$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5.cer File: 09716e22-4f48-41d8-87e0-e9b48691fcc5.cer (raw, json) Hash identifier: p3l6ZiGmgUHxTdL4SW/rZ9Q0cjtSIWTaHlWAqT+l7FQ= Subject key identifier: 74:A1:57:D1:3F:3C:74:FF:09:76:AE:A3:4C:78:AA:A9:75:63:04:60 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AECB990332CCE823081B4B420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Aug 2025 00:45:25 +0000 Certificate not after: Wed 24 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 30350 AS: 398072 IP: 72.53.176.0/20 IP: 2604:c400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:b9:90:33:2c:ce:82:30:81:b4:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 21 00:45:25 2025 GMT Not After : Nov 24 01:45:25 2027 GMT Subject: CN=09716e22-4f48-41d8-87e0-e9b48691fcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:6c:69:9f:b2:1f:3a:6f:87:70:27:59:5d: bf:d7:28:09:4e:c8:2b:e0:39:6b:20:23:ee:80:9a: 99:e1:16:c6:00:2f:d2:22:bf:c5:be:3b:43:f2:41: cd:c8:b5:da:a2:19:5f:17:ab:13:a7:a2:3a:5e:f5: 77:43:10:f7:8f:c1:dd:ff:8c:af:ef:19:98:1e:61: 68:dd:2b:a4:cd:97:7c:bc:98:9f:1d:aa:c3:cb:89: da:d9:d7:57:29:4d:f3:e2:f7:49:5a:43:a4:51:e1: b5:92:f3:86:0b:05:a2:8f:68:83:b2:ec:7f:3d:b1: e9:9d:fa:f7:93:f1:fb:1f:99:7f:e9:75:30:44:11: c7:00:36:93:02:f9:36:ef:72:b7:92:38:10:92:38: c5:27:95:fb:ab:e8:81:86:2a:fe:9a:90:32:28:15: f9:45:ee:8d:29:f2:08:cd:77:0a:6c:53:23:bf:90: 53:9b:2c:19:8a:c6:f3:5e:75:cb:c5:04:1f:38:9c: 65:49:50:da:5c:c9:a3:ec:14:57:8e:67:1d:7b:3b: 91:0f:ab:e8:1c:42:d1:ce:11:74:db:b8:c7:0f:d8: 98:e8:b5:c8:fa:db:d4:c8:03:04:00:f4:89:d8:0d: 55:7a:c4:0b:29:20:90:68:ae:65:35:8f:2c:5e:3d: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A1:57:D1:3F:3C:74:FF:09:76:AE:A3:4C:78:AA:A9:75:63:04:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09716e22-4f48-41d8-87e0-e9b48691fcc5/09716e22-4f48-41d8-87e0-e9b48691fcc5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 72.53.176.0/20 IPv6: 2604:c400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30350 398072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:19:3d:24:38:d1:e8:86:cc:aa:c5:76:92:d9:c4:27:78:d3: a0:c8:40:d9:09:e3:d8:f1:4e:e0:fa:cb:0f:9c:e0:32:bf:4e: c2:b6:94:65:a3:d4:d1:92:cc:ce:4c:c4:9d:61:5a:3b:d7:79: ab:80:3f:6a:3f:36:0c:bc:89:80:1b:24:80:23:05:b1:4d:33: fa:5b:57:9f:68:b5:78:2a:08:4b:d0:bc:c6:09:af:5c:ca:37: 81:f4:2c:dd:1f:ab:6b:61:75:e7:55:a8:f3:03:02:be:82:3c: 60:c8:d9:c7:90:87:87:8e:38:99:c1:78:80:9f:b2:bb:e5:84: 2f:13:e5:a7:24:87:97:e7:02:dd:8b:ca:39:c6:0f:e0:73:ab: 92:7e:cd:c7:79:45:3f:20:2d:f1:b8:cb:a3:20:cf:08:1a:76: c7:e8:65:d0:ca:d2:a5:a7:72:95:30:ef:98:1c:63:c4:0e:5c: 50:f3:81:2a:43:a3:17:4a:fb:78:16:56:a3:cd:3a:44:43:f7: ba:47:d2:c6:2d:06:61:20:2b:95:82:0b:eb:5a:57:3e:f0:49: ed:b5:c2:bb:d7:60:2f:c4:e9:af:66:2e:4b:42:62:9b:e0:b1: d3:6d:0d:da:6c:02:74:99:c8:0e:1d:88:2e:a3:d7:50:01:7b: 38:13:0e:d5 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWErsuZAzLM6CMIG0tCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgyMTAwNDUyNVoXDTI3MTEyNDAxNDUyNVowLzEtMCsGA1UEAxMk MDk3MTZlMjItNGY0OC00MWQ4LTg3ZTAtZTliNDg2OTFmY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5RsaZ+yHzpvh3AnWV2/1ygJTsgr4DlrICPu gJqZ4RbGAC/SIr/FvjtD8kHNyLXaohlfF6sTp6I6XvV3QxD3j8Hd/4yv7xmYHmFo 3SukzZd8vJifHarDy4na2ddXKU3z4vdJWkOkUeG1kvOGCwWij2iDsux/PbHpnfr3 k/H7H5l/6XUwRBHHADaTAvk273K3kjgQkjjFJ5X7q+iBhir+mpAyKBX5Re6NKfII zXcKbFMjv5BTmywZisbzXnXLxQQfOJxlSVDaXMmj7BRXjmcdezuRD6voHELRzhF0 27jHD9iY6LXI+tvUyAMEAPSJ2A1VesQLKSCQaK5lNY8sXj3EdQIDAQABo4IELjCC BCowHQYDVR0OBBYEFHShV9E/PHT/CXauo0x4qql1YwRgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w OTcxNmUyMi00ZjQ4LTQxZDgtODdlMC1lOWI0ODY5MWZjYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzA5NzE2ZTIyLTRmNDgtNDFkOC04 N2UwLWU5YjQ4NjkxZmNjNS8wOTcxNmUyMi00ZjQ4LTQxZDgtODdlMC1lOWI0ODY5 MWZjYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARINbAwDQQCAAIwBwMFACYExAAwHgYIKwYBBQUH AQgBAf8EDzANoAswCQICdo4CAwYS+DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAGT0kONHohsyqxXaS2cQn eNOgyEDZCePY8U7g+ssPnOAyv07CtpRlo9TRkszOTMSdYVo713mrgD9qPzYMvImA GySAIwWxTTP6W1efaLV4KghL0LzGCa9cyjeB9CzdH6trYXXnVajzAwK+gjxgyNnH kIeHjjiZwXiAn7K75YQvE+WnJIeX5wLdi8o5xg/gc6uSfs3HeUU/IC3xuMujIM8I GnbH6GXQytKlp3KVMO+YHGPEDlxQ84EqQ6MXSvt4FlajzTpEQ/e6R9LGLQZhICuV ggvrWlc+8EnttcK712AvxOmvZi5LQmKb4LHTbQ3abAJ0mcgOHYguo9dQAXs4Ew7V -----END CERTIFICATE-----Generated at Wed Nov 5 02:44:32 2025 by rpki-client