$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2.cer File: 35711766-ec67-4522-8b80-6b8ef16d9bc2.cer (raw, json) Hash identifier: GwRwn3DYWqz8vRQG3QPwrlmDLB9SJhf/Z511L7CmG2A= Subject key identifier: 5F:2E:0E:AC:30:C2:4B:A2:1B:3D:80:7A:28:AD:B2:07:CD:03:DE:98 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A6C4E319B8948C0584F384200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/35711766-ec67-4522-8b80-6b8ef16d9bc2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Jul 2025 00:45:36 +0000 Certificate not after: Sat 09 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 165.140.171.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:4e:31:9b:89:48:c0:58:4f:38:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 6 00:45:36 2025 GMT Not After : Oct 9 00:45:36 2027 GMT Subject: CN=35711766-ec67-4522-8b80-6b8ef16d9bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:13:60:b0:5b:1a:31:9c:6d:f9:44:2b:9b: 4f:24:94:29:88:dc:d0:d5:f1:7c:aa:c2:c9:cd:f5: 8b:f9:94:10:58:68:3b:2f:21:ef:d6:87:cf:b7:05: 9e:77:12:65:5a:04:72:9f:24:bc:18:49:59:d0:5a: d6:7e:c2:13:b2:37:b9:2d:15:ba:73:ab:c3:75:35: 5f:b9:51:95:03:cc:54:a6:de:9b:6a:1b:b9:6c:bf: 4a:74:bd:37:77:4d:51:56:fb:19:9f:98:8e:d7:ae: be:69:dd:5a:ee:3c:f7:74:f4:a0:c4:4f:1c:87:f1: c5:71:06:f1:87:e3:a0:04:ea:c7:86:02:ce:fb:99: ea:c1:66:2f:d0:59:52:27:38:f6:8f:8c:5b:02:04: e2:ef:c7:29:ae:a7:4d:1c:70:e4:79:96:a9:82:8e: c0:56:b4:37:1a:4a:d5:be:c1:d7:6d:ef:eb:e3:6d: fc:c0:14:66:2b:e1:67:3a:42:47:d2:4a:81:33:1e: 40:3d:12:f7:4c:32:dd:9e:d8:e0:1b:53:5b:79:07: 37:11:69:5c:75:2e:41:1a:c1:31:e9:1e:69:7a:d3: 70:6e:54:b5:be:82:70:36:7d:95:00:ae:ce:5d:02: 85:70:a4:d2:5f:71:a3:57:2e:a5:2c:12:98:d8:75: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2E:0E:AC:30:C2:4B:A2:1B:3D:80:7A:28:AD:B2:07:CD:03:DE:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35711766-ec67-4522-8b80-6b8ef16d9bc2/35711766-ec67-4522-8b80-6b8ef16d9bc2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 165.140.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:df:04:89:78:20:d3:d2:b6:f9:1d:f1:f9:b9:b1:0f:b1:a9: 9d:a8:ef:0a:fc:a2:fd:06:53:83:25:56:1d:6f:fd:6a:5c:78: 36:15:5a:ac:b1:a8:5e:e9:32:e3:df:9b:71:68:63:5d:93:54: 25:2d:d7:e0:c0:10:a7:65:50:76:03:12:7d:7c:b1:69:98:9d: 49:f0:e3:e4:47:ce:00:9d:30:9b:ae:da:63:ed:8c:99:0e:11: a8:64:fc:42:ba:04:06:e5:d7:8e:fe:ba:be:85:d3:fa:b9:a3: aa:65:9e:0d:09:4e:89:39:1c:d1:2e:aa:2c:2c:4d:07:6c:ee: ac:5d:60:b4:0d:b5:cb:73:00:b7:c3:d1:be:a8:0a:dc:bb:43: 77:c9:d9:2c:6f:f3:bf:88:33:e4:db:d2:94:2e:0d:f4:4c:0a: 94:9b:c7:ed:90:91:d7:e2:d6:86:a9:98:d9:79:18:75:c3:d1: 8f:8a:e0:33:6a:67:94:cc:6a:fe:8b:45:97:e5:03:34:64:d8: fd:e3:5b:d4:2c:cd:70:17:03:f8:7c:38:31:55:ac:a2:b2:aa: 7d:7b:19:74:26:78:f2:e1:c4:58:77:44:45:bc:dd:99:c0:14: 21:3e:b4:8b:0d:00:6f:22:72:4d:d4:b7:f2:f6:df:42:87:ad: d0:e7:91:98 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEpsTjGbiUjAWE84QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDcwNjAwNDUzNloXDTI3MTAwOTAwNDUzNlowLzEtMCsGA1UEAxMk MzU3MTE3NjYtZWM2Ny00NTIyLThiODAtNmI4ZWYxNmQ5YmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXkTYLBbGjGcbflEK5tPJJQpiNzQ1fF8qsLJ zfWL+ZQQWGg7LyHv1ofPtwWedxJlWgRynyS8GElZ0FrWfsITsje5LRW6c6vDdTVf uVGVA8xUpt6bahu5bL9KdL03d01RVvsZn5iO166+ad1a7jz3dPSgxE8ch/HFcQbx h+OgBOrHhgLO+5nqwWYv0FlSJzj2j4xbAgTi78cprqdNHHDkeZapgo7AVrQ3GkrV vsHXbe/r4238wBRmK+FnOkJH0kqBMx5APRL3TDLdntjgG1NbeQc3EWlcdS5BGsEx 6R5petNwblS1voJwNn2VAK7OXQKFcKTSX3GjVy6lLBKY2HVlaQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFF8uDqwwwkuiGz2AeiitsgfNA96YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z NTcxMTc2Ni1lYzY3LTQ1MjItOGI4MC02YjhlZjE2ZDliYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM1NzExNzY2LWVjNjctNDUyMi04 YjgwLTZiOGVmMTZkOWJjMi8zNTcxMTc2Ni1lYzY3LTQ1MjItOGI4MC02YjhlZjE2 ZDliYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACljKswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS98EiXgg09K2+R3x+bmx D7GpnajvCvyi/QZTgyVWHW/9alx4NhVarLGoXuky49+bcWhjXZNUJS3X4MAQp2VQ dgMSfXyxaZidSfDj5EfOAJ0wm67aY+2MmQ4RqGT8QroEBuXXjv66voXT+rmjqmWe DQlOiTkc0S6qLCxNB2zurF1gtA21y3MAt8PRvqgK3LtDd8nZLG/zv4gz5NvSlC4N 9EwKlJvH7ZCR1+LWhqmY2XkYdcPRj4rgM2pnlMxq/otFl+UDNGTY/eNb1CzNcBcD +Hw4MVWsorKqfXsZdCZ48uHEWHdERbzdmcAUIT60iw0AbyJyTdS38vbfQoet0OeR mA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:44:29 2025 by rpki-client