$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/996a1c81-f994-4604-89c1-d1cdf4b5faeb.cer File: 996a1c81-f994-4604-89c1-d1cdf4b5faeb.cer (raw, json) Hash identifier: NbU/5GqNRBb2Uytm7LD+wyAycTckTbEYdAUjnL0Mews= Subject key identifier: 7A:E1:0A:52:76:07:44:3B:1D:B8:D0:7E:B9:7D:15:C1:7E:13:64:54 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B5B5E7B4F50C221D36C2902A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/996a1c81-f994-4604-89c1-d1cdf4b5faeb/996a1c81-f994-4604-89c1-d1cdf4b5faeb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/996a1c81-f994-4604-89c1-d1cdf4b5faeb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Sep 2025 15:56:38 +0000 Certificate not after: Sun 02 Jan 2028 16:56:38 +0000 Subordinate resources: AS: 18757 IP: 205.145.160.0/24 IP: 205.145.162.0/24 IP: 205.145.164.0/22 IP: 205.145.169.0/24 IP: 205.145.171.0 -- 205.145.174.255 IP: 205.145.178.0 -- 205.145.180.255 IP: 205.145.182.0/24 IP: 205.145.184.0 -- 205.145.189.255 IP: 205.145.191.0/24 IP: 216.224.194.0 -- 216.224.197.255 IP: 216.224.200.0 -- 216.224.209.255 IP: 216.224.218.0 -- 216.224.223.255 IP: 2620:173::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:5e:7b:4f:50:c2:21:d3:6c:29:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 29 15:56:38 2025 GMT Not After : Jan 2 16:56:38 2028 GMT Subject: CN=996a1c81-f994-4604-89c1-d1cdf4b5faeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:90:c2:0c:46:2f:3b:d2:cb:fe:22:d9:38: 6a:0a:91:38:e1:87:52:ac:c9:0e:8a:91:8f:0e:20: c3:0d:f3:c9:79:85:97:c1:cf:e4:67:bb:cb:6f:62: c8:9f:1e:56:63:c7:22:f8:9f:6c:a3:c1:5b:f9:7f: 16:be:73:55:97:b2:5b:35:72:0d:96:da:23:37:87: dd:56:86:4e:a8:46:78:d2:ef:e5:4c:72:db:01:40: c5:59:5b:ca:26:79:aa:04:8e:9f:fc:91:ea:1a:fe: c7:8b:99:78:46:98:5c:10:3b:ab:8a:fd:70:41:6f: da:d6:f9:c3:33:be:24:99:a4:22:f9:cf:98:f8:d0: a4:fb:e7:7a:69:81:cd:ba:54:4e:df:f2:a2:1f:a9: 5b:22:f3:16:5b:e1:c2:d9:bd:79:fd:01:49:ae:61: 89:a6:ba:50:ca:95:0e:13:2e:b2:9d:e8:08:51:c5: 99:02:86:b1:d0:8e:2f:7f:84:90:13:38:5a:8f:e1: f0:3c:30:db:89:c6:7c:f6:e2:22:09:85:13:4b:02: 02:b2:f2:e5:a8:51:86:07:37:45:91:5d:23:9b:31: df:09:b7:6c:45:28:fe:c3:a9:30:d1:de:0d:81:6a: 53:73:7d:ad:07:32:51:62:49:93:ec:21:8f:22:6b: 51:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E1:0A:52:76:07:44:3B:1D:B8:D0:7E:B9:7D:15:C1:7E:13:64:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/996a1c81-f994-4604-89c1-d1cdf4b5faeb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/996a1c81-f994-4604-89c1-d1cdf4b5faeb/996a1c81-f994-4604-89c1-d1cdf4b5faeb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 205.145.160.0/24 205.145.162.0/24 205.145.164.0/22 205.145.169.0/24 205.145.171.0-205.145.174.255 205.145.178.0-205.145.180.255 205.145.182.0/24 205.145.184.0-205.145.189.255 205.145.191.0/24 