$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer File: ba5e814e-0ab8-4257-8c39-4091cb3be269.cer (raw, json) Hash identifier: JWsoTpSgF0WF/hD+5QkPqnN/80KmWll3wg/sWHu2Acg= Subject key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 Certificate issuer: /CN=fde169ed-d0d2-4165-8308-df2597e343f8 Certificate serial: 010D0C9F4328584AEAEF80F11C417F213C493600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Aug 2025 09:22:29 +0000 Certificate not after: Tue 23 Nov 2027 10:22:29 +0000 Subordinate resources: AS: 40021 IP: 66.94.96.0/19 IP: 144.126.128.0/19 IP: 207.244.224.0/19 IP: 209.126.0.0/20 IP: 209.126.70.0/24 IP: 209.126.77.0/24 IP: 209.126.79.0 -- 209.126.87.255 IP: 209.145.48.0/20 IP: 2605:a140::/28 IP: 2607:4740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:ef:80:f1:1c:41:7f:21:3c:49:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8 Validity Not Before: Aug 20 09:22:29 2025 GMT Not After : Nov 23 10:22:29 2027 GMT Subject: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a8:d4:5b:a3:6a:6d:76:5c:38:5e:fd:be:a6: 8c:c4:39:c3:93:1c:ab:86:1e:6b:51:69:49:9c:82: 1b:b3:90:de:1c:32:4c:7b:94:a2:b7:52:47:a8:28: c3:dd:82:3d:73:62:8c:11:db:64:56:0d:d6:ec:b6: 80:6b:99:26:e1:56:13:79:ca:fc:4a:95:db:b3:a4: 86:dc:fa:b4:aa:b0:a0:3c:55:f6:9e:af:63:53:74: 1e:18:45:92:1c:30:72:eb:ee:50:33:21:2d:33:df: 64:5e:85:0a:e9:58:00:56:fa:80:d2:51:1c:89:4d: fc:ce:64:7a:33:70:d6:b7:b3:29:b7:e5:22:33:8e: c3:94:2b:e4:d8:91:b0:47:16:94:46:d2:05:cb:3e: 73:2c:20:0b:c7:70:41:ad:c6:9d:54:52:6e:a3:6e: 6e:8b:f7:e5:ff:e6:56:84:0b:44:96:3a:5e:2e:77: 0f:e1:17:98:23:cf:f6:3f:ab:1a:04:bd:19:ec:7e: d6:12:10:56:03:1d:74:c8:33:e6:4a:5b:9e:6d:28: c0:fe:9f:45:29:06:4e:68:14:6d:d4:52:c1:f5:24: d0:72:06:57:73:d6:c2:91:66:eb:98:2a:52:60:19: ee:65:8c:8e:be:c9:ad:4a:bc:09:fc:3c:0d:ef:7c: 9e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl X509v3 Authority Key Identifier: keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer sbgp-ipAddrBlock: critical IPv4: 66.94.96.0/19 144.126.128.0/19 207.244.224.0/19 209.126.0.0/20 209.126.70.0/24 209.126.77.0/24 209.126.79.0-209.126.87.255 209.145.48.0/20 IPv6: 2605:a140::/28 2607:4740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40021 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:29:6e:39:52:43:cb:1e:8b:c7:72:b4:27:4f:be:5a:70:17: 62:3a:b4:9a:4f:dc:dc:fd:40:2d:6d:38:89:49:a7:f4:2f:09: d5:2a:e2:bf:37:6b:e3:ee:8f:f7:2d:8f:4c:c8:b9:14:6a:2d: 31:0a:44:e9:32:0c:7b:4d:b8:6b:c2:61:78:98:16:ce:fc:cd: ac:c2:95:3b:30:d5:06:83:6e:ae:0b:cc:24:bc:04:1a:11:3a: ab:15:60:e4:f3:9d:d0:69:80:e8:96:27:6e:73:24:63:f8:66: 56:5e:90:d1:7e:8b:a2:08:0b:88:71:9c:b9:c2:03:b3:c6:62: 2e:9d:5e:1a:8b:7c:de:0d:e5:54:31:02:5f:1d:9e:af:bf:d2: 2b:00:07:cc:f5:03:06:78:08:58:91:86:bd:7d:41:dc:32:e4: 44:15:29:f7:8a:69:25:b0:cd:63:a8:01:51:20:f0:87:b5:7b: c5:53:23:d8:66:e2:5c:e6:5d:59:1b:66:a0:ef:c5:0e:05:b3: c3:34:3c:65:bd:68:cb:d6:d9:80:db:54:b9:a7:20:a5:c1:ed: d4:31:dc:bb:4f:9b:29:b9:00:d1:06:1a:ca:4f:e9:3e:4e:4b: 5b:8d:f6:23:96:19:a9:20:00:95:0a:96:89:75:ff:8e:41:2e: 6d:e7:b9:72 -----BEGIN CERTIFICATE----- MIIHUTCCBjmgAwIBAgIUAQ0Mn0MoWErq74DxHEF/ITxJNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0 M2Y4MB4XDTI1MDgyMDA5MjIyOVoXDTI3MTEyMzEwMjIyOVowLzEtMCsGA1UEAxMk YmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2JlMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KjUW6NqbXZcOF79vqaMxDnDkxyrhh5rUWlJ nIIbs5DeHDJMe5Sit1JHqCjD3YI9c2KMEdtkVg3W7LaAa5km4VYTecr8SpXbs6SG 3Pq0qrCgPFX2nq9jU3QeGEWSHDBy6+5QMyEtM99kXoUK6VgAVvqA0lEciU38zmR6 M3DWt7Mpt+UiM47DlCvk2JGwRxaURtIFyz5zLCALx3BBrcadVFJuo25ui/fl/+ZW hAtEljpeLncP4ReYI8/2P6saBL0Z7H7WEhBWAx10yDPmSluebSjA/p9FKQZOaBRt 1FLB9STQcgZXc9bCkWbrmCpSYBnuZYyOvsmtSrwJ/DwN73yedQIDAQABo4IEYzCC BF8wHQYDVR0OBBYEFGI5jcvSOhwGStRvlsjMAjqTwxUmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9i YTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4L2JhNWU4MTRlLTBhYjgtNDI1Ny04 YzM5LTQwOTFjYjNiZTI2OS9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2Iz YmUyNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2 OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a 7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwZwYIKwYBBQUH AQcBAf8EWDBWMD4EAgABMDgDBAVCXmADBAWQfoADBAXP9OADBATRfgADBADRfkYD BADRfk0wDAMEANF+TwMEA9F+UAMEBNGRMDAUBAIAAjAOAwUEJgWhQAMFACYHR0Aw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJxVMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALQpbjlSQ8sei8dy tCdPvlpwF2I6tJpP3Nz9QC1tOIlJp/QvCdUq4r83a+Puj/ctj0zIuRRqLTEKROky DHtNuGvCYXiYFs78zazClTsw1QaDbq4LzCS8BBoROqsVYOTzndBpgOiWJ25zJGP4 ZlZekNF+i6IIC4hxnLnCA7PGYi6dXhqLfN4N5VQxAl8dnq+/0isAB8z1AwZ4CFiR hr19Qdwy5EQVKfeKaSWwzWOoAVEg8Ie1e8VTI9hm4lzmXVkbZqDvxQ4Fs8M0PGW9 aMvW2YDbVLmnIKXB7dQx3LtPmym5ANEGGspP6T5OS1uN9iOWGakgAJUKlol1/45B Lm3nuXI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:47:31 2025 by rpki-client