$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944.cer File: 8dd4f161-715c-4c6f-9df2-5d5f535bf944.cer (raw, json) Hash identifier: ENgwFz3cp1UXNQXuTpX/H1OpZEF8/Fh2/TqBxYk37H0= Subject key identifier: 85:D1:E9:26:31:5D:D5:1F:F9:43:33:98:AA:65:8D:E1:77:6A:67:CD Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B101FCDF75ABB002A8475A480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/8dd4f161-715c-4c6f-9df2-5d5f535bf944.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Sep 2025 17:04:43 +0000 Certificate not after: Mon 06 Dec 2027 18:04:43 +0000 Subordinate resources: AS: 30337 IP: 167.219.0.0 -- 167.219.47.255 IP: 167.219.64.0 -- 167.219.255.255 IP: 2620:119:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:1f:cd:f7:5a:bb:00:2a:84:75:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 2 17:04:43 2025 GMT Not After : Dec 6 18:04:43 2027 GMT Subject: CN=8dd4f161-715c-4c6f-9df2-5d5f535bf944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:6b:e3:19:9c:0f:2e:d8:05:86:35:6c:d0: 1a:53:c4:30:49:56:e0:9d:d8:42:a0:3a:db:2a:a3: df:3e:67:6b:3d:ba:47:7e:26:b4:38:0b:b4:c8:ca: 3c:67:ce:34:15:cd:2d:f9:97:af:ce:da:a8:5d:9b: 4f:e1:c6:6a:0c:f4:58:ac:67:3f:a1:cd:ce:b1:36: ad:85:bd:54:a9:c8:38:04:24:ab:7f:e0:4f:81:47: 2e:45:31:e8:c1:1d:1b:64:a2:53:04:e9:05:93:c0: 22:6b:08:7a:27:09:b7:d2:35:42:cc:51:79:6a:61: e5:07:b2:7a:56:d5:54:c8:76:42:a6:ff:37:b7:21: b4:02:af:0e:30:a7:94:d9:3f:cd:21:ef:0b:ff:ae: 55:83:1a:d1:17:99:e4:07:27:d6:86:01:b5:56:b7: 4b:26:18:3a:4d:36:e9:82:8b:63:71:2a:07:61:7d: 84:54:f1:ad:a3:58:d0:83:e2:9d:9a:f7:9b:46:82: 75:ba:bc:29:fd:f2:ff:93:bb:93:46:b0:a4:a2:58: 0a:9f:e7:62:d2:6f:ed:22:16:8a:5a:38:06:15:06: a1:e3:2f:07:2d:74:18:20:9b:19:cc:2d:81:75:4c: 86:4d:e2:68:1b:1c:57:b6:44:bd:16:bd:96:ef:a9: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D1:E9:26:31:5D:D5:1F:F9:43:33:98:AA:65:8D:E1:77:6A:67:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8dd4f161-715c-4c6f-9df2-5d5f535bf944/8dd4f161-715c-4c6f-9df2-5d5f535bf944.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 167.219.0.0-167.219.47.255 167.219.64.0-167.219.255.255 IPv6: 2620:119:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30337 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:34:c6:38:d0:ad:4c:0a:13:74:28:8d:22:d5:51:1d:a0:48: d2:90:a1:79:93:b5:ff:17:b6:99:ab:fd:85:c0:0e:c2:5e:45: 81:9d:e9:a2:f7:f9:5f:64:5b:77:f3:07:1b:bd:81:e6:6e:ca: 4b:95:3a:fa:d4:c9:91:39:8a:10:12:60:0e:48:c9:cb:9f:fa: 77:1b:fb:ef:57:0a:8d:1d:d5:46:ca:52:5d:06:62:f4:38:9c: 89:bf:08:c9:e7:a4:6a:30:6e:58:87:f8:6f:ea:98:19:f5:1d: ee:e4:c8:4c:c0:39:2f:ea:4b:cf:a8:08:b8:d6:de:36:20:e1: 73:3e:5b:74:16:42:2a:59:79:fb:1f:bf:22:72:c7:12:1d:db: 59:30:53:cc:a8:9a:d9:73:fe:53:41:cc:40:73:ab:23:1b:63: 2a:62:51:00:73:c6:c0:ed:79:d1:77:9f:a9:31:13:01:da:5c: 2a:98:fd:6e:32:a2:db:8f:7e:39:07:98:23:2a:53:8b:0a:d0: a6:ff:e9:4c:ef:2c:23:4d:ca:c4:fd:c7:29:8f:9d:80:cf:c1: 45:ee:c2:a2:2b:0c:d8:ce:2e:f6:9f:89:ee:3e:17:a6:43:1f: e0:5e:08:1d:ac:9a:ea:5b:bf:92:52:5c:b8:fd:17:51:9d:33: bc:c2:90:29 -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEsQH833WrsAKoR1pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwMjE3MDQ0M1oXDTI3MTIwNjE4MDQ0M1owLzEtMCsGA1UEAxMk OGRkNGYxNjEtNzE1Yy00YzZmLTlkZjItNWQ1ZjUzNWJmOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV1r4xmcDy7YBYY1bNAaU8QwSVbgndhCoDrb KqPfPmdrPbpHfia0OAu0yMo8Z840Fc0t+ZevztqoXZtP4cZqDPRYrGc/oc3OsTat hb1Uqcg4BCSrf+BPgUcuRTHowR0bZKJTBOkFk8Aiawh6Jwm30jVCzFF5amHlB7J6 VtVUyHZCpv83tyG0Aq8OMKeU2T/NIe8L/65VgxrRF5nkByfWhgG1VrdLJhg6TTbp gotjcSoHYX2EVPGto1jQg+KdmvebRoJ1urwp/fL/k7uTRrCkolgKn+di0m/tIhaK WjgGFQah4y8HLXQYIJsZzC2BdUyGTeJoGxxXtkS9Fr2W76ndMQIDAQABo4IEPjCC BDowHQYDVR0OBBYEFIXR6SYxXdUf+UMzmKpljeF3amfNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84 ZGQ0ZjE2MS03MTVjLTRjNmYtOWRmMi01ZDVmNTM1YmY5NDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzhkZDRmMTYxLTcxNWMtNGM2Zi05 ZGYyLTVkNWY1MzViZjk0NC84ZGQ0ZjE2MS03MTVjLTRjNmYtOWRmMi01ZDVmNTM1 YmY5NDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMCAEAgABMBowCwMDAKfbAwQEp9sgMAsDBAan20ADAwKn2DAOBAIA AjAIAwYAJiABGeAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdoEwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA ADTGONCtTAoTdCiNItVRHaBI0pCheZO1/xe2mav9hcAOwl5FgZ3povf5X2Rbd/MH G72B5m7KS5U6+tTJkTmKEBJgDkjJy5/6dxv771cKjR3VRspSXQZi9Dicib8Iyeek ajBuWIf4b+qYGfUd7uTITMA5L+pLz6gIuNbeNiDhcz5bdBZCKll5+x+/InLHEh3b WTBTzKia2XP+U0HMQHOrIxtjKmJRAHPGwO150XefqTETAdpcKpj9bjKi249+OQeY IypTiwrQpv/pTO8sI03KxP3HKY+dgM/BRe7CoisM2M4u9p+J7j4XpkMf4F4IHaya 6lu/klJcuP0XUZ0zvMKQKQ== -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:01 2025 by rpki-client