$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5.cer File: 605a4857-c047-4a96-8bd5-b63092db11e5.cer (raw, json) Hash identifier: FxD6jz83YdRwFisHuGCPXS32U2UXK7HziqyqtvuYrJY= Subject key identifier: 38:C5:AA:A0:57:A8:2F:91:DD:F1:B2:E4:E2:10:BC:E1:4C:86:6D:29 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584CB27F7C10CDB5BAC67BFC6620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/605a4857-c047-4a96-8bd5-b63092db11e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 13:45:23 +0000 Certificate not after: Thu 04 May 2028 12:45:23 +0000 Subordinate resources: AS: 401407 IP: 142.249.125.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:7f:7c:10:cd:b5:ba:c6:7b:fc:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 30 13:45:23 2026 GMT Not After : May 4 12:45:23 2028 GMT Subject: CN=605a4857-c047-4a96-8bd5-b63092db11e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:71:9b:da:f1:b8:50:ff:51:e5:df:d5:be: 39:b6:ce:39:65:cf:64:60:e4:a9:76:7c:ae:15:07: 1e:a4:e4:5c:f5:d2:17:66:9c:be:4d:dd:6a:a8:0e: 88:6d:05:4c:ce:02:a1:35:71:74:d9:a9:71:a8:97: 8f:76:e5:c3:ef:4c:79:ce:b0:12:a4:e9:97:0a:62: 7c:65:94:9e:ab:d5:6e:63:24:e2:9f:89:bb:b8:a5: 97:d8:fc:8a:00:19:52:f7:b4:1a:ee:34:ac:a7:32: 33:53:d6:46:9c:a6:f1:40:50:93:27:64:56:16:70: f8:4b:70:09:07:ba:ab:5a:09:6e:76:bb:95:90:4a: db:9c:4f:45:33:bb:7a:51:6c:2c:af:01:76:bf:b6: e4:2f:77:f8:c4:ea:ed:07:59:cb:5d:63:5a:fb:58: a9:80:8e:a8:1b:8f:ff:af:ee:6d:15:6e:29:56:c8: 2f:cd:e6:15:73:13:f8:87:19:2c:1d:61:dd:f0:42: 31:05:39:2b:45:03:61:f1:ab:7b:78:b4:df:cb:0b: 65:c6:73:41:89:6c:db:3c:13:9b:ff:4b:c2:2a:30: ac:aa:69:5d:67:38:6d:b4:dc:19:45:e8:f2:11:a1: 97:ff:29:c9:02:a5:4a:9f:bd:10:45:95:ab:45:31: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C5:AA:A0:57:A8:2F:91:DD:F1:B2:E4:E2:10:BC:E1:4C:86:6D:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/605a4857-c047-4a96-8bd5-b63092db11e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 142.249.125.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401407 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:9e:49:b3:3e:49:1d:0f:31:7f:67:37:88:2e:b1:98:47:51: 8d:8c:e8:cd:43:5c:4c:a6:5a:44:18:85:fc:76:42:a3:b7:e4: 9d:52:0e:31:c0:9f:43:fa:25:fc:75:6b:37:c4:d9:b2:15:fa: e5:c5:2a:7e:1a:29:62:c9:7d:74:ca:2c:ff:52:73:14:eb:c2: 80:c3:1b:8c:f6:5a:70:ad:00:c2:3a:95:04:98:e1:68:35:14: 00:ed:97:d0:d7:01:78:e9:c1:fe:5e:b0:dd:ab:69:91:9e:22: a3:76:35:93:67:68:97:35:2f:61:3d:f4:42:2f:70:0f:dc:e7: c0:59:74:be:7d:bf:e4:44:90:2b:b6:5f:38:17:de:60:17:ee: 39:cf:1a:07:1a:ca:77:76:f9:ba:4d:23:80:e7:2e:a8:18:14: c8:47:a3:62:4c:c2:f4:89:0e:66:df:ff:4c:32:f0:d8:a0:2d: 73:ae:e2:91:8f:6b:df:7a:28:e4:a3:df:c7:41:5d:e1:4a:eb: 8a:8e:88:09:44:5f:48:7d:78:59:e6:1e:6a:69:28:e4:82:05: ec:c9:cb:59:8e:2e:d2:b1:19:7b:fb:13:73:72:3c:3f:41:2b: 4e:c9:11:e5:c4:65:ac:3d:e1:72:f5:9e:6a:8a:b5:0a:7f:8c: 7e:40:fa:a0 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEyyf3wQzbW6xnv8ZiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI2MDEzMDEzNDUyM1oXDTI4MDUwNDEyNDUyM1owLzEtMCsGA1UEAxMk NjA1YTQ4NTctYzA0Ny00YTk2LThiZDUtYjYzMDkyZGIxMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Zxm9rxuFD/UeXf1b45ts45Zc9kYOSpdnyu FQcepORc9dIXZpy+Td1qqA6IbQVMzgKhNXF02alxqJePduXD70x5zrASpOmXCmJ8 ZZSeq9VuYyTin4m7uKWX2PyKABlS97Qa7jSspzIzU9ZGnKbxQFCTJ2RWFnD4S3AJ B7qrWgludruVkErbnE9FM7t6UWwsrwF2v7bkL3f4xOrtB1nLXWNa+1ipgI6oG4// r+5tFW4pVsgvzeYVcxP4hxksHWHd8EIxBTkrRQNh8at7eLTfywtlxnNBiWzbPBOb /0vCKjCsqmldZzhttNwZRejyEaGX/ynJAqVKn70QRZWrRTHmNQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDjFqqBXqC+R3fGy5OIQvOFMhm0pMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82 MDVhNDg1Ny1jMDQ3LTRhOTYtOGJkNS1iNjMwOTJkYjExZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzYwNWE0ODU3LWMwNDctNGE5Ni04 YmQ1LWI2MzA5MmRiMTFlNS82MDVhNDg1Ny1jMDQ3LTRhOTYtOGJkNS1iNjMwOTJk YjExZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+X0wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh//MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAaeSbM+SR0PMX9nN4gusZhHUY2M6M1DXEymWkQYhfx2QqO3 5J1SDjHAn0P6Jfx1azfE2bIV+uXFKn4aKWLJfXTKLP9ScxTrwoDDG4z2WnCtAMI6 lQSY4Wg1FADtl9DXAXjpwf5esN2raZGeIqN2NZNnaJc1L2E99EIvcA/c58BZdL59 v+REkCu2XzgX3mAX7jnPGgcaynd2+bpNI4DnLqgYFMhHo2JMwvSJDmbf/0wy8Nig LXOu4pGPa996KOSj38dBXeFK64qOiAlEX0h9eFnmHmppKOSCBezJy1mOLtKxGXv7 E3NyPD9BK07JEeXEZaw94XL1nmqKtQp/jH5A+qA= -----END CERTIFICATE-----Generated at Mon Mar 2 00:44:36 2026 by rpki-client