$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer File: f488b7b9-ef6e-4097-9207-940bc62289f1.cer (raw, json) Hash identifier: dS9SFD+VGxq6cO/CYG3VHVDJi1TpcVrYU8bNgsHzMps= Subject key identifier: 3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B6EA5261E97D5A8F352019478 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Oct 2025 13:39:22 +0000 Certificate not after: Sun 15 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 53889 IP: 23.176.56.0/24 IP: 66.235.104.0/22 IP: 2602:f984::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:a5:26:1e:97:d5:a8:f3:52:01:94:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 6 13:39:22 2025 GMT Not After : Aug 15 00:45:34 2027 GMT Subject: CN=f488b7b9-ef6e-4097-9207-940bc62289f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:3d:60:a4:42:83:67:88:6c:48:7b:e0:e5: 65:01:bd:75:98:fe:1d:c1:08:f3:7a:ac:22:16:dd: b8:ee:8e:f3:1e:5c:94:67:af:cd:fd:c9:0a:d6:eb: 5b:e1:57:0d:73:7a:0d:34:eb:d5:42:11:89:95:b0: c6:ed:b3:3c:3c:a7:d4:d1:0a:bc:7e:ba:7b:04:d4: 33:e3:b3:04:97:2d:5f:6f:6d:e4:d1:46:fe:ff:30: 70:09:c0:c0:c5:b3:b6:27:a6:db:e3:e4:30:21:eb: b9:16:31:12:98:f7:c6:d5:7f:5d:b9:75:71:9e:48: 7d:08:c6:2b:63:76:f6:1e:12:97:4a:a8:6e:c9:08: 7d:8b:01:40:3f:cd:eb:f0:7d:92:35:bf:1f:d4:a2: ec:55:af:f4:74:d2:8d:e6:cb:3f:b2:ab:7e:8a:81: 49:d3:3f:86:35:c6:9f:59:d3:df:6d:20:86:a0:e8: c8:fb:8f:f0:12:95:51:d5:29:c3:07:2a:c9:2c:ea: 9f:b1:13:0a:2f:38:1e:f4:a2:92:4a:89:01:ec:27: b1:62:77:66:02:31:0e:3b:56:63:b3:40:5b:3a:c6: 4c:84:c6:86:51:55:3c:58:23:4f:f3:9e:29:e1:c1: b2:bc:00:34:6e:ad:8e:ad:0a:99:76:2f:5c:5b:bc: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.176.56.0/24 66.235.104.0/22 IPv6: 2602:f984::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53889 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c6:bc:45:f8:20:c1:85:61:97:00:8d:b6:2e:bb:60:b8:21: 03:85:6d:3a:aa:d9:1b:c4:c9:e1:eb:3e:90:44:7d:06:f4:d6: ad:17:57:2a:7f:3d:ec:17:99:63:26:16:f3:40:b3:b0:90:24: 3a:b2:96:87:c5:ab:8c:e7:b3:96:d3:89:75:ba:c9:70:b8:8f: 24:6a:2a:e3:43:db:ab:b0:45:1b:55:fb:8b:d7:9d:99:4f:94: 13:58:bc:b1:67:23:0c:c4:80:82:61:fd:ad:82:3a:f9:22:27: 2c:c7:05:e8:3c:32:14:3f:03:a1:53:d4:a5:ba:c9:92:7b:03: 1d:8d:8d:b7:87:84:b0:0c:32:a0:45:44:11:fe:a2:10:2d:9d: e6:2e:63:f6:72:c2:46:28:96:24:b7:ae:9e:1d:68:31:c7:2f: 70:e5:24:c1:83:ea:57:1f:7f:cc:55:56:e0:d0:c9:40:59:51: c0:80:4b:32:40:23:6c:b0:89:e3:45:e5:ff:2c:e0:e0:3b:46: c4:cf:04:68:44:b4:37:a0:99:f3:a9:2d:ff:63:99:49:2e:1d: 8f:d2:4c:06:57:95:00:89:f2:a4:93:61:ad:48:03:81:fa:06: 94:aa:f1:a6:e5:e1:7d:c8:4e:3a:ac:a6:51:ec:2c:de:c5:25: ab:86:80:de -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEtupSYel9Wo81IBlHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAwNjEzMzkyMloXDTI3MDgxNTAwNDUzNFowLzEtMCsGA1UEAxMk ZjQ4OGI3YjktZWY2ZS00MDk3LTkyMDctOTQwYmM2MjI4OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0E9YKRCg2eIbEh74OVlAb11mP4dwQjzeqwi Ft247o7zHlyUZ6/N/ckK1utb4VcNc3oNNOvVQhGJlbDG7bM8PKfU0Qq8frp7BNQz 47MEly1fb23k0Ub+/zBwCcDAxbO2J6bb4+QwIeu5FjESmPfG1X9duXVxnkh9CMYr Y3b2HhKXSqhuyQh9iwFAP83r8H2SNb8f1KLsVa/0dNKN5ss/sqt+ioFJ0z+GNcaf WdPfbSCGoOjI+4/wEpVR1SnDByrJLOqfsRMKLzge9KKSSokB7CexYndmAjEOO1Zj s0BbOsZMhMaGUVU8WCNP854p4cGyvAA0bq2OrQqZdi9cW7yBywIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFD8cVAzbXA5l3Qa23WBYlDhjxAUNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m NDg4YjdiOS1lZjZlLTQwOTctOTIwNy05NDBiYzYyMjg5ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Y0ODhiN2I5LWVmNmUtNDA5Ny05 MjA3LTk0MGJjNjIyODlmMS9mNDg4YjdiOS1lZjZlLTQwOTctOTIwNy05NDBiYzYy Mjg5ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXsDgDBAJC62gwDgQCAAIwCAMGBCYC+YQAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDSgTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvxrxF+CDBhWGXAI22 LrtguCEDhW06qtkbxMnh6z6QRH0G9NatF1cqfz3sF5ljJhbzQLOwkCQ6spaHxauM 57OW04l1uslwuI8kairjQ9ursEUbVfuL152ZT5QTWLyxZyMMxICCYf2tgjr5Iics xwXoPDIUPwOhU9SlusmSewMdjY23h4SwDDKgRUQR/qIQLZ3mLmP2csJGKJYkt66e HWgxxy9w5STBg+pXH3/MVVbg0MlAWVHAgEsyQCNssInjReX/LODgO0bEzwRoRLQ3 oJnzqS3/Y5lJLh2P0kwGV5UAifKkk2GtSAOB+gaUqvGm5eF9yE46rKZR7CzexSWr hoDe -----END CERTIFICATE-----Generated at Mon Oct 20 02:44:24 2025 by rpki-client