$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer File: 86b3d251-3b5e-4f85-be32-3f374c1f4cf4.cer (raw, json) Hash identifier: hmvO5rsDNCtNev6i/3fU4Pb5+NW5GD8zRqezBrLG9W8= Subject key identifier: B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B2C8C12AB14E7AAF66776A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 12 Sep 2025 21:25:30 +0000 Certificate not after: Thu 16 Dec 2027 22:25:30 +0000 Subordinate resources: AS: 401728 IP: 2620:d7:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:8c:12:ab:14:e7:aa:f6:67:76:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 12 21:25:30 2025 GMT Not After : Dec 16 22:25:30 2027 GMT Subject: CN=86b3d251-3b5e-4f85-be32-3f374c1f4cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:40:91:e7:5a:78:f2:d1:20:62:3e:af:ba: 1f:90:86:86:da:c6:00:bb:12:51:28:9e:a8:2f:0f: eb:62:53:12:7a:18:0c:87:21:1e:3c:ac:e3:72:bf: f6:fb:75:f8:15:cd:f6:0d:3a:ef:b5:88:86:33:1a: e0:4c:2d:0c:1d:f7:b3:83:02:eb:67:09:33:d3:35: 70:f0:01:79:5b:d1:50:60:6b:2f:ac:86:02:79:ba: c0:d1:dc:79:6e:4f:c4:71:b1:3d:98:ad:78:63:33: ba:ca:5d:bc:2d:6a:96:04:29:60:95:ef:d0:0b:33: bb:6f:df:2a:53:be:51:b1:13:ec:0e:43:3d:39:03: 43:a5:da:de:8b:23:83:68:20:e0:34:35:60:04:89: 38:1d:05:2b:b8:10:be:15:fb:0b:db:85:51:e9:87: 38:1b:64:51:5e:1b:b9:14:9d:54:73:b9:52:97:b2: 83:a5:b9:94:2a:03:a1:09:b4:a6:d0:47:a3:5d:fa: b8:a1:db:55:54:d1:42:fa:55:96:d2:e5:a9:e3:44: 21:ad:95:24:50:a6:0b:a2:ef:91:fb:47:a1:ed:8d: 0d:f9:a1:f4:36:6d:a0:aa:7d:91:bb:ee:cf:24:c7: 6c:1e:f6:6d:6f:6b:16:22:12:cd:c3:91:3f:fc:92: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D1:A1:D5:30:D9:AB:D6:2C:FD:F1:3C:B7:08:3F:DF:CA:4C:A6:00 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86b3d251-3b5e-4f85-be32-3f374c1f4cf4/86b3d251-3b5e-4f85-be32-3f374c1f4cf4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv6: 2620:d7:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401728 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ca:d0:7e:59:1d:69:24:f5:fc:e2:7a:b1:f4:8a:54:03:08: b8:ba:00:ec:64:0d:bb:c7:3f:63:fa:e8:ca:dc:6e:c5:07:b4: c8:06:e5:4c:c2:a2:86:d4:4c:31:6e:77:75:1c:3f:6c:77:aa: dc:b8:03:25:89:f3:8d:67:48:62:ef:5b:99:45:6e:55:1b:8f: 77:e3:3f:47:55:0f:72:b4:35:46:2a:7a:53:eb:30:41:48:50: 92:bb:11:f7:de:2f:bb:70:71:83:1e:04:52:d1:2f:7b:fa:15: ea:1e:0c:10:20:28:9b:18:76:be:8f:be:2d:a0:23:d0:2c:9e: 47:7a:c5:d7:50:7f:e0:37:d6:2f:20:b4:9a:6f:ba:18:f5:77: 30:d9:9b:2a:01:28:0d:ea:4d:af:3a:c8:dd:bf:0d:e5:53:c5: c1:7e:e6:20:70:f9:df:d3:5b:4f:9a:ce:f2:d2:3d:3f:e0:36: e2:e5:b9:90:be:18:40:56:91:04:99:0f:fd:14:80:26:ca:a6: 1f:1b:2f:97:6c:d9:f0:fb:3c:20:0f:83:50:67:52:b8:2f:3d: 8e:4a:d1:fd:df:82:9f:11:a0:45:f0:66:f8:d1:3e:df:09:97: 4e:93:88:4c:76:04:45:7a:26:6b:0d:3d:46:48:ac:aa:fc:8e: 3d:e1:95:0b -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEssjBKrFOeq9md2pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkxMjIxMjUzMFoXDTI3MTIxNjIyMjUzMFowLzEtMCsGA1UEAxMk ODZiM2QyNTEtM2I1ZS00Zjg1LWJlMzItM2YzNzRjMWY0Y2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNBAkedaePLRIGI+r7ofkIaG2sYAuxJRKJ6o Lw/rYlMSehgMhyEePKzjcr/2+3X4Fc32DTrvtYiGMxrgTC0MHfezgwLrZwkz0zVw 8AF5W9FQYGsvrIYCebrA0dx5bk/EcbE9mK14YzO6yl28LWqWBClgle/QCzO7b98q U75RsRPsDkM9OQNDpdreiyODaCDgNDVgBIk4HQUruBC+FfsL24VR6Yc4G2RRXhu5 FJ1Uc7lSl7KDpbmUKgOhCbSm0EejXfq4odtVVNFC+lWW0uWp40QhrZUkUKYLou+R +0eh7Y0N+aH0Nm2gqn2Ru+7PJMdsHvZtb2sWIhLNw5E//JK+JwIDAQABo4IEHjCC BBowHQYDVR0OBBYEFLPRodUw2avWLP3xPLcIP9/KTKYAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 NmIzZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3NGMxZjRjZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzg2YjNkMjUxLTNiNWUtNGY4NS1i ZTMyLTNmMzc0YzFmNGNmNC84NmIzZDI1MS0zYjVlLTRmODUtYmUzMi0zZjM3NGMx ZjRjZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIADX4AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiFAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAEvK0H5ZHWkk9fzierH0ilQDCLi6AOxkDbvHP2P66Mrc bsUHtMgG5UzCoobUTDFud3UcP2x3qty4AyWJ841nSGLvW5lFblUbj3fjP0dVD3K0 NUYqelPrMEFIUJK7EffeL7twcYMeBFLRL3v6FeoeDBAgKJsYdr6Pvi2gI9Asnkd6 xddQf+A31i8gtJpvuhj1dzDZmyoBKA3qTa86yN2/DeVTxcF+5iBw+d/TW0+azvLS PT/gNuLluZC+GEBWkQSZD/0UgCbKph8bL5ds2fD7PCAPg1BnUrgvPY5K0f3fgp8R oEXwZvjRPt8Jl06TiEx2BEV6JmsNPUZIrKr8jj3hlQs= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:07 2025 by rpki-client