$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer File: de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer (raw, json) Hash identifier: QfIZKpC0MF3gPUZhtI6bl3qo5bo/gFfItkhN8H6wQ7Y= Subject key identifier: 6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B71D0974A2A3850236B323C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 16:54:20 +0000 Certificate not after: Tue 07 Dec 2027 04:44:31 +0000 Subordinate resources: AS: 40838 IP: 139.64.224.0/22 IP: 158.51.72.0/22 IP: 168.151.12.0/22 IP: 2604:2460::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:d0:97:4a:2a:38:50:23:6b:32:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Oct 7 16:54:20 2025 GMT Not After : Dec 7 04:44:31 2027 GMT Subject: CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:a5:85:d1:46:8d:7f:75:63:23:9d:16:b2: 3e:33:dc:ee:32:6a:56:92:88:33:d1:cc:c9:a0:86: e2:a7:7c:ce:c8:10:ee:6d:e6:e4:3a:a6:47:b5:e4: a2:c7:b2:a4:d3:ce:f2:52:52:2f:23:9f:ad:82:cb: 99:36:9a:dd:25:bc:00:98:80:77:49:5d:f9:d0:cc: 42:f2:d7:30:5a:3a:f0:b0:5c:67:3d:21:d0:f8:e5: 40:08:75:02:9a:03:75:28:b9:8e:13:9f:5a:b7:cf: ef:60:84:4d:07:40:b1:52:d9:fd:03:bf:4b:16:ea: 35:bc:08:34:78:72:a9:cd:4e:f2:3f:f6:bd:d9:99: 5e:27:2c:f9:8d:62:6f:b9:de:9d:12:27:da:a1:75: 8b:63:ad:b8:f7:12:7f:87:7e:e3:10:a0:1e:2b:87: 56:8d:61:49:3b:10:35:8e:d1:b4:41:e4:bd:4e:8c: 02:bf:2a:41:9e:38:30:ee:99:c5:36:79:ac:78:a9: d2:8b:00:6a:d0:26:b4:63:5d:2d:d0:7b:da:a2:1e: a7:03:91:a6:7f:a8:a3:22:4f:1b:e0:d5:d6:a4:ca: 7f:ff:b0:e6:50:f8:22:13:c9:ea:f6:7c:d0:62:a9: 9b:30:14:97:e4:54:f6:90:4b:62:90:35:cd:09:71: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 139.64.224.0/22 158.51.72.0/22 168.151.12.0/22 IPv6: 2604:2460::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40838 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:75:71:64:85:90:8a:a4:21:8d:ef:3d:cd:ce:0f:0b:2f:3d: 87:a4:93:3c:fc:a8:4f:b8:19:e5:d8:92:2e:ba:2d:c0:4e:91: 51:6e:95:a6:cd:e9:8a:4c:b5:05:e0:62:73:50:3c:17:20:c9: b1:02:f5:e8:93:a4:d1:80:3c:da:97:04:f7:22:d5:f5:8c:f5: 48:51:e3:f6:db:06:42:3a:70:5b:8d:0f:7b:c2:80:c0:dd:98: 91:0b:dc:12:80:e2:48:cf:c4:b3:74:8c:0e:ea:a9:17:83:c8: a0:56:87:c1:1c:cf:8a:24:e1:b2:45:3c:5f:f3:b2:d2:3b:91: 27:5f:26:bf:1e:8d:03:27:9b:54:40:ef:58:0f:60:52:ed:6d: 30:1e:2f:9b:56:ce:a4:22:5e:11:ea:dc:39:6f:68:f0:56:f3: b0:f0:41:c0:6b:e7:02:5b:07:9a:64:23:b8:2c:43:f4:60:5f: cd:60:8d:73:1b:66:e4:7c:75:2b:39:8c:12:d9:03:58:b9:e6: a8:b4:97:90:9b:cc:04:d3:16:55:9e:a4:b8:31:ad:2e:d0:e0: bb:a6:c7:c8:c1:f2:f7:77:8e:7b:2a:4e:60:6a:c7:dd:ee:e9: 57:e3:d4:a0:66:41:5e:a8:70:88:47:d9:99:eb:2d:04:5d:92: 96:44:59:cb -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEtx0JdKKjhQI2syPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MTAwNzE2NTQyMFoXDTI3MTIwNzA0NDQzMVowLzEtMCsGA1UEAxMk ZGU5ZDlmZTgtM2E1My00OWEwLTk1NWItY2M0ZGZlZWI5ZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5mlhdFGjX91YyOdFrI+M9zuMmpWkogz0czJ oIbip3zOyBDubebkOqZHteSix7Kk087yUlIvI5+tgsuZNprdJbwAmIB3SV350MxC 8tcwWjrwsFxnPSHQ+OVACHUCmgN1KLmOE59at8/vYIRNB0CxUtn9A79LFuo1vAg0 eHKpzU7yP/a92ZleJyz5jWJvud6dEifaoXWLY6249xJ/h37jEKAeK4dWjWFJOxA1 jtG0QeS9TowCvypBnjgw7pnFNnmseKnSiwBq0Ca0Y10t0Hvaoh6nA5Gmf6ijIk8b 4NXWpMp//7DmUPgiE8nq9nzQYqmbMBSX5FT2kEtikDXNCXH56wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFG7BWbwSWcsa74GqdQusjMJzSDcYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9k ZTlkOWZlOC0zYTUzLTQ5YTAtOTU1Yi1jYzRkZmVlYjlmN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2RlOWQ5ZmU4LTNhNTMtNDlhMC05 NTViLWNjNGRmZWViOWY3Yi9kZTlkOWZlOC0zYTUzLTQ5YTAtOTU1Yi1jYzRkZmVl YjlmN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKLQOADBAKeM0gDBAKolwwwDQQCAAIwBwMFACYE JGAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJ+GMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHp1cWSFkIqk IY3vPc3ODwsvPYekkzz8qE+4GeXYki66LcBOkVFulabN6YpMtQXgYnNQPBcgybEC 9eiTpNGAPNqXBPci1fWM9UhR4/bbBkI6cFuND3vCgMDdmJEL3BKA4kjPxLN0jA7q qReDyKBWh8Ecz4ok4bJFPF/zstI7kSdfJr8ejQMnm1RA71gPYFLtbTAeL5tWzqQi XhHq3DlvaPBW87DwQcBr5wJbB5pkI7gsQ/RgX81gjXMbZuR8dSs5jBLZA1i55qi0 l5CbzATTFlWepLgxrS7Q4Lumx8jB8vd3jnsqTmBqx93u6Vfj1KBmQV6ocIhH2Znr LQRdkpZEWcs= -----END CERTIFICATE-----Generated at Wed Oct 8 17:04:34 2025 by rpki-client