$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c.cer File: 52f26f5a-86c1-4542-9ca9-e43777bd570c.cer (raw, json) Hash identifier: 7gRY3dRTAV+B1bLjMSX+Lys21e0/s2OcwQOQinn0wW4= Subject key identifier: E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B750202AC65F788A5F7C24C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 20:21:20 +0000 Certificate not after: Sun 13 Dec 2026 13:51:12 +0000 Subordinate resources: IP: 23.187.136.0/24 IP: 130.12.40.0/22 IP: 2602:f834::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:02:02:ac:65:f7:88:a5:f7:c2:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 8 20:21:20 2025 GMT Not After : Dec 13 13:51:12 2026 GMT Subject: CN=52f26f5a-86c1-4542-9ca9-e43777bd570c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:62:86:a5:fe:d7:a4:6f:f2:7f:b7:11:ba: 59:b9:72:9b:4a:12:9f:47:8b:ef:75:29:d2:8d:bc: 05:2a:38:18:1a:cd:ff:33:d9:a9:70:96:a7:65:e6: 6d:ac:69:51:6e:b4:d4:69:7c:79:03:14:e1:d4:2a: 3e:1e:de:31:9e:b5:e0:2b:df:20:66:90:fd:eb:52: c2:fd:64:f0:da:e0:d6:f9:4b:f7:5a:28:e3:6d:66: 98:2d:7b:ee:84:b9:77:fb:ae:fe:d1:75:43:83:cb: e7:20:2d:e9:db:37:a8:6f:ad:ca:be:99:18:fc:70: d1:51:7a:23:c7:ff:5a:28:86:03:54:bd:db:54:fa: a3:34:54:44:4a:b0:f5:9f:22:91:b2:35:4f:da:3d: 92:0e:b5:aa:09:e6:5c:95:96:3b:2a:9d:89:fd:f8: a8:62:1c:63:a2:04:33:51:ee:7b:8a:ec:65:27:39: ed:3b:75:05:c4:67:08:53:27:c7:68:63:f7:92:2b: a5:2a:74:48:4c:50:6e:6c:0d:1f:91:12:a1:4a:46: e7:51:bc:cc:69:ba:d4:19:c6:b7:d8:23:df:f3:4b: 50:ee:aa:10:b5:d1:a9:86:f4:f4:7d:f9:97:f3:19: 29:ed:a5:eb:96:6d:b1:32:76:56:aa:f9:da:cf:76: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3F:B5:E0:8A:9D:D2:89:7F:CC:5C:4E:77:8C:1E:08:BC:51:AF:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52f26f5a-86c1-4542-9ca9-e43777bd570c/52f26f5a-86c1-4542-9ca9-e43777bd570c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.187.136.0/24 130.12.40.0/22 IPv6: 2602:f834::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a5:38:c4:d9:97:14:62:ec:5e:34:56:7b:7a:a7:43:8f:61: 9a:51:c1:3c:67:61:02:d9:5b:00:46:6b:42:d3:d6:b0:d1:00: cc:5f:31:71:0e:77:0d:d6:09:f1:eb:d8:4d:f9:73:02:a7:8a: 60:9a:b0:b1:b0:35:59:eb:79:a5:5e:0e:8e:a9:71:14:34:5f: 27:38:a4:25:38:ee:12:5d:86:e8:a7:c6:5c:7d:2b:6b:dd:5e: f9:ea:97:14:99:71:0c:ea:7e:56:4b:08:04:f6:b2:ed:72:7f: 4c:33:f2:88:d1:92:73:8a:91:37:64:0d:d7:c4:fc:cd:e0:36: 7d:e2:33:f5:8c:10:78:ae:98:27:af:ff:83:60:df:47:fa:f0: a4:23:15:7e:c4:b7:b2:d6:ee:e2:f9:82:04:7b:be:c4:72:06: e4:ef:b1:19:d6:8c:ce:2b:3a:97:93:85:19:df:6a:b9:b6:5c: 3d:36:88:72:8b:2b:bf:68:09:83:c6:4c:6a:f8:f8:e8:7c:a0: c2:d9:47:99:cd:4f:b1:21:a2:7d:8e:b9:11:99:f0:0e:fb:c0: 8c:25:db:99:92:15:15:1b:46:00:f2:4d:e6:2a:70:00:dd:3b: 41:15:f5:bc:ea:53:cf:88:d9:d1:72:23:d6:7d:d8:e9:84:6d: af:a7:d6:d2 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEt1AgKsZfeIpffCTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAwODIwMjEyMFoXDTI2MTIxMzEzNTExMlowLzEtMCsGA1UEAxMk NTJmMjZmNWEtODZjMS00NTQyLTljYTktZTQzNzc3YmQ1NzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeNihqX+16Rv8n+3EbpZuXKbShKfR4vvdSnS jbwFKjgYGs3/M9mpcJanZeZtrGlRbrTUaXx5AxTh1Co+Ht4xnrXgK98gZpD961LC /WTw2uDW+Uv3WijjbWaYLXvuhLl3+67+0XVDg8vnIC3p2zeob63KvpkY/HDRUXoj x/9aKIYDVL3bVPqjNFRESrD1nyKRsjVP2j2SDrWqCeZclZY7Kp2J/fioYhxjogQz Ue57iuxlJzntO3UFxGcIUyfHaGP3kiulKnRITFBubA0fkRKhSkbnUbzMabrUGca3 2CPf80tQ7qoQtdGphvT0ffmX8xkp7aXrlm2xMnZWqvnaz3aWTwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFOU/teCKndKJf8xcTneMHgi8Ua86MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 MmYyNmY1YS04NmMxLTQ1NDItOWNhOS1lNDM3NzdiZDU3MGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzUyZjI2ZjVhLTg2YzEtNDU0Mi05 Y2E5LWU0Mzc3N2JkNTcwYy81MmYyNmY1YS04NmMxLTQ1NDItOWNhOS1lNDM3Nzdi ZDU3MGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXu4gDBAKCDCgwDgQCAAIwCAMGACYC+DQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGlOMTZlxRi7F40Vnt6p0OPYZpRwTxnYQLZWwBGa0LT1rDRAMxfMXEO dw3WCfHr2E35cwKnimCasLGwNVnreaVeDo6pcRQ0Xyc4pCU47hJdhuinxlx9K2vd XvnqlxSZcQzqflZLCAT2su1yf0wz8ojRknOKkTdkDdfE/M3gNn3iM/WMEHiumCev /4Ng30f68KQjFX7Et7LW7uL5ggR7vsRyBuTvsRnWjM4rOpeThRnfarm2XD02iHKL K79oCYPGTGr4+Oh8oMLZR5nNT7Ehon2OuRGZ8A77wIwl25mSFRUbRgDyTeYqcADd O0EV9bzqU8+I2dFyI9Z92OmEba+n1tI= -----END CERTIFICATE-----Generated at Thu Oct 9 15:27:37 2025 by rpki-client