$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05.cer File: 58551ca9-c834-4e94-9452-385a3685aa05.cer (raw, json) Hash identifier: mOICXqRygMAqwJf+ZF8iZGZLRqaDgp+YVC39FO1QgTA= Subject key identifier: A6:24:61:55:FC:1B:55:C3:F2:C7:22:B7:0D:54:55:94:CD:8F:02:11 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B110473CD98D21D2538969880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/58551ca9-c834-4e94-9452-385a3685aa05.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Sep 2025 00:45:24 +0000 Certificate not after: Tue 07 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 36198 IP: 23.181.64.0/24 IP: 170.39.64.0/22 IP: 2620:136:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:04:73:cd:98:d2:1d:25:38:96:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 3 00:45:24 2025 GMT Not After : Dec 7 01:45:24 2027 GMT Subject: CN=58551ca9-c834-4e94-9452-385a3685aa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b6:6c:f4:f6:f4:71:d7:25:cf:34:37:7e:40: 93:f8:66:12:a2:3d:ca:44:b2:16:dc:0a:a6:a3:e9: 29:e1:94:fd:18:fd:50:bf:e3:72:b6:51:4f:6d:d0: 8e:f0:1a:be:94:f3:b3:f9:d1:66:6e:44:78:60:7b: 30:bf:f6:37:91:25:a7:1a:32:57:05:b8:1b:0b:d6: b7:a6:90:00:ef:fc:8e:4e:3c:96:a1:7c:fe:9d:ca: db:65:c4:fd:05:5c:fc:82:9a:e1:50:2d:47:b7:22: fb:ea:a2:89:51:9e:03:04:2b:c8:33:85:61:dc:6a: 55:db:f3:b8:4f:ff:35:fd:d3:e7:51:8a:1a:06:d8: be:e6:b1:f5:eb:22:2a:b7:84:a9:75:c5:5d:9a:22: ea:99:97:37:7b:bb:31:c2:fc:9b:c9:3b:23:2d:35: 68:a9:ac:e2:f6:56:b4:53:d4:b2:65:11:56:10:3b: 71:55:40:04:1d:c0:7d:b1:bd:b7:fa:7a:76:e4:99: a4:a8:57:63:c8:86:8c:72:bc:6b:2b:4a:25:f2:72: a5:c6:8d:8f:0b:65:95:72:5d:88:89:fa:94:ea:e7: 59:bb:9d:71:99:85:43:c0:63:f3:89:aa:ad:56:cd: 53:c9:00:b0:94:7b:f3:a2:00:3c:62:fa:6f:77:e5: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:24:61:55:FC:1B:55:C3:F2:C7:22:B7:0D:54:55:94:CD:8F:02:11 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/58551ca9-c834-4e94-9452-385a3685aa05.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.181.64.0/24 170.39.64.0/22 IPv6: 2620:136:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36198 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c5:00:57:4c:91:3c:60:e7:18:8e:8f:35:50:d7:22:d2:48: c2:c0:4b:6f:89:c2:57:ef:f0:fe:3f:bb:56:7e:17:c4:fc:d1: a4:00:9a:db:43:36:f0:c5:91:dd:d5:9b:99:0a:97:65:4f:8c: 09:7d:06:b3:96:d7:3d:ef:c1:0f:a0:12:62:f3:ba:58:7c:8e: 76:53:52:38:0b:aa:a0:49:f4:4f:75:94:40:e3:22:ef:b8:ff: fa:7f:86:ba:96:93:91:d6:5f:8d:33:28:33:00:50:bb:d3:0e: 5c:b9:a3:91:b6:c3:e2:da:54:cb:72:db:37:b0:ae:cd:03:90: 9e:b4:20:7b:d3:ac:37:02:58:fd:18:33:54:42:d6:41:98:5f: 56:89:27:44:af:af:31:e4:0b:e8:be:ad:14:26:8f:23:8e:ce: 84:7f:3e:1d:4d:e2:74:68:b5:2c:19:9b:1a:89:9e:a5:af:c5: f1:b1:05:60:60:4c:5d:3c:b1:5b:bc:98:a7:e5:f9:52:8a:3b: f1:5a:47:3a:e7:c4:64:40:7d:3c:43:5a:a9:d5:ad:17:90:6c: 84:cc:b9:23:a2:fd:93:ed:ca:16:b1:b4:c3:0f:95:bb:24:ea: d6:42:c8:5f:24:b4:93:11:26:28:e0:b6:4f:3f:c3:5d:33:45: 00:1a:87:aa -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEsRBHPNmNIdJTiWmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkwMzAwNDUyNFoXDTI3MTIwNzAxNDUyNFowLzEtMCsGA1UEAxMk NTg1NTFjYTktYzgzNC00ZTk0LTk0NTItMzg1YTM2ODVhYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Zs9Pb0cdclzzQ3fkCT+GYSoj3KRLIW3Aqm o+kp4ZT9GP1Qv+NytlFPbdCO8Bq+lPOz+dFmbkR4YHswv/Y3kSWnGjJXBbgbC9a3 ppAA7/yOTjyWoXz+ncrbZcT9BVz8gprhUC1HtyL76qKJUZ4DBCvIM4Vh3GpV2/O4 T/81/dPnUYoaBti+5rH16yIqt4SpdcVdmiLqmZc3e7sxwvybyTsjLTVoqazi9la0 U9SyZRFWEDtxVUAEHcB9sb23+np25JmkqFdjyIaMcrxrK0ol8nKlxo2PC2WVcl2I ifqU6udZu51xmYVDwGPziaqtVs1TyQCwlHvzogA8Yvpvd+UnFQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFKYkