$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer File: bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer (raw, json) Hash identifier: 8Gh9a6EMuUhLBEJh8eZXCEs1gBhZS/Zl4kzyF5zxwn8= Subject key identifier: 2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584B77794EEBAEC4FD2C0286FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 17:33:19 +0000 Certificate not after: Wed 10 Feb 2027 19:03:31 +0000 Subordinate resources: AS: 401384 IP: 142.249.153.0/24 IP: 2602:f7e0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:79:4e:eb:ae:c4:fd:2c:02:86:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 9 17:33:19 2025 GMT Not After : Feb 10 19:03:31 2027 GMT Subject: CN=bcef91a5-9f6b-4911-9826-8aaa385bb35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:09:01:44:0e:61:cf:c6:13:4e:81:e3:ed: 21:c2:40:a8:fa:5d:c5:77:a7:f3:3c:a2:09:35:60: eb:5c:0b:88:92:f0:e7:57:ab:9e:4b:e6:b5:3b:dc: 8a:12:f4:5b:27:63:bb:a3:2b:90:47:76:0e:35:a7: a8:47:3f:c1:5e:28:0e:f6:d6:42:93:de:d8:28:2a: 76:1f:81:a6:c1:a8:5c:ac:dc:80:cc:05:8e:53:c4: 1d:e8:0c:e3:50:ed:bd:6e:3e:42:79:40:ab:57:97: 9a:97:21:c7:fd:25:44:87:c7:d0:fa:95:0d:18:1d: ea:6b:f3:36:6e:66:49:39:05:44:93:7a:50:4b:c8: 7e:df:3f:bd:cc:3e:c4:64:f1:03:8c:d0:c5:21:f7: 31:bf:c4:3d:42:62:c9:d8:44:30:cd:5c:c6:2c:13: 97:26:0e:b4:a5:be:ba:29:58:e4:7e:bc:95:32:24: d8:80:75:de:67:cd:48:ed:20:cf:e6:b7:c5:4f:ad: 51:8d:1d:82:f7:50:da:de:f1:ff:91:4e:8a:c6:8f: c6:38:3a:24:f3:81:87:4d:99:0c:81:07:78:eb:95: b8:bc:7b:7f:01:ae:86:ac:77:75:d4:55:77:3f:4e: ee:fe:6b:24:1f:2b:6c:09:cf:99:53:55:90:9d:f8: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 142.249.153.0/24 IPv6: 2602:f7e0::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401384 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:64:e3:f0:55:9b:7e:7c:fb:1c:e1:59:36:aa:be:73:82:5a: 6a:e6:3a:e8:d6:cb:f6:d9:5f:b6:00:73:ae:cd:67:63:40:9e: 2e:11:1e:48:97:5b:b1:de:50:5d:5d:71:ff:c7:49:33:9f:58: a3:da:09:3f:bd:ff:54:51:48:b3:2c:59:ca:c7:d7:f7:20:83: fb:fc:42:24:db:f7:c2:87:27:fd:1f:ac:61:74:cf:7b:d5:f4: ee:27:ac:3d:45:08:b4:c5:d7:f3:47:b2:60:80:77:57:dc:3b: 13:fa:3b:b9:9e:e0:4b:c0:2b:0e:33:1f:1e:ef:eb:aa:a9:c3: 4a:8a:2f:43:1c:46:45:fe:0e:ff:9e:f7:48:21:67:de:35:76: 4b:d1:c2:0b:ea:e1:07:12:5c:0e:5d:7f:eb:35:c1:28:41:45: 02:d4:a0:34:8f:5a:82:be:92:a4:9f:77:1f:64:10:2b:5f:07: df:f9:2c:9d:39:a4:6f:e6:8a:1f:c4:ee:99:8b:8e:8d:b3:33: e0:f2:01:c0:27:d2:7a:43:c6:db:e2:66:8a:1d:40:fc:fb:1e: 00:8d:52:d6:06:9b:60:02:f0:0e:f1:4c:e8:30:ed:88:56:4c: be:c4:22:e3:08:34:3f:55:b4:f3:71:90:af:45:6c:15:65:b6: 27:4d:c2:f6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEt3eU7rrsT9LAKG/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MTAwOTE3MzMxOVoXDTI3MDIxMDE5MDMzMVowLzEtMCsGA1UEAxMk YmNlZjkxYTUtOWY2Yi00OTExLTk4MjYtOGFhYTM4NWJiMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAgJAUQOYc/GE06B4+0hwkCo+l3Fd6fzPKIJ NWDrXAuIkvDnV6ueS+a1O9yKEvRbJ2O7oyuQR3YONaeoRz/BXigO9tZCk97YKCp2 H4GmwahcrNyAzAWOU8Qd6AzjUO29bj5CeUCrV5ealyHH/SVEh8fQ+pUNGB3qa/M2 bmZJOQVEk3pQS8h+3z+9zD7EZPEDjNDFIfcxv8Q9QmLJ2EQwzVzGLBOXJg60pb66 KVjkfryVMiTYgHXeZ81I7SDP5rfFT61RjR2C91Da3vH/kU6Kxo/GODok84GHTZkM gQd465W4vHt/Aa6GrHd11FV3P07u/mskHytsCc+ZU1WQnfhvxQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC8W6+nHhHIgW0TX/WjND0urxeoxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9i Y2VmOTFhNS05ZjZiLTQ5MTEtOTgyNi04YWFhMzg1YmIzNWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2JjZWY5MWE1LTlmNmItNDkxMS05 ODI2LThhYWEzODViYjM1Yy9iY2VmOTFhNS05ZjZiLTQ5MTEtOTgyNi04YWFhMzg1 YmIzNWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACO+ZkwDgQCAAIwCAMGBCYC9+AAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYf6DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFZOPwVZt+fPsc4Vk2qr5zglpq 5jro1sv22V+2AHOuzWdjQJ4uER5Il1ux3lBdXXH/x0kzn1ij2gk/vf9UUUizLFnK x9f3IIP7/EIk2/fChyf9H6xhdM971fTuJ6w9RQi0xdfzR7JggHdX3DsT+ju5nuBL wCsOMx8e7+uqqcNKii9DHEZF/g7/nvdIIWfeNXZL0cIL6uEHElwOXX/rNcEoQUUC 1KA0j1qCvpKkn3cfZBArXwff+SydOaRv5oofxO6Zi46NszPg8gHAJ9J6Q8bb4maK HUD8+x4AjVLWBptgAvAO8UzoMO2IVky+xCLjCDQ/VbTzcZCvRWwVZbYnTcL2 -----END CERTIFICATE-----Generated at Mon Oct 20 04:15:36 2025 by rpki-client