$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer File: 2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer (raw, json) Hash identifier: cIrwHsFyNr8LY61wJC8sQtQsarFwOeDfbxi+pNhEp9U= Subject key identifier: A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ADB5EAFEA083B0CCCE9316340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 19:33:34 +0000 Certificate not after: Wed 17 Nov 2027 20:33:34 +0000 Subordinate resources: AS: 399480 AS: 399632 IP: 139.187.0.0/16 IP: 156.117.0.0/16 IP: 192.138.138.0 -- 192.138.147.255 IP: 192.226.8.0 -- 192.226.31.255 IP: 199.120.176.0 -- 199.120.178.255 IP: 199.245.247.0/24 IP: 199.249.226.0/24 IP: 204.52.153.0/24 IP: 204.52.201.0/24 IP: 2620:9e::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:5e:af:ea:08:3b:0c:cc:e9:31:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 14 19:33:34 2025 GMT Not After : Nov 17 20:33:34 2027 GMT Subject: CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:5c:10:da:c7:bd:11:98:03:bc:a1:58:88: 25:bd:58:54:c0:26:fe:81:9f:de:62:d9:2b:c1:87: b2:6e:fe:74:f7:fd:5b:85:46:63:de:59:d5:23:f3: 3c:1b:ad:e7:44:05:d1:71:1a:14:be:7c:0f:79:d2: 5c:e0:c1:a1:74:30:27:ec:d9:e0:8b:c4:ce:f7:0b: 45:01:86:9f:f5:76:02:7f:9c:d1:58:20:14:e9:84: 5e:9f:e3:ac:4c:9e:58:ce:13:cf:2e:6b:51:8b:00: a0:3e:e9:b8:91:93:b8:81:3e:29:6c:5b:92:23:12: d3:d3:4a:33:98:52:39:93:88:01:62:05:50:77:da: de:3c:60:f1:5b:56:6c:3c:b8:fb:63:8c:62:23:68: 47:ce:0d:d2:57:e6:05:96:1f:f3:20:78:76:3b:71: 00:6b:5f:8f:42:47:a6:12:24:97:94:2b:28:a5:98: cd:c8:c9:a8:c1:58:86:69:7d:82:9b:e5:7a:d7:5e: c1:09:69:dd:be:42:16:6a:a8:6d:14:93:7d:ec:82: 7f:c3:86:ad:4d:83:22:3f:c0:63:03:ef:7e:09:25: f8:8a:ad:13:3d:ab:b7:d0:7d:1b:d3:c0:60:f7:6e: ff:48:e8:6f:2c:5c:ea:9b:7b:48:d0:d2:04:6d:72: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 139.187.0.0/16 156.117.0.0/16 192.138.138.0-192.138.147.255 192.226.8.0-192.226.31.255 199.120.176.0-199.120.178.255 199.245.247.0/24 199.249.226.0/24 204.52.153.0/24 204.52.201.0/24 IPv6: 2620:9e::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399480 399632 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1a:47:83:87:d8:8a:8a:eb:27:f2:35:fd:25:64:40:0c:1c: 39:66:b4:a2:71:1d:d3:18:a3:60:5d:f4:65:53:b9:75:63:c6: 8d:69:99:ca:a6:5a:91:bf:68:2b:c5:51:ac:04:66:f4:30:6a: c1:03:da:e9:52:ab:b0:37:d8:52:d1:b6:ed:bd:c5:2e:73:ad: ea:21:7b:15:25:7a:75:a5:f5:38:b9:4e:d6:4f:f4:e1:59:60: 82:c6:81:c1:31:83:b3:8c:05:4b:ba:db:59:70:06:42:d8:e8: 62:2c:35:44:57:b9:2d:8a:1c:57:1f:06:85:15:16:1e:1b:7b: 16:96:e0:ac:59:cc:a7:b5:df:9f:b5:cc:48:9a:c4:a4:67:ff: c2:6c:0d:33:b2:b0:77:30:f5:fa:7f:f8:ca:25:09:d3:a1:1e: af:9a:ba:82:51:28:4b:a7:9d:5a:70:63:70:80:62:f8:d3:62: 9f:2f:2d:0e:d6:9b:6d:3a:33:20:db:bb:68:40:76:8c:2d:82: 5a:fe:cc:d2:09:39:5e:0a:e4:7b:8b:47:6c:93:53:f8:f2:9d: c6:7b:bc:87:73:f9:a5:24:4e:aa:e8:75:89:80:1d:dd:3c:94: 57:c7:2f:d9:66:13:7b:79:72:81:83:12:1c:57:70:06:07:bd: 6c:43:26:54 -----BEGIN CERTIFICATE----- MIIHZTCCBk2gAwIBAgIUAQ0Mn0MoWErbXq/qCDsMzOkxY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxNDE5MzMzNFoXDTI3MTExNzIwMzMzNFowLzEtMCsGA1UEAxMk MmJiYmNjYWYtZWI0NC00MDgwLTg4ZGUtOGY0Y2M2OTM4Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0NcENrHvRGYA7yhWIglvVhUwCb+gZ/eYtkr wYeybv509/1bhUZj3lnVI/M8G63nRAXRcRoUvnwPedJc4MGhdDAn7Nngi8TO9wtF AYaf9XYCf5zRWCAU6YRen+OsTJ5YzhPPLmtRiwCgPum4kZO4gT4pbFuSIxLT00oz mFI5k4gBYgVQd9rePGDxW1ZsPLj7Y4xiI2hHzg3SV+YFlh/zIHh2O3EAa1+PQkem EiSXlCsopZjNyMmowViGaX2Cm+V6117BCWndvkIWaqhtFJN97IJ/w4atTYMiP8Bj A+9+CSX4iq0TPau30H0b08Bg927/SOhvLFzqm3tI0NIEbXIK3wIDAQABo4IEdzCC BHMwHQYDVR0OBBYEFKD5KeTTZoA9HePwYEBwWB4uZR69MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8y YmJiY2NhZi1lYjQ0LTQwODAtODhkZS04ZjRjYzY5MzhjZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzJiYmJjY2FmLWViNDQtNDA4MC04 OGRlLThmNGNjNjkzOGNlNi8yYmJiY2NhZi1lYjQ0LTQwODAtODhkZS04ZjRjYzY5 MzhjZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwdgYIKwYBBQUH AQcBAf8EZzBlMFIEAgABMEwDAwCLuwMDAJx1MAwDBAHAiooDBALAipAwDAMEA8Di CAMEBcDiADAMAwQEx3iwAwQAx3iyAwQAx/X3AwQAx/niAwQAzDSZAwQAzDTJMA8E AgACMAkDBwAmIACeAAAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDBhh4AgMGGRAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAERpHg4fYiorrJ/I1/SVkQAwcOWa0onEd0xijYF30ZVO5dWPGjWmZ yqZakb9oK8VRrARm9DBqwQPa6VKrsDfYUtG27b3FLnOt6iF7FSV6daX1OLlO1k/0 4VlggsaBwTGDs4wFS7rbWXAGQtjoYiw1RFe5LYocVx8GhRUWHht7FpbgrFnMp7Xf n7XMSJrEpGf/wmwNM7KwdzD1+n/4yiUJ06Eer5q6glEoS6edWnBjcIBi+NNiny8t DtabbTozINu7aEB2jC2CWv7M0gk5Xgrke4tHbJNT+PKdxnu8h3P5pSROquh1iYAd 3TyUV8cv2WYTe3lygYMSHFdwBge9bEMmVA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:32 2025 by rpki-client