$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer File: fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer (raw, json) Hash identifier: int+2y5J+kkCBBk+6YY/9zwb+9YzBe+xXHhrpKTGjLY= Subject key identifier: 27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B79E1BF05B562AC5DD74BE080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 14:15:22 +0000 Certificate not after: Sun 15 Nov 2026 16:37:15 +0000 Subordinate resources: IP: 23.186.72.0/24 IP: 142.248.224.0/22 IP: 2602:f854::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:e1:bf:05:b5:62:ac:5d:d7:4b:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 10 14:15:22 2025 GMT Not After : Nov 15 16:37:15 2026 GMT Subject: CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:d7:9b:e7:95:60:cd:15:71:c8:0f:b8:29: 0c:62:30:ab:85:c6:e5:f8:13:e5:eb:65:64:41:9f: b7:25:76:1c:55:21:de:7a:5f:e8:7c:e5:be:a2:3b: ce:81:dd:d2:40:fc:0f:00:c9:e0:ab:9f:40:7e:20: 98:c3:6e:c3:c2:18:c2:20:71:8c:ba:30:1e:5f:03: b0:9b:da:c5:d4:3b:2d:6b:cc:69:c6:be:c8:7e:8c: c2:91:de:41:5c:33:e5:af:64:e9:3a:59:c8:f1:fc: 53:9a:bd:59:a9:d0:c7:1b:fa:50:ac:ba:76:68:08: 92:09:d6:82:8e:73:8b:df:87:d4:e8:6d:ae:4c:ea: 91:55:04:af:ba:01:2c:6a:c6:0f:b2:48:4b:06:79: 3e:57:61:c0:48:c2:1a:cb:bb:7c:d1:32:20:d0:f0: 9b:08:bc:47:29:0c:9a:93:c1:3d:f5:0a:38:b6:f3: 68:49:fd:1b:da:e7:3b:94:3a:b7:fd:a4:5f:9b:4f: 5d:ba:7c:8f:b3:62:5d:49:f2:39:5d:6e:ff:86:c1: 64:31:57:20:3a:4d:57:3b:de:07:f9:ed:61:05:ed: 78:3d:36:79:29:f5:d5:1f:28:55:82:23:05:7f:1b: 32:56:dc:91:fa:bc:21:fa:da:2c:85:29:bb:6e:21: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.186.72.0/24 142.248.224.0/22 IPv6: 2602:f854::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:36:af:ca:21:d5:ef:13:f5:ea:ec:cc:59:30:14:0d:05:23: 95:77:13:40:25:12:94:46:a7:3c:1d:dc:4d:ff:f3:2a:96:01: 12:3a:ee:eb:17:80:ff:cb:8a:11:f7:66:ef:62:4b:80:cf:13: 2f:9a:7b:53:5a:f1:56:68:07:7f:76:cf:8c:2d:9d:8c:8a:d5: af:63:72:a7:a7:9b:79:cb:ea:7f:17:25:8f:86:5c:80:05:c2: 08:e4:d5:0f:01:f2:fa:3f:3b:9f:32:34:37:13:2a:f2:1c:70: 33:5e:15:c0:d8:bd:97:af:ad:f6:0e:d4:f2:cf:20:11:eb:01: d4:27:93:b8:59:51:84:d4:0c:5c:72:9f:55:3b:52:7d:2a:d4: a1:bc:28:9b:20:e7:22:a4:43:c1:77:a2:e8:f4:b3:ea:ff:b7: c8:c4:b1:4d:52:9c:4e:f7:4a:6d:32:be:16:15:ac:87:0d:8f: 67:74:bd:68:db:f5:a5:91:99:2e:ad:0e:3d:cd:2e:b2:7a:47: 16:84:4d:2e:f2:9c:9e:d6:d0:a7:64:9e:8b:e6:62:26:11:1b: 89:6b:58:74:4c:c8:a5:40:1d:0f:f9:4d:10:a8:96:ea:75:a9: 73:e3:2a:0d:8f:02:2d:0d:1f:ee:e3:b2:bd:4d:02:d5:1e:70: 6b:27:52:1c -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEt54b8FtWKsXddL4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAxMDE0MTUyMloXDTI2MTExNTE2MzcxNVowLzEtMCsGA1UEAxMk ZmM3MjU0YjktMDkyYi00YzlmLTliNDktM2Y4YTUyMDUzMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndLXm+eVYM0VccgPuCkMYjCrhcbl+BPl62Vk QZ+3JXYcVSHeel/ofOW+ojvOgd3SQPwPAMngq59AfiCYw27DwhjCIHGMujAeXwOw m9rF1Dsta8xpxr7IfozCkd5BXDPlr2TpOlnI8fxTmr1ZqdDHG/pQrLp2aAiSCdaC jnOL34fU6G2uTOqRVQSvugEsasYPskhLBnk+V2HASMIay7t80TIg0PCbCLxHKQya k8E99Qo4tvNoSf0b2uc7lDq3/aRfm09dunyPs2JdSfI5XW7/hsFkMVcgOk1XO94H +e1hBe14PTZ5KfXVHyhVgiMFfxsyVtyR+rwh+toshSm7biEYHwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFCfGDpQn/5cPwOetJAEFsBNKoqbEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m YzcyNTRiOS0wOTJiLTRjOWYtOWI0OS0zZjhhNTIwNTMyZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2ZjNzI1NGI5LTA5MmItNGM5Zi05 YjQ5LTNmOGE1MjA1MzJmMy9mYzcyNTRiOS0wOTJiLTRjOWYtOWI0OS0zZjhhNTIw NTMyZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXukgDBAKO+OAwDgQCAAIwCAMGACYC+FQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo2r8oh1e8T9erszFkwFA0FI5V3E0AlEpRGpzwd3E3/8yqWARI67usX gP/LihH3Zu9iS4DPEy+ae1Na8VZoB392z4wtnYyK1a9jcqenm3nL6n8XJY+GXIAF wgjk1Q8B8vo/O58yNDcTKvIccDNeFcDYvZevrfYO1PLPIBHrAdQnk7hZUYTUDFxy n1U7Un0q1KG8KJsg5yKkQ8F3ouj0s+r/t8jEsU1SnE73Sm0yvhYVrIcNj2d0vWjb 9aWRmS6tDj3NLrJ6RxaETS7ynJ7W0KdknovmYiYRG4lrWHRMyKVAHQ/5TRColup1 qXPjKg2PAi0NH+7jsr1NAtUecGsnUhw= -----END CERTIFICATE-----Generated at Sun Oct 19 17:58:24 2025 by rpki-client