$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b.cer File: f513f482-c974-4d63-b9fb-e90a7b41b43b.cer (raw, json) Hash identifier: Zq6W2K1bKYefNB93Eitn7NYCXGQCoGOodIpozJMJUuA= Subject key identifier: ED:E8:2E:D2:47:02:8A:45:67:8A:74:91:49:4B:2D:E2:1C:62:FE:15 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B80AFCD437D10A58E72CACF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b/f513f482-c974-4d63-b9fb-e90a7b41b43b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 00:45:23 +0000 Certificate not after: Sun 16 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 393963 IP: 155.254.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:af:cd:43:7d:10:a5:8e:72:ca:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 13 00:45:23 2025 GMT Not After : Jan 16 01:45:23 2028 GMT Subject: CN=f513f482-c974-4d63-b9fb-e90a7b41b43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:53:44:28:78:68:b1:39:fc:31:76:83:9a: 52:d0:8e:ce:a7:e4:47:42:1f:7b:56:7d:ae:e2:19: 91:72:9a:8f:4a:1e:98:0e:ef:b5:06:30:50:e1:29: 9c:18:c4:26:45:f3:97:4e:f4:65:0d:90:f2:d7:f5: 46:39:fe:69:04:f4:be:a3:ad:49:a5:15:c8:17:28: 63:a6:98:2d:50:d2:2b:c7:a4:fe:f4:ca:dd:b4:16: 0c:92:6c:0f:f2:a6:be:28:14:e8:ef:62:b5:be:df: 54:65:64:64:e7:61:e6:6b:20:6c:97:7c:c6:5d:bc: 3e:0f:7d:f1:d3:b5:18:4a:ef:21:3b:48:cc:3a:dd: f3:e5:e8:f6:40:fc:b4:f1:39:48:f8:55:d6:a8:b8: 24:87:61:cf:cc:cb:1e:62:32:48:ac:d5:65:a8:91: 08:ef:eb:f0:08:6b:a1:6e:83:96:8e:b8:80:20:c2: e8:ad:c2:57:90:2e:4e:21:fd:72:3e:81:af:99:9a: 82:33:af:be:47:ff:cd:d2:16:0d:de:2f:54:78:a4: 0b:5e:fc:58:7d:17:54:bb:9d:2f:66:97:91:f2:b0: a1:32:65:92:16:47:cb:2a:eb:96:a5:61:eb:b1:0b: b7:24:da:35:e3:61:ba:0a:de:a1:97:27:26:8f:0f: 0a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E8:2E:D2:47:02:8A:45:67:8A:74:91:49:4B:2D:E2:1C:62:FE:15 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b/f513f482-c974-4d63-b9fb-e90a7b41b43b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 155.254.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393963 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c6:06:90:14:6e:a8:3c:ef:be:33:8a:6d:ba:25:90:c4:4b: ca:d7:1d:63:cc:33:21:61:23:07:03:4f:87:20:38:05:d4:22: 0a:d3:a7:93:37:65:34:ed:5b:60:72:04:2d:2e:36:88:ee:e6: a4:1c:15:fb:b3:8f:18:2c:a2:c6:08:35:fc:70:d6:2a:ca:da: 80:83:39:1a:9f:ef:bd:52:77:cc:2a:2e:25:20:2e:cf:11:c1: b2:5c:ac:31:69:d3:b3:4e:d5:02:68:a1:d4:ca:ad:ce:1f:5d: ff:bd:3a:ae:a1:9f:49:ee:2c:76:53:3f:63:de:21:4a:87:b9: b5:c8:f6:ec:7d:9f:20:36:99:3e:e2:cb:c8:3a:e3:75:62:b3: 48:cb:36:de:c0:8f:48:c9:86:a1:5d:b6:e1:ba:52:df:ff:a0: 2e:83:26:83:6c:cb:4a:b7:f5:c4:15:2c:16:8e:fc:35:9b:b0: d7:65:36:2d:40:15:9c:45:ff:2e:1d:9a:67:98:af:1d:38:a0: 0f:2e:7e:ba:e6:96:3d:47:be:1a:6c:91:30:59:2c:eb:68:f2: a9:26:d5:92:19:23:2c:17:d5:98:0a:6f:e3:a5:c5:64:ef:40: ee:8f:dc:68:a2:25:35:28:b6:ad:e2:7b:86:c0:04:f0:79:30: 3f:18:ff:fc -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEuAr81DfRCljnLKz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAxMzAwNDUyM1oXDTI4MDExNjAxNDUyM1owLzEtMCsGA1UEAxMk ZjUxM2Y0ODItYzk3NC00ZDYzLWI5ZmItZTkwYTdiNDFiNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEZTRCh4aLE5/DF2g5pS0I7Op+RHQh97Vn2u 4hmRcpqPSh6YDu+1BjBQ4SmcGMQmRfOXTvRlDZDy1/VGOf5pBPS+o61JpRXIFyhj ppgtUNIrx6T+9MrdtBYMkmwP8qa+KBTo72K1vt9UZWRk52HmayBsl3zGXbw+D33x 07UYSu8hO0jMOt3z5ej2QPy08TlI+FXWqLgkh2HPzMseYjJIrNVlqJEI7+vwCGuh boOWjriAIMLorcJXkC5OIf1yPoGvmZqCM6++R//N0hYN3i9UeKQLXvxYfRdUu50v ZpeR8rChMmWSFkfLKuuWpWHrsQu3JNo142G6Ct6hlycmjw8KwQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFO3oLtJHAopFZ4p0kUlLLeIcYv4VMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m NTEzZjQ4Mi1jOTc0LTRkNjMtYjlmYi1lOTBhN2I0MWI0M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Y1MTNmNDgyLWM5NzQtNGQ2My1i OWZiLWU5MGE3YjQxYjQzYi9mNTEzZjQ4Mi1jOTc0LTRkNjMtYjlmYi1lOTBhN2I0 MWI0M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKb/gwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgLrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACbGBpAUbqg8774zim26JZDES8rXHWPMMyFhIwcDT4cgOAXU IgrTp5M3ZTTtW2ByBC0uNoju5qQcFfuzjxgsosYINfxw1irK2oCDORqf771Sd8wq LiUgLs8RwbJcrDFp07NO1QJoodTKrc4fXf+9Oq6hn0nuLHZTP2PeIUqHubXI9ux9 nyA2mT7iy8g643Vis0jLNt7Aj0jJhqFdtuG6Ut//oC6DJoNsy0q39cQVLBaO/DWb sNdlNi1AFZxF/y4dmmeYrx04oA8ufrrmlj1HvhpskTBZLOto8qkm1ZIZIywX1ZgK b+OlxWTvQO6P3GiiJTUotq3ie4bABPB5MD8Y//w= -----END CERTIFICATE-----Generated at Mon Oct 20 17:43:13 2025 by rpki-client