$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7893062-46ce-4869-9adb-238de4dabf1d.cer File: a7893062-46ce-4869-9adb-238de4dabf1d.cer (raw, json) Hash identifier: Kkv/M8SZNoPN5dASuFojAIbr0blZLMcApXJS3QT/3Pk= Subject key identifier: 46:19:D8:DE:F8:9A:05:03:15:CA:83:39:B7:4D:F0:2E:72:DE:85:65 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B80AFCD14D454BBB7E24B7E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7893062-46ce-4869-9adb-238de4dabf1d/a7893062-46ce-4869-9adb-238de4dabf1d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7893062-46ce-4869-9adb-238de4dabf1d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 00:45:23 +0000 Certificate not after: Sun 16 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 158.247.8.0/24 IP: 158.247.62.0 -- 158.247.65.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:af:cd:14:d4:54:bb:b7:e2:4b:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 13 00:45:23 2025 GMT Not After : Jan 16 01:45:23 2028 GMT Subject: CN=a7893062-46ce-4869-9adb-238de4dabf1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:83:fd:c3:92:20:5e:c4:73:e6:63:d2:e3:e9: c8:70:f9:f0:d0:8c:37:16:b1:53:ac:60:4f:97:d1: be:fe:7c:09:6b:67:92:11:e4:b7:df:dc:cc:97:3c: 10:f5:ca:dc:25:f7:04:9c:ae:88:38:93:24:77:22: 71:84:0b:62:25:9f:41:26:27:3f:b0:cc:ff:4a:73: b7:64:e9:e8:38:89:c7:af:77:82:7a:30:aa:47:eb: 03:26:07:4c:5f:44:a0:ba:a0:bc:d6:d8:ce:e9:f2: 07:aa:f4:a6:e1:b0:41:8a:ea:b6:8b:60:a2:a3:70: 97:c7:08:ac:24:1f:33:9c:50:da:fd:8d:ad:c5:e0: 32:98:09:ed:82:36:4d:1e:59:47:6f:14:34:6d:8c: b7:e9:75:4b:06:cf:a5:b5:72:e5:ce:6b:0d:67:cc: cf:1d:85:c2:51:2b:dd:a1:05:f9:96:6e:ba:1f:6f: d4:92:1c:ed:05:6d:ec:ca:fc:4e:f7:ba:80:d3:54: c6:68:34:0c:29:46:4d:6e:39:88:16:58:38:bb:11: 17:ff:5f:69:b9:fe:51:77:3c:5f:71:a5:33:87:73: 57:11:b4:d6:e1:83:8d:69:bd:b9:04:3e:54:2c:fa: 68:8d:fe:76:b6:39:97:42:09:9d:9d:27:67:eb:ec: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:19:D8:DE:F8:9A:05:03:15:CA:83:39:B7:4D:F0:2E:72:DE:85:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7893062-46ce-4869-9adb-238de4dabf1d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7893062-46ce-4869-9adb-238de4dabf1d/a7893062-46ce-4869-9adb-238de4dabf1d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 158.247.8.0/24 158.247.62.0-158.247.65.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7d:c4:5c:ae:8c:b5:06:e7:a8:db:75:f2:dd:47:86:77:07: ba:2c:03:78:41:25:92:bf:d1:db:3b:d5:f8:ab:d5:36:bd:6e: 5a:24:51:ed:e3:fd:40:44:9d:9a:46:bc:be:0e:07:b9:8e:ee: fc:57:dd:95:78:ff:bc:4b:2c:86:af:ff:c2:a0:05:44:6c:3b: 5d:1d:02:61:ef:72:d6:c5:c1:42:23:c7:fe:03:f7:dd:87:e9: bd:60:84:53:b9:f4:00:34:89:73:7c:92:78:35:80:b1:13:8a: a0:f5:bf:9b:79:7f:e7:56:44:69:01:41:13:0c:bc:16:f6:b0: 76:cd:df:de:2f:f6:5e:58:85:67:cd:8e:c4:6e:88:66:2f:49: 5d:e5:da:29:6d:25:4e:1d:26:90:af:9f:34:95:a9:4c:58:e4: 6e:ad:01:7a:d6:60:9e:5f:bc:77:64:bc:71:ff:80:2b:67:cc: ec:6d:85:02:b9:64:a6:f7:14:bd:f8:0b:b2:bb:fc:60:7d:a0: 7a:2c:72:77:76:4f:bc:6f:62:ac:e4:5d:58:ff:5b:d2:9a:12: 40:3f:55:5e:01:1f:d9:59:f8:e8:e6:cf:78:bf:e7:9c:da:3b: da:70:51:92:a0:b1:a7:2d:90:72:3e:c1:74:f9:06:2f:1c:3c: 25:db:76:97 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEuAr80U1FS7t+JLfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAxMzAwNDUyM1oXDTI4MDExNjAxNDUyM1owLzEtMCsGA1UEAxMk YTc4OTMwNjItNDZjZS00ODY5LTlhZGItMjM4ZGU0ZGFiZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioP9w5IgXsRz5mPS4+nIcPnw0Iw3FrFTrGBP l9G+/nwJa2eSEeS339zMlzwQ9crcJfcEnK6IOJMkdyJxhAtiJZ9BJic/sMz/SnO3 ZOnoOInHr3eCejCqR+sDJgdMX0SguqC81tjO6fIHqvSm4bBBiuq2i2Cio3CXxwis JB8znFDa/Y2txeAymAntgjZNHllHbxQ0bYy36XVLBs+ltXLlzmsNZ8zPHYXCUSvd oQX5lm66H2/UkhztBW3syvxO97qA01TGaDQMKUZNbjmIFlg4uxEX/19puf5Rdzxf caUzh3NXEbTW4YONab25BD5ULPpojf52tjmXQgmdnSdn6+y/KQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFEYZ2N74mgUDFcqDObdN8C5y3oVlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h Nzg5MzA2Mi00NmNlLTQ4NjktOWFkYi0yMzhkZTRkYWJmMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2E3ODkzMDYyLTQ2Y2UtNDg2OS05 YWRiLTIzOGRlNGRhYmYxZC9hNzg5MzA2Mi00NmNlLTQ4NjktOWFkYi0yMzhkZTRk YWJmMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBACe9wgwDAMEAZ73PgMEAZ73QDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5 fcRcroy1Bueo23Xy3UeGdwe6LAN4QSWSv9HbO9X4q9U2vW5aJFHt4/1ARJ2aRry+ Dge5ju78V92VeP+8SyyGr//CoAVEbDtdHQJh73LWxcFCI8f+A/fdh+m9YIRTufQA NIlzfJJ4NYCxE4qg9b+beX/nVkRpAUETDLwW9rB2zd/eL/ZeWIVnzY7EbohmL0ld 5dopbSVOHSaQr580lalMWORurQF61mCeX7x3ZLxx/4ArZ8zsbYUCuWSm9xS9+Auy u/xgfaB6LHJ3dk+8b2Ks5F1Y/1vSmhJAP1VeAR/ZWfjo5s94v+ec2jvacFGSoLGn LZByPsF0+QYvHDwl23aX -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:11 2025 by rpki-client