$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer File: 8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer (raw, json) Hash identifier: zDEcCX+x6nFPfkAuvc96Q/kEWtGndp5G0fWqwd0rSvY= Subject key identifier: FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B750F67A1D3A9A98507E01E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 20:48:19 +0000 Certificate not after: Fri 04 Dec 2026 15:13:48 +0000 Subordinate resources: AS: 54740 IP: 130.12.20.0/22 IP: 2607:d140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:0f:67:a1:d3:a9:a9:85:07:e0:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 8 20:48:19 2025 GMT Not After : Dec 4 15:13:48 2026 GMT Subject: CN=8af9792c-adf8-459e-a0ad-6c60ded9e25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:72:6f:ce:f6:e6:dd:55:8c:02:82:0e:81:0f: b0:a4:bc:36:ea:22:2a:2b:58:d5:ca:e7:20:6b:a1: 0a:98:02:94:d4:ed:8e:16:70:a5:e4:7e:56:a4:62: eb:46:54:60:e2:42:22:f0:0f:c8:c9:d3:cd:24:62: ce:a4:1e:5a:a9:70:46:fc:c0:b4:3b:4e:a2:ab:4c: fe:fa:c7:a2:3f:52:8b:26:42:82:67:9a:49:29:3c: 2c:7d:20:af:78:7f:d3:76:d2:09:88:fa:5c:f0:02: 5e:58:ff:1c:b4:64:e8:ad:bf:b3:92:94:30:2c:27: 13:a2:2b:16:f4:ca:b2:eb:2f:34:78:bb:66:62:de: 39:aa:8d:74:23:fc:8e:f5:f5:1d:10:62:11:2d:a6: 00:d2:da:75:42:01:04:88:7c:5d:b7:ff:b3:a7:42: 66:c9:e3:7e:39:72:f1:f3:60:ba:11:bc:f3:d2:7f: 1c:bd:10:48:d1:ad:e8:1b:cd:f1:1b:75:1b:d7:b8: 39:c2:a0:49:b4:ae:40:76:d8:aa:b2:6f:f3:2c:45: 61:c5:ab:5f:8b:4b:1e:06:02:c1:2c:20:fc:c6:b9: 83:f2:f0:6c:39:9b:41:57:5f:87:ff:f3:07:6d:38: 80:b8:c5:b8:3c:0b:20:55:31:8d:d1:59:a5:5b:78: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 130.12.20.0/22 IPv6: 2607:d140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54740 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bc:9f:d3:d5:31:40:e4:5e:a6:97:6c:ca:50:52:e5:48:b6: b2:f6:6d:a2:f7:81:7d:79:f0:28:29:8f:35:88:c5:73:a5:b6: 26:4c:1f:f7:5d:48:21:28:d0:55:7d:ed:a1:6b:1a:b9:a8:2d: 29:6e:08:8c:15:8f:eb:62:8a:c5:67:6e:f4:6d:5b:58:53:e2: ab:e9:e4:14:f8:25:01:a6:11:6b:0d:e9:89:ae:61:a0:17:a2: be:12:c8:c4:80:22:8d:8d:a2:27:87:ae:6e:6b:bd:ad:d7:b1: d6:e2:f1:79:21:a3:40:4b:11:fe:7c:f1:d0:5f:67:82:b5:9e: 38:65:2c:51:30:df:b5:de:d2:c3:29:18:f3:7d:c1:5f:07:cb: f4:00:93:71:9b:5e:5d:2c:72:15:47:03:43:f1:04:ff:c5:c7: 27:48:03:36:80:82:52:62:70:f3:32:c4:49:a1:fc:12:cc:5f: e4:c5:6c:fd:29:a7:43:a1:9c:8e:2f:d3:27:2a:2e:4f:7e:17: ba:52:9c:4e:7a:09:58:71:e9:e3:07:74:0f:61:b7:54:10:1f: 13:cc:5c:ec:0a:9a:1f:c7:13:bb:87:84:e7:53:ab:2d:f3:5a: f8:ea:30:72:60:d5:11:b7:f0:09:28:02:2d:ee:d2:83:50:f5: 57:61:6b:91 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEt1D2eh06mphQfgHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAwODIwNDgxOVoXDTI2MTIwNDE1MTM0OFowLzEtMCsGA1UEAxMk OGFmOTc5MmMtYWRmOC00NTllLWEwYWQtNmM2MGRlZDllMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnJvzvbm3VWMAoIOgQ+wpLw26iIqK1jVyucg a6EKmAKU1O2OFnCl5H5WpGLrRlRg4kIi8A/IydPNJGLOpB5aqXBG/MC0O06iq0z+ +seiP1KLJkKCZ5pJKTwsfSCveH/TdtIJiPpc8AJeWP8ctGTorb+zkpQwLCcToisW 9Mqy6y80eLtmYt45qo10I/yO9fUdEGIRLaYA0tp1QgEEiHxdt/+zp0JmyeN+OXLx 82C6Ebzz0n8cvRBI0a3oG83xG3Ub17g5wqBJtK5Adtiqsm/zLEVhxatfi0seBgLB LCD8xrmD8vBsOZtBV1+H//MHbTiAuMW4PAsgVTGN0VmlW3gYFwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPqZVE14snTTG3876igVer47w2RYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 YWY5NzkyYy1hZGY4LTQ1OWUtYTBhZC02YzYwZGVkOWUyNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzhhZjk3OTJjLWFkZjgtNDU5ZS1h MGFkLTZjNjBkZWQ5ZTI1ZC84YWY5NzkyYy1hZGY4LTQ1OWUtYTBhZC02YzYwZGVk OWUyNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKCDBQwDQQCAAIwBwMFACYH0UAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANXUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAW8n9PVMUDkXqaXbMpQUuVItrL2 baL3gX158CgpjzWIxXOltiZMH/ddSCEo0FV97aFrGrmoLSluCIwVj+tiisVnbvRt W1hT4qvp5BT4JQGmEWsN6YmuYaAXor4SyMSAIo2NoieHrm5rva3Xsdbi8Xkho0BL Ef588dBfZ4K1njhlLFEw37Xe0sMpGPN9wV8Hy/QAk3GbXl0schVHA0PxBP/FxydI AzaAglJicPMyxEmh/BLMX+TFbP0pp0OhnI4v0ycqLk9+F7pSnE56CVhx6eMHdA9h t1QQHxPMXOwKmh/HE7uHhOdTqy3zWvjqMHJg1RG38AkoAi3u0oNQ9Vdha5E= -----END CERTIFICATE-----Generated at Wed Nov 5 00:45:16 2025 by rpki-client