$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer File: a20b951e-7538-41fb-97d2-2dd9393d3541.cer (raw, json) Hash identifier: N6rKJabDeC4dyPg/lO141UDehNmhA5MaVXo4t/dYBf8= Subject key identifier: 96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B8808487C47D6505DBDF4A1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Oct 2025 15:54:19 +0000 Certificate not after: Sat 16 Jan 2027 23:16:02 +0000 Subordinate resources: AS: 36038 IP: 142.249.20.0/22 IP: 2604:2520::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:08:48:7c:47:d6:50:5d:bd:f4:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 15 15:54:19 2025 GMT Not After : Jan 16 23:16:02 2027 GMT Subject: CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:1e:2e:08:d9:67:8e:c2:00:bf:70:c7:0a: c7:e6:38:d3:8b:a9:e2:ed:99:9d:54:45:38:fe:59: 13:6e:70:34:50:28:ce:89:75:e5:ed:5a:04:15:5e: 2b:80:d4:72:93:9d:18:f8:fe:38:d5:12:d6:91:64: 4f:1b:7f:00:3d:4d:f9:09:59:cf:d2:60:40:db:db: c8:22:b9:0f:a6:e7:7f:bc:8c:c8:dd:cf:e4:89:a3: 8e:93:9f:e1:6d:2c:9b:4c:26:79:37:1e:42:3d:ce: 57:9a:3b:65:2d:a4:13:a6:32:29:96:f6:0f:d0:2c: 47:8a:59:da:40:3e:51:45:4a:af:6d:39:70:6d:3d: c0:af:e8:48:41:34:25:fb:8f:12:1b:24:0c:56:ca: f0:74:be:3a:32:3b:73:e7:89:66:90:b6:84:57:cc: 52:33:b7:85:a2:09:6b:db:20:55:9f:23:6b:a1:f4: 25:c7:01:00:66:71:54:0b:b7:52:a6:0d:f4:fa:cf: d6:a3:0a:ff:04:33:d9:70:aa:c3:da:03:01:b0:3f: c1:0f:2c:cf:6c:d8:77:3c:a1:b5:43:32:22:76:6b: 64:bb:a8:2a:77:88:fd:7c:35:5d:3b:e4:25:04:bc: 0f:37:07:17:ca:4c:9a:9e:29:cd:5b:8d:ab:17:02: ee:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 142.249.20.0/22 IPv6: 2604:2520::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36038 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c0:c1:ab:1a:b7:c3:68:69:86:8c:d9:48:52:c5:ce:19:fb: 68:6c:8d:68:0f:e0:01:2f:e5:7d:4c:69:ae:84:c2:b9:ae:a7: 41:fc:0b:4b:67:54:87:74:92:5c:da:af:56:f9:de:ef:65:e7: 79:94:3e:ec:dd:30:1f:f3:f0:e2:64:31:66:b0:f3:e5:10:96: fd:00:cc:ae:dd:d9:87:0d:cb:6b:53:be:0d:1f:77:d9:51:c1: 54:16:31:67:e2:9d:c0:75:df:22:a5:3f:fe:0b:d0:f9:49:2e: 18:ec:89:92:d6:2e:11:68:54:50:99:e8:c9:41:e6:5b:a5:2f: f1:6e:e0:9f:4b:54:42:86:70:0f:5f:a7:35:36:21:6d:bf:08: 81:b4:05:5a:eb:3c:1a:89:84:ee:e2:2a:1f:a5:e3:b5:e3:c5: 67:00:7d:11:88:07:3f:90:df:df:98:9f:34:f5:0e:a7:20:e1: a3:03:d2:4c:57:69:b8:66:f4:52:ec:2b:cd:30:9c:5f:9a:bb: c7:ce:c1:81:f5:20:ee:88:a0:2c:6a:40:8d:63:75:0e:4b:0b: 43:2f:d6:a7:4e:c1:b1:ce:68:2f:51:3e:81:83:39:a9:bb:e8: 76:a9:fc:3e:e9:48:02:ef:00:5a:8c:6b:a7:73:b7:ce:b7:df: 9a:49:80:dd -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEuICEh8R9ZQXb30ocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAxNTE1NTQxOVoXDTI3MDExNjIzMTYwMlowLzEtMCsGA1UEAxMk YTIwYjk1MWUtNzUzOC00MWZiLTk3ZDItMmRkOTM5M2QzNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP4eLgjZZ47CAL9wxwrH5jjTi6ni7ZmdVEU4 /lkTbnA0UCjOiXXl7VoEFV4rgNRyk50Y+P441RLWkWRPG38APU35CVnP0mBA29vI IrkPpud/vIzI3c/kiaOOk5/hbSybTCZ5Nx5CPc5XmjtlLaQTpjIplvYP0CxHilna QD5RRUqvbTlwbT3Ar+hIQTQl+48SGyQMVsrwdL46Mjtz54lmkLaEV8xSM7eFoglr 2yBVnyNrofQlxwEAZnFUC7dSpg30+s/Wowr/BDPZcKrD2gMBsD/BDyzPbNh3PKG1 QzIidmtku6gqd4j9fDVdO+QlBLwPNwcXykyaninNW42rFwLuMQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJYnZT7GvYRWDrZXJpRRyFEDA9iIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h MjBiOTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5MzkzZDM1NDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2EyMGI5NTFlLTc1MzgtNDFmYi05 N2QyLTJkZDkzOTNkMzU0MS9hMjBiOTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5Mzkz ZDM1NDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKO+RQwDQQCAAIwBwMFACYEJSAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIzGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABjAwasat8NoaYaM2UhSxc4Z+2hs jWgP4AEv5X1Maa6Ewrmup0H8C0tnVId0klzar1b53u9l53mUPuzdMB/z8OJkMWaw 8+UQlv0AzK7d2YcNy2tTvg0fd9lRwVQWMWfincB13yKlP/4L0PlJLhjsiZLWLhFo VFCZ6MlB5lulL/Fu4J9LVEKGcA9fpzU2IW2/CIG0BVrrPBqJhO7iKh+l47XjxWcA fRGIBz+Q39+YnzT1Dqcg4aMD0kxXabhm9FLsK80wnF+au8fOwYH1IO6IoCxqQI1j dQ5LC0Mv1qdOwbHOaC9RPoGDOam76Hap/D7pSALvAFqMa6dzt86335pJgN0= -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:32 2025 by rpki-client