$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer File: 43ac5ede-1d27-41a5-932c-21832f3ef95c.cer (raw, json) Hash identifier: bGxHkU2Ou751RCQKpHU3dbBpBNpN6jJcgVX2OSSTQp4= Subject key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A1E230A54F3576A7FEF4FAE31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Jun 2025 00:45:37 +0000 Certificate not after: Sat 11 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 11186 AS: 11734 AS: 54622 IP: 104.151.136.0/21 IP: 104.153.192.0/22 IP: 199.19.208.0/22 IP: 199.189.64.0/22 IP: 208.74.28.0/22 IP: 208.74.48.0/22 IP: 208.82.204.0/22 IP: 208.91.48.0/22 IP: 209.134.48.0/20 IP: 2607:f148::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:23:0a:54:f3:57:6a:7f:ef:4f:ae:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 8 00:45:37 2025 GMT Not After : Sep 11 00:45:37 2027 GMT Subject: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:f3:35:38:ed:13:37:29:cb:6b:4f:45:35: f4:cd:21:19:8e:44:b7:9e:cb:7f:c7:8d:0c:1c:83: 38:14:4e:59:b6:cb:15:cd:55:83:8e:af:b7:fc:16: b4:fe:f1:23:ea:a4:e5:c9:6e:57:22:4f:69:77:ea: fa:06:fa:32:8b:cd:6b:44:96:53:a9:54:b5:39:a4: 83:98:d4:bc:95:8b:c5:d6:85:43:58:f5:d9:17:ba: 25:9a:df:09:45:88:97:8c:e8:f0:18:22:ab:e8:7a: 4b:4d:e8:98:a1:bd:b9:1c:6e:42:89:03:11:50:ed: 34:2b:d5:6e:c7:9b:67:1e:bf:cc:f0:ca:69:5d:cf: c0:ec:56:91:f2:ac:f3:e1:01:a4:43:36:d9:47:bb: 47:a9:19:b9:29:c0:b5:c9:90:c4:31:1f:5f:53:3b: 06:27:89:e7:17:9a:55:f2:0c:1c:02:f8:84:fb:83: 97:00:79:78:9e:fe:81:90:26:70:f4:40:f7:28:a3: 38:10:45:f4:68:03:7e:31:7e:b8:48:4d:e2:c8:a3: 36:61:34:cc:81:c7:5f:14:b7:4f:00:3c:61:06:23: 95:54:13:4e:7a:9f:6f:7c:1e:a5:ce:6b:b0:74:10: 49:20:23:b5:02:68:14:98:de:02:ba:51:48:fd:f6: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11186 11734 54622 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:fb:0d:20:50:7e:6c:83:ed:dc:ad:17:c5:9b:90:29:e9:5d: 94:ee:8a:f0:5d:d2:5c:9e:8c:e3:67:7c:65:dc:10:ba:4f:97: 9f:2c:b8:41:98:8a:bb:32:8c:9f:35:52:7c:58:05:a2:cf:05: 6a:53:6b:f0:3f:6e:be:be:2a:b6:19:77:7f:cf:ea:e1:fa:e3: 6e:a1:dc:be:1f:9e:e7:c4:59:62:3a:ad:37:38:91:bb:ea:93: 48:80:40:57:d0:ef:6f:fc:c0:a5:4c:52:97:09:e8:dc:67:72: f9:3b:13:ed:1f:bc:cd:87:97:ef:e8:bd:97:55:f3:56:29:15: c0:09:a1:6a:3b:e1:f2:31:d9:4e:c9:e3:a4:cf:d8:ba:49:84: b3:38:ff:9b:b5:09:78:8c:3d:3c:bc:2f:ec:e7:fe:d6:40:16: b5:dc:7b:48:bf:3f:6b:b4:49:de:ca:94:51:b5:f3:ff:6a:fc: 45:fd:1b:3a:57:d0:95:c0:a0:21:2c:f5:b6:66:46:2f:bb:4a: d0:35:d8:eb:75:e8:da:df:b1:4c:40:a0:58:0a:b1:bb:56:39: 1a:e3:59:32:f9:09:a8:30:98:ff:bd:db:5d:3b:dd:5e:59:ac: 47:41:f9:74:58:99:cb:53:a7:a2:f1:9b:74:f4:5a:43:3b:5e: d0:5a:57:61 -----BEGIN CERTIFICATE----- MIIHUDCCBjigAwIBAgIUAQ0Mn0MoWEoeIwpU81dqf+9PrjEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYwODAwNDUzN1oXDTI3MDkxMTAwNDUzN1owLzEtMCsGA1UEAxMk NDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2VmOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe3zNTjtEzcpy2tPRTX0zSEZjkS3nst/x40M HIM4FE5ZtssVzVWDjq+3/Ba0/vEj6qTlyW5XIk9pd+r6Bvoyi81rRJZTqVS1OaSD mNS8lYvF1oVDWPXZF7olmt8JRYiXjOjwGCKr6HpLTeiYob25HG5CiQMRUO00K9Vu x5tnHr/M8MppXc/A7FaR8qzz4QGkQzbZR7tHqRm5KcC1yZDEMR9fUzsGJ4nnF5pV 8gwcAviE+4OXAHl4nv6BkCZw9ED3KKM4EEX0aAN+MX64SE3iyKM2YTTMgcdfFLdP ADxhBiOVVBNOep9vfB6lzmuwdBBJICO1AmgUmN4CulFI/fYYywIDAQABo4IEYjCC BF4wHQYDVR0OBBYEFAk+SCh3rslmXefxPznjt36En5rNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQzYWM1ZWRlLTFkMjctNDFhNS05 MzJjLTIxODMyZjNlZjk1Yy80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYz ZWY5NWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBANol4gDBAJomcADBALHE9ADBALHvUADBALQShwD BALQSjADBALQUswDBALQWzADBATRhjAwDQQCAAIwBwMFACYH8UgwIgYIKwYBBQUH AQgBAf8EEzARoA8wDQICK7ICAi3WAgMA1V4wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAl/sNIFB+bIPt3K0X xZuQKeldlO6K8F3SXJ6M42d8ZdwQuk+Xnyy4QZiKuzKMnzVSfFgFos8FalNr8D9u vr4qthl3f8/q4frjbqHcvh+e58RZYjqtNziRu+qTSIBAV9Dvb/zApUxSlwno3Gdy +TsT7R+8zYeX7+i9l1XzVikVwAmhajvh8jHZTsnjpM/YukmEszj/m7UJeIw9PLwv 7Of+1kAWtdx7SL8/a7RJ3sqUUbXz/2r8Rf0bOlfQlcCgISz1tmZGL7tK0DXY63Xo 2t+xTECgWAqxu1Y5GuNZMvkJqDCY/73bXTvdXlmsR0H5dFiZy1OnovGbdPRaQzte 0FpXYQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:18 2025 by rpki-client