$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a.cer File: 2f9ba919-b6ef-456f-b272-bb7d311a635a.cer (raw, json) Hash identifier: Sn3mPHhAb4jg5lGtpw8ryUHIVg9RynrUuPYz4Sd+05M= Subject key identifier: CA:51:AF:A4:A5:ED:FA:86:BA:B9:31:B7:3D:41:6E:63:42:A2:EE:72 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B407A15C868121F126FBAF440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 20 Sep 2025 00:45:25 +0000 Certificate not after: Fri 24 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 25769 IP: 64.235.64.0/19 IP: 66.219.0.0/20 IP: 167.94.84.0/22 IP: 192.110.216.0/22 IP: 192.171.13.0/24 IP: 199.119.208.0/22 IP: 209.177.77.0/24 IP: 2604:8500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:7a:15:c8:68:12:1f:12:6f:ba:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 20 00:45:25 2025 GMT Not After : Dec 24 01:45:25 2027 GMT Subject: CN=2f9ba919-b6ef-456f-b272-bb7d311a635a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cc:13:7f:8e:a8:ba:09:27:50:e9:42:2c:e2: 96:82:18:11:d0:af:e6:cb:a8:e1:7e:5a:ac:44:c6: 13:1a:71:d6:01:f7:ed:10:51:c4:2b:f9:39:18:61: d2:56:58:a6:e0:68:d1:46:02:60:77:27:7c:4c:95: 7e:2c:d8:ec:1c:4e:7b:2f:ba:d0:38:b0:9c:61:37: 5e:a9:e6:29:d3:e9:d1:9a:f2:6d:7e:e3:7a:9d:1b: 82:70:69:db:ef:9c:80:6a:18:8d:ea:fd:88:c9:6e: b9:66:f5:90:04:91:64:78:86:9a:46:0d:3a:5b:7c: ac:98:b5:de:44:f5:7a:2d:7a:2b:ad:ca:2b:ff:3c: 2d:2e:48:4a:9a:16:e1:50:9f:4f:a4:11:07:a0:72: 66:2c:ff:df:94:bc:c5:94:7e:91:98:7c:cb:b5:89: 48:30:c1:22:a0:7c:e6:d2:10:1b:b0:27:e2:ac:fd: 72:0b:53:5a:67:1b:05:a3:01:cb:23:e6:d2:0b:42: 3c:5d:ee:15:c0:b8:e2:c6:7f:e7:11:be:c8:a2:ef: ec:c4:0f:50:3b:d5:eb:59:3f:43:5a:e9:6a:2f:1e: cf:c6:76:d5:12:c5:18:d2:4a:1e:cb:57:c1:e9:79: e7:8f:72:c0:fc:a8:10:02:f2:02:fa:2a:21:2b:f2: 94:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:51:AF:A4:A5:ED:FA:86:BA:B9:31:B7:3D:41:6E:63:42:A2:EE:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2f9ba919-b6ef-456f-b272-bb7d311a635a/2f9ba919-b6ef-456f-b272-bb7d311a635a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.235.64.0/19 66.219.0.0/20 167.94.84.0/22 192.110.216.0/22 192.171.13.0/24 199.119.208.0/22 209.177.77.0/24 IPv6: 2604:8500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25769 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:38:72:79:b2:22:ed:99:be:24:0f:65:7d:7c:0f:b1:da:39: 7a:33:7f:cd:49:fa:04:77:13:cb:15:d0:bb:be:19:3a:5e:1f: 28:5d:02:34:b0:ce:29:77:8e:ec:93:1f:2c:e4:e2:a9:4d:fe: ff:9e:96:a1:fc:eb:b4:b4:68:d7:1d:aa:bb:e9:34:c6:b7:a6: 07:82:63:db:83:4a:f4:86:20:b7:b4:44:ec:f7:72:ef:4d:0e: f5:5a:4f:47:45:f2:91:35:e3:ed:80:92:3e:f5:5e:c6:48:dc: 32:07:75:90:dc:b2:fb:9f:8f:64:0c:bb:15:ef:42:be:36:87: 30:18:80:7d:22:63:ed:72:03:af:1b:d2:3d:65:25:c0:21:7f: 00:a8:46:48:2f:78:6e:a3:96:7b:d1:9c:34:23:0c:57:e0:8c: 23:14:cd:fb:56:07:bd:03:45:80:7c:2d:df:44:0b:8e:d2:f2: 83:61:df:6d:95:38:04:11:70:83:d7:7d:f3:eb:81:83:4c:64: 35:de:39:37:c3:f2:2f:f3:7d:de:73:4a:c4:91:86:89:a3:94: d2:dd:a1:79:9e:aa:ad:07:9d:32:94:e0:e4:45:03:22:b3:c0: a9:af:0b:23:0f:fb:cb:c7:78:85:9b:33:99:6a:20:58:23:f3: c5:8c:61:81 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEtAehXIaBIfEm+69EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkyMDAwNDUyNVoXDTI3MTIyNDAxNDUyNVowLzEtMCsGA1UEAxMk MmY5YmE5MTktYjZlZi00NTZmLWIyNzItYmI3ZDMxMWE2MzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMwTf46ougknUOlCLOKWghgR0K/my6jhflqs RMYTGnHWAfftEFHEK/k5GGHSVlim4GjRRgJgdyd8TJV+LNjsHE57L7rQOLCcYTde qeYp0+nRmvJtfuN6nRuCcGnb75yAahiN6v2IyW65ZvWQBJFkeIaaRg06W3ysmLXe RPV6LXorrcor/zwtLkhKmhbhUJ9PpBEHoHJmLP/flLzFlH6RmHzLtYlIMMEioHzm 0hAbsCfirP1yC1NaZxsFowHLI+bSC0I8Xe4VwLjixn/nEb7Iou/sxA9QO9XrWT9D WulqLx7PxnbVEsUY0koey1fB6Xnnj3LA/KgQAvIC+iohK/KUcQIDAQABo4IETTCC BEkwHQYDVR0OBBYEFMpRr6Sl7fqGurkxtz1BbmNCou5yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y ZjliYTkxOS1iNmVmLTQ1NmYtYjI3Mi1iYjdkMzExYTYzNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzJmOWJhOTE5LWI2ZWYtNDU2Zi1i MjcyLWJiN2QzMTFhNjM1YS8yZjliYTkxOS1iNmVmLTQ1NmYtYjI3Mi1iYjdkMzEx YTYzNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAVA60ADBARC2wADBAKnXlQDBALAbtgDBADAqw0D BALHd9ADBADRsU0wDQQCAAIwBwMFACYEhQAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICZKkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMThyebIi7Zm+JA9lfXwPsdo5ejN/zUn6BHcTyxXQu74Z Ol4fKF0CNLDOKXeO7JMfLOTiqU3+/56WofzrtLRo1x2qu+k0xremB4Jj24NK9IYg t7RE7Pdy700O9VpPR0XykTXj7YCSPvVexkjcMgd1kNyy+5+PZAy7Fe9CvjaHMBiA fSJj7XIDrxvSPWUlwCF/AKhGSC94bqOWe9GcNCMMV+CMIxTN+1YHvQNFgHwt30QL jtLyg2HfbZU4BBFwg9d98+uBg0xkNd45N8PyL/N93nNKxJGGiaOU0t2heZ6qrQed MpTg5EUDIrPAqa8LIw/7y8d4hZszmWogWCPzxYxhgQ== -----END CERTIFICATE-----Generated at Mon Oct 20 02:19:19 2025 by rpki-client