$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer File: f4df3738-fdb2-48c0-a548-b9ecc7f28709.cer (raw, json) Hash identifier: hOuOsCPTkO8mvIkI4HENEu59hKvI8A230FIKPn7F428= Subject key identifier: 10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B74D25BE173CF99EF1F3B2D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 18:45:19 +0000 Certificate not after: Wed 18 Nov 2026 13:32:54 +0000 Subordinate resources: AS: 401275 IP: 130.12.109.0/24 IP: 2602:f84f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:d2:5b:e1:73:cf:99:ef:1f:3b:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 8 18:45:19 2025 GMT Not After : Nov 18 13:32:54 2026 GMT Subject: CN=f4df3738-fdb2-48c0-a548-b9ecc7f28709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c4:0d:d3:fb:e8:93:35:97:32:b3:a2:b3:d8: 60:a2:0f:f4:23:ee:9a:79:0f:63:02:d6:c1:d3:0c: d7:d4:82:2b:33:72:63:a6:22:91:06:20:ec:eb:b9: 9f:78:d7:48:62:03:e9:0c:9f:16:5e:82:c4:a5:74: bd:6f:c1:f5:9a:bf:07:08:e0:1f:95:61:85:f5:92: 23:48:cd:aa:b8:ee:94:e4:44:89:da:d3:7d:b2:4e: a7:0b:06:cb:80:23:e5:9b:43:81:79:5b:69:5b:09: 00:36:4c:46:75:0c:d0:ae:d7:cd:84:0b:70:f2:4a: f4:71:2e:d2:7f:84:3a:16:6f:d0:d2:3d:2a:3c:ef: 95:1d:07:1a:94:43:2e:5f:fe:29:a8:42:a0:2c:1b: 8b:96:c2:94:a4:11:b0:75:45:19:7e:19:73:e5:40: 29:bc:8a:c9:88:f7:5b:d8:65:ff:70:f2:11:34:12: 69:fe:f0:30:3c:8d:87:74:3f:96:15:64:95:fb:94: 2d:2a:ac:53:94:cf:65:5e:6b:fd:02:94:bf:88:09: ae:8a:e8:af:97:dc:50:d9:ac:04:f8:05:6a:d1:81: 88:7f:fd:ac:95:52:05:b7:7e:fe:b6:8e:9f:49:82: a6:c5:41:0b:f8:c0:12:fa:48:04:86:88:cc:c4:9b: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9C:A2:4E:05:E8:4D:9F:B8:DF:06:E6:69:45:DD:DC:2D:EB:F5:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f4df3738-fdb2-48c0-a548-b9ecc7f28709/f4df3738-fdb2-48c0-a548-b9ecc7f28709.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 130.12.109.0/24 IPv6: 2602:f84f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401275 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:88:9d:bf:92:dc:6c:36:b2:ad:71:18:78:34:2c:db:55:a6: 18:c5:33:e0:44:23:50:3d:09:ba:f7:ed:db:2a:3a:27:d0:e5: 71:70:4a:2b:8b:9b:57:b1:b9:94:45:92:f8:00:b1:7a:18:fe: 3a:c0:6e:5b:3f:4b:47:b6:84:15:fd:25:93:16:a7:cf:42:5e: 34:1f:77:be:49:46:3b:38:c4:d5:ee:26:2c:be:e4:6b:f6:26: 15:e8:79:14:1e:90:15:f7:57:53:fe:12:62:d6:cb:3f:4a:b3: 62:f0:1c:4c:90:3e:6c:ff:77:3f:e8:29:23:3b:cb:f4:df:65: be:15:5d:77:99:77:d0:bd:dd:cc:36:38:fa:0c:73:49:02:46: bb:04:37:fd:74:5b:a8:f8:fc:30:0a:77:8c:2e:f6:45:f5:9f: 9a:7c:4a:be:88:46:3f:44:c7:f1:14:1c:42:7c:d5:91:59:a5: 6f:30:b8:1f:36:00:65:5a:98:e0:25:3e:ab:34:d9:8e:1b:4e: 58:da:df:b6:a5:e8:71:68:9f:1e:43:1f:eb:f4:01:40:9c:ef: 21:d5:98:c9:93:2a:4e:13:d7:8e:61:34:a6:9e:cf:c9:a6:ca: 91:07:e5:22:d7:c8:2d:04:b7:a7:9c:49:e3:74:86:a6:c3:76: 00:e9:94:df -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEt00lvhc8+Z7x87LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAwODE4NDUxOVoXDTI2MTExODEzMzI1NFowLzEtMCsGA1UEAxMk ZjRkZjM3MzgtZmRiMi00OGMwLWE1NDgtYjllY2M3ZjI4NzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsQN0/vokzWXMrOis9hgog/0I+6aeQ9jAtbB 0wzX1IIrM3JjpiKRBiDs67mfeNdIYgPpDJ8WXoLEpXS9b8H1mr8HCOAflWGF9ZIj SM2quO6U5ESJ2tN9sk6nCwbLgCPlm0OBeVtpWwkANkxGdQzQrtfNhAtw8kr0cS7S f4Q6Fm/Q0j0qPO+VHQcalEMuX/4pqEKgLBuLlsKUpBGwdUUZfhlz5UApvIrJiPdb 2GX/cPIRNBJp/vAwPI2HdD+WFWSV+5QtKqxTlM9lXmv9ApS/iAmuiuivl9xQ2awE +AVq0YGIf/2slVIFt37+to6fSYKmxUEL+MAS+kgEhojMxJtI2QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBCcok4F6E2fuN8G5mlF3dwt6/X/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m NGRmMzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVjYzdmMjg3MDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Y0ZGYzNzM4LWZkYjItNDhjMC1h NTQ4LWI5ZWNjN2YyODcwOS9mNGRmMzczOC1mZGIyLTQ4YzAtYTU0OC1iOWVjYzdm Mjg3MDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACCDG0wDgQCAAIwCAMGACYC+E8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfezBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwiJ2/ktxsNrKtcRh4NCzbVaYY xTPgRCNQPQm69+3bKjon0OVxcEori5tXsbmURZL4ALF6GP46wG5bP0tHtoQV/SWT FqfPQl40H3e+SUY7OMTV7iYsvuRr9iYV6HkUHpAV91dT/hJi1ss/SrNi8BxMkD5s /3c/6CkjO8v032W+FV13mXfQvd3MNjj6DHNJAka7BDf9dFuo+PwwCneMLvZF9Z+a fEq+iEY/RMfxFBxCfNWRWaVvMLgfNgBlWpjgJT6rNNmOG05Y2t+2pehxaJ8eQx/r 9AFAnO8h1ZjJkypOE9eOYTSmns/JpsqRB+Ui18gtBLennEnjdIamw3YA6ZTf -----END CERTIFICATE-----Generated at Thu Oct 9 15:29:03 2025 by rpki-client