$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer File: d575d3fa-017d-4991-9edf-39101e5d78b5.cer (raw, json) Hash identifier: wtu6+2yjwrvs9DOSbfwrg5cfULBBJqduimJxcxdJAoI= Subject key identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584BC0509E115C1592FA200C4080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Nov 2025 19:45:20 +0000 Certificate not after: Tue 09 Feb 2027 18:43:36 +0000 Subordinate resources: AS: 401461 IP: 142.249.4.0/22 IP: 2602:f7b4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:50:9e:11:5c:15:92:fa:20:0c:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 4 19:45:20 2025 GMT Not After : Feb 9 18:43:36 2027 GMT Subject: CN=d575d3fa-017d-4991-9edf-39101e5d78b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:dc:76:56:46:f4:02:3f:31:55:95:3a:28: 7c:f8:05:9c:10:b0:2b:fd:c1:c3:7c:df:4d:e9:93: 82:ec:d7:b4:73:e1:86:8a:38:4c:f4:89:21:5a:8c: 6b:fe:e3:21:cb:29:88:c5:c4:05:38:41:05:c6:23: 5e:0f:cd:83:fe:c2:8a:33:3c:c0:fb:62:46:6c:ad: 2b:c9:3c:27:72:38:60:b5:da:ea:f1:ee:a0:7e:a2: b7:c2:82:f1:7a:86:6b:28:6a:d9:84:87:11:46:7b: 1c:c4:0d:36:4e:48:84:b6:7b:0e:f7:92:db:16:c0: 14:dd:ee:c3:f4:77:32:a7:2c:a9:fd:00:45:be:9c: f6:38:3e:bb:9f:50:59:44:e7:44:a9:84:2d:40:6f: c1:54:41:03:df:1e:cf:24:cc:be:f8:f1:b0:e6:d1: 87:2b:32:3f:7b:d0:25:32:30:6c:08:85:18:bb:81: 88:f8:1a:ba:5b:01:72:96:7f:c7:b4:c3:9d:e7:82: 1f:b3:15:8c:74:4f:d7:9a:31:92:34:5a:04:2a:68: 45:61:be:5f:3e:68:b0:af:f9:f7:b9:2f:60:d5:47: 6d:4f:3d:9b:09:e5:12:c0:41:3e:61:ae:df:02:bb: 1a:a2:6a:3f:db:cf:1d:d1:68:c0:eb:67:c7:9e:9b: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 142.249.4.0/22 IPv6: 2602:f7b4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401461 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:95:90:24:16:b2:01:15:7b:a0:a5:cd:6d:3b:7e:ab:67:fd: f4:ab:2b:dc:0f:89:83:c1:ae:75:44:fb:3a:3d:15:98:9c:af: 38:9b:82:cf:53:31:4b:9f:de:29:a1:33:28:9a:cb:28:ec:38: df:f4:6b:8e:a1:ab:3f:4b:2c:42:89:aa:30:2c:e8:c7:c7:d3: 58:bd:05:e5:06:bf:e1:2d:73:4e:de:a1:ff:24:2e:d7:cd:19: 07:13:83:2f:e5:b9:65:f0:61:61:8b:6c:ed:4d:94:ad:98:1a: 3c:86:5e:54:69:b4:de:9f:18:d7:70:b7:93:d6:cd:33:75:e5: e1:f1:0d:43:96:66:a3:9d:3d:2b:c0:33:ef:6d:e9:5d:8d:07: 79:7b:d2:e0:f4:50:2b:b0:de:0f:fc:d8:d6:b6:45:a8:8b:57: 23:a5:bc:78:1f:6f:7c:2e:b4:d8:7a:ab:cf:72:68:69:32:07: e2:bd:06:97:a2:15:f8:05:85:52:40:d4:00:b5:b4:bc:66:f7: 5b:3d:8c:e1:b2:d1:de:c6:29:51:a2:e3:c7:b5:4e:25:07:d3: f5:a6:a2:90:38:61:d9:e5:a9:12:cc:9a:6c:6b:af:9a:b3:20: 3f:16:e7:e8:27:86:21:30:c0:84:13:9b:a4:08:69:63:4c:85: 60:77:e7:e8 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEvAUJ4RXBWS+iAMQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTEwNDE5NDUyMFoXDTI3MDIwOTE4NDMzNlowLzEtMCsGA1UEAxMk ZDU3NWQzZmEtMDE3ZC00OTkxLTllZGYtMzkxMDFlNWQ3OGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio7cdlZG9AI/MVWVOih8+AWcELAr/cHDfN9N 6ZOC7Ne0c+GGijhM9IkhWoxr/uMhyymIxcQFOEEFxiNeD82D/sKKMzzA+2JGbK0r yTwncjhgtdrq8e6gfqK3woLxeoZrKGrZhIcRRnscxA02TkiEtnsO95LbFsAU3e7D 9Hcypyyp/QBFvpz2OD67n1BZROdEqYQtQG/BVEED3x7PJMy++PGw5tGHKzI/e9Al MjBsCIUYu4GI+Bq6WwFyln/HtMOd54IfsxWMdE/XmjGSNFoEKmhFYb5fPmiwr/n3 uS9g1UdtTz2bCeUSwEE+Ya7fArsaomo/288d0WjA62fHnpsINQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMJBjoi5G90BnAMEtUoEssz5Ti38MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k NTc1ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEwMWU1ZDc4YjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Q1NzVkM2ZhLTAxN2QtNDk5MS05 ZWRmLTM5MTAxZTVkNzhiNS9kNTc1ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEwMWU1 ZDc4YjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKO+QQwDgQCAAIwCAMGACYC97QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgNTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAilZAkFrIBFXugpc1tO36rZ/30 qyvcD4mDwa51RPs6PRWYnK84m4LPUzFLn94poTMomsso7Djf9GuOoas/SyxCiaow LOjHx9NYvQXlBr/hLXNO3qH/JC7XzRkHE4Mv5bll8GFhi2ztTZStmBo8hl5UabTe nxjXcLeT1s0zdeXh8Q1DlmajnT0rwDPvbeldjQd5e9Lg9FArsN4P/NjWtkWoi1cj pbx4H298LrTYeqvPcmhpMgfivQaXohX4BYVSQNQAtbS8ZvdbPYzhstHexilRouPH tU4lB9P1pqKQOGHZ5akSzJpsa6+asyA/FufoJ4YhMMCEE5ukCGljTIVgd+fo -----END CERTIFICATE-----Generated at Wed Nov 5 03:53:57 2025 by rpki-client