$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer File: d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer (raw, json) Hash identifier: dZcGWJsz5VPGKgRzcc01dWAo4YTq1bPlpkM9ydDA3ks= Subject key identifier: 41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B74FF080C9DBDEDB0EC4FAF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 20:15:20 +0000 Certificate not after: Sun 13 Dec 2026 13:41:22 +0000 Subordinate resources: IP: 23.187.104.0/24 IP: 130.12.56.0/22 IP: 2602:f833::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:ff:08:0c:9d:bd:ed:b0:ec:4f:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 8 20:15:20 2025 GMT Not After : Dec 13 13:41:22 2026 GMT Subject: CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:44:21:8b:28:aa:47:dc:43:5a:02:a5:2d: 5e:9d:6f:17:aa:b5:74:ea:71:72:1e:84:a6:13:9f: 5f:0f:6a:52:0d:7d:ce:aa:e9:ae:be:c6:b8:7d:be: 64:f1:d2:73:7e:fc:f1:fd:a8:16:3d:eb:f3:ec:d8: 04:44:10:22:d5:80:72:48:61:1d:fe:85:5f:c7:a9: 3b:53:77:2b:9d:86:ee:a8:b9:df:c1:3b:06:bc:70: bc:11:18:f1:6a:cb:e8:20:44:a0:5c:16:cb:01:77: 68:e2:b7:56:61:e3:e4:eb:16:36:f8:f3:ed:bc:15: 32:a3:41:38:3d:4e:24:9e:3e:c9:83:15:31:aa:3b: 95:72:3c:85:6f:60:6c:05:59:b0:27:e5:54:49:77: 6e:cd:f7:2b:1c:94:79:cf:a4:69:9f:7b:3c:7d:26: 1c:c2:9a:36:c6:de:e1:da:ac:0d:8f:19:76:0c:01: 46:b5:81:c3:cf:18:95:f2:fc:0f:4a:28:83:b9:5d: 54:a8:81:50:a8:f2:86:42:12:6f:4f:67:17:23:e3: 87:0f:8f:07:2b:33:3d:a1:2c:af:bb:c3:32:73:7b: 34:2b:04:46:e1:b0:db:bf:8a:f5:bc:c1:61:49:73: 3d:41:df:9a:a1:08:ad:c6:d9:f3:7a:ed:89:3d:9a: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.187.104.0/24 130.12.56.0/22 IPv6: 2602:f833::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:30:ae:1d:4b:bc:37:3c:4e:c6:2e:e7:2a:73:a2:c6:3c:fa: d7:11:0d:89:3c:4c:b6:89:39:8a:1b:4b:40:58:9b:0b:e0:81: 96:20:f1:4c:b0:21:26:58:78:bc:7c:9a:ca:0c:b5:f4:80:f6: e9:fa:52:58:bc:0d:aa:18:0e:97:3b:38:0c:ea:df:61:a8:02: 46:45:1b:86:8b:ed:2f:eb:70:1a:6f:dc:62:c9:96:78:c4:a7: 7d:f6:4e:8f:0e:03:cf:f5:f2:d3:ea:e6:b1:bc:c4:0c:ae:78: f1:56:e4:d9:da:5e:6f:e9:2e:26:c5:32:4d:df:82:06:92:4b: 43:61:4c:f7:d6:61:3f:4b:5e:b6:4b:8a:c2:f1:b7:3f:aa:e5: c0:1c:5e:57:d5:35:17:77:72:45:fa:b7:e4:53:9a:f5:97:5d: 2a:6b:b5:72:4b:22:e6:cc:da:38:92:9a:16:03:a0:09:bb:74: b9:f7:b8:ea:69:2e:ff:9d:c7:ed:a2:55:e1:22:ff:54:59:84: 4c:48:0b:aa:15:c7:88:b9:64:73:f2:1d:e3:80:5e:6d:cb:77: b9:7c:b7:60:7f:f8:4d:a3:5a:91:e5:3d:53:b7:67:c4:39:b3: ac:fa:49:c2:69:dc:28:8d:a2:ff:59:8f:c2:8d:11:51:27:42: 98:73:5c:40 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEt0/wgMnb3tsOxPrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAwODIwMTUyMFoXDTI2MTIxMzEzNDEyMlowLzEtMCsGA1UEAxMk ZDE4YTIyMDYtYmIyZC00OGNkLTliZDgtNzgwNjc4MmUxYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXNEIYsoqkfcQ1oCpS1enW8XqrV06nFyHoSm E59fD2pSDX3Oqumuvsa4fb5k8dJzfvzx/agWPevz7NgERBAi1YBySGEd/oVfx6k7 U3crnYbuqLnfwTsGvHC8ERjxasvoIESgXBbLAXdo4rdWYePk6xY2+PPtvBUyo0E4 PU4knj7JgxUxqjuVcjyFb2BsBVmwJ+VUSXduzfcrHJR5z6Rpn3s8fSYcwpo2xt7h 2qwNjxl2DAFGtYHDzxiV8vwPSiiDuV1UqIFQqPKGQhJvT2cXI+OHD48HKzM9oSyv u8Myc3s0KwRG4bDbv4r1vMFhSXM9Qd+aoQitxtnzeu2JPZozmwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFEHv/ysmv5iKrrBdRFr8noerrU9aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k MThhMjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2NzgyZTFjNDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2QxOGEyMjA2LWJiMmQtNDhjZC05 YmQ4LTc4MDY3ODJlMWM0Ni9kMThhMjIwNi1iYjJkLTQ4Y2QtOWJkOC03ODA2Nzgy ZTFjNDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXu2gDBAKCDDgwDgQCAAIwCAMGACYC+DMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgwrh1LvDc8TsYu5ypzosY8+tcRDYk8TLaJOYobS0BYmwvggZYg8Uyw ISZYeLx8msoMtfSA9un6Uli8DaoYDpc7OAzq32GoAkZFG4aL7S/rcBpv3GLJlnjE p332To8OA8/18tPq5rG8xAyuePFW5NnaXm/pLibFMk3fggaSS0NhTPfWYT9LXrZL isLxtz+q5cAcXlfVNRd3ckX6t+RTmvWXXSprtXJLIubM2jiSmhYDoAm7dLn3uOpp Lv+dx+2iVeEi/1RZhExIC6oVx4i5ZHPyHeOAXm3Ld7l8t2B/+E2jWpHlPVO3Z8Q5 s6z6ScJp3CiNov9Zj8KNEVEnQphzXEA= -----END CERTIFICATE-----Generated at Thu Oct 9 15:27:37 2025 by rpki-client