$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer File: c69aff30-4786-431c-90e8-aaf78cc64cbe.cer (raw, json) Hash identifier: ALV7LLQcl4URqhmZr0wgeq0qjJpVcT2r6iA8N1ld4e8= Subject key identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584B7A0B6D0DD68E3DB3E43BE900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 15:39:20 +0000 Certificate not after: Sat 17 Jul 2027 12:45:34 +0000 Subordinate resources: IP: 128.254.228.0/22 IP: 142.248.196.0/22 IP: 162.245.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0b:6d:0d:d6:8e:3d:b3:e4:3b:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 10 15:39:20 2025 GMT Not After : Jul 17 12:45:34 2027 GMT Subject: CN=c69aff30-4786-431c-90e8-aaf78cc64cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:a3:83:b2:37:61:6b:bf:33:28:de:db:90: e2:f3:ab:33:1d:4a:6a:9d:36:e4:58:eb:51:95:49: 9e:d2:2c:81:c7:55:ee:64:0d:be:96:23:c5:4e:89: 59:dc:45:64:9a:5f:1b:73:33:01:93:9a:b1:15:f1: 77:e3:2e:a2:d4:e9:d7:78:df:b1:b8:6a:59:ed:25: a2:07:ee:90:2f:1a:76:df:e6:ea:3d:47:f2:ae:49: 31:cb:bc:8c:22:fa:36:1b:3c:22:4e:12:b4:33:d9: b3:2c:f9:00:8e:75:5a:3c:3c:e2:f3:94:1e:0b:32: 63:9d:e5:ec:28:7e:44:b7:7a:7a:94:b4:85:06:d0: c5:c8:a4:ef:e4:91:45:10:47:77:2c:f0:e0:c7:5d: e5:7d:ff:a6:4f:c6:87:0d:03:dd:df:81:71:7e:94: a3:08:18:2d:7d:a2:e3:04:b2:0b:f8:c9:3e:4e:4f: 96:9b:06:ac:2b:62:17:a9:a3:d7:75:53:ac:dd:ff: bd:9d:50:7b:1c:8e:26:36:3a:10:9c:64:6a:b2:13: c8:dd:f2:3d:a0:27:14:03:b8:33:95:e1:03:e6:d0: 9c:e7:16:d1:05:fe:47:d8:21:f1:6b:11:09:41:90: 4a:ba:4b:a2:ae:08:82:db:93:c5:da:a6:94:37:02: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 128.254.228.0/22 142.248.196.0/22 162.245.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3d:15:ae:b6:42:a5:dc:f4:fc:05:b5:6c:d9:1d:17:15:1e: 12:0d:e4:45:ff:4e:2a:ae:69:75:fa:1a:fc:8d:26:02:52:ec: 60:e8:d7:e2:21:cf:06:c8:30:58:51:67:5b:1b:12:d5:87:50: 56:7b:6c:25:2b:0b:4b:3a:e0:04:f2:8d:95:0b:d8:ba:3e:f0: 57:e5:66:9a:07:8a:e0:50:21:07:d3:1e:97:69:f9:9b:b0:1f: ef:19:94:84:cd:2b:9c:af:18:fe:4c:4e:c3:eb:d1:b2:bc:80: 3c:5b:5b:81:7d:7e:91:b7:5e:10:91:06:b8:4c:84:4b:d0:45: a1:3d:10:2d:a5:92:89:c1:66:54:5e:e0:e9:cd:c2:85:98:a9: ff:e2:bd:59:10:8b:e2:27:21:32:bb:52:c2:3d:35:2d:75:0b: e0:6e:32:6f:6b:f9:62:e4:4d:f1:06:da:a2:f4:cd:67:45:95: 94:3e:3e:8f:8b:a8:c0:94:f0:5c:73:a3:79:a6:cc:12:0f:51: 24:77:18:69:70:5e:c3:21:66:56:5a:a7:00:2e:61:35:7d:2b: 35:64:ce:9f:1f:af:5f:b6:cb:5d:d6:9e:7a:84:6d:d9:5a:e3: c2:d6:88:11:57:b3:12:0c:5f:4a:1b:a9:7a:19:0d:50:82:5d: aa:c2:d5:cd -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEt6C20N1o49s+Q76QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MTAxMDE1MzkyMFoXDTI3MDcxNzEyNDUzNFowLzEtMCsGA1UEAxMk YzY5YWZmMzAtNDc4Ni00MzFjLTkwZTgtYWFmNzhjYzY0Y2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbujg7I3YWu/Myje25Di86szHUpqnTbkWOtR lUme0iyBx1XuZA2+liPFTolZ3EVkml8bczMBk5qxFfF34y6i1OnXeN+xuGpZ7SWi B+6QLxp23+bqPUfyrkkxy7yMIvo2GzwiThK0M9mzLPkAjnVaPDzi85QeCzJjneXs KH5Et3p6lLSFBtDFyKTv5JFFEEd3LPDgx13lff+mT8aHDQPd34FxfpSjCBgtfaLj BLIL+Mk+Tk+WmwasK2IXqaPXdVOs3f+9nVB7HI4mNjoQnGRqshPI3fI9oCcUA7gz leED5tCc5xbRBf5H2CHxaxEJQZBKukuirgiC25PF2qaUNwK13wIDAQABo4IECzCC BAcwHQYDVR0OBBYEFOEK5tWJPgGMhfiBq/sz/2CjNC9mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j NjlhZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3OGNjNjRjYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M2OWFmZjMwLTQ3ODYtNDMxYy05 MGU4LWFhZjc4Y2M2NGNiZS9jNjlhZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3OGNj NjRjYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKA/uQDBAKO+MQDBAKi9WQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcT0V rrZCpdz0/AW1bNkdFxUeEg3kRf9OKq5pdfoa/I0mAlLsYOjX4iHPBsgwWFFnWxsS 1YdQVntsJSsLSzrgBPKNlQvYuj7wV+VmmgeK4FAhB9Mel2n5m7Af7xmUhM0rnK8Y /kxOw+vRsryAPFtbgX1+kbdeEJEGuEyES9BFoT0QLaWSicFmVF7g6c3ChZip/+K9 WRCL4ichMrtSwj01LXUL4G4yb2v5YuRN8QbaovTNZ0WVlD4+j4uowJTwXHOjeabM Eg9RJHcYaXBewyFmVlqnAC5hNX0rNWTOnx+vX7bLXdaeeoRt2VrjwtaIEVezEgxf ShupehkNUIJdqsLVzQ== -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:17 2025 by rpki-client