$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer File: 8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer (raw, json) Hash identifier: 1AxV8Yi+91fmyD5I4EXDiZ71jHd0dDl47qUj3p+xrQg= Subject key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B5E96330668E297E0A3C01580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 19:36:19 +0000 Certificate not after: Tue 12 Jan 2027 15:53:14 +0000 Subordinate resources: AS: 15204 IP: 66.6.0.0/20 IP: 75.102.160.0/19 IP: 155.94.64.0/20 IP: 204.15.52.0/22 IP: 2607:d600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:96:33:06:68:e2:97:e0:a3:c0:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 30 19:36:19 2025 GMT Not After : Jan 12 15:53:14 2027 GMT Subject: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:08:0a:57:ed:af:c8:2b:b8:1d:f0:92:7b: e5:13:82:9a:f1:21:98:1c:94:59:87:cd:ab:4d:3d: 72:2e:ec:4c:0d:19:8f:c4:23:ec:17:29:f2:f9:ed: 65:ec:50:7f:3e:c4:1b:a6:ba:d9:ef:94:2e:01:e9: 14:4f:c9:5c:68:54:13:a7:9b:9b:a8:e8:56:89:f4: eb:59:95:5a:ea:5c:ab:b6:e4:35:d3:e8:d7:4c:82: e9:7e:b3:7f:ec:0e:7d:91:a9:83:ab:29:eb:05:05: 39:3c:e4:18:c4:9b:6e:0e:31:fc:8c:4c:9f:6f:1a: 29:3d:0d:41:e3:dc:67:b3:16:80:ed:ad:7e:4e:56: eb:93:a1:0e:17:6f:4b:a2:4c:58:41:61:3d:fe:64: 61:d2:89:25:d2:e0:ad:76:cc:35:c5:59:43:86:ba: 60:71:79:7f:c1:f9:df:b2:a1:46:ad:88:42:30:0c: 9a:94:1e:1f:a2:74:58:a5:bc:37:a5:c8:51:df:86: 44:02:35:53:89:14:4b:fe:7d:35:2c:60:1e:ed:ae: e4:3f:76:05:04:05:93:02:34:85:78:e1:f4:15:0b: 85:78:e2:ed:65:16:c9:89:5a:2c:b1:4f:b5:b6:eb: 0a:d5:ca:92:0f:92:b7:ab:a3:9d:52:ed:27:1e:b1: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 66.6.0.0/20 75.102.160.0/19 155.94.64.0/20 204.15.52.0/22 IPv6: 2607:d600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15204 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:af:e5:eb:4e:26:db:83:41:21:bc:2e:10:1b:74:e4:f4:af: cd:0f:88:61:8d:df:5c:73:e4:3a:3d:10:95:dc:cd:13:66:89: b7:20:a9:22:4a:94:01:fe:ed:75:92:fc:08:b9:9d:fe:95:9b: 97:51:e9:00:5b:1b:9e:54:09:c4:34:99:1d:5f:92:5e:50:3d: e4:4d:02:b5:3b:8e:85:0b:f1:3b:91:7f:1a:98:37:2b:43:57: ed:77:6d:b5:66:64:db:c0:fa:a9:64:bf:dd:00:e2:4c:93:92: d4:b6:9e:59:7e:eb:ab:4d:98:f8:3b:1a:fb:82:ba:97:7a:58: 27:2f:01:5b:ad:76:05:9b:6c:30:06:50:d7:c3:a0:21:29:27: 0f:9f:37:e2:21:91:f8:89:3f:3b:b4:b0:34:5a:dc:14:1e:f4: 0a:09:39:6c:97:85:82:e1:e6:ed:09:9c:3e:0c:08:47:04:be: e2:b0:48:aa:38:9c:ad:87:04:8d:9a:71:8e:8a:05:76:44:76: d2:75:9b:38:01:99:59:2f:87:65:ae:fb:96:ff:67:c8:c4:4a: 58:de:ad:8f:ce:ef:81:78:7f:b7:c0:03:6f:5f:cf:2d:1c:31: a9:4e:7f:65:41:a9:8a:ed:7b:f9:f3:05:65:ed:4f:66:5e:f0: ca:b2:85:94 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEteljMGaOKX4KPAFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDkzMDE5MzYxOVoXDTI3MDExMjE1NTMxNFowLzEtMCsGA1UEAxMk OGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4MDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/AIClftr8gruB3wknvlE4Ka8SGYHJRZh82r TT1yLuxMDRmPxCPsFyny+e1l7FB/PsQbprrZ75QuAekUT8lcaFQTp5ubqOhWifTr WZVa6lyrtuQ10+jXTILpfrN/7A59kamDqynrBQU5POQYxJtuDjH8jEyfbxopPQ1B 49xnsxaA7a1+Tlbrk6EOF29LokxYQWE9/mRh0okl0uCtdsw1xVlDhrpgcXl/wfnf sqFGrYhCMAyalB4fonRYpbw3pchR34ZEAjVTiRRL/n01LGAe7a7kP3YFBAWTAjSF eOH0FQuFeOLtZRbJiVossU+1tusK1cqSD5K3q6OdUu0nHrF9OQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFJV3agmwaLqZsRziDM7jAP62Uq1GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzhhNGM3MGE0LTMzZGEtNDg0My1h M2M3LWM4ZjhkODhkODAzNS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4 ZDgwMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARCBgADBAVLZqADBASbXkADBALMDzQwDQQCAAIw BwMFACYH1gAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICO2QwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACa/l 604m24NBIbwuEBt05PSvzQ+IYY3fXHPkOj0QldzNE2aJtyCpIkqUAf7tdZL8CLmd /pWbl1HpAFsbnlQJxDSZHV+SXlA95E0CtTuOhQvxO5F/Gpg3K0NX7XdttWZk28D6 qWS/3QDiTJOS1LaeWX7rq02Y+Dsa+4K6l3pYJy8BW612BZtsMAZQ18OgISknD583 4iGR+Ik/O7SwNFrcFB70Cgk5bJeFguHm7QmcPgwIRwS+4rBIqjicrYcEjZpxjooF dkR20nWbOAGZWS+HZa77lv9nyMRKWN6tj87vgXh/t8ADb1/PLRwxqU5/ZUGpiu17 +fMFZe1PZl7wyrKFlA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:18 2025 by rpki-client