$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer File: afc9c4c7-de4a-4066-870e-383d770d6d47.cer (raw, json) Hash identifier: 53qtkokPDwgEjdhDed5NpjP90408xWswB/tDtspPdsg= Subject key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A48034CDA2E3E8C00DE209F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Jun 2025 00:45:36 +0000 Certificate not after: Sun 26 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 14500 IP: 68.70.144.0/20 IP: 173.244.80.0/20 IP: 192.151.132.0/22 IP: 199.182.116.0/22 IP: 2607:72c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:03:4c:da:2e:3e:8c:00:de:20:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 23 00:45:36 2025 GMT Not After : Sep 26 00:45:36 2027 GMT Subject: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:c0:f5:4a:c3:38:0c:e3:0a:84:33:17:37: 0a:ca:dd:ab:39:dc:17:09:f2:7a:fd:e3:a4:17:56: 97:73:63:18:45:6c:b4:c5:d4:78:4f:2e:ff:50:44: 2e:fc:fb:f8:da:06:28:d3:1d:63:13:17:37:d8:bc: d5:f6:07:d1:90:d9:ca:fc:76:00:7e:f4:2d:ea:84: d7:1a:84:76:ff:b1:9f:69:9b:7c:cf:5b:47:87:aa: 53:e5:b7:8a:97:8f:df:7e:90:7b:89:21:40:01:ea: c3:09:89:03:26:22:f7:40:53:89:3d:cf:0b:b5:6c: ef:93:bc:83:7e:97:52:bc:b5:98:24:08:a4:c2:c8: 66:27:cf:0d:ee:29:25:94:86:9c:43:58:e6:27:ca: 80:e3:f7:59:f8:a0:6d:14:75:0a:da:cb:1d:20:be: 03:b6:00:bc:c9:3e:6b:5a:d1:db:a4:42:26:1c:83: c7:40:54:3d:89:1a:85:22:79:52:84:8e:b5:2b:9a: bd:4b:43:90:15:6c:97:14:5b:ad:b3:1b:e8:7e:3f: 70:c9:30:39:95:24:67:52:dd:8e:25:07:f8:ed:cb: 9c:a6:fb:0f:12:c3:38:b8:8b:59:09:5b:63:fc:b6: 6a:45:20:20:9f:4c:02:d9:be:5d:10:d1:03:19:04: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/20 173.244.80.0/20 192.151.132.0/22 199.182.116.0/22 IPv6: 2607:72c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14500 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:22:d6:2b:7a:10:31:97:79:f4:7e:8a:82:30:1c:ce:0d:53: b9:da:63:28:3a:8e:ca:8a:77:d5:e2:a4:0c:f9:c7:22:2f:c5: 9d:cf:00:a1:a7:89:83:cd:b1:0c:b8:2c:e8:c1:0c:e6:17:b5: f4:6c:c3:68:a2:cc:3f:17:1a:3d:7f:ad:3a:2f:71:37:17:90: eb:bf:69:95:82:37:26:ad:c0:6f:ce:cd:92:0d:a5:35:fe:f0: 43:2d:2b:2d:fe:04:3d:4c:93:9c:d2:5b:ac:51:36:bf:5a:cf: 17:25:93:ee:72:d5:36:74:c5:d7:7f:3b:93:11:48:2c:05:6b: ab:2b:5b:9e:78:cf:8a:dd:59:1f:4f:db:5f:f1:9c:55:a7:45: 07:38:7e:5c:2a:65:94:55:38:67:e2:45:71:87:3a:4a:0e:01: 17:3f:75:d5:a8:cc:c5:61:8b:96:21:0f:a7:2e:0b:f0:73:79: 53:7b:bb:88:e9:61:d5:d6:d4:9e:cb:03:42:07:51:28:44:29: 44:16:14:64:57:e5:5b:38:0e:36:09:0e:2b:a6:11:82:7f:24: 45:29:a0:71:36:83:51:76:9e:7c:64:28:88:ba:5e:61:19:a5: d2:27:b3:21:27:68:4b:cb:c9:16:a7:fe:b7:48:96:8b:c9:e1: f8:84:47:c4 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEpIA0zaLj6MAN4gn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYyMzAwNDUzNloXDTI3MDkyNjAwNDUzNlowLzEtMCsGA1UEAxMk YWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9PA9UrDOAzjCoQzFzcKyt2rOdwXCfJ6/eOk F1aXc2MYRWy0xdR4Ty7/UEQu/Pv42gYo0x1jExc32LzV9gfRkNnK/HYAfvQt6oTX GoR2/7GfaZt8z1tHh6pT5beKl4/ffpB7iSFAAerDCYkDJiL3QFOJPc8LtWzvk7yD fpdSvLWYJAikwshmJ88N7ikllIacQ1jmJ8qA4/dZ+KBtFHUK2ssdIL4DtgC8yT5r WtHbpEImHIPHQFQ9iRqFInlShI61K5q9S0OQFWyXFFutsxvofj9wyTA5lSRnUt2O JQf47cucpvsPEsM4uItZCVtj/LZqRSAgn0wC2b5dENEDGQSoewIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFF19wb7Zv6R+j1ywC9T4glAwzNnyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h ZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FmYzljNGM3LWRlNGEtNDA2Ni04 NzBlLTM4M2Q3NzBkNmQ0Ny9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcw ZDZkNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARERpADBASt9FADBALAl4QDBALHtnQwDQQCAAIw BwMFACYHcsAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICOKQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWSLW K3oQMZd59H6KgjAczg1TudpjKDqOyop31eKkDPnHIi/Fnc8AoaeJg82xDLgs6MEM 5he19GzDaKLMPxcaPX+tOi9xNxeQ679plYI3Jq3Ab87Nkg2lNf7wQy0rLf4EPUyT nNJbrFE2v1rPFyWT7nLVNnTF1387kxFILAVrqytbnnjPit1ZH0/bX/GcVadFBzh+ XCpllFU4Z+JFcYc6Sg4BFz911ajMxWGLliEPpy4L8HN5U3u7iOlh1dbUnssDQgdR KEQpRBYUZFflWzgONgkOK6YRgn8kRSmgcTaDUXaefGQoiLpeYRml0iezISdoS8vJ Fqf+t0iWi8nh+IRHxA== -----END CERTIFICATE-----Generated at Mon Jun 30 03:21:27 2025 by rpki-client