$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer File: f29fac19-e536-4e67-a788-6a1d4483389f.cer (raw, json) Hash identifier: jbWODqTwVy0pFrTzk2B3lV7nJqndO4vgvB+3oiFUdFg= Subject key identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B460F73F0A060049A3E6C4100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Sep 2025 00:45:25 +0000 Certificate not after: Sun 26 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 397715 IP: 64.4.175.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:0f:73:f0:a0:60:04:9a:3e:6c:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 22 00:45:25 2025 GMT Not After : Dec 26 01:45:25 2027 GMT Subject: CN=f29fac19-e536-4e67-a788-6a1d4483389f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:91:69:19:e5:ff:c0:29:2d:03:0f:5e:e1: 2b:2a:4b:19:10:45:88:d2:77:08:e6:98:eb:16:c9: d5:16:5e:15:6a:cf:88:7e:dc:40:37:5a:15:8a:20: 9a:7e:22:2d:63:d2:7b:96:28:f7:e4:89:3f:d4:da: ac:cb:68:e1:13:8e:e1:d9:cb:fb:35:be:e1:eb:15: 6d:5b:d3:88:ae:e8:91:86:86:87:9c:55:42:5f:2c: 17:22:69:4e:6e:5a:c3:2b:c7:74:92:fa:60:55:a4: ce:a0:e6:2c:6e:6e:32:2e:1b:36:4e:6a:9c:f9:14: f9:a3:ed:84:74:ef:11:15:86:7a:a7:a1:92:02:83: b9:40:b4:71:0b:e6:2e:75:8d:54:50:24:11:69:2b: 70:6f:71:7c:b3:8d:77:79:39:0b:90:68:43:e2:52: 7b:ac:18:7a:36:22:d7:3c:ae:5b:a8:55:bd:22:4b: 4a:09:7b:39:b7:6e:09:e3:83:be:ef:d4:6d:21:ea: f2:b9:22:58:ae:eb:6e:fd:c4:1c:30:52:a7:ae:c1: 59:c8:bb:eb:44:db:8b:56:38:88:db:6d:e0:be:d4: 4a:4c:7b:78:6b:3e:80:44:6a:0c:ff:22:22:80:a3: 0a:36:2c:f3:63:c6:ef:af:1f:f1:cb:51:d6:7d:7f: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.4.175.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397715 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6a:40:27:f3:2d:47:13:04:1c:95:f5:f8:a8:78:84:3e:77: ff:2d:a4:48:49:38:74:4b:0d:36:ef:da:bc:aa:1f:24:8e:38: 76:15:46:38:36:d0:5e:10:d0:c4:3f:19:fa:de:ef:e6:94:a8: 7d:be:98:d7:7c:ed:fc:5d:e2:61:78:f4:f7:9c:e7:80:eb:b5: 10:5e:42:10:f8:c6:b0:ec:15:01:94:bd:14:ce:e8:f6:2c:6c: 52:10:ba:e0:ed:50:cd:bc:e6:d9:7e:6f:cc:ad:ce:00:1d:3d: 86:d5:26:ba:2e:da:3d:79:41:ab:82:5f:f2:c2:93:a5:ba:33: 22:20:1f:b7:26:96:42:3f:a9:a7:1f:eb:22:59:31:fb:fc:e7: fe:70:00:89:b5:d5:70:78:6a:ec:9a:83:4f:96:a5:14:1d:71: 92:ec:e6:ac:e7:37:b4:89:09:e8:9c:85:b6:46:e7:1a:70:17: f7:65:dc:97:6e:f1:3b:3c:99:ec:3a:52:6e:08:bf:09:8a:5a: a3:04:8e:5d:e7:d5:25:8e:fb:c1:3e:c4:65:ec:bb:d2:f2:8a: eb:41:e1:cf:99:21:31:07:cb:40:6e:2e:6a:e1:0d:d7:b9:53: 17:50:f3:d3:29:4b:09:28:d4:86:64:de:6b:6c:e3:16:01:40: f3:5e:c3:f0 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEtGD3PwoGAEmj5sQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkyMjAwNDUyNVoXDTI3MTIyNjAxNDUyNVowLzEtMCsGA1UEAxMk ZjI5ZmFjMTktZTUzNi00ZTY3LWE3ODgtNmExZDQ0ODMzODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCyRaRnl/8ApLQMPXuErKksZEEWI0ncI5pjr FsnVFl4Vas+IftxAN1oViiCafiItY9J7lij35Ik/1Nqsy2jhE47h2cv7Nb7h6xVt W9OIruiRhoaHnFVCXywXImlOblrDK8d0kvpgVaTOoOYsbm4yLhs2Tmqc+RT5o+2E dO8RFYZ6p6GSAoO5QLRxC+YudY1UUCQRaStwb3F8s413eTkLkGhD4lJ7rBh6NiLX PK5bqFW9IktKCXs5t24J44O+79RtIeryuSJYrutu/cQcMFKnrsFZyLvrRNuLVjiI 223gvtRKTHt4az6ARGoM/yIigKMKNizzY8bvrx/xy1HWfX8VtQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNttQ849RRhwcbSDqzW30mWmHPZrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m MjlmYWMxOS1lNTM2LTRlNjctYTc4OC02YTFkNDQ4MzM4OWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2YyOWZhYzE5LWU1MzYtNGU2Ny1h Nzg4LTZhMWQ0NDgzMzg5Zi9mMjlmYWMxOS1lNTM2LTRlNjctYTc4OC02YTFkNDQ4 MzM4OWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABABK8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhGTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA1qQCfzLUcTBByV9fioeIQ+d/8tpEhJOHRLDTbv2ryqHySO OHYVRjg20F4Q0MQ/Gfre7+aUqH2+mNd87fxd4mF49Pec54DrtRBeQhD4xrDsFQGU vRTO6PYsbFIQuuDtUM285tl+b8ytzgAdPYbVJrou2j15QauCX/LCk6W6MyIgH7cm lkI/qacf6yJZMfv85/5wAIm11XB4auyag0+WpRQdcZLs5qznN7SJCeichbZG5xpw F/dl3Jdu8Ts8mew6Um4IvwmKWqMEjl3n1SWO+8E+xGXsu9LyiutB4c+ZITEHy0Bu LmrhDde5UxdQ89MpSwko1IZk3mts4xYBQPNew/A= -----END CERTIFICATE-----Generated at Tue Oct 21 01:42:35 2025 by rpki-client