$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer File: 43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer (raw, json) Hash identifier: TLuGhvu7j/8nQADyLwIGCwUWTpckwhRTW3o5D6eBD48= Subject key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51 Authority key identifier: BE:BA:88:8B:85:F0:B1:6E:BA:A9:3C:82:C0:A8:13:D2:5B:11:AD:17 Certificate issuer: /CN=565f5435-5cd1-48e4-9cfc-844fcd06efe1 Certificate serial: 010D0C9F4328584B7C7607ADB82009BA5F2CB280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer Manifest: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft caRepository: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sat 11 Oct 2025 12:25:45 +0000 Certificate not after: Fri 14 Jan 2028 13:25:45 +0000 Subordinate resources: AS: 396993 IP: 142.248.20.0/22 IP: 2602:f743::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:76:07:ad:b8:20:09:ba:5f:2c:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=565f5435-5cd1-48e4-9cfc-844fcd06efe1 Validity Not Before: Oct 11 12:25:45 2025 GMT Not After : Jan 14 13:25:45 2028 GMT Subject: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:9e:57:95:de:34:78:44:91:97:21:f5:dd: ee:d8:87:dc:ac:87:cd:eb:63:73:77:a2:61:82:d0: 5f:c1:fc:e1:80:d0:fb:c7:1b:f9:d4:88:f2:97:8d: 08:cc:4e:ec:b7:76:98:19:46:72:12:a6:62:12:01: 44:69:b4:cc:9b:a4:5d:87:68:b7:f6:cc:24:0e:8e: 79:b0:d8:70:a9:f4:24:86:08:f9:40:08:6e:ab:a4: da:5d:63:44:f9:89:8f:d6:90:05:a6:86:0d:12:c7: 4b:e2:15:71:4b:d3:e6:9c:f4:0b:13:b6:8a:35:73: 4a:5b:1b:df:cc:da:4b:43:6c:04:82:f3:00:62:f5: 9f:3f:fc:e0:ab:bd:e7:76:6f:83:b3:79:48:5d:0d: 0b:0f:cd:d0:0c:f7:74:89:4f:ae:73:83:c2:b1:7a: 0d:5a:77:77:96:96:e8:45:39:ce:cf:d1:6c:20:93: 70:90:33:df:88:6a:8b:a3:eb:53:80:b8:4a:1c:b9: 8c:7e:2a:cb:21:cd:1d:43:4e:ad:24:70:26:2e:58: a2:c3:9a:b3:0c:70:f4:ad:1a:a8:d2:79:6c:df:56: 0b:a4:3d:c8:53:ca:77:29:a6:93:a1:30:5b:f9:9b: fa:ef:3b:4d:ef:5f:b2:44:3b:74:9e:9c:0d:6e:49: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl X509v3 Authority Key Identifier: keyid:BE:BA:88:8B:85:F0:B1:6E:BA:A9:3C:82:C0:A8:13:D2:5B:11:AD:17 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer sbgp-ipAddrBlock: critical IPv4: 142.248.20.0/22 IPv6: 2602:f743::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396993 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:89:cf:cd:7f:ed:02:f2:05:fb:43:88:10:4e:01:35:99:17: ed:3f:71:2b:fd:9a:e3:9f:cc:64:82:eb:36:c1:31:88:a8:f1: ba:d1:49:2e:27:33:97:e4:0f:47:d6:f9:64:37:a1:3a:d6:c6: 0e:2a:dc:5e:ad:ba:6f:8d:8b:5c:46:e0:32:03:31:ed:86:f3: 95:82:e8:f6:9d:4c:70:48:6e:91:c0:c4:6d:df:f6:5d:bb:3f: