$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed.cer File: 11763f86-1681-42c2-95da-8df74d7e18ed.cer (raw, json) Hash identifier: rlAHOkKR63g7zlqOM7P3ektbz9rZqSQttygKwKXI/C8= Subject key identifier: 31:E5:06:18:85:3F:72:91:35:FC:37:B3:8B:4E:64:8D:33:8F:F8:82 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A962E75327C2276C38A0B2388 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/11763f86-1681-42c2-95da-8df74d7e18ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Jul 2025 00:45:37 +0000 Certificate not after: Sun 24 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 104.152.44.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:2e:75:32:7c:22:76:c3:8a:0b:23:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 21 00:45:37 2025 GMT Not After : Oct 24 00:45:37 2027 GMT Subject: CN=11763f86-1681-42c2-95da-8df74d7e18ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:27:91:da:79:59:64:9d:4a:60:54:4a:46: 16:95:ca:71:4b:76:e1:39:8d:94:9d:74:bd:35:94: 8d:63:97:35:d4:5c:de:d4:18:c6:47:bd:92:fd:e4: ac:2d:fc:2f:79:ac:11:5c:01:e3:ea:fb:8e:01:9a: 92:f9:79:b7:74:f3:c8:58:d9:38:a2:23:5f:71:a2: 74:5c:90:8e:6e:e4:08:47:98:37:3c:da:0f:59:57: fc:2b:05:88:8d:17:de:bb:64:b6:62:2a:77:8a:b2: f7:57:74:94:a6:65:8e:cf:df:1d:dd:91:ee:d0:35: 67:bf:7d:d3:d5:a4:1f:42:83:d0:c9:2a:84:58:6c: 0c:a2:c1:03:f0:3e:7f:78:a0:8f:b1:6e:bf:be:41: 9b:d6:7b:0f:df:70:70:41:6c:da:75:53:1f:13:d8: af:eb:f2:28:b2:8d:9f:3c:24:07:ab:97:fa:67:93: 9c:7b:64:38:8f:45:38:b3:e3:ff:c3:3e:60:be:ef: 59:54:60:72:51:86:08:dd:d7:ba:7f:c0:04:60:91: 22:7b:5c:fa:cc:e3:b5:93:27:7e:f7:d8:01:e0:8e: 23:b6:0c:52:07:ea:08:6a:ed:46:e4:9c:fd:f6:9c: 5f:c3:4b:66:e6:85:f0:f7:05:6a:d5:89:2c:44:6e: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E5:06:18:85:3F:72:91:35:FC:37:B3:8B:4E:64:8D:33:8F:F8:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/11763f86-1681-42c2-95da-8df74d7e18ed/11763f86-1681-42c2-95da-8df74d7e18ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 104.152.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:42:80:9c:19:af:15:28:dc:71:33:71:09:98:14:8a:80:d1: 45:62:25:37:f7:81:cc:24:3a:3d:f7:5f:16:bc:43:e9:c5:4d: 6c:1e:ab:8f:be:39:7b:ba:e5:ae:7e:c9:91:95:37:44:0a:03: a5:75:36:c0:46:37:78:07:22:98:b0:42:8b:50:34:e2:50:ba: 6f:96:f5:bc:88:05:a4:5e:df:01:e6:fe:93:74:eb:13:c1:c8: cc:fd:35:fc:f3:1a:af:bb:8a:96:ad:8e:6d:16:1c:b4:ee:df: 14:d8:1b:23:73:01:5d:13:bc:0f:49:7e:c8:04:a3:df:c7:82: 8a:93:72:de:d7:c2:64:ae:76:e7:73:56:05:6a:11:65:e9:f4: e7:18:b8:80:2d:7d:fc:e4:3c:56:ff:96:88:27:3e:e4:fb:e8: 58:cf:59:a7:4e:73:4e:be:2c:3c:cd:0f:f7:60:52:5e:21:c8: 67:fd:ba:d3:05:ab:88:c3:a4:78:71:73:d3:81:4b:b2:56:5f: 68:8c:2d:8e:e2:1d:43:a8:d8:7f:90:9a:ae:e5:2d:02:20:6e: 89:d3:01:d9:c4:e7:21:bb:2b:26:8a:dd:a4:bc:1a:82:c0:8b: b5:c1:60:11:ba:47:99:a5:a4:a0:4b:40:10:c6:ae:34:23:61: 2f:13:96:67 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEqWLnUyfCJ2w4oLI4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDcyMTAwNDUzN1oXDTI3MTAyNDAwNDUzN1owLzEtMCsGA1UEAxMk MTE3NjNmODYtMTY4MS00MmMyLTk1ZGEtOGRmNzRkN2UxOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Unkdp5WWSdSmBUSkYWlcpxS3bhOY2UnXS9 NZSNY5c11Fze1BjGR72S/eSsLfwveawRXAHj6vuOAZqS+Xm3dPPIWNk4oiNfcaJ0 XJCObuQIR5g3PNoPWVf8KwWIjRfeu2S2Yip3irL3V3SUpmWOz98d3ZHu0DVnv33T 1aQfQoPQySqEWGwMosED8D5/eKCPsW6/vkGb1nsP33BwQWzadVMfE9iv6/Ioso2f PCQHq5f6Z5Oce2Q4j0U4s+P/wz5gvu9ZVGByUYYI3de6f8AEYJEie1z6zOO1kyd+ 99gB4I4jtgxSB+oIau1G5Jz99pxfw0tm5oXw9wVq1YksRG7J9wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDHlBhiFP3KRNfw3s4tOZI0zj/iCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x MTc2M2Y4Ni0xNjgxLTQyYzItOTVkYS04ZGY3NGQ3ZTE4ZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzExNzYzZjg2LTE2ODEtNDJjMi05 NWRhLThkZjc0ZDdlMThlZC8xMTc2M2Y4Ni0xNjgxLTQyYzItOTVkYS04ZGY3NGQ3 ZTE4ZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJomCwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAF0KAnBmvFSjccTNxCZgU ioDRRWIlN/eBzCQ6PfdfFrxD6cVNbB6rj745e7rlrn7JkZU3RAoDpXU2wEY3eAci mLBCi1A04lC6b5b1vIgFpF7fAeb+k3TrE8HIzP01/PMar7uKlq2ObRYctO7fFNgb I3MBXRO8D0l+yASj38eCipNy3tfCZK5253NWBWoRZen05xi4gC19/OQ8Vv+WiCc+ 5PvoWM9Zp05zTr4sPM0P92BSXiHIZ/260wWriMOkeHFz04FLslZfaIwtjuIdQ6jY f5CaruUtAiBuidMB2cTnIbsrJordpLwagsCLtcFgEbpHmaWkoEtAEMauNCNhLxOW Zw== -----END CERTIFICATE-----Generated at Mon Aug 4 07:52:34 2025 by rpki-client