$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer File: 402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer (raw, json) Hash identifier: gJlX+6ItN8l+IcSvP3vbBosCpmkiefmmKn26MlqEQCg= Subject key identifier: B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584ADB96E690D5F309DBF1859500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 21:26:50 +0000 Certificate not after: Wed 17 Nov 2027 22:26:50 +0000 Subordinate resources: AS: 11965 IP: 64.39.229.0/24 IP: 2620:139:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:db:96:e6:90:d5:f3:09:db:f1:85:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 14 21:26:50 2025 GMT Not After : Nov 17 22:26:50 2027 GMT Subject: CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d0:de:10:4e:6e:fa:7b:60:b7:70:97:d2:57: 9d:4a:4a:50:16:3a:b5:79:62:c1:08:90:de:ce:c2: 14:72:39:f0:91:0d:e9:06:82:b7:28:16:0e:08:cb: fb:b0:b2:9f:df:2f:a1:f7:1a:42:25:11:f1:5b:2a: 95:74:c2:a2:18:6f:a7:91:86:73:16:88:36:d0:72: 97:90:b6:2d:f2:19:b4:69:95:f0:8e:a5:7d:04:9c: 1b:4f:ef:1b:77:20:7e:49:04:bf:92:83:9a:77:be: eb:54:12:94:e0:4e:bd:82:60:74:13:40:8c:2d:e5: 32:21:ed:d3:2e:f6:8f:31:31:10:ec:1d:57:26:5e: a4:1a:7f:25:c1:43:9c:bf:e2:07:65:af:23:1c:4e: 9e:3f:36:79:d6:78:15:dc:b2:be:57:dc:e6:7d:f6: a6:9a:5a:00:f9:b8:eb:4e:0c:b1:01:df:8f:ab:ef: bb:cf:38:cb:ca:b7:3b:98:b8:fd:3f:8a:41:06:12: 73:4f:59:75:34:7c:89:63:cb:d9:c5:39:b2:09:15: 28:49:65:6b:57:d4:5f:80:90:a7:83:38:a8:dd:3d: d9:84:11:ba:7a:36:a0:7d:73:76:73:6e:79:a2:df: 49:d5:f9:89:f8:90:7e:f9:c5:9e:89:5e:3a:58:14: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 64.39.229.0/24 IPv6: 2620:139:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11965 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:99:d0:a9:ab:61:5c:1b:07:53:6b:c0:bd:6e:98:ad:90:47: e3:47:59:8c:f5:8a:47:fe:18:f3:b0:b5:95:e2:11:57:f2:90: 22:d2:a6:83:73:01:bc:66:15:81:7e:61:60:44:3d:00:f2:3c: 52:47:ab:44:47:43:7e:90:f2:96:7b:8b:50:48:3c:02:8f:5f: 20:b7:01:45:95:31:b3:7c:b7:a6:a5:74:a7:ef:73:5f:01:68: f3:10:5e:d4:ec:e2:f3:1d:df:97:29:ef:52:64:0a:dd:7e:0a: 4e:8a:9d:41:4f:d5:5a:54:22:0a:95:87:37:06:0f:65:07:79: 9c:09:b0:9f:1a:92:28:3a:f7:ff:4f:20:db:fe:5c:34:a3:3d: 14:a4:0e:c2:35:cb:72:02:a5:76:32:a7:84:8f:11:c8:c1:0f: e2:ad:cf:6d:d9:27:7f:89:ad:ce:d5:b1:63:87:4b:d9:f7:b6: 88:fb:d5:21:ae:95:1f:2e:48:6a:fe:f2:e7:72:a8:2a:b9:d4: a2:c3:8a:ed:a7:7e:e8:e3:86:58:d5:53:9c:02:4c:be:e0:7a: 00:78:31:ef:78:e5:12:cd:87:19:d0:92:23:e5:95:12:6e:fb: 7a:7d:db:8a:43:0c:a9:8d:df:3d:b3:b2:8a:65:81:8c:85:ab: 18:32:c8:b8 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWErbluaQ1fMJ2/GFlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgxNDIxMjY1MFoXDTI3MTExNzIyMjY1MFowLzEtMCsGA1UEAxMk NDAyYzZiNjUtZGNmZC00MTJhLTg3ODgtOGJhYTkxZmIzYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtDeEE5u+ntgt3CX0ledSkpQFjq1eWLBCJDe zsIUcjnwkQ3pBoK3KBYOCMv7sLKf3y+h9xpCJRHxWyqVdMKiGG+nkYZzFog20HKX kLYt8hm0aZXwjqV9BJwbT+8bdyB+SQS/koOad77rVBKU4E69gmB0E0CMLeUyIe3T LvaPMTEQ7B1XJl6kGn8lwUOcv+IHZa8jHE6ePzZ51ngV3LK+V9zmffammloA+bjr TgyxAd+Pq++7zzjLyrc7mLj9P4pBBhJzT1l1NHyJY8vZxTmyCRUoSWVrV9RfgJCn gzio3T3ZhBG6ejagfXN2c255ot9J1fmJ+JB++cWeiV46WBSX2wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLbINI5mhp+sNfglblEHX0S0UUklMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80 MDJjNmI2NS1kY2ZkLTQxMmEtODc4OC04YmFhOTFmYjNhMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzQwMmM2YjY1LWRjZmQtNDEyYS04 Nzg4LThiYWE5MWZiM2ExZC80MDJjNmI2NS1kY2ZkLTQxMmEtODc4OC04YmFhOTFm YjNhMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABAJ+UwDgQCAAIwCAMGACYgATnAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAi69MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADGZ0KmrYVwbB1NrwL1umK2QR+NH WYz1ikf+GPOwtZXiEVfykCLSpoNzAbxmFYF+YWBEPQDyPFJHq0RHQ36Q8pZ7i1BI PAKPXyC3AUWVMbN8t6aldKfvc18BaPMQXtTs4vMd35cp71JkCt1+Ck6KnUFP1VpU IgqVhzcGD2UHeZwJsJ8akig69/9PINv+XDSjPRSkDsI1y3ICpXYyp4SPEcjBD+Kt z23ZJ3+Jrc7VsWOHS9n3toj71SGulR8uSGr+8udyqCq51KLDiu2nfujjhljVU5wC TL7gegB4Me945RLNhxnQkiPllRJu+3p924pDDKmN3z2zsoplgYyFqxgyyLg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:57 2025 by rpki-client