$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22.cer File: dac66525-ec66-4458-af9c-d81d29c7ec22.cer (raw, json) Hash identifier: rVhGm7aXvME3/3GUr27bGmWleGTuRVsShXpW55EIkjI= Subject key identifier: 8B:67:AE:AD:4A:6B:41:8F:AC:8B:95:87:2B:63:E8:DE:20:B7:10:DD Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B53504A42A1FAE9894E0B6E60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Sep 2025 18:41:34 +0000 Certificate not after: Thu 30 Dec 2027 19:41:34 +0000 Subordinate resources: AS: 33570 IP: 216.41.208.0/22 IP: 216.41.217.0 -- 216.41.219.255 IP: 216.41.221.0/24 IP: 2605:22c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:53:50:4a:42:a1:fa:e9:89:4e:0b:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 26 18:41:34 2025 GMT Not After : Dec 30 19:41:34 2027 GMT Subject: CN=dac66525-ec66-4458-af9c-d81d29c7ec22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b6:9b:5d:54:8c:bc:3a:b3:67:0f:9e:16:48: 41:ac:8a:23:64:d1:8d:77:58:9d:45:b4:09:3b:11: fc:72:c7:af:8e:41:84:68:cb:40:bd:b1:03:3d:1d: a4:39:b0:af:04:36:dc:3c:be:5a:88:09:d0:b0:1c: 62:fb:fa:2d:78:6b:d8:70:25:a8:8a:b1:54:09:be: 85:59:f0:54:18:76:f6:71:65:ba:d9:4e:e5:fc:a9: cb:d3:d7:70:62:1e:76:1c:13:a7:40:e4:6d:fc:4a: 7b:dc:53:2e:1e:2f:56:52:37:4d:a6:04:be:5b:22: c9:53:56:d9:14:c2:75:2e:3f:82:7c:51:bf:ad:4b: 38:a3:3b:5a:36:80:59:6f:a0:58:aa:19:83:dc:32: e0:c4:a8:63:eb:cb:9b:ca:13:99:c1:0b:5f:42:cc: 7a:ae:42:48:ab:b6:73:df:76:c0:5b:9e:bb:31:c6: 88:be:1d:c0:da:79:41:17:e7:25:de:1d:2b:5d:77: 04:93:17:c1:c3:38:c6:18:3d:8c:1d:c6:5c:92:f4: 11:af:e5:62:61:61:17:81:33:d6:dc:c1:30:d1:73: f2:9c:c2:39:61:91:94:07:24:51:4b:47:8c:38:e1: f2:53:67:df:7f:b9:16:ee:53:99:81:b8:1f:71:5b: 83:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:67:AE:AD:4A:6B:41:8F:AC:8B:95:87:2B:63:E8:DE:20:B7:10:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 216.41.208.0/22 216.41.217.0-216.41.219.255 216.41.221.0/24 IPv6: 2605:22c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33570 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2f:dd:ab:29:be:fd:76:1a:1d:84:12:7a:ce:09:b6:58:a0: 6a:de:c4:1c:ed:a5:62:fe:44:e8:11:d2:9f:6c:d7:f6:ae:9a: 17:cb:99:da:b4:da:b0:9b:9d:bf:f0:24:fe:47:25:d0:0d:74: 94:23:83:2f:6e:16:c3:93:bf:04:aa:2c:17:78:8d:92:40:57: 8a:8d:ee:76:d8:95:ca:b3:bf:1c:cc:a0:29:79:29:e9:5f:e0: 6a:c6:53:8a:55:0c:3a:d2:69:02:bf:ed:70:ee:e7:df:e4:b4: 5c:c4:f7:ff:4a:13:28:76:f9:c3:3c:79:5a:18:e9:2a:8d:ee: 14:d6:72:3e:1a:fd:e2:4f:75:89:10:39:82:4d:91:2f:cf:a5: 31:c8:f0:67:71:92:9b:c2:99:79:49:4c:98:e4:d5:c2:88:c8: 0c:b3:09:7b:fd:2f:da:ff:54:93:9e:bf:90:c5:5e:f2:4d:79: 08:cc:ae:1f:8c:df:20:47:6e:e2:75:20:16:4e:9d:6a:6d:25: f2:ff:ed:c0:04:86:1e:c1:6e:99:4c:2d:d6:34:69:00:c8:e8: 89:84:6a:4a:09:d6:ca:4a:9b:00:7b:45:af:e9:72:cb:46:06: 07:cc:d6:62:34:4a:49:87:d6:bd:a1:04:b2:d6:8c:8d:f2:bf: 6f:61:99:5a -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEtTUEpCofrpiU4LbmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkyNjE4NDEzNFoXDTI3MTIzMDE5NDEzNFowLzEtMCsGA1UEAxMk ZGFjNjY1MjUtZWM2Ni00NDU4LWFmOWMtZDgxZDI5YzdlYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbabXVSMvDqzZw+eFkhBrIojZNGNd1idRbQJ OxH8csevjkGEaMtAvbEDPR2kObCvBDbcPL5aiAnQsBxi+/oteGvYcCWoirFUCb6F WfBUGHb2cWW62U7l/KnL09dwYh52HBOnQORt/Ep73FMuHi9WUjdNpgS+WyLJU1bZ FMJ1Lj+CfFG/rUs4oztaNoBZb6BYqhmD3DLgxKhj68ubyhOZwQtfQsx6rkJIq7Zz 33bAW567McaIvh3A2nlBF+cl3h0rXXcEkxfBwzjGGD2MHcZckvQRr+ViYWEXgTPW 3MEw0XPynMI5YZGUByRRS0eMOOHyU2fff7kW7lOZgbgfcVuDLQIDAQABo4IEPjCC BDowHQYDVR0OBBYEFItnrq1Ka0GPrIuVhytj6N4gtxDdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k YWM2NjUyNS1lYzY2LTQ0NTgtYWY5Yy1kODFkMjljN2VjMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2RhYzY2NTI1LWVjNjYtNDQ1OC1h ZjljLWQ4MWQyOWM3ZWMyMi9kYWM2NjUyNS1lYzY2LTQ0NTgtYWY5Yy1kODFkMjlj N2VjMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMCAEAgABMBoDBALYKdAwDAMEANgp2QMEAtgp2AMEANgp3TANBAIA AjAHAwUAJgUiwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAgyIwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Uy/dqym+/XYaHYQSes4Jtligat7EHO2lYv5E6BHSn2zX9q6aF8uZ2rTasJudv/Ak /kcl0A10lCODL24Ww5O/BKosF3iNkkBXio3udtiVyrO/HMygKXkp6V/gasZTilUM OtJpAr/tcO7n3+S0XMT3/0oTKHb5wzx5WhjpKo3uFNZyPhr94k91iRA5gk2RL8+l McjwZ3GSm8KZeUlMmOTVwojIDLMJe/0v2v9Uk56/kMVe8k15CMyuH4zfIEdu4nUg Fk6dam0l8v/twASGHsFumUwt1jRpAMjoiYRqSgnWykqbAHtFr+lyy0YGB8zWYjRK SYfWvaEEstaMjfK/b2GZWg== -----END CERTIFICATE-----Generated at Wed Oct 8 17:16:44 2025 by rpki-client