$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer File: 0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer (raw, json) Hash identifier: sWdJU1l9feIMl8Rg39SH16Vla/r13Z68yTsMCcvbfbY= Subject key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Authority key identifier: FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 Certificate issuer: /CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Certificate serial: 010D0C9F4328584F838E688C5480E170385B1223 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Thu 16 Oct 2025 00:59:27 +0000 Certificate not after: Wed 19 Jan 2028 01:59:27 +0000 Subordinate resources: AS: 6642 AS: 396050 AS: 401386 IP: 142.249.112.0/22 IP: 2602:f7dc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:83:8e:68:8c:54:80:e1:70:38:5b:12:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Validity Not Before: Oct 16 00:59:27 2025 GMT Not After : Jan 19 01:59:27 2028 GMT Subject: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:75:8a:3f:c4:d2:a5:83:a7:0a:d7:0c:13: 2c:e0:95:45:dc:2c:ed:df:87:1e:0a:bb:6d:c4:42: 37:19:d8:1d:d7:ee:c3:9c:4b:65:f5:80:7d:07:a2: f6:94:f2:0d:cb:c7:0d:80:df:56:5a:04:04:2a:55: f8:a9:49:4e:59:27:78:46:e3:62:4e:75:aa:99:62: e8:31:ba:5e:33:77:b6:f4:2f:cd:86:a7:a9:38:29: dc:06:8e:07:a1:d9:ea:b9:da:ed:b2:6c:12:f1:56: 55:87:37:41:ce:5b:18:33:80:3b:ad:4d:75:c4:bc: c4:61:5d:b8:7d:df:46:cf:22:07:a7:a7:c8:89:28: 61:8f:9f:b0:b3:09:f4:07:06:41:57:ba:1c:a6:07: 37:30:86:0f:9c:7c:61:51:21:c3:f1:a8:3d:eb:3e: f8:af:20:e1:db:4a:3a:28:56:91:2c:3e:68:32:e0: c9:85:32:f8:98:5d:20:e6:69:60:b5:50:4f:74:62: 30:a2:56:cb:82:cd:34:59:4a:dc:00:02:24:c0:bc: be:8f:89:88:52:92:b8:73:b2:35:99:df:eb:1f:6e: 3c:f6:a6:a0:fb:2b:91:df:2c:ce:d1:14:56:27:3d: 5c:a1:4f:0d:d3:16:fd:2c:5a:b8:54:45:f8:7a:f8: bc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl X509v3 Authority Key Identifier: keyid:FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer sbgp-ipAddrBlock: critical IPv4: 142.249.112.0/22 IPv6: 2602:f7dc::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6642 396050 401386 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:90:4c:39:40:13:27:92:28:65:e2:b4:88:ee:82:81:02:fa: d5:d5:8f:71:e1:7e:3c:a8:a2:46:e8:0f:4e:90:13:85:81:08: c0:4d:42:d8:e0:56:2e:0d:2e:bf:56:a7:a0:0b:23:fb:ab:a0: 6b:c0:06:2a:55:d7:af:e3:25:1a:24:a7:b0:20:41:48:60:8f: 7d:24:ae:c8:92:8c:62:81:84:bb:3d:93:36:08:12:b6:f7:d4: d8:b1:e8:62:c8:84:cd:c0:32:34:8a:c9:83:a4:37:b2:c7:c9: 8b:54:17:7e:af:61:44:4c:5c:65:20:dd:a7:57:96:b2:14:3c: fd:b7:a1:8d:67:cc:7b:13:ec:2c:a3:b7:fe:3e:5e:11:07:92: 12:f0:54:31:b3:3f:e4:9f:9b:04:c0:a3:1d:33:15:42:aa:4c: 02:b0:6f:3f:4e:22:a9:42:f5:61:18:08:d0:70:ef:61:b9:96: 24:c4:e9:d1:3c:d0:04:a1:96:78:66:46:cb:82:8d:5c:37:3c: 4c:9d:bf:84:83:46:2b:e4:d4:32:5a:22:57:0a:f2:07:cc:17: 94:07:cf:86:93:43:e8:21:58:83:c0:6f:23:ca:d3:c6:96:71: 60:1f:cd:e6:05:21:46:d9:ac:29:31:76:dd:f0:c0:25:14:94: bc:f4:0c:11 -----BEGIN CERTIFICATE----- MIIG1jCCBb6gAwIBAgIUAQ0Mn0MoWE+DjmiMVIDhcDhbEiMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5N2Q5 MWEyMB4XDTI1MTAxNjAwNTkyN1oXDTI4MDExOTAxNTkyN1owPTE7MDkGA1UEAxMy MGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVlMzRlM2JmZjNjYjUxNmU1 NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoXWKP8TSpYOnCtcM EyzglUXcLO3fhx4Ku23EQjcZ2B3X7sOcS2X1gH0HovaU8g3Lxw2A31ZaBAQqVfip SU5ZJ3hG42JOdaqZYugxul4zd7b0L82Gp6k4KdwGjgeh2eq52u2ybBLxVlWHN0HO WxgzgDutTXXEvMRhXbh930bPIgenp8iJKGGPn7CzCfQHBkFXuhymBzcwhg+cfGFR IcPxqD3rPvivIOHbSjooVpEsPmgy4MmFMviYXSDmaWC1UE90YjCiVsuCzTRZStwA AiTAvL6PiYhSkrhzsjWZ3+sfbjz2pqD7K5HfLM7RFFYnPVyhTw3TFv0sWrhURfh6 +LzBAgMBAAGjggPaMIID1jAdBgNVHQ4EFgQUqy74jyR0n1oSDfreZ8kY5McQxT4w ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTI5MDhi M2UyODUxNGEvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTI5MDhiM2UyODUxNGEv MC9BQjJFRjg4RjI0NzQ5RjVBMTIwREZBREU2N0M5MThFNEM3MTBDNTNFLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIx Zi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2 LWQxM2JlOTdkOTFhMi9jZDlhOWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNiZTk3ZDkx YTIuY3JsMB8GA1UdIwQYMBaAFPviJ/n+JdCLgAis+mcNjc9xaAzDMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFmLTQ4YjYt YmYzMi1jOTQ5MjI4NmYxOTUvY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5 N2Q5MWEyLmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAo75cDAOBAIA AjAIAwYEJgL33AAwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICGfICAwYLEgIDBh/q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFmQTDlAEyeSKGXitIjugoEC+tXVj3HhfjyookboD06QE4WBCMBN QtjgVi4NLr9Wp6ALI/uroGvABipV16/jJRokp7AgQUhgj30krsiSjGKBhLs9kzYI Erb31Nix6GLIhM3AMjSKyYOkN7LHyYtUF36vYURMXGUg3adXlrIUPP23oY1nzHsT 7Cyjt/4+XhEHkhLwVDGzP+SfmwTAox0zFUKqTAKwbz9OIqlC9WEYCNBw72G5liTE 6dE80AShlnhmRsuCjVw3PEydv4SDRivk1DJaIlcK8gfMF5QHz4aTQ+ghWIPAbyPK 08aWcWAfzeYFIUbZrCkxdt3wwCUUlLz0DBE= -----END CERTIFICATE-----Generated at Wed Oct 28 00:51:21 2026 by rpki-client