4f:da:7c:96:9e:f7:22:7b:d0:50: b8:52:c4:4f:1d:02:4b:9f:79:72:cb:8c:ea:07:27:98:14:33: 6b:fb:7f:aa:73:44:d8:4b:bb:26:9f:85:7c:e4:c3:c7:0e:e9: 86:df:9e:0d:c7:3d:0b:88:2e:a0:67:fd:50:4c:bb:1a:65:21: 46:58:5e:6f -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEtLz4s0TBIQOQjEHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz YmRkMB4XDTI1MDkyNDAyMTEzMFoXDTI3MTIyODAzMTEzMFowPTE7MDkGA1UEAxMy NGZiMzJmYWRmZTYxOTQxMjJkMGYyMjgzNTFhZmNlYWUyZjdiZTk2YjA1NWE1Y2Nl MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJH4y/aJ00PQNDPD6 iQk9zrGZQJCM/Fco/YmObb7fuMT2wYQjyGciZ4VeLNcbBkCF/QebEdavORAbqv9V 0QP7MKVVtl9BDBcwS7v+58N++kqFpgAaGV2QvFzzMNtUI83/zmTZtg18P027lKeX oQgxj14JNWLpS22WieNo8rfrB9phzrWrY4ZQF5AUuI+xEshuQZNyftQv8Jq6QPbp 2uiAhR5I54YeaNzTqaHPHbauGPdNO19C6kTZ4Hkd7x03ZpqtRu1kkwZBW951idqw gBzMuvgEF6zLR8daHdHpCfIIyr7m6Hs60X3eR4CAdvzPTGJK5X9LLx3T63DBEei5 R6eLAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQU03kJ9xPL6YnQqZPg/G5qRXCwWfkw ggE+BggrBgEFBQcBCwSCATAwggEsMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2kt cmVwby5yZWdpc3Ryby5ici9yZXBvL2ExU3dpQ2I4cVBvYlVtYW5ZcnFZak5Sb0NS c2h3dWltV2gydDE3NjRHZnkvMS8wgYkGCCsGAQUFBzAKhn1yc3luYzovL3Jwa2kt cmVwby5yZWdpc3Ryby5ici9yZXBvL2ExU3dpQ2I4cVBvYlVtYW5ZcnFZak5Sb0NS c2h3dWltV2gydDE3NjRHZnkvMS9EMzc5MDlGNzEzQ0JFOTg5RDBBOTkzRTBGQzZF NkE0NTcwQjA1OUY5Lm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4LzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUyM2JkZC8yOTU0Yjhh MS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQuY3JsMB8GA1UdIwQYMBaAFArV enrbbc3NA+vblfPRM64ZxwYLMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy9mZGUxNjllZC1kMGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1 NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIzYmRkLmNlcjAvBggrBgEFBQcB BwEB/wQgMB4wDAQCAAEwBgMEAi0qoDAOBAIAAjAIAwYEJgL6DgAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgzdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADlk4PcXuEga+5fpI78W9lKymEXZ HC2ZRHQZbPa1kICuKQAsSaRUuqVUJQThkvh5pwfSrswZsY/phZCIpouvxpmc0XaQ Yqq9ndetHOCOxBumsuNdyhfeCoAn97jJz+SApfd1VpWFAjKnyqC8fvq3Gh19lV8H 365qMbGWsgq5l3olwmYAJqEKxu7IN7xN8QwCW4aDJRP6vTGVPBbAv+odReh8YBHF TxX7Rcg/C55VbhPk8vC/jA4HNz1HqNPGT9p8lp73InvQULhSxE8dAkufeXLLjOoH J5gUM2v7f6pzRNhLuyafhXzkw8cO6Ybfng3HPQuILqBn/VBMuxplIUZYXm8= -----END CERTIFICATE-----Generated at Wed Oct 8 22:55:07 2025 by rpki-client