$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5.cer File: 605a4857-c047-4a96-8bd5-b63092db11e5.cer (raw, json) Hash identifier: p8UoRnXKNKSn2dAHYhyZtIYEhG5XDg3fCkwq7oRK4cU= Subject key identifier: 38:C5:AA:A0:57:A8:2F:91:DD:F1:B2:E4:E2:10:BC:E1:4C:86:6D:29 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B77A181B43793488785471600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/605a4857-c047-4a96-8bd5-b63092db11e5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 18:54:19 +0000 Certificate not after: Sat 30 Jan 2027 09:54:29 +0000 Subordinate resources: AS: 401407 IP: 142.249.125.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:a1:81:b4:37:93:48:87:85:47:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 9 18:54:19 2025 GMT Not After : Jan 30 09:54:29 2027 GMT Subject: CN=605a4857-c047-4a96-8bd5-b63092db11e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:71:9b:da:f1:b8:50:ff:51:e5:df:d5:be: 39:b6:ce:39:65:cf:64:60:e4:a9:76:7c:ae:15:07: 1e:a4:e4:5c:f5:d2:17:66:9c:be:4d:dd:6a:a8:0e: 88:6d:05:4c:ce:02:a1:35:71:74:d9:a9:71:a8:97: 8f:76:e5:c3:ef:4c:79:ce:b0:12:a4:e9:97:0a:62: 7c:65:94:9e:ab:d5:6e:63:24:e2:9f:89:bb:b8:a5: 97:d8:fc:8a:00:19:52:f7:b4:1a:ee:34:ac:a7:32: 33:53:d6:46:9c:a6:f1:40:50:93:27:64:56:16:70: f8:4b:70:09:07:ba:ab:5a:09:6e:76:bb:95:90:4a: db:9c:4f:45:33:bb:7a:51:6c:2c:af:01:76:bf:b6: e4:2f:77:f8:c4:ea:ed:07:59:cb:5d:63:5a:fb:58: a9:80:8e:a8:1b:8f:ff:af:ee:6d:15:6e:29:56:c8: 2f:cd:e6:15:73:13:f8:87:19:2c:1d:61:dd:f0:42: 31:05:39:2b:45:03:61:f1:ab:7b:78:b4:df:cb:0b: 65:c6:73:41:89:6c:db:3c:13:9b:ff:4b:c2:2a:30: ac:aa:69:5d:67:38:6d:b4:dc:19:45:e8:f2:11:a1: 97:ff:29:c9:02:a5:4a:9f:bd:10:45:95:ab:45:31: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C5:AA:A0:57:A8:2F:91:DD:F1:B2:E4:E2:10:BC:E1:4C:86:6D:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/605a4857-c047-4a96-8bd5-b63092db11e5/605a4857-c047-4a96-8bd5-b63092db11e5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 142.249.125.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401407 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:48:fd:85:f7:93:01:d3:bb:ec:2e:09:3b:a6:06:b1:3d:3d: 01:7f:32:89:15:9c:f5:38:c3:24:96:b3:50:cf:8f:4a:0e:a2: e5:85:dc:0e:a9:e1:57:53:6f:f5:3b:a3:70:e6:18:a5:e9:bf: 97:ec:0e:3a:fd:e5:c6:9b:5f:f6:f9:be:26:fe:ff:8e:2b:ce: 27:36:aa:83:d6:af:56:d3:08:09:ab:8b:14:1b:32:18:b9:67: dd:df:d8:8b:6a:ab:c5:2f:87:a1:64:25:e5:6d:e2:ad:1d:7a: f3:9c:38:e3:fe:1a:9e:09:e5:80:b6:68:db:26:98:cf:dc:f0: 00:58:49:6b:d4:92:88:93:5e:c3:ec:e5:ca:28:6f:b6:7e:85: e2:fb:f7:bc:bc:b1:18:f9:12:ea:14:84:46:b6:a9:b7:67:72: 5d:ff:13:d4:9b:eb:a1:66:46:0d:4e:b6:28:08:63:a4:95:f4: 2f:23:ce:0c:0d:e8:6e:95:a4:1d:b4:e5:67:96:4f:06:fa:ae: 86:3e:71:33:d4:71:e7:09:82:78:a4:70:78:83:40:8f:cd:06: 35:ea:25:12:a6:81:2b:28:1e:89:a7:80:1c:4f:ed:33:43:86: 40:ce:95:72:f6:4b:1f:e1:42:f0:7c:08:17:3e:9e:e5:60:51: bb:a1:37:69 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEt3oYG0N5NIh4VHFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAwOTE4NTQxOVoXDTI3MDEzMDA5NTQyOVowLzEtMCsGA1UEAxMk NjA1YTQ4NTctYzA0Ny00YTk2LThiZDUtYjYzMDkyZGIxMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Zxm9rxuFD/UeXf1b45ts45Zc9kYOSpdnyu FQcepORc9dIXZpy+Td1qqA6IbQVMzgKhNXF02alxqJePduXD70x5zrASpOmXCmJ8 ZZSeq9VuYyTin4m7uKWX2PyKABlS97Qa7jSspzIzU9ZGnKbxQFCTJ2RWFnD4S3AJ B7qrWgludruVkErbnE9FM7t6UWwsrwF2v7bkL3f4xOrtB1nLXWNa+1ipgI6oG4// r+5tFW4pVsgvzeYVcxP4hxksHWHd8EIxBTkrRQNh8at7eLTfywtlxnNBiWzbPBOb /0vCKjCsqmldZzhttNwZRejyEaGX/ynJAqVKn70QRZWrRTHmNQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDjFqqBXqC+R3fGy5OIQvOFMhm0pMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82 MDVhNDg1Ny1jMDQ3LTRhOTYtOGJkNS1iNjMwOTJkYjExZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzYwNWE0ODU3LWMwNDctNGE5Ni04 YmQ1LWI2MzA5MmRiMTFlNS82MDVhNDg1Ny1jMDQ3LTRhOTYtOGJkNS1iNjMwOTJk YjExZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+X0wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh//MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGRI/YX3kwHTu+wuCTumBrE9PQF/MokVnPU4wySWs1DPj0oO ouWF3A6p4VdTb/U7o3DmGKXpv5fsDjr95cabX/b5vib+/44rzic2qoPWr1bTCAmr ixQbMhi5Z93f2Itqq8Uvh6FkJeVt4q0devOcOOP+Gp4J5YC2aNsmmM/c8ABYSWvU koiTXsPs5coob7Z+heL797y8sRj5EuoUhEa2qbdncl3/E9Sb66FmRg1OtigIY6SV 9C8jzgwN6G6VpB205WeWTwb6roY+cTPUcecJgnikcHiDQI/NBjXqJRKmgSsoHomn gBxP7TNDhkDOlXL2Sx/hQvB8CBc+nuVgUbuhN2k= -----END CERTIFICATE-----Generated at Mon Oct 20 03:51:35 2025 by rpki-client