$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer File: 567ba016-7d2d-4729-a696-45a28ff7f6ec.cer (raw, json) Hash identifier: LSU+EjUtMBb0RajI2oKL+Rm6ypRfZ8Bk9IrC9BMPD2w= Subject key identifier: D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B95DB767C03DAF178779A71AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 14:45:20 +0000 Certificate not after: Wed 16 Dec 2026 15:46:58 +0000 Subordinate resources: IP: 144.86.191.0/24 IP: 2607:97c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:db:76:7c:03:da:f1:78:77:9a:71:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 20 14:45:20 2025 GMT Not After : Dec 16 15:46:58 2026 GMT Subject: CN=567ba016-7d2d-4729-a696-45a28ff7f6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c1:b1:e7:69:63:f2:e6:e8:68:2c:77:97:7d: fc:b2:5f:58:8c:5e:1e:b0:9e:85:57:d9:aa:40:ce: ff:ec:23:bb:25:07:2d:3f:0e:74:b2:ed:07:3d:3b: 02:b2:f7:eb:60:84:d8:84:1c:ab:28:f1:20:3f:d5: 87:3c:d6:a1:60:08:5c:0a:f9:65:28:5e:a0:87:18: 65:19:b0:7c:45:01:f0:ed:67:de:ff:31:97:3a:6c: ca:35:72:0b:dc:be:72:52:09:03:f5:c3:45:8e:77: 61:6a:12:65:46:a3:cf:c9:bc:3b:7a:1f:a3:4e:7a: fe:74:7f:99:c6:f2:6d:46:cc:cf:c9:0d:d5:52:d4: 53:04:38:c4:33:80:38:e3:af:10:60:0b:fc:f4:a7: 70:e0:f2:dd:c1:57:e0:aa:1e:ea:a9:89:9f:1a:03: d4:66:6c:8e:2c:0f:16:a6:f6:5e:3c:f3:85:94:8c: e1:0a:0d:4f:14:58:09:ae:fe:5a:d4:08:65:5b:16: 76:6b:d7:84:22:91:96:ff:25:24:40:fc:6e:20:d1: 2d:78:23:3b:5a:52:7d:1d:70:8a:24:77:31:e2:3a: 34:34:9f:91:08:f8:b3:e5:bc:22:b8:4c:b7:66:d3: 62:ae:08:0e:25:a6:d6:04:d3:34:e5:13:cc:07:e0: e1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 144.86.191.0/24 IPv6: 2607:97c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:57:ca:41:bf:13:75:ea:5e:d2:9d:aa:5f:5e:0f:d0:77:0f: 71:95:97:31:56:2a:79:62:76:f2:4e:5c:29:d4:ea:b1:01:75: 4d:25:5b:cd:19:7b:61:49:fb:0c:99:38:af:30:44:c0:9b:b1: 8f:66:bb:49:4b:2f:4c:fb:50:7f:eb:6e:17:6b:c2:54:9f:7f: b1:63:83:96:dc:c7:5f:c8:54:d2:7b:40:20:03:5c:fd:22:de: a5:98:76:da:30:b9:4f:c8:71:0e:3b:0c:9f:91:69:11:7d:46: 9b:6e:d1:61:a7:b2:62:29:0c:3e:8a:05:e2:cd:1c:99:cb:22: b4:07:ed:97:af:01:fe:42:d4:74:7d:1a:be:14:66:32:12:20: cb:3c:f8:97:cc:18:f4:50:c9:56:06:b4:fe:89:88:f8:4d:bc: e3:9e:5c:ce:e7:3e:25:07:3c:25:e0:d5:9a:96:5d:f1:cb:64: 1a:d7:d8:2e:e3:46:d2:50:7c:41:71:04:14:2d:80:50:8f:2b: 3a:3b:71:49:79:cb:02:95:03:b0:ff:77:16:7b:3b:ca:bb:f1: c5:14:85:b9:b4:c0:d6:4c:48:09:d5:e5:99:3e:3d:d7:4c:49: 7e:2f:89:fc:dc:2e:60:ee:7a:2e:89:16:cf:16:ed:b1:33:87: 5c:d9:8b:0d -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEuV23Z8A9rxeHeacawwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAyMDE0NDUyMFoXDTI2MTIxNjE1NDY1OFowLzEtMCsGA1UEAxMk NTY3YmEwMTYtN2QyZC00NzI5LWE2OTYtNDVhMjhmZjdmNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcGx52lj8uboaCx3l338sl9YjF4esJ6FV9mq QM7/7CO7JQctPw50su0HPTsCsvfrYITYhByrKPEgP9WHPNahYAhcCvllKF6ghxhl GbB8RQHw7Wfe/zGXOmzKNXIL3L5yUgkD9cNFjndhahJlRqPPybw7eh+jTnr+dH+Z xvJtRszPyQ3VUtRTBDjEM4A4468QYAv89Kdw4PLdwVfgqh7qqYmfGgPUZmyOLA8W pvZePPOFlIzhCg1PFFgJrv5a1AhlWxZ2a9eEIpGW/yUkQPxuINEteCM7WlJ9HXCK JHcx4jo0NJ+RCPiz5bwiuEy3ZtNirggOJabWBNM05RPMB+DhIwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFNZuGRgKytNZsednUwS03jLaigcHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 NjdiYTAxNi03ZDJkLTQ3MjktYTY5Ni00NWEyOGZmN2Y2ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzU2N2JhMDE2LTdkMmQtNDcyOS1h Njk2LTQ1YTI4ZmY3ZjZlYy81NjdiYTAxNi03ZDJkLTQ3MjktYTY5Ni00NWEyOGZm N2Y2ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBACQVr8wDQQCAAIwBwMFACYHl8AwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA lFfKQb8Tdepe0p2qX14P0HcPcZWXMVYqeWJ28k5cKdTqsQF1TSVbzRl7YUn7DJk4 rzBEwJuxj2a7SUsvTPtQf+tuF2vCVJ9/sWODltzHX8hU0ntAIANc/SLepZh22jC5 T8hxDjsMn5FpEX1Gm27RYaeyYikMPooF4s0cmcsitAftl68B/kLUdH0avhRmMhIg yzz4l8wY9FDJVga0/omI+E28455czuc+JQc8JeDVmpZd8ctkGtfYLuNG0lB8QXEE FC2AUI8rOjtxSXnLApUDsP93Fns7yrvxxRSFubTA1kxICdXlmT4910xJfi+J/Nwu YO56LokWzxbtsTOHXNmLDQ== -----END CERTIFICATE-----Generated at Mon Nov 3 04:37:51 2025 by rpki-client