$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer File: 242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer (raw, json) Hash identifier: c0eFfXhmtBf8Z3vt4U3BRvXAiPlq55NvNupbHLpHM7c= Subject key identifier: D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849FF6D84B8FE2CBA24CC006A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 May 2025 00:45:37 +0000 Certificate not after: Tue 31 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 33086 IP: 23.158.224.0/24 IP: 2620:5d:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:6d:84:b8:fe:2c:ba:24:cc:00:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 28 00:45:37 2025 GMT Not After : Aug 31 00:45:37 2027 GMT Subject: CN=242dfd71-e9f9-4bbe-9709-0f3709fafbbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:53:cd:d8:56:e9:b1:18:85:a2:a8:8a:b1:c2: a2:46:06:4f:c3:bf:ad:54:bf:f1:8c:b6:55:59:7c: 80:e2:12:65:60:50:23:07:eb:fb:7a:54:ae:e4:cb: 50:f9:32:06:ad:0f:90:5b:9a:96:46:3c:f5:0e:b5: 3a:d8:7e:54:d2:7c:55:57:d2:36:d1:94:27:2c:d6: 4d:1b:49:6d:b2:a0:b9:0f:35:87:cd:48:b5:58:03: c3:90:f9:fb:f2:5d:c6:92:f5:09:b8:60:e6:a0:10: d4:03:1b:44:24:9b:7d:22:a3:ae:a4:46:df:32:f7: f3:17:4a:6e:b0:e2:4e:30:a0:83:3c:af:56:e0:73: bf:46:59:ce:5a:4d:0b:d8:7c:43:3f:c4:90:30:72: 89:2f:10:9c:b0:4d:d9:93:38:cf:6a:32:1f:2e:68: 8d:50:03:af:74:46:ab:90:22:c2:41:78:cd:a4:de: f8:ac:bc:4e:fd:09:d8:28:41:ac:83:61:d3:d3:c1: 00:d2:11:77:1c:9d:41:ee:a7:57:64:7e:4c:d8:5c: c0:5f:7d:94:b3:49:25:56:8c:cf:38:2b:31:b5:a5: a5:ec:0d:60:c6:09:10:01:f1:6c:c6:b5:1e:25:3c: 16:de:64:14:46:d3:08:76:ed:6e:56:96:86:1a:31: 32:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.158.224.0/24 IPv6: 2620:5d:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33086 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bb:8e:4f:99:3b:94:3c:f0:f1:a7:11:b0:fc:0f:5d:81:5c: 0b:eb:00:eb:ce:5c:13:77:69:43:6a:07:a2:b4:e0:d6:39:1c: 62:99:51:5c:a5:a3:49:3f:db:24:61:c6:a5:e7:51:60:79:4e: ed:8c:7a:e5:28:ac:8a:1b:4a:1a:56:78:3f:51:87:50:28:9b: db:d3:9d:1a:41:c5:b8:92:cd:12:0f:93:c5:fe:7e:95:ff:d5: 80:62:08:8c:98:3c:9c:d2:61:d9:f8:cf:c5:68:d5:8e:ad:ae: 20:92:5a:84:61:e3:fd:76:89:e8:36:50:63:e1:04:f6:4f:b0: ff:b8:d9:da:98:ab:d2:62:93:bd:e0:11:03:97:ae:87:7b:4d: 9d:d1:da:dc:92:fe:58:0f:81:a9:2c:aa:22:e6:28:4f:ed:2b: 28:99:40:b2:22:a3:45:cc:14:12:b2:42:d0:41:a0:46:fd:ef: 91:e6:d4:2e:33:24:2d:eb:7f:d6:84:27:1f:0e:f9:89:4b:08: 89:90:0e:9c:e1:ed:30:26:30:87:21:41:d6:f9:e0:03:38:20: 0e:c3:8b:44:e9:04:24:40:07:31:1e:5f:5c:ff:af:e4:00:e7: e3:2a:2f:fa:6f:0f:41:2a:ef:35:a3:87:06:2b:e5:90:cb:b9: bb:80:8a:e8 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEn/bYS4/iy6JMwAakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUyODAwNDUzN1oXDTI3MDgzMTAwNDUzN1owLzEtMCsGA1UEAxMk MjQyZGZkNzEtZTlmOS00YmJlLTk3MDktMGYzNzA5ZmFmYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lPN2FbpsRiFoqiKscKiRgZPw7+tVL/xjLZV WXyA4hJlYFAjB+v7elSu5MtQ+TIGrQ+QW5qWRjz1DrU62H5U0nxVV9I20ZQnLNZN G0ltsqC5DzWHzUi1WAPDkPn78l3GkvUJuGDmoBDUAxtEJJt9IqOupEbfMvfzF0pu sOJOMKCDPK9W4HO/RlnOWk0L2HxDP8SQMHKJLxCcsE3ZkzjPajIfLmiNUAOvdEar kCLCQXjNpN74rLxO/QnYKEGsg2HT08EA0hF3HJ1B7qdXZH5M2FzAX32Us0klVozP OCsxtaWl7A1gxgkQAfFsxrUeJTwW3mQURtMIdu1uVpaGGjEyJwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNBbpo8Kg455D/LLrfFRvsFS4aIvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y NDJkZmQ3MS1lOWY5LTRiYmUtOTcwOS0wZjM3MDlmYWZiYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzI0MmRmZDcxLWU5ZjktNGJiZS05 NzA5LTBmMzcwOWZhZmJiYi8yNDJkZmQ3MS1lOWY5LTRiYmUtOTcwOS0wZjM3MDlm YWZiYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXnuAwDwQCAAIwCQMHACYgAF3gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAgT4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQLuOT5k7lDzw8acRsPwPXYFc C+sA685cE3dpQ2oHorTg1jkcYplRXKWjST/bJGHGpedRYHlO7Yx65SisihtKGlZ4 P1GHUCib29OdGkHFuJLNEg+Txf5+lf/VgGIIjJg8nNJh2fjPxWjVjq2uIJJahGHj /XaJ6DZQY+EE9k+w/7jZ2pir0mKTveARA5euh3tNndHa3JL+WA+BqSyqIuYoT+0r KJlAsiKjRcwUErJC0EGgRv3vkebULjMkLet/1oQnHw75iUsIiZAOnOHtMCYwhyFB 1vngAzggDsOLROkEJEAHMR5fXP+v5ADn4yov+m8PQSrvNaOHBivlkMu5u4CK6A== -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:21 2025 by rpki-client