$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer File: b09eeed3-3c84-4892-89ae-0ce139a9ca4a.cer (raw, json) Hash identifier: tjerHKOWJq7djS0av+PcCXkRKc8dLYg4Rw73oYNE0Ss= Subject key identifier: 65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B67052A72AEFCEB3D1E3D4180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Oct 2025 20:06:22 +0000 Certificate not after: Sun 10 Jan 2027 01:45:24 +0000 Subordinate resources: AS: 32145 IP: 69.87.184.0/22 IP: 104.249.184.0/22 IP: 170.39.220.0/22 IP: 192.107.120.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:05:2a:72:ae:fc:eb:3d:1e:3d:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 3 20:06:22 2025 GMT Not After : Jan 10 01:45:24 2027 GMT Subject: CN=b09eeed3-3c84-4892-89ae-0ce139a9ca4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cb:f3:01:8c:0b:99:00:36:11:22:f0:be:81: f9:4d:80:33:05:af:66:6c:dc:29:97:4f:78:3f:cc: 65:43:41:66:aa:64:32:c0:3b:58:1f:01:d7:a1:16: 5b:43:a7:07:a3:8c:c8:94:d8:bd:41:01:d8:ec:ca: c9:ef:53:c3:3e:15:4b:d4:0d:2a:0a:22:b2:b1:4c: 5c:0f:5b:ac:57:3e:42:c7:8e:1d:c4:76:ca:29:02: dc:ee:8f:b2:3a:30:be:86:f3:93:55:de:71:76:44: 02:1a:f2:07:6c:27:95:49:9c:4c:1d:92:51:32:67: 02:fe:5e:76:e8:84:a8:9e:ff:77:d7:a0:ce:9d:50: 5e:6e:37:e5:1c:34:98:67:56:96:46:f5:52:e0:f5: b0:e8:ca:72:ea:d7:63:97:45:07:18:3f:0f:c0:38: df:62:49:d7:bd:0e:15:36:ef:a1:6e:3e:09:f7:80: 8a:2e:40:09:09:ea:90:cb:12:30:db:34:86:36:1c: dd:02:a0:81:ee:de:46:74:27:c3:be:1d:aa:43:42: d9:9a:60:33:f3:51:0d:a2:0e:a7:9d:fa:e9:a7:6a: 86:67:14:c0:75:18:7b:2a:73:9f:dd:e2:c1:e6:91: f9:c5:cb:75:2c:93:45:0a:5a:e7:15:8f:73:4a:86: 8a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6D:DC:8C:64:FE:51:A7:CF:6F:01:44:7E:5D:6B:44:20:DE:B2:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b09eeed3-3c84-4892-89ae-0ce139a9ca4a/b09eeed3-3c84-4892-89ae-0ce139a9ca4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 69.87.184.0/22 104.249.184.0/22 170.39.220.0/22 192.107.120.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32145 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:18:09:42:09:21:be:73:f3:92:41:e0:c4:fe:aa:0b:10:d2: d7:50:63:81:2a:dc:20:89:93:a7:83:09:29:0c:01:4c:54:1d: 5c:01:44:ac:2c:6f:3b:7b:77:16:8b:42:24:b0:d5:c9:20:9c: cd:62:ca:9a:ba:76:0e:31:36:08:3b:2f:86:39:b5:e9:46:29: 3b:2f:1f:54:2d:c6:c4:58:08:db:1d:f0:12:89:9c:52:65:f8: 0b:34:97:b8:19:fb:d5:1c:6e:aa:c2:c3:18:0f:f2:99:f5:9a: db:31:58:0a:97:49:de:a7:6b:bd:6c:74:a5:91:cb:55:b0:f4: 8a:7c:87:2b:b8:c5:e1:67:a2:c8:0d:ce:3f:d4:8e:92:10:f7: 73:e2:75:38:9a:aa:f8:c9:d4:c4:60:b1:a6:57:9b:29:0c:5c: be:02:74:f3:95:68:60:3b:6d:96:95:21:79:e5:ea:61:2c:3f: 9b:53:a8:83:4b:b0:70:50:db:48:0a:c4:ea:b1:11:7e:83:ab: 15:9e:62:9e:14:d2:9f:b5:79:4b:0b:19:d6:23:57:95:0d:ae: de:aa:cc:e2:8c:dd:77:10:6a:f0:59:44:b3:c1:11:76:41:2b: 1b:4f:0a:f5:9e:12:c3:02:b0:a4:ff:7f:e3:dd:c1:e0:3c:cc: 2c:54:19:3d -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEtnBSpyrvzrPR49QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAwMzIwMDYyMloXDTI3MDExMDAxNDUyNFowLzEtMCsGA1UEAxMk YjA5ZWVlZDMtM2M4NC00ODkyLTg5YWUtMGNlMTM5YTljYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsvzAYwLmQA2ESLwvoH5TYAzBa9mbNwpl094 P8xlQ0FmqmQywDtYHwHXoRZbQ6cHo4zIlNi9QQHY7MrJ71PDPhVL1A0qCiKysUxc D1usVz5Cx44dxHbKKQLc7o+yOjC+hvOTVd5xdkQCGvIHbCeVSZxMHZJRMmcC/l52 6ISonv9316DOnVBebjflHDSYZ1aWRvVS4PWw6Mpy6tdjl0UHGD8PwDjfYknXvQ4V Nu+hbj4J94CKLkAJCeqQyxIw2zSGNhzdAqCB7t5GdCfDvh2qQ0LZmmAz81ENog6n nfrpp2qGZxTAdRh7KnOf3eLB5pH5xct1LJNFClrnFY9zSoaKYwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFGVt3Ixk/lGnz28BRH5da0Qg3rL6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MDllZWVkMy0zYzg0LTQ4OTItODlhZS0wY2UxMzlhOWNhNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IwOWVlZWQzLTNjODQtNDg5Mi04 OWFlLTBjZTEzOWE5Y2E0YS9iMDllZWVkMy0zYzg0LTQ4OTItODlhZS0wY2UxMzlh OWNhNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAJFV7gDBAJo+bgDBAKqJ9wDBAHAa3gwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICfZEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPBgJQgkhvnPzkkHgxP6qCxDS 11BjgSrcIImTp4MJKQwBTFQdXAFErCxvO3t3FotCJLDVySCczWLKmrp2DjE2CDsv hjm16UYpOy8fVC3GxFgI2x3wEomcUmX4CzSXuBn71RxuqsLDGA/ymfWa2zFYCpdJ 3qdrvWx0pZHLVbD0inyHK7jF4WeiyA3OP9SOkhD3c+J1OJqq+MnUxGCxplebKQxc vgJ085VoYDttlpUheeXqYSw/m1Oog0uwcFDbSArE6rERfoOrFZ5inhTSn7V5SwsZ 1iNXlQ2u3qrM4ozddxBq8FlEs8ERdkErG08K9Z4SwwKwpP9/493B4DzMLFQZPQ== -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:04 2025 by rpki-client