$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer File: 5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer (raw, json) Hash identifier: DXUM/i/9/jpciK6fppbqp7X3nOjBCT8waIYxY/d1tcI= Subject key identifier: BF:94:2A:F3:BE:BB:86:15:2B:45:37:7C:86:74:0F:BD:50:BC:D7:5F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B7DE51CE9096B06A35B6A7100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 00:45:22 +0000 Certificate not after: Sat 15 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 399858 AS: 401958 IP: 208.93.136.0/22 IP: 216.39.252.0/22 IP: 2604:2060::/32 IP: 2606:b6c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:e5:1c:e9:09:6b:06:a3:5b:6a:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 12 00:45:22 2025 GMT Not After : Jan 15 01:45:22 2028 GMT Subject: CN=5063cd63-15d7-4a40-801a-3f85ef7d09d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:4c:1e:9b:71:09:e2:0e:e6:95:7a:13:a9: 49:87:e9:cd:ab:c0:35:b8:e3:fb:cd:26:7b:7e:b8: 8c:4f:44:61:04:04:ff:30:75:6e:e3:39:ed:0d:77: 36:4d:52:a5:36:33:07:05:d1:75:7d:99:23:04:15: 30:19:47:fe:6d:70:e6:bf:94:c7:2d:76:ab:41:66: 0d:5b:15:a1:ce:23:47:1e:71:f0:b2:a9:b1:25:20: 62:ef:43:99:d5:9e:89:61:fb:6a:a5:c6:e3:37:c9: 2d:96:af:ac:46:a0:e4:cc:77:d9:0e:8d:d0:aa:a4: b7:11:55:56:2c:d0:d6:07:88:ce:24:a1:9f:b7:cf: a2:86:3f:09:61:f4:e2:88:96:b1:95:45:21:5f:bc: 77:5e:5f:38:cc:9e:96:72:a1:64:80:60:48:f7:e7: ba:5b:1c:e5:9e:6f:a7:73:8d:86:ab:ab:bd:2c:a1: 03:75:c5:52:7d:03:b5:7b:a8:88:c9:b9:e0:6e:ab: c4:1c:06:e1:99:fa:25:39:ca:bd:26:02:e4:34:26: 43:c8:90:60:c0:d2:74:ee:75:e4:16:62:fe:d0:ed: e6:8a:12:2b:84:9f:e5:bb:16:40:cc:d6:5c:23:f3: 39:ff:a9:eb:6b:94:18:3a:ea:76:09:9e:e8:f0:e4: 13:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:94:2A:F3:BE:BB:86:15:2B:45:37:7C:86:74:0F:BD:50:BC:D7:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.93.136.0/22 216.39.252.0/22 IPv6: 2604:2060::/32 2606:b6c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399858 401958 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:cc:68:08:38:07:5d:15:b3:97:09:d1:64:7b:c6:17:52:9f: 68:e6:16:7b:81:ea:96:d2:92:34:ef:23:e3:d8:00:a0:e1:f5: 5b:a9:95:d0:7b:df:76:1c:35:f0:95:b3:55:d9:92:12:f0:c9: 0b:6b:ee:c1:da:8e:91:3e:c7:bd:61:4b:98:5b:89:66:06:03: 99:89:03:53:17:3e:96:2e:84:65:96:00:2b:8f:be:ea:8e:83: e2:c7:63:7d:8f:ae:41:fd:02:80:25:cc:32:cd:70:f6:3a:f4: 29:74:37:9a:aa:31:2f:b8:4a:ee:39:80:fd:5e:73:b4:b4:2e: e7:11:01:10:6f:ca:f6:c4:cb:21:a6:ca:73:46:cc:59:9e:57: 3f:3f:ec:55:b7:3e:91:1a:55:90:32:95:16:0d:82:91:0b:8a: 02:1a:b0:12:1f:15:e7:ea:06:cd:d9:99:ca:29:ac:24:64:86: 41:e1:4f:58:51:cd:14:cf:d4:6b:5d:9e:f4:ee:e9:f0:f8:f3: 06:b1:63:59:d6:df:69:d1:44:d4:94:1a:85:b4:c0:a8:9d:2a: ed:73:cd:14:79:16:e7:35:05:80:22:e1:65:7f:b0:ec:45:c3: b9:3d:2e:bf:1d:4a:7d:8f:7d:20:c6:0b:bd:c0:c6:12:52:9b: 91:0e:ac:7d -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEt95RzpCWsGo1tqcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAxMjAwNDUyMloXDTI4MDExNTAxNDUyMlowLzEtMCsGA1UEAxMk NTA2M2NkNjMtMTVkNy00YTQwLTgwMWEtM2Y4NWVmN2QwOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCpMHptxCeIO5pV6E6lJh+nNq8A1uOP7zSZ7 friMT0RhBAT/MHVu4zntDXc2TVKlNjMHBdF1fZkjBBUwGUf+bXDmv5THLXarQWYN WxWhziNHHnHwsqmxJSBi70OZ1Z6JYftqpcbjN8ktlq+sRqDkzHfZDo3QqqS3EVVW LNDWB4jOJKGft8+ihj8JYfTiiJaxlUUhX7x3Xl84zJ6WcqFkgGBI9+e6Wxzlnm+n c42Gq6u9LKEDdcVSfQO1e6iIybngbqvEHAbhmfolOcq9JgLkNCZDyJBgwNJ07nXk FmL+0O3mihIrhJ/luxZAzNZcI/M5/6nra5QYOup2CZ7o8OQTfQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFL+UKvO+u4YVK0U3fIZ0D71QvNdfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 MDYzY2Q2My0xNWQ3LTRhNDAtODAxYS0zZjg1ZWY3ZDA5ZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzUwNjNjZDYzLTE1ZDctNGE0MC04 MDFhLTNmODVlZjdkMDlkMS81MDYzY2Q2My0xNWQ3LTRhNDAtODAxYS0zZjg1ZWY3 ZDA5ZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBIEAgABMAwDBALQXYgDBALYJ/wwFAQCAAIwDgMFACYEIGADBQAm BrbAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwYZ8gIDBiImMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACTM aAg4B10Vs5cJ0WR7xhdSn2jmFnuB6pbSkjTvI+PYAKDh9VupldB733YcNfCVs1XZ khLwyQtr7sHajpE+x71hS5hbiWYGA5mJA1MXPpYuhGWWACuPvuqOg+LHY32PrkH9 AoAlzDLNcPY69Cl0N5qqMS+4Su45gP1ec7S0LucRARBvyvbEyyGmynNGzFmeVz8/ 7FW3PpEaVZAylRYNgpELigIasBIfFefqBs3ZmcoprCRkhkHhT1hRzRTP1GtdnvTu 6fD48waxY1nW32nRRNSUGoW0wKidKu1zzRR5Fuc1BYAi4WV/sOxFw7k9Lr8dSn2P fSDGC73AxhJSm5EOrH0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:52 2025 by rpki-client