$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer File: 720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer (raw, json) Hash identifier: XyjI+xtKlKo333eTZdt73OTFoiqkmRuF899845jogDU= Subject key identifier: 66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B66ACE96FBDEB5FAA4E0AB400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Oct 2025 17:08:33 +0000 Certificate not after: Thu 06 Jan 2028 18:08:33 +0000 Subordinate resources: AS: 32659 IP: 199.204.128.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:ac:e9:6f:bd:eb:5f:aa:4e:0a:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 3 17:08:33 2025 GMT Not After : Jan 6 18:08:33 2028 GMT Subject: CN=720bf1f5-bfdc-4e9b-aec9-45f16525afbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:53:62:8f:2a:65:84:86:84:4d:13:02:83: fb:17:b7:ab:45:55:71:27:76:29:a8:95:bc:84:a8: b3:6c:bc:17:49:cd:e5:59:24:d7:1f:17:ed:44:27: 5e:16:6a:04:16:f7:e5:04:63:20:4f:a2:98:2f:e7: 64:05:b1:0d:7c:2c:e6:ac:5f:bf:6f:70:10:a9:43: ab:39:fc:2a:ca:54:62:21:1d:f2:94:7f:8b:a1:93: 5b:7a:76:88:a0:18:b8:ee:03:64:16:e1:70:71:eb: d5:f8:fc:4b:b9:ea:7f:c5:3f:da:0b:c9:09:ab:2f: 43:dd:2b:23:92:22:34:34:c2:69:ce:04:58:c4:b5: 73:f7:d8:50:da:12:49:19:73:ba:28:6b:46:12:5f: 7b:6c:4f:22:d6:d0:55:41:9d:60:53:a9:87:71:44: 79:29:0a:be:f0:17:de:72:58:20:d9:93:a7:25:15: de:81:45:e8:1c:54:0d:67:c3:d4:1d:bd:be:1b:16: d6:8c:56:6a:33:30:b1:61:34:ca:9e:2a:7f:29:dd: 8c:3e:d7:d9:b3:1f:45:b8:88:f3:8c:f1:ac:c0:a2: 1f:a8:a9:a9:b1:45:9c:c6:95:3f:fe:31:c9:b3:16: fa:83:45:bc:7e:21:fc:19:98:16:50:c3:13:ad:cb: 4f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 199.204.128.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32659 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:07:ba:e8:61:2c:cb:0e:4a:df:3d:d5:3c:60:86:37:70:3e: d9:a9:29:f5:94:33:59:fd:93:b0:dd:a3:66:fe:4c:cc:23:2d: c6:34:32:ae:08:1c:f5:ad:79:69:c8:44:1c:f2:cb:ad:95:08: bb:6f:11:e9:84:a7:cd:58:99:25:52:e9:e7:04:4c:a2:e0:4e: b3:f6:28:81:6a:e2:79:51:74:53:72:d6:25:32:25:48:8f:27: da:e7:d4:22:03:3d:43:ca:1c:00:b3:e4:c5:f0:6a:e7:fd:f3: 99:1b:2b:89:6c:b9:18:64:d0:ae:4e:5f:b9:6d:ee:36:07:8c: a2:01:c0:da:c4:d6:04:30:7f:f2:68:ab:7b:31:2c:a6:ef:6c: 05:6a:62:57:07:a8:e5:b7:34:82:87:0a:0e:0a:9d:71:a5:39: e3:ac:84:ed:81:3c:07:3a:12:58:cc:84:59:04:e3:de:5c:d1: 5e:4a:b4:a6:68:32:e2:d5:19:ce:a9:05:69:72:a0:e2:62:55: d9:95:a1:3d:b4:cb:27:ef:65:a4:d0:52:cc:65:da:02:06:f5: d8:37:e3:62:f4:ed:45:57:51:ec:6d:58:f6:b4:0f:4f:c9:bd: 25:e3:7f:6a:8c:63:ca:54:c1:8c:0a:2f:af:30:95:3a:cb:c0: 8a:6a:a5:a9 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEtmrOlvvetfqk4KtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwMzE3MDgzM1oXDTI4MDEwNjE4MDgzM1owLzEtMCsGA1UEAxMk NzIwYmYxZjUtYmZkYy00ZTliLWFlYzktNDVmMTY1MjVhZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gBTYo8qZYSGhE0TAoP7F7erRVVxJ3YpqJW8 hKizbLwXSc3lWSTXHxftRCdeFmoEFvflBGMgT6KYL+dkBbENfCzmrF+/b3AQqUOr OfwqylRiIR3ylH+LoZNbenaIoBi47gNkFuFwcevV+PxLuep/xT/aC8kJqy9D3Ssj kiI0NMJpzgRYxLVz99hQ2hJJGXO6KGtGEl97bE8i1tBVQZ1gU6mHcUR5KQq+8Bfe clgg2ZOnJRXegUXoHFQNZ8PUHb2+GxbWjFZqMzCxYTTKnip/Kd2MPtfZsx9FuIjz jPGswKIfqKmpsUWcxpU//jHJsxb6g0W8fiH8GZgWUMMTrctPJwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFGbH67JNJoYWenfs7EuV1zADgV4OMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83 MjBiZjFmNS1iZmRjLTRlOWItYWVjOS00NWYxNjUyNWFmYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzcyMGJmMWY1LWJmZGMtNGU5Yi1h ZWM5LTQ1ZjE2NTI1YWZiZS83MjBiZjFmNS1iZmRjLTRlOWItYWVjOS00NWYxNjUy NWFmYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHzIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC f5MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAHAe66GEsyw5K3z3VPGCGN3A+2akp9ZQzWf2TsN2jZv5MzCMt xjQyrggc9a15achEHPLLrZUIu28R6YSnzViZJVLp5wRMouBOs/YogWrieVF0U3LW JTIlSI8n2ufUIgM9Q8ocALPkxfBq5/3zmRsriWy5GGTQrk5fuW3uNgeMogHA2sTW BDB/8mirezEspu9sBWpiVweo5bc0gocKDgqdcaU546yE7YE8BzoSWMyEWQTj3lzR Xkq0pmgy4tUZzqkFaXKg4mJV2ZWhPbTLJ+9lpNBSzGXaAgb12DfjYvTtRVdR7G1Y 9rQPT8m9JeN/aoxjylTBjAovrzCVOsvAimqlqQ== -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:04 2025 by rpki-client