216.224.194.0-216.224.197.255 216.224.200.0-216.224.209.255 216.224.218.0-216.224.223.255 IPv6: 2620:173::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18757 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b8:03:e5:a2:00:9a:6a:a4:c8:8b:54:c7:81:b3:c6:cc:d4: fe:d1:c0:f2:18:e2:7f:b9:3c:6a:79:ae:1c:16:38:71:42:a4: 6c:8c:59:87:28:61:5a:a2:10:03:2a:38:28:c9:ad:ef:54:3c: 27:1c:de:80:3e:f7:1a:90:ab:8b:af:0a:d0:48:66:5c:c6:50: 5c:a3:e1:4a:db:01:8c:9d:37:2b:6d:37:8d:4f:3d:31:80:ea: 10:11:8a:71:3f:43:01:60:82:d7:35:e2:15:88:2b:d2:b1:06: 9b:06:b2:ed:06:26:47:e0:f1:73:b6:32:fc:c4:c3:26:c4:0e: d5:b5:30:19:3b:be:0d:9b:13:87:8c:d8:7f:ec:f5:ba:c6:5e: 67:66:a3:49:ae:5d:0c:2c:a4:3e:be:a7:9d:d2:d6:cb:87:89: 2d:92:af:b7:ca:0c:57:1c:3a:f7:be:5d:b7:81:a7:6f:53:7a: 9d:0b:60:88:8d:22:3f:05:d9:80:0c:ef:5e:29:3e:8a:fe:00: c1:f3:84:4b:84:3e:9c:87:d8:79:84:d8:38:28:71:4b:e7:83: c9:1f:6f:3d:0e:00:04:02:a8:4b:dc:72:67:be:75:49:23:a9: 3a:cb:9c:65:d3:bd:5e:1b:2a:cd:d5:38:44:b7:f5:95:df:20: 47:ab:92:cd -----BEGIN CERTIFICATE----- MIIHjTCCBnWgAwIBAgIUAQ0Mn0MoWEtbXntPUMIh02wpAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyOTE1NTYzOFoXDTI4MDEwMjE2NTYzOFowLzEtMCsGA1UEAxMk OTk2YTFjODEtZjk5NC00NjA0LTg5YzEtZDFjZGY0YjVmYWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WeQwgxGLzvSy/4i2ThqCpE44YdSrMkOipGP DiDDDfPJeYWXwc/kZ7vLb2LInx5WY8ci+J9so8Fb+X8WvnNVl7JbNXINltojN4fd VoZOqEZ40u/lTHLbAUDFWVvKJnmqBI6f/JHqGv7Hi5l4RphcEDuriv1wQW/a1vnD M74kmaQi+c+Y+NCk++d6aYHNulRO3/KiH6lbIvMWW+HC2b15/QFJrmGJprpQypUO Ey6ynegIUcWZAoax0I4vf4SQEzhaj+HwPDDbicZ89uIiCYUTSwICsvLlqFGGBzdF kV0jmzHfCbdsRSj+w6kw0d4NgWpTc32tBzJRYkmT7CGPImtRgwIDAQABo4IEnzCC BJswHQYDVR0OBBYEFHrhClJ2B0Q7HbjQfrl9FcF+E2RUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85 OTZhMWM4MS1mOTk0LTQ2MDQtODljMS1kMWNkZjRiNWZhZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4Lzk5NmExYzgxLWY5OTQtNDYwNC04 OWMxLWQxY2RmNGI1ZmFlYi85OTZhMWM4MS1mOTk0LTQ2MDQtODljMS1kMWNkZjRi NWZhZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwgaMGCCsGAQUF BwEHAQH/BIGTMIGQMH4EAgABMHgDBADNkaADBADNkaIDBALNkaQDBADNkakwDAME AM2RqwMEAM2RrjAMAwQBzZGyAwQAzZG0AwQAzZG2MAwDBAPNkbgDBAHNkbwDBADN kb8wDAMEAdjgwgMEAdjgxDAMAwQD2ODIAwQB2ODQMAwDBAHY4NoDBAXY4MAwDgQC AAIwCAMGBCYgAXMAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAklFMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJa4A+WiAJpqpMiLVMeBs8bM1P7RwPIY4n+5PGp5rhwWOHFCpGyMWYcoYVqiEAMq OCjJre9UPCcc3oA+9xqQq4uvCtBIZlzGUFyj4UrbAYydNyttN41PPTGA6hARinE/ QwFggtc14hWIK9KxBpsGsu0GJkfg8XO2MvzEwybEDtW1MBk7vg2bE4eM2H/s9brG Xmdmo0muXQwspD6+p53S1suHiS2Sr7fKDFccOve+XbeBp29Tep0LYIiNIj8F2YAM 714pPor+AMHzhEuEPpyH2HmE2DgocUvng8kfbz0OAAQCqEvccme+dUkjqTrLnGXT vV4bKs3VOES39ZXfIEerks0= -----END CERTIFICATE-----Generated at Wed Oct 8 15:36:05 2025 by rpki-client