$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081.cer File: c30b1281-e5b2-4923-ba75-e49d8c0ab081.cer (raw, json) Hash identifier: moDoBKY4F3VA/hYA+euokeOD3mOyKKVHGKKe+gafCho= Subject key identifier: 24:69:79:E9:BC:1D:1C:25:F2:33:08:E9:99:BC:4C:7B:E2:45:3C:80 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AE18ED273D306AB2C0A1B8B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081/c30b1281-e5b2-4923-ba75-e49d8c0ab081.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Aug 2025 00:45:24 +0000 Certificate not after: Sat 20 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 54406 IP: 64.4.174.0/24 IP: 2620:9c:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:8e:d2:73:d3:06:ab:2c:0a:1b:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 17 00:45:24 2025 GMT Not After : Nov 20 01:45:24 2027 GMT Subject: CN=c30b1281-e5b2-4923-ba75-e49d8c0ab081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:55:4c:1c:51:a5:c0:38:39:98:d2:0a:6e: 54:ab:7e:87:5e:ce:6d:88:9c:24:e2:9f:c7:0f:8d: 88:23:ed:85:8d:bc:a8:ec:68:6c:b6:10:c4:5f:cd: 20:83:55:2a:1a:0f:01:34:24:85:36:df:e2:57:f8: 9a:60:34:7f:0c:c5:1c:c8:d6:0c:85:a0:3c:c1:cb: 5d:fc:e1:73:09:11:2e:ef:24:a3:e6:db:c3:21:18: af:95:79:73:82:d2:d0:6a:53:04:77:b4:4c:06:25: bd:3f:b4:e4:cd:1f:f8:33:1c:1a:5f:1e:c4:e3:a2: c3:8f:10:ae:05:d5:dc:1a:fc:b1:31:85:26:6c:46: da:88:b8:5c:84:f0:84:bb:7d:82:af:7b:cf:df:a9: 98:22:49:68:57:27:22:43:35:21:fa:0d:14:7e:4c: 18:12:9e:11:8d:ca:bc:95:93:1e:27:31:25:68:e8: 83:39:c1:bc:0d:fe:d1:07:41:b0:33:77:46:34:18: 24:c0:54:26:b0:1d:11:e8:72:21:87:63:06:90:38: 01:b2:34:9e:c6:0a:a9:f0:56:c5:33:8f:e1:3d:88: 93:7d:7d:1c:cb:1a:ca:bb:23:e4:18:49:3c:4b:d6: 77:61:28:63:7e:c9:9f:79:a4:cf:d0:59:5e:4a:9d: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:69:79:E9:BC:1D:1C:25:F2:33:08:E9:99:BC:4C:7B:E2:45:3C:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c30b1281-e5b2-4923-ba75-e49d8c0ab081/c30b1281-e5b2-4923-ba75-e49d8c0ab081.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.4.174.0/24 IPv6: 2620:9c:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54406 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d8:98:0d:fc:15:6c:f7:13:73:81:fb:51:fb:8a:b4:fd:ac: e0:5a:a3:e8:a3:1b:9e:1a:4e:be:f8:a1:a6:bd:5b:c7:4b:13: 20:19:dc:a2:d3:4e:f6:7c:3a:bb:71:0f:b0:f2:06:90:2f:8b: 6d:10:2b:2a:09:4d:6b:64:7c:9d:21:7d:44:a2:68:fa:ad:7f: 1a:30:bf:72:93:20:5c:a2:49:d4:d8:cf:d1:17:95:a7:a0:73: ce:3b:b7:bf:7d:ed:40:bc:03:b5:d5:d6:0c:93:ba:49:bb:e5: b4:fa:1b:2c:01:e0:6f:12:2b:4f:f3:c3:b0:77:8e:8b:df:f1: d3:3c:f3:93:1d:50:6b:f9:41:71:66:f6:b6:34:7b:7d:59:d4: 32:ce:b1:c8:ac:08:a4:fa:4c:3a:a4:bf:64:2c:ca:23:d3:42: c9:fd:b0:cd:b2:d3:48:0c:c1:65:b3:b9:6f:24:fb:c7:40:65: 53:42:2b:b2:e1:aa:25:c2:7f:03:4d:f4:cd:d3:fc:0b:9a:65: 54:58:76:2f:78:f5:80:29:44:f3:c0:29:31:24:3a:44:f7:1f: f5:22:4f:d0:88:cb:b6:48:c9:95:91:c3:3c:94:9e:13:11:54: a7:3c:8f:90:39:72:b1:bb:37:c6:4c:55:7d:f8:4a:27:65:74: e3:d6:ec:e0 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWErhjtJz0warLAobiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgxNzAwNDUyNFoXDTI3MTEyMDAxNDUyNFowLzEtMCsGA1UEAxMk YzMwYjEyODEtZTViMi00OTIzLWJhNzUtZTQ5ZDhjMGFiMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBFVTBxRpcA4OZjSCm5Uq36HXs5tiJwk4p/H D42II+2Fjbyo7GhsthDEX80gg1UqGg8BNCSFNt/iV/iaYDR/DMUcyNYMhaA8wctd /OFzCREu7ySj5tvDIRivlXlzgtLQalMEd7RMBiW9P7TkzR/4MxwaXx7E46LDjxCu BdXcGvyxMYUmbEbaiLhchPCEu32Cr3vP36mYIkloVyciQzUh+g0UfkwYEp4Rjcq8 lZMeJzElaOiDOcG8Df7RB0GwM3dGNBgkwFQmsB0R6HIhh2MGkDgBsjSexgqp8FbF M4/hPYiTfX0cyxrKuyPkGEk8S9Z3YShjfsmfeaTP0FleSp0YQwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFCRpeem8HRwl8jMI6Zm8THviRTyAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j MzBiMTI4MS1lNWIyLTQ5MjMtYmE3NS1lNDlkOGMwYWIwODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2MzMGIxMjgxLWU1YjItNDkyMy1i YTc1LWU0OWQ4YzBhYjA4MS9jMzBiMTI4MS1lNWIyLTQ5MjMtYmE3NS1lNDlkOGMw YWIwODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBABABK4wDwQCAAIwCQMHACYgAJwgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA1IYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAe9iYDfwVbPcTc4H7UfuKtP2s 4Fqj6KMbnhpOvvihpr1bx0sTIBncotNO9nw6u3EPsPIGkC+LbRArKglNa2R8nSF9 RKJo+q1/GjC/cpMgXKJJ1NjP0ReVp6Bzzju3v33tQLwDtdXWDJO6SbvltPobLAHg bxIrT/PDsHeOi9/x0zzzkx1Qa/lBcWb2tjR7fVnUMs6xyKwIpPpMOqS/ZCzKI9NC yf2wzbLTSAzBZbO5byT7x0BlU0IrsuGqJcJ/A030zdP8C5plVFh2L3j1gClE88Ap MSQ6RPcf9SJP0IjLtkjJlZHDPJSeExFUpzyPkDlysbs3xkxVffhKJ2V049bs4A== -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:49 2025 by rpki-client