$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56.cer File: 52719fb1-2762-4690-98c1-ed95cc4b2f56.cer (raw, json) Hash identifier: WJ3oSTvbCzsyb5zQoD4sXXlVqEahY6YTHXvEcuImsQ4= Subject key identifier: 0F:C5:82:FE:6F:02:D4:32:1A:08:30:24:55:C0:55:5A:23:ED:4E:E5 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B71CD9A3F4F4506753CD0F040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/52719fb1-2762-4690-98c1-ed95cc4b2f56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 16:48:18 +0000 Certificate not after: Thu 12 Nov 2026 03:49:54 +0000 Subordinate resources: AS: 8173 IP: 131.143.100.0/22 IP: 2602:f860::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:cd:9a:3f:4f:45:06:75:3c:d0:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 7 16:48:18 2025 GMT Not After : Nov 12 03:49:54 2026 GMT Subject: CN=52719fb1-2762-4690-98c1-ed95cc4b2f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:8e:11:ab:ef:fe:f2:29:41:35:7e:2b:4c: 5d:0c:aa:fd:1e:bc:74:a6:43:3d:a4:4f:0e:d2:c0: 62:bf:a2:c6:6d:a2:bd:48:f5:be:5a:dd:62:17:69: 3d:9a:0c:ef:46:37:00:57:3e:a5:b5:04:9f:ac:35: 5b:cd:c6:1b:34:36:44:90:d4:32:3f:5c:fe:f7:5f: ab:4f:13:eb:7b:17:bd:ac:7f:d4:26:71:36:43:61: 55:3a:b5:e5:c7:99:bd:eb:16:9c:d4:b5:76:7c:6b: 44:fd:ed:37:0a:b9:58:a3:0c:67:61:c2:03:16:c4: 3d:8b:6a:8e:44:e9:cd:cc:01:e1:ee:bf:2a:2d:b8: bc:28:8d:22:4c:36:67:f3:43:f6:49:40:41:50:7e: 1f:08:f5:ca:76:94:fa:c2:75:a7:11:fd:84:6f:d2: f7:23:5f:e4:4b:a7:6a:a6:6f:8c:0e:a4:db:48:33: 11:34:81:e0:59:46:43:8e:a6:19:c8:31:4d:72:8c: 87:66:70:64:16:e5:a0:e3:31:65:6c:ab:9b:b8:52: 77:3f:b9:6f:23:ca:4c:30:aa:57:92:fc:c7:33:fa: c9:ca:44:c7:a0:40:6b:60:18:ab:a1:56:de:4b:58: a4:e6:c8:65:e9:ce:e4:19:55:3f:b2:09:8e:61:67: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C5:82:FE:6F:02:D4:32:1A:08:30:24:55:C0:55:5A:23:ED:4E:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/52719fb1-2762-4690-98c1-ed95cc4b2f56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 131.143.100.0/22 IPv6: 2602:f860::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8173 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:57:d4:e6:a3:f4:6b:71:74:a1:0d:62:19:07:a3:18:88:1a: e0:20:ad:72:4a:1b:8c:60:1e:31:9b:95:33:96:14:90:2f:c2: be:03:97:7f:2d:ed:f1:5f:73:c8:e7:85:40:a9:de:da:e8:ac: 9b:8c:a6:b3:db:0f:72:c8:80:52:84:a6:11:02:8f:18:58:96: db:1e:91:a0:10:aa:3e:15:5f:78:8b:06:a4:44:fe:09:e4:ba: 0f:e1:f5:ac:22:7d:05:c2:ec:40:70:c1:29:29:fc:a5:33:97: 4e:be:0a:4b:56:3e:02:11:b9:72:89:30:ad:90:a5:8d:73:7e: f5:13:a9:2c:3d:c9:a5:c8:af:08:ef:20:83:c1:b4:0f:91:35: f0:60:e6:d0:7c:68:ba:a0:08:76:2b:10:62:b6:44:ba:df:22: 3e:12:0a:02:41:71:da:99:fe:d0:a1:d0:cb:97:18:8e:90:72: f4:41:5b:28:49:ee:24:1a:5e:c7:43:42:7e:61:85:45:34:92: 82:0c:39:a9:e4:9e:67:73:63:9b:be:48:c8:35:a3:2f:83:27: 69:41:dc:7a:1c:e4:91:be:00:b9:e9:33:08:a1:b8:0e:e7:ce: 68:e5:d2:df:c4:01:15:38:79:b4:41:52:7e:e4:7c:e3:0e:d4: 60:a8:37:58 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEtxzZo/T0UGdTzQ8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAwNzE2NDgxOFoXDTI2MTExMjAzNDk1NFowLzEtMCsGA1UEAxMk NTI3MTlmYjEtMjc2Mi00NjkwLTk4YzEtZWQ5NWNjNGIyZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXqOEavv/vIpQTV+K0xdDKr9Hrx0pkM9pE8O 0sBiv6LGbaK9SPW+Wt1iF2k9mgzvRjcAVz6ltQSfrDVbzcYbNDZEkNQyP1z+91+r TxPrexe9rH/UJnE2Q2FVOrXlx5m96xac1LV2fGtE/e03CrlYowxnYcIDFsQ9i2qO ROnNzAHh7r8qLbi8KI0iTDZn80P2SUBBUH4fCPXKdpT6wnWnEf2Eb9L3I1/kS6dq pm+MDqTbSDMRNIHgWUZDjqYZyDFNcoyHZnBkFuWg4zFlbKubuFJ3P7lvI8pMMKpX kvzHM/rJykTHoEBrYBiroVbeS1ik5shl6c7kGVU/sgmOYWetXQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFA/Fgv5vAtQyGggwJFXAVVoj7U7lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 MjcxOWZiMS0yNzYyLTQ2OTAtOThjMS1lZDk1Y2M0YjJmNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzUyNzE5ZmIxLTI3NjItNDY5MC05 OGMxLWVkOTVjYzRiMmY1Ni81MjcxOWZiMS0yNzYyLTQ2OTAtOThjMS1lZDk1Y2M0 YjJmNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKDj2QwDgQCAAIwCAMGACYC+GAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAh/tMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABpX1Oaj9GtxdKENYhkHoxiIGuAg rXJKG4xgHjGblTOWFJAvwr4Dl38t7fFfc8jnhUCp3trorJuMprPbD3LIgFKEphEC jxhYltsekaAQqj4VX3iLBqRE/gnkug/h9awifQXC7EBwwSkp/KUzl06+CktWPgIR uXKJMK2QpY1zfvUTqSw9yaXIrwjvIIPBtA+RNfBg5tB8aLqgCHYrEGK2RLrfIj4S CgJBcdqZ/tCh0MuXGI6QcvRBWyhJ7iQaXsdDQn5hhUU0koIMOanknmdzY5u+SMg1 oy+DJ2lB3Hoc5JG+ALnpMwihuA7nzmjl0t/EARU4ebRBUn7kfOMO1GCoN1g= -----END CERTIFICATE-----Generated at Thu Oct 9 15:32:03 2025 by rpki-client