$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer File: 932105b1-ce56-44a7-9670-6f4e56578ef8.cer (raw, json) Hash identifier: 30g2tmW/iJy4kGMerKcDbDvS/BBSVa2Ws+XIzbnOJcM= Subject key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584A605172263EF6324C1765DFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Jul 2025 17:42:28 +0000 Certificate not after: Tue 05 Jan 2027 20:06:50 +0000 Subordinate resources: AS: 53724 IP: 104.156.154.0/24 IP: 2602:f7f8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:51:72:26:3e:f6:32:4c:17:65:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jul 1 17:42:28 2025 GMT Not After : Jan 5 20:06:50 2027 GMT Subject: CN=932105b1-ce56-44a7-9670-6f4e56578ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9f:b8:bf:27:16:38:20:6b:35:cc:f4:78:f2: f9:9e:d6:26:23:6d:c3:90:16:ae:42:9a:cf:34:f2: 41:c2:03:20:64:bf:a4:dc:78:c5:6a:6a:ad:c0:c1: a4:47:6f:0f:4d:0e:1b:86:8f:84:1f:c3:42:82:49: 41:33:67:e7:57:03:ba:f5:01:5d:2b:da:15:11:11: c5:65:85:69:aa:95:c1:5d:ca:b9:90:9e:a5:9e:1c: 49:46:28:4b:af:09:78:c9:b4:bd:9f:a3:79:47:fd: 1f:db:c2:d3:6d:90:91:77:b9:02:4d:97:7f:81:98: f2:ff:c5:b6:55:7a:9c:15:d8:50:8d:b0:62:01:dc: 9e:b7:1a:9d:7a:f0:09:9b:b5:73:7e:48:2d:fb:c3: cb:cc:fe:41:ed:b3:e7:4b:8c:62:77:1a:bc:0c:15: db:88:91:4a:c1:ee:cf:ba:2c:37:4f:c9:27:21:e1: f0:d6:75:7f:ff:65:75:2b:9b:db:fa:c3:ca:9b:27: 37:40:c0:9e:77:41:e7:b0:86:c4:c0:34:2c:5a:a7: cd:04:4f:bc:87:3d:87:0a:b5:0e:90:40:d2:98:73: 3d:f8:03:f2:e3:5e:bc:26:2a:64:60:b8:f6:fb:11: 7a:b4:9c:23:39:27:39:2f:7a:97:a0:44:26:c5:bf: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 104.156.154.0/24 IPv6: 2602:f7f8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53724 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:12:8c:6b:47:0f:81:df:4c:4a:ba:71:86:30:d6:fb:43:e9: 2a:26:1c:3c:4d:df:ca:24:b0:e2:b7:07:77:f8:d8:e3:72:41: 98:9a:ce:10:08:43:20:91:ba:20:ce:db:44:30:06:22:f9:24: 9a:4e:03:f6:7e:1c:8f:66:aa:2a:e7:53:eb:d2:01:ed:17:27: 32:34:7c:d9:7f:75:36:c8:d4:da:f1:ee:b9:9d:3d:8c:a6:91: ef:b9:38:30:42:5e:0a:de:01:5f:dd:87:cf:8b:20:26:79:34: c2:c4:eb:81:d6:d7:8e:dc:2d:ca:c4:7b:99:04:59:a2:47:42: d9:33:24:ae:f1:4f:65:3c:0f:52:f9:ad:c0:29:f1:72:35:2b: 7d:2a:50:a2:66:01:a1:14:1e:72:4f:09:46:f7:66:36:2b:33: 99:38:ec:52:12:e2:51:c4:c2:12:41:d4:13:61:86:d4:fc:23: 8e:52:43:79:9a:2b:1f:24:16:b4:26:5c:5d:61:0e:8d:5e:12: 32:1d:78:b4:df:b7:fb:f9:0a:92:23:eb:46:c4:14:f9:2b:3e: 2a:e0:50:53:1b:ef:a1:7f:8d:32:4e:bd:ce:8a:3d:49:0a:49: b8:ab:78:65:d6:0a:0c:76:4d:68:05:7d:1c:94:1b:1f:03:a6: f1:0a:d1:ee -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEpgUXImPvYyTBdl38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDcwMTE3NDIyOFoXDTI3MDEwNTIwMDY1MFowLzEtMCsGA1UEAxMk OTMyMTA1YjEtY2U1Ni00NGE3LTk2NzAtNmY0ZTU2NTc4ZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ+4vycWOCBrNcz0ePL5ntYmI23DkBauQprP NPJBwgMgZL+k3HjFamqtwMGkR28PTQ4bho+EH8NCgklBM2fnVwO69QFdK9oVERHF ZYVpqpXBXcq5kJ6lnhxJRihLrwl4ybS9n6N5R/0f28LTbZCRd7kCTZd/gZjy/8W2 VXqcFdhQjbBiAdyetxqdevAJm7Vzfkgt+8PLzP5B7bPnS4xidxq8DBXbiJFKwe7P uiw3T8knIeHw1nV//2V1K5vb+sPKmyc3QMCed0HnsIbEwDQsWqfNBE+8hz2HCrUO kEDSmHM9+APy4168JipkYLj2+xF6tJwjOSc5L3qXoEQmxb8ANwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNqF14cwT7UPw3oSxG4ygu4mvULmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85 MzIxMDViMS1jZTU2LTQ0YTctOTY3MC02ZjRlNTY1NzhlZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzkzMjEwNWIxLWNlNTYtNDRhNy05 NjcwLTZmNGU1NjU3OGVmOC85MzIxMDViMS1jZTU2LTQ0YTctOTY3MC02ZjRlNTY1 NzhlZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABonJowDgQCAAIwCAMGACYC9/gAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDR3DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALEoxrRw+B30xKunGGMNb7Q+kq Jhw8Td/KJLDitwd3+NjjckGYms4QCEMgkbogzttEMAYi+SSaTgP2fhyPZqoq51Pr 0gHtFycyNHzZf3U2yNTa8e65nT2MppHvuTgwQl4K3gFf3YfPiyAmeTTCxOuB1teO 3C3KxHuZBFmiR0LZMySu8U9lPA9S+a3AKfFyNSt9KlCiZgGhFB5yTwlG92Y2KzOZ OOxSEuJRxMISQdQTYYbU/COOUkN5misfJBa0JlxdYQ6NXhIyHXi037f7+QqSI+tG xBT5Kz4q4FBTG++hf40yTr3Oij1JCkm4q3hl1goMdk1oBX0clBsfA6bxCtHu -----END CERTIFICATE-----Generated at Tue Nov 4 18:23:20 2025 by rpki-client