b6:0b:4d:83:ec:fe:02:0b:57:64:a9:88:a0:82:d0:fb:6d:37: cf:f4:d4:f3:6e:28:03:c7:e5:67:38:83:7f:e9:36:f1:eb:51: 51:4f:bd:30:36:d1:30:33:70:e8:1c:48:ff:b2:1c:73:66:80: 57:ef:7f:c6:f5:98:bc:e2:0a:12:ee:c1:3f:86:a8:54:52:1b: 88:1f:1b:92:fd:4d:e8:55:14:47:4c:1d:20:ca:05:5a:a7:81: d1:0d:e2:11:0d:c3:95:fc:5b:7b:9f:00:b1:71:77:78:68:77: ab:08:ca:9b:d7:cb:ce:4b:66:41:d9:f8:b8:18:6a:79:60:ed: e8:1e:58:0c:1e:71:20:b1:36:66:f7:f3:d6:66:60:f8:5b:51: ca:df:84:29:16:26:6e:dc:c3:18:9e:6c:0d:09:ee:e0:91:82: f7:2f:1c:c6 -----BEGIN CERTIFICATE----- MIIGzTCCBbWgAwIBAgIUAQ0Mn0MoWEt8dgetuCAJul8ssoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY1ZjU0MzUtNWNkMS00OGU0LTljZmMtODQ0ZmNkMDZl ZmUxMB4XDTI1MTAxMTEyMjU0NVoXDTI4MDExNDEzMjU0NVowPTE7MDkGA1UEAxMy NDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdhYmZmNDBiYTQyNmEyZTQx ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSZ5Xld40eESRlyH1 3e7Yh9ysh83rY3N3omGC0F/B/OGA0PvHG/nUiPKXjQjMTuy3dpgZRnISpmISAURp tMybpF2HaLf2zCQOjnmw2HCp9CSGCPlACG6rpNpdY0T5iY/WkAWmhg0Sx0viFXFL 0+ac9AsTtoo1c0pbG9/M2ktDbASC8wBi9Z8//OCrved2b4OzeUhdDQsPzdAM93SJ T65zg8Kxeg1ad3eWluhFOc7P0Wwgk3CQM9+Iaouj61OAuEocuYx+KsshzR1DTq0k cCYuWKLDmrMMcPStGqjSeWzfVgukPchTyncpppOhMFv5m/rvO03vX7JEO3SenA1u SQPrAgMBAAGjggPRMIIDzTAdBgNVHQ4EFgQUMGt0Gksyor3rzLTHPbJSxSzPP1Ew ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvMjU4ODZiYzU5MmRlNGIwNTk2NTliYjc5 ZWMwOGJhY2IvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvMjU4ODZiYzU5MmRlNGIwNTk2NTliYjc5ZWMwOGJhY2Iv MC8zMDZCNzQxQTRCMzJBMkJERUJDQ0I0QzczREIyNTJDNTJDQ0YzRjUxLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNi Yy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2Zj LTg0NGZjZDA2ZWZlMS81NjVmNTQzNS01Y2QxLTQ4ZTQtOWNmYy04NDRmY2QwNmVm ZTEuY3JsMB8GA1UdIwQYMBaAFL66iIuF8LFuuqk8gsCoE9JbEa0XMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0xY2JjLTQ3YWIt OTA0ZS00NTM2MWE1NDg3YzMvNTY1ZjU0MzUtNWNkMS00OGU0LTljZmMtODQ0ZmNk MDZlZmUxLmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAo74FDAOBAIA AjAIAwYEJgL3QwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBg7BMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJyJz81/7QLyBftDiBBOATWZF+0/cSv9muOfzGSC6zbBMYio8brRSS4nM5fkD0fW +WQ3oTrWxg4q3F6tum+Ni1xG4DIDMe2G85WC6PadTHBIbpHAxG3f9l27P7YLTYPs /gILV2SpiKCC0PttN8/01PNuKAPH5Wc4g3/pNvHrUVFPvTA20TAzcOgcSP+yHHNm gFfvf8b1mLziChLuwT+GqFRSG4gfG5L9TehVFEdMHSDKBVqngdEN4hENw5X8W3uf ALFxd3hod6sIypvXy85LZkHZ+LgYanlg7egeWAwecSCxNmb389ZmYPhbUcrfhCkW Jm7cwxiebA0J7uCRgvcvHMY= -----END CERTIFICATE-----Generated at Tue Oct 21 01:38:14 2025 by rpki-client