$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer File: b2217366-9374-418e-b500-d6b2bd2b5759.cer (raw, json) Hash identifier: RwFFBFGc+dlkHYrGDAKbMuQMZNgcRDjoEx8Ms+187Gc= Subject key identifier: 74:6D:5A:4D:AB:84:6A:9C:42:A8:1F:D5:51:B3:89:64:91:E0:5C:3A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B74FC0E93C7A5D4F817564AA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 20:09:20 +0000 Certificate not after: Sun 13 Dec 2026 13:45:14 +0000 Subordinate resources: IP: 23.187.88.0/24 IP: 130.12.48.0/22 IP: 2602:f832::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:fc:0e:93:c7:a5:d4:f8:17:56:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 8 20:09:20 2025 GMT Not After : Dec 13 13:45:14 2026 GMT Subject: CN=b2217366-9374-418e-b500-d6b2bd2b5759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:b3:2e:74:53:19:e0:9f:48:64:25:2f:91: 1c:ee:4b:69:c5:ee:4d:15:38:18:bd:a3:e4:e5:aa: 49:e9:0d:fe:f1:eb:a9:84:11:98:b5:80:f4:4f:ec: 37:4b:fe:e9:02:31:c1:cd:c6:eb:bd:a6:ba:72:72: e4:eb:9f:88:df:71:07:0f:0d:88:13:0c:33:7b:3e: a7:8b:50:1f:ed:57:64:60:97:f3:ec:ed:f1:c2:a6: 51:0b:f9:48:bf:a2:02:99:78:3f:dd:7b:34:f0:4f: b2:6d:65:93:56:39:72:db:cc:25:78:e2:68:49:f9: 55:a1:02:9e:00:18:7b:66:31:2d:ad:3f:12:5a:0c: 5a:70:c5:64:68:da:99:20:b0:d9:8c:a1:44:be:7b: ec:e1:8f:46:ee:6a:52:7a:df:59:c7:d6:54:ca:c2: 72:13:03:8a:bb:10:ee:1e:94:e4:07:d2:e4:87:b3: b0:e5:03:46:46:d4:74:e1:57:44:f4:64:67:a1:6c: 4a:d3:e4:31:ba:5d:5e:32:58:4b:f9:dc:14:99:53: 0f:10:9e:46:39:dd:89:7b:81:94:2e:33:e6:2b:23: 3d:da:4a:be:b6:5c:fd:26:4d:d9:b3:4a:00:53:4d: 26:f5:f5:bb:39:c8:6e:09:15:05:b1:41:b8:23:4b: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6D:5A:4D:AB:84:6A:9C:42:A8:1F:D5:51:B3:89:64:91:E0:5C:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.187.88.0/24 130.12.48.0/22 IPv6: 2602:f832::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b3:36:f2:92:a0:80:69:c7:f7:72:16:27:f4:26:0d:6f:3d: 61:95:af:cb:ff:ba:9e:36:85:b4:ad:b0:77:5b:d4:19:55:0a: 94:79:7a:48:94:8b:16:1e:29:10:68:81:49:b0:2e:dc:39:b4: b7:c5:39:d1:3e:1e:47:41:89:d9:21:47:bf:66:46:19:9d:b3: d9:9b:2b:a8:20:31:f2:53:c2:0d:9a:1b:07:29:22:66:d2:81: a3:44:29:be:c5:af:e2:d1:2a:21:8d:1a:39:a1:c5:ad:34:3d: 35:d9:ad:ea:ee:24:d2:57:43:7f:c8:86:a6:a2:bd:7e:5e:91: d4:c0:2b:1f:0f:f3:92:d1:6f:bf:43:2c:01:e5:af:43:49:a1: d1:f4:19:a8:c3:e7:a7:b2:83:bb:75:4e:1c:27:f8:6b:28:81: d1:62:fd:ec:c8:71:54:73:82:80:94:7c:1e:91:b2:7c:5d:a0: 7b:b1:ae:17:89:bc:28:d5:42:f4:2a:a9:ea:83:4e:93:91:55: 06:be:9c:8b:39:35:36:b0:44:01:c6:32:97:26:6d:cd:f2:c4: a0:e7:d6:ae:32:8a:d8:58:07:fb:23:2d:fa:c6:6c:45:11:9d: de:da:63:51:18:72:d1:4b:13:ec:51:2c:ef:1f:13:83:47:62: 6b:28:2f:ef -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEt0/A6Tx6XU+BdWSqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAwODIwMDkyMFoXDTI2MTIxMzEzNDUxNFowLzEtMCsGA1UEAxMk YjIyMTczNjYtOTM3NC00MThlLWI1MDAtZDZiMmJkMmI1NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK2zLnRTGeCfSGQlL5Ec7ktpxe5NFTgYvaPk 5apJ6Q3+8euphBGYtYD0T+w3S/7pAjHBzcbrvaa6cnLk65+I33EHDw2IEwwzez6n i1Af7VdkYJfz7O3xwqZRC/lIv6ICmXg/3Xs08E+ybWWTVjly28wleOJoSflVoQKe ABh7ZjEtrT8SWgxacMVkaNqZILDZjKFEvnvs4Y9G7mpSet9Zx9ZUysJyEwOKuxDu HpTkB9Lkh7Ow5QNGRtR04VdE9GRnoWxK0+Qxul1eMlhL+dwUmVMPEJ5GOd2Je4GU LjPmKyM92kq+tlz9Jk3Zs0oAU00m9fW7OchuCRUFsUG4I0t6gQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFHRtWk2rhGqcQqgf1VGziWSR4Fw6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9i MjIxNzM2Ni05Mzc0LTQxOGUtYjUwMC1kNmIyYmQyYjU3NTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2IyMjE3MzY2LTkzNzQtNDE4ZS1i NTAwLWQ2YjJiZDJiNTc1OS9iMjIxNzM2Ni05Mzc0LTQxOGUtYjUwMC1kNmIyYmQy YjU3NTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXu1gDBAKCDDAwDgQCAAIwCAMGACYC+DIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIazNvKSoIBpx/dyFif0Jg1vPWGVr8v/up42hbStsHdb1BlVCpR5ekiU ixYeKRBogUmwLtw5tLfFOdE+HkdBidkhR79mRhmds9mbK6ggMfJTwg2aGwcpImbS gaNEKb7Fr+LRKiGNGjmhxa00PTXZreruJNJXQ3/IhqaivX5ekdTAKx8P85LRb79D LAHlr0NJodH0GajD56eyg7t1Thwn+GsogdFi/ezIcVRzgoCUfB6RsnxdoHuxrheJ vCjVQvQqqeqDTpORVQa+nIs5NTawRAHGMpcmbc3yxKDn1q4yithYB/sjLfrGbEUR nd7aY1EYctFLE+xRLO8fE4NHYmsoL+8= -----END CERTIFICATE-----Generated at Tue Nov 4 20:03:18 2025 by rpki-client