$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer File: 6fd31e81-6599-4bac-8a74-7bbe9233374a.cer (raw, json) Hash identifier: mRGJRIE/xueSTIIjP5+IhDvOW8ZeuZFqcr1XTDor40k= Subject key identifier: 0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B5316A465117D7EF2CDA34800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Sep 2025 16:45:25 +0000 Certificate not after: Sun 21 Feb 2027 17:02:28 +0000 Subordinate resources: AS: 22727 AS: 46454 AS: 402025 IP: 65.254.32.0/20 IP: 66.218.0.0/19 IP: 68.64.64.0 -- 68.64.94.255 IP: 69.67.224.0/19 IP: 2607:f638::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:53:16:a4:65:11:7d:7e:f2:cd:a3:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 26 16:45:25 2025 GMT Not After : Feb 21 17:02:28 2027 GMT Subject: CN=6fd31e81-6599-4bac-8a74-7bbe9233374a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:4d:eb:05:02:27:5b:c9:c1:5d:24:2c:14: b1:e1:a4:b8:8a:23:1d:36:73:7c:7a:99:85:73:9b: 77:ee:38:54:a1:e9:6c:8b:73:5c:d6:ce:74:9d:ba: 28:7f:f7:de:f1:b9:36:6a:49:e0:e9:c0:09:1e:ea: d8:05:f4:1e:b4:1e:9e:e3:bf:13:d5:a3:a9:29:f1: 3d:0e:12:0d:f5:de:90:47:87:c7:52:2c:c9:66:77: 01:d8:ea:88:24:ef:a9:70:54:e9:02:c5:1a:6d:41: 07:0c:65:b4:c5:f5:45:45:63:c6:c7:36:b4:16:7a: fe:c9:e0:80:49:79:5c:f8:f9:3e:dc:b5:35:9e:6f: 63:bd:1d:4a:79:8d:72:7b:67:b5:dd:f6:af:8e:cc: ec:2a:42:66:70:6e:ab:a9:3e:58:f8:99:b9:37:60: 20:2f:00:cf:99:16:52:c5:a2:f0:7a:cd:b5:19:60: 91:fa:0e:d4:03:60:e1:4f:9b:14:bd:01:52:6c:54: 59:4b:0a:ad:df:da:19:5c:48:0d:4e:51:d8:09:35: 7f:c0:d8:a9:c3:04:7e:0d:7a:af:71:2e:3f:21:e7: 81:69:31:9d:bf:0e:87:83:6d:e4:36:59:37:e4:7d: 80:52:df:bb:49:d7:af:3b:f8:6e:f0:0e:8c:d5:bb: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 65.254.32.0/20 66.218.0.0/19 68.64.64.0-68.64.94.255 69.67.224.0/19 IPv6: 2607:f638::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22727 46454 402025 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:bd:e3:52:a9:47:46:d8:66:0e:02:b7:1e:46:b2:b4:be:c5: 72:3a:38:c4:5d:a2:78:c7:d2:e4:e7:30:bf:53:f0:74:d6:59: 1d:e6:d1:4a:da:a6:5f:79:4b:79:22:44:0d:ec:5a:3a:0c:6d: ca:3d:97:35:ff:d1:7e:5f:f1:b9:ca:1d:3c:2d:77:16:ab:6d: 4f:45:3e:3b:f5:e7:54:91:c1:68:94:cb:40:f4:47:2c:c7:d8: 3a:9b:76:7f:a5:a0:78:62:07:3d:ee:33:84:ff:7b:9c:bf:8d: 80:87:14:a0:9f:e2:c7:32:94:75:5c:9e:db:95:08:f5:86:05: 53:9b:3e:99:fa:68:0f:01:94:d9:33:cc:51:99:ea:8a:a1:e3: b3:2d:09:e7:cd:be:ea:c7:59:1e:69:05:9f:70:4e:05:31:18: 82:20:55:ba:73:ef:56:5d:65:6f:d7:11:64:ca:9d:3f:50:b0: 26:a8:ef:00:6a:7e:a7:22:2c:0f:a3:53:dd:7f:db:a9:d4:5d: ee:fa:b7:8b:f5:d0:e4:00:fe:75:22:f5:c8:38:c7:de:39:a6: 96:d8:e9:3b:15:64:b1:eb:a4:9c:cb:0d:8b:f9:4a:85:76:45: 45:3b:06:72:b4:23:a6:f9:1b:ad:39:d8:a1:41:cf:eb:12:86: 97:bd:aa:31 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEtTFqRlEX1+8s2jSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDkyNjE2NDUyNVoXDTI3MDIyMTE3MDIyOFowLzEtMCsGA1UEAxMk NmZkMzFlODEtNjU5OS00YmFjLThhNzQtN2JiZTkyMzMzNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDFN6wUCJ1vJwV0kLBSx4aS4iiMdNnN8epmF c5t37jhUoelsi3Nc1s50nboof/fe8bk2akng6cAJHurYBfQetB6e478T1aOpKfE9 DhIN9d6QR4fHUizJZncB2OqIJO+pcFTpAsUabUEHDGW0xfVFRWPGxza0Fnr+yeCA SXlc+Pk+3LU1nm9jvR1KeY1ye2e13favjszsKkJmcG6rqT5Y+Jm5N2AgLwDPmRZS xaLwes21GWCR+g7UA2DhT5sUvQFSbFRZSwqt39oZXEgNTlHYCTV/wNipwwR+DXqv cS4/IeeBaTGdvw6Hg23kNlk35H2AUt+7SdevO/hu8A6M1buQSQIDAQABo4IETTCC BEkwHQYDVR0OBBYEFAyZQWnS49EBEXKDhi3nB+TQFCmrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82 ZmQzMWU4MS02NTk5LTRiYWMtOGE3NC03YmJlOTIzMzM3NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzZmZDMxZTgxLTY1OTktNGJhYy04 YTc0LTdiYmU5MjMzMzc0YS82ZmQzMWU4MS02NTk5LTRiYWMtOGE3NC03YmJlOTIz MzM3NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCYEAgABMCADBARB/iADBAVC2gAwDAMEBkRAQAMEAERAXgMEBUVD 4DANBAIAAjAHAwUAJgf2ODAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgJYxwIDALV2 AgMGImkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXr3jUqlHRthmDgK3HkaytL7Fcjo4xF2ieMfS5Ocwv1Pw dNZZHebRStqmX3lLeSJEDexaOgxtyj2XNf/Rfl/xucodPC13FqttT0U+O/XnVJHB aJTLQPRHLMfYOpt2f6WgeGIHPe4zhP97nL+NgIcUoJ/ixzKUdVye25UI9YYFU5s+ mfpoDwGU2TPMUZnqiqHjsy0J582+6sdZHmkFn3BOBTEYgiBVunPvVl1lb9cRZMqd P1CwJqjvAGp+pyIsD6NT3X/bqdRd7vq3i/XQ5AD+dSL1yDjH3jmmltjpOxVkseuk nMsNi/lKhXZFRTsGcrQjpvkbrTnYoUHP6xKGl72qMQ== -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:50 2025 by rpki-client