$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer File: f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer (raw, json) Hash identifier: cmce+mjkEQ1BCXetEsJ1V9nmpQFM65vHJCBQCnqT6Sg= Subject key identifier: 44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B774CA7EAAD785EC59FDE0740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 16:03:21 +0000 Certificate not after: Thu 31 Dec 2026 19:44:49 +0000 Subordinate resources: AS: 16827 IP: 23.131.96.0/24 IP: 142.249.172.0/24 IP: 2602:feb7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:4c:a7:ea:ad:78:5e:c5:9f:de:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 9 16:03:21 2025 GMT Not After : Dec 31 19:44:49 2026 GMT Subject: CN=f027bb88-b09d-4fcf-abe2-4ad5024aa3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:69:84:3a:76:04:64:c2:4c:4d:cc:c3:d0: ec:08:96:c6:89:72:eb:ba:6a:55:d2:65:01:fa:76: 4d:63:f4:ec:f7:84:d2:87:92:d6:d9:9f:c4:90:05: 2e:2d:a5:c5:5d:ad:e9:6a:6d:a4:64:8d:91:f9:8c: 95:5f:54:5b:9f:58:19:9c:f1:b7:d0:37:79:02:78: 8a:67:6d:96:63:e6:05:f6:d0:9d:cb:93:4e:52:44: 22:75:2f:45:6d:33:8f:46:b0:5f:2a:dc:d7:54:ae: 29:70:66:10:42:66:a0:54:03:49:52:05:4e:f8:47: cd:c1:f0:a6:8d:d1:02:13:69:71:bb:36:d6:e0:0f: 55:5f:6a:e1:5b:c9:8f:9b:62:31:c7:3d:36:45:44: 56:cf:0e:93:eb:a9:6d:f1:9f:52:22:22:6b:e2:9d: c2:0d:5e:91:0b:c7:10:f1:6b:03:08:6b:c5:14:d5: 32:ae:42:de:9c:78:7b:76:80:31:c4:85:b4:50:88: 52:99:62:3a:92:d8:9e:12:39:03:74:e1:3b:18:fe: f4:1a:af:41:2d:a7:e4:36:f8:28:0b:c6:c1:86:e7: 70:85:b8:2d:2f:6e:52:d3:cf:eb:8f:15:99:b6:b6: e0:7c:0b:d0:80:df:c4:0b:ad:bb:cf:f6:ea:9f:02: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.131.96.0/24 142.249.172.0/24 IPv6: 2602:feb7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16827 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:95:d3:df:ee:72:50:b5:a9:a6:17:25:bb:69:44:a6:d8:c6: 29:f6:10:a6:44:0e:37:78:71:90:f9:11:6c:03:6d:8b:7a:27: 47:6c:f2:ca:8e:31:74:6d:de:ef:5d:ef:36:c0:6a:30:e2:5c: 08:fa:15:18:ce:16:da:17:a2:2c:e9:ad:43:eb:2d:ae:f2:50: 73:0f:3f:64:c4:ce:74:4a:b6:36:47:af:fa:33:c6:d7:49:e4: 6b:00:f8:be:a8:ae:70:df:68:75:37:63:5a:ee:34:7c:3b:2d: b2:17:bb:6b:1e:0a:18:78:90:bf:3c:f1:83:03:30:8b:ab:b0: 9c:73:48:ce:52:c3:5a:c9:9f:3d:35:22:79:26:71:59:e4:11: 7f:6b:48:68:bc:68:4c:37:25:07:86:ea:ac:0a:c3:f7:0d:1c: 18:82:a9:a7:81:8e:9a:f3:16:d8:2f:43:b3:55:7c:29:b9:0f: b8:2e:8d:88:0f:ee:a9:b9:af:29:79:d3:c7:20:19:54:5a:58: 5a:cd:b3:e5:6e:35:31:da:b3:29:05:22:cd:81:80:d3:5f:ba: ee:0d:51:12:b4:52:05:f4:04:5a:c7:e3:05:cf:81:cc:b4:b3: 9a:09:18:0a:b8:4e:2a:c9:48:4f:9a:c3:df:05:fa:ed:84:b9: 41:28:55:3a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEt3TKfqrXhexZ/eB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAwOTE2MDMyMVoXDTI2MTIzMTE5NDQ0OVowLzEtMCsGA1UEAxMk ZjAyN2JiODgtYjA5ZC00ZmNmLWFiZTItNGFkNTAyNGFhM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroJphDp2BGTCTE3Mw9DsCJbGiXLrumpV0mUB +nZNY/Ts94TSh5LW2Z/EkAUuLaXFXa3pam2kZI2R+YyVX1Rbn1gZnPG30Dd5AniK Z22WY+YF9tCdy5NOUkQidS9FbTOPRrBfKtzXVK4pcGYQQmagVANJUgVO+EfNwfCm jdECE2lxuzbW4A9VX2rhW8mPm2Ixxz02RURWzw6T66lt8Z9SIiJr4p3CDV6RC8cQ 8WsDCGvFFNUyrkLenHh7doAxxIW0UIhSmWI6ktieEjkDdOE7GP70Gq9BLafkNvgo C8bBhudwhbgtL25S08/rjxWZtrbgfAvQgN/EC627z/bqnwLG2wIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFETRFHQYdY3g75vAhFuHrZ/46AlJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m MDI3YmI4OC1iMDlkLTRmY2YtYWJlMi00YWQ1MDI0YWEzY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2YwMjdiYjg4LWIwOWQtNGZjZi1h YmUyLTRhZDUwMjRhYTNjZC9mMDI3YmI4OC1iMDlkLTRmY2YtYWJlMi00YWQ1MDI0 YWEzY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXg2ADBACO+awwDgQCAAIwCAMGBCYC/rcAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAkG7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHyV09/uclC1qaYXJbtp RKbYxin2EKZEDjd4cZD5EWwDbYt6J0ds8sqOMXRt3u9d7zbAajDiXAj6FRjOFtoX oizprUPrLa7yUHMPP2TEznRKtjZHr/ozxtdJ5GsA+L6ornDfaHU3Y1ruNHw7LbIX u2seChh4kL888YMDMIursJxzSM5Sw1rJnz01InkmcVnkEX9rSGi8aEw3JQeG6qwK w/cNHBiCqaeBjprzFtgvQ7NVfCm5D7gujYgP7qm5ryl508cgGVRaWFrNs+VuNTHa sykFIs2BgNNfuu4NURK0UgX0BFrH4wXPgcy0s5oJGAq4TirJSE+aw98F+u2EuUEo VTo= -----END CERTIFICATE-----Generated at Mon Oct 27 15:20:34 2025 by rpki-client