$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer File: e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer (raw, json) Hash identifier: p9ig+dO+thG9VEadASg/g7GQvecdRjKPrbBPjudd0g0= Subject key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B837A7BBB7435D64B75A43B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Oct 2025 00:45:23 +0000 Certificate not after: Mon 17 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 168.207.0.0/16 IP: 192.112.245.0/24 IP: 205.157.192.0/18 IP: 206.180.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:7a:7b:bb:74:35:d6:4b:75:a4:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 14 00:45:23 2025 GMT Not After : Jan 17 01:45:23 2028 GMT Subject: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:37:fb:a7:43:fc:ca:c9:e2:49:b9:9b:a1: 49:83:9e:74:ed:f0:21:9b:ca:df:cd:d6:d2:c7:96: 14:f7:cb:6c:40:01:b4:4b:6e:2f:07:35:17:aa:e2: c3:9c:e6:25:de:ed:7a:0c:a0:c0:b2:8b:21:89:ea: 92:6d:50:53:2c:77:5c:3a:bd:d3:b5:8a:b2:07:77: 6d:e5:46:62:47:15:15:8d:47:42:b1:1c:1f:2c:6a: 32:93:20:be:e1:66:b2:17:75:02:97:53:87:89:c2: a9:94:18:fd:a8:fe:4d:e6:75:08:f9:ef:2a:1b:51: aa:90:d7:69:40:b4:9c:b4:05:58:6c:4d:43:5e:22: 30:35:fe:98:9a:6e:bd:f1:30:87:47:40:a1:b3:39: e7:4c:43:07:06:0c:be:0b:24:c3:7a:64:54:f7:9e: 27:17:57:83:97:f3:cb:70:ac:c6:ba:2c:dc:9a:20: 6b:2a:aa:42:d6:f6:a1:a2:af:df:8a:b8:c3:33:0b: 50:86:2d:aa:6a:bb:b0:07:ee:e2:1c:38:ac:39:38: 38:e9:44:83:24:86:43:cc:46:41:7e:75:37:1d:79: 34:94:4a:f4:65:06:7d:d3:3a:00:39:4a:e8:43:a5: 8e:29:1d:db:37:4a:00:63:e1:28:12:d0:8a:c3:29: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 168.207.0.0/16 192.112.245.0/24 205.157.192.0/18 206.180.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a2:b7:1d:f5:32:46:58:1b:f7:ce:92:62:96:6d:2c:d8:61: fb:94:47:8b:7d:79:89:26:31:d9:3f:60:9f:09:8d:b5:30:03: 58:4e:8b:1e:08:c0:c0:e7:9f:f5:7a:e8:d8:a1:8b:1f:60:c0: 35:c5:3f:96:b5:e5:d3:c3:aa:ea:40:99:c1:ee:75:da:ab:d6: 23:93:94:19:ed:57:7c:7e:e5:2b:ec:80:54:ba:11:7e:9d:13: 16:f0:6b:36:0c:06:f6:4d:03:12:9a:f9:67:d2:28:f5:d8:f8: ab:76:f3:0f:a1:76:b0:71:1a:e8:8f:77:da:bc:17:76:f0:17: c3:12:a7:48:4c:52:30:ed:17:36:e2:1f:ef:4d:31:90:17:41: 24:bd:ee:42:9a:ae:13:5d:10:c1:38:5b:14:cb:45:24:dc:54: 6a:34:b2:76:a5:18:ae:eb:32:3e:9a:ea:52:7b:bc:f8:24:84: 0b:12:d3:49:3b:47:fc:46:42:f5:7f:6f:8a:36:da:b8:21:25: 11:e9:0d:56:46:46:c6:c6:13:25:24:8b:46:52:93:3a:89:f9: 8f:cd:89:00:85:cb:8c:fa:59:20:13:20:62:72:05:4d:15:61: 0e:b3:01:ec:50:eb:11:7c:3e:c6:11:fc:3e:7d:21:ae:65:25: b3:53:8d:71 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEuDenu7dDXWS3WkO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAxNDAwNDUyM1oXDTI4MDExNzAxNDUyM1owLzEtMCsGA1UEAxMk ZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMwMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGs3+6dD/MrJ4km5m6FJg5507fAhm8rfzdbS x5YU98tsQAG0S24vBzUXquLDnOYl3u16DKDAsoshieqSbVBTLHdcOr3TtYqyB3dt 5UZiRxUVjUdCsRwfLGoykyC+4WayF3UCl1OHicKplBj9qP5N5nUI+e8qG1GqkNdp QLSctAVYbE1DXiIwNf6Ymm698TCHR0ChsznnTEMHBgy+CyTDemRU954nF1eDl/PL cKzGuizcmiBrKqpC1vahoq/firjDMwtQhi2qaruwB+7iHDisOTg46USDJIZDzEZB fnU3HXk0lEr0ZQZ90zoAOUroQ6WOKR3bN0oAY+EoEtCKwyko4wIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFICyv3HTpI1UOeG2n4uwMjGODmyaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l OThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2U5OGNjOGU1LTFmY2YtNGMyOC05 YWRiLTQ1ZTJjYzFjMDIzYy9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2Mx YzAyM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwCozwMEAMBw9QMEBs2dwAMEBs60ADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAiorcd9TJGWBv3zpJilm0s2GH7lEeLfXmJJjHZP2CfCY21MANYToseCMDA55/1 eujYoYsfYMA1xT+WteXTw6rqQJnB7nXaq9Yjk5QZ7Vd8fuUr7IBUuhF+nRMW8Gs2 DAb2TQMSmvln0ij12PirdvMPoXawcRroj3favBd28BfDEqdITFIw7Rc24h/vTTGQ F0Ekve5Cmq4TXRDBOFsUy0Uk3FRqNLJ2pRiu6zI+mupSe7z4JIQLEtNJO0f8RkL1 f2+KNtq4ISUR6Q1WRkbGxhMlJItGUpM6ifmPzYkAhcuM+lkgEyBicgVNFWEOswHs UOsRfD7GEfw+fSGuZSWzU41x -----END CERTIFICATE-----Generated at Mon Oct 20 09:55:55 2025 by rpki-client