$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer File: 0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer (raw, json) Hash identifier: k5yN3RuWBrPPpohuRX3RNKagTKASYRrHgVq10Ta7Cb8= Subject key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Authority key identifier: FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 Certificate issuer: /CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Certificate serial: 010D0C9F4328584B8916D4D9E7B3034FB383C8E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Thu 16 Oct 2025 00:59:27 +0000 Certificate not after: Wed 19 Jan 2028 01:59:27 +0000 Subordinate resources: AS: 6642 AS: 396050 AS: 401386 IP: 23.135.220.0/24 IP: 142.249.112.0/22 IP: 2602:f7dc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:16:d4:d9:e7:b3:03:4f:b3:83:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a9dcf-4448-45ff-8ea6-d13be97d91a2 Validity Not Before: Oct 16 00:59:27 2025 GMT Not After : Jan 19 01:59:27 2028 GMT Subject: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:75:8a:3f:c4:d2:a5:83:a7:0a:d7:0c:13: 2c:e0:95:45:dc:2c:ed:df:87:1e:0a:bb:6d:c4:42: 37:19:d8:1d:d7:ee:c3:9c:4b:65:f5:80:7d:07:a2: f6:94:f2:0d:cb:c7:0d:80:df:56:5a:04:04:2a:55: f8:a9:49:4e:59:27:78:46:e3:62:4e:75:aa:99:62: e8:31:ba:5e:33:77:b6:f4:2f:cd:86:a7:a9:38:29: dc:06:8e:07:a1:d9:ea:b9:da:ed:b2:6c:12:f1:56: 55:87:37:41:ce:5b:18:33:80:3b:ad:4d:75:c4:bc: c4:61:5d:b8:7d:df:46:cf:22:07:a7:a7:c8:89:28: 61:8f:9f:b0:b3:09:f4:07:06:41:57:ba:1c:a6:07: 37:30:86:0f:9c:7c:61:51:21:c3:f1:a8:3d:eb:3e: f8:af:20:e1:db:4a:3a:28:56:91:2c:3e:68:32:e0: c9:85:32:f8:98:5d:20:e6:69:60:b5:50:4f:74:62: 30:a2:56:cb:82:cd:34:59:4a:dc:00:02:24:c0:bc: be:8f:89:88:52:92:b8:73:b2:35:99:df:eb:1f:6e: 3c:f6:a6:a0:fb:2b:91:df:2c:ce:d1:14:56:27:3d: 5c:a1:4f:0d:d3:16:fd:2c:5a:b8:54:45:f8:7a:f8: bc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl X509v3 Authority Key Identifier: keyid:FB:E2:27:F9:FE:25:D0:8B:80:08:AC:FA:67:0D:8D:CF:71:68:0C:C3 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer sbgp-ipAddrBlock: critical IPv4: 23.135.220.0/24 142.249.112.0/22 IPv6: 2602:f7dc::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6642 396050 401386 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:07:06:7f:b9:cc:ae:15:82:a7:27:0b:1e:28:fa:e1:31:4a: 34:fa:a7:fb:4b:dd:19:bb:6c:08:b0:36:b4:8b:6c:bd:cb:61: dc:07:03:36:14:80:85:a7:34:c2:38:0a:01:df:40:e2:5a:8e: 97:cd:00:46:e8:c4:58:17:27:2c:b0:05:24:0f:0c:ed:3b:1d: 2a:d7:3e:d1:54:b6:e1:07:cb:3c:82:5c:24:c4:e5:50:f8:b4: fd:cc:ce:3d:92:e7:d6:09:eb:9f:54:d6:82:6c:b3:bc:71:3a: 97:cf:0f:0e:c5:33:d2:ab:85:eb:16:9f:59:b7:29:49:b4:59: 57:c1:2b:f8:3a:98:24:c3:e0:bd:72:2e:b2:cd:4f:7f:bc:7f: 49:89:be:02:02:c4:11:03:85:78:33:7b:d1:9b:77:dc:cc:5b: 13:a2:0e:dd:9e:97:14:72:ed:d2:be:0b:0d:05:56:ed:02:d3: d8:6c:a5:dc:50:74:47:89:85:c1:a9:54:bb:af:8b:55:c9:08: ff:43:5f:84:47:bc:82:1d:66:85:80:c9:ac:28:e6:3b:17:4b: 65:f5:43:33:8a:d8:42:b5:3f:1b:1d:fc:ec:f6:ff:6a:85:63: e1:72:02:33:16:19:7d:eb:08:9a:2b:53:53:0f:40:d6:45:a3: 72:08:01:86 -----BEGIN CERTIFICATE----- MIIG3DCCBcSgAwIBAgIUAQ0Mn0MoWEuJFtTZ57MDT7ODyOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5N2Q5 MWEyMB4XDTI1MTAxNjAwNTkyN1oXDTI4MDExOTAxNTkyN1owPTE7MDkGA1UEAxMy MGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVlMzRlM2JmZjNjYjUxNmU1 NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoXWKP8TSpYOnCtcM EyzglUXcLO3fhx4Ku23EQjcZ2B3X7sOcS2X1gH0HovaU8g3Lxw2A31ZaBAQqVfip SU5ZJ3hG42JOdaqZYugxul4zd7b0L82Gp6k4KdwGjgeh2eq52u2ybBLxVlWHN0HO WxgzgDutTXXEvMRhXbh930bPIgenp8iJKGGPn7CzCfQHBkFXuhymBzcwhg+cfGFR IcPxqD3rPvivIOHbSjooVpEsPmgy4MmFMviYXSDmaWC1UE90YjCiVsuCzTRZStwA AiTAvL6PiYhSkrhzsjWZ3+sfbjz2pqD7K5HfLM7RFFYnPVyhTw3TFv0sWrhURfh6 +LzBAgMBAAGjggPgMIID3DAdBgNVHQ4EFgQUqy74jyR0n1oSDfreZ8kY5McQxT4w ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTI5MDhi M2UyODUxNGEvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTI5MDhiM2UyODUxNGEv MC9BQjJFRjg4RjI0NzQ5RjVBMTIwREZBREU2N0M5MThFNEM3MTBDNTNFLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIx Zi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2 LWQxM2JlOTdkOTFhMi9jZDlhOWRjZi00NDQ4LTQ1ZmYtOGVhNi1kMTNiZTk3ZDkx YTIuY3JsMB8GA1UdIwQYMBaAFPviJ/n+JdCLgAis+mcNjc9xaAzDMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1iYjFmLTQ4YjYt YmYzMi1jOTQ5MjI4NmYxOTUvY2Q5YTlkY2YtNDQ0OC00NWZmLThlYTYtZDEzYmU5 N2Q5MWEyLmNlcjA1BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEABeH3AMEAo75 cDAOBAIAAjAIAwYEJgL33AAwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICGfICAwYL EgIDBh/qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBABoHBn+5zK4VgqcnCx4o+uExSjT6p/tL3Rm7bAiwNrSL bL3LYdwHAzYUgIWnNMI4CgHfQOJajpfNAEboxFgXJyywBSQPDO07HSrXPtFUtuEH yzyCXCTE5VD4tP3Mzj2S59YJ659U1oJss7xxOpfPDw7FM9KrhesWn1m3KUm0WVfB K/g6mCTD4L1yLrLNT3+8f0mJvgICxBEDhXgze9Gbd9zMWxOiDt2elxRy7dK+Cw0F Vu0C09hspdxQdEeJhcGpVLuvi1XJCP9DX4RHvIIdZoWAyawo5jsXS2X1QzOK2EK1 Pxsd/Oz2/2qFY+FyAjMWGX3rCJorU1MPQNZFo3IIAYY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:59:09 2025 by rpki-client