$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer File: 3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer (raw, json) Hash identifier: j2yHRUgpVN8LA1PvM91MGk0JVQmKEnjgQeLmbaV4lpU= Subject key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584B120B2EC59C76090FCF35E740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 09:34:47 +0000 Certificate not after: Tue 07 Dec 2027 10:34:47 +0000 Subordinate resources: AS: 63061 IP: 198.177.6.0/23 IP: 207.229.90.0/23 IP: 2620:b7:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:0b:2e:c5:9c:76:09:0f:cf:35:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Sep 3 09:34:47 2025 GMT Not After : Dec 7 10:34:47 2027 GMT Subject: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:67:7c:5a:69:c9:d3:9f:5f:39:29:a5:cc:c6: 17:e8:51:ad:ca:e2:27:e7:c8:b0:80:6d:6f:ed:61: e1:e0:55:74:80:cf:48:74:2f:0a:5e:fa:3f:62:0c: f7:e1:f0:41:2e:e5:52:8e:58:a0:e8:63:3d:2a:62: 5b:24:04:55:2e:dd:c0:7b:a0:44:e3:bf:aa:cf:b7: 3c:77:1f:40:15:fb:0e:3f:cd:72:65:47:e4:5d:9c: 2c:2d:22:12:96:26:3b:9d:dd:24:93:e4:c2:81:fe: 2e:b2:86:8e:a4:e8:d0:33:01:d2:00:62:b7:69:07: f4:19:a6:b4:71:fb:a5:ef:30:78:37:a5:7a:95:2e: 55:92:10:df:93:f3:d9:70:9e:4f:3e:6a:ec:d7:da: e0:64:38:29:dd:9d:89:b5:73:93:8c:55:36:d2:22: 57:91:80:e0:fa:29:e2:c7:bd:fe:f9:72:51:cb:8c: 3b:f4:5f:24:4f:0f:65:35:9b:ed:6f:6e:9b:19:ec: 52:64:fa:22:bb:cc:79:d6:7e:b4:30:66:d7:0d:24: a3:73:87:4d:a0:33:e9:b9:5e:1e:19:c9:98:e6:ec: f6:a6:ee:ef:04:f3:2d:5c:46:46:d5:f7:b3:66:4e: 08:ab:0f:55:34:dc:a1:72:69:7a:07:01:18:bb:f1: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 198.177.6.0/23 207.229.90.0/23 IPv6: 2620:b7:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63061 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:78:59:66:27:a5:41:c8:9b:c4:fd:93:52:d1:dc:b3:8b:36: 56:51:c8:86:d2:4e:9d:bd:83:d9:13:51:cd:ed:08:42:fc:d3: 89:ff:be:d3:a4:63:79:3f:18:af:1c:0a:ba:68:00:1f:aa:02: db:90:d3:58:98:13:d9:b0:0f:02:4f:fd:39:09:e5:73:ef:41: d5:8b:5e:b7:e3:8d:43:5b:6e:9b:1e:e4:52:02:9f:10:da:d5: 10:24:f4:cb:7c:13:26:bf:ad:72:43:b5:56:f6:ef:e5:7a:7a: 7b:f6:08:a9:33:0b:50:8d:43:4f:04:d6:ef:ea:c1:25:2a:4d: 9e:d8:b2:6a:b6:41:3b:ac:d0:0b:60:c6:e7:a7:df:28:72:bb: 6d:67:13:0e:47:1f:63:1e:aa:3f:a7:4c:14:a3:ba:ed:41:2d: 72:48:da:2e:88:7d:60:cf:e1:fc:f7:6e:5a:1c:d9:eb:22:f6: a8:c0:73:88:10:bb:92:b9:3b:13:80:df:b3:77:70:fe:9b:4a: 06:5d:09:16:81:46:09:1c:2d:8b:df:4e:ba:0b:7f:65:c9:5f: de:69:a7:c9:aa:48:e7:a2:5d:fd:5f:aa:72:4d:a7:ea:d5:99: a2:38:97:c5:de:78:c4:09:b6:2d:e0:c5:3b:b4:a3:2f:bf:e0: 05:1e:2e:7f -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEsSCy7FnHYJD88150AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDkwMzA5MzQ0N1oXDTI3MTIwNzEwMzQ0N1owLzEtMCsGA1UEAxMk M2FhMDViMzEtM2MxZi00MGMxLWEwN2QtZTZhYTdmZjEyMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimd8WmnJ059fOSmlzMYX6FGtyuIn58iwgG1v 7WHh4FV0gM9IdC8KXvo/Ygz34fBBLuVSjlig6GM9KmJbJARVLt3Ae6BE47+qz7c8 dx9AFfsOP81yZUfkXZwsLSISliY7nd0kk+TCgf4usoaOpOjQMwHSAGK3aQf0Gaa0 cful7zB4N6V6lS5VkhDfk/PZcJ5PPmrs19rgZDgp3Z2JtXOTjFU20iJXkYDg+ini x73++XJRy4w79F8kTw9lNZvtb26bGexSZPoiu8x51n60MGbXDSSjc4dNoDPpuV4e GcmY5uz2pu7vBPMtXEZG1fezZk4Iqw9VNNyhcml6BwEYu/HB6QIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFKsM/qOMxZ4bAEifEtUvVy56FhJJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8z YWEwNWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFhN2ZmMTIyYzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzNhYTA1YjMxLTNjMWYtNDBjMS1h MDdkLWU2YWE3ZmYxMjJjOC8zYWEwNWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFhN2Zm MTIyYzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAHGsQYDBAHP5VowDwQCAAIwCQMHBCYgALcgADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA9lUwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWnhZZielQcibxP2T UtHcs4s2VlHIhtJOnb2D2RNRze0IQvzTif++06RjeT8YrxwKumgAH6oC25DTWJgT 2bAPAk/9OQnlc+9B1Ytet+ONQ1tumx7kUgKfENrVECT0y3wTJr+tckO1Vvbv5Xp6 e/YIqTMLUI1DTwTW7+rBJSpNntiyarZBO6zQC2DG56ffKHK7bWcTDkcfYx6qP6dM FKO67UEtckjaLoh9YM/h/PduWhzZ6yL2qMBziBC7krk7E4Dfs3dw/ptKBl0JFoFG CRwti99Ougt/Zclf3mmnyapI56Jd/V+qck2n6tWZojiXxd54xAm2LeDFO7SjL7/g BR4ufw== -----END CERTIFICATE-----Generated at Tue Sep 16 06:00:51 2025 by rpki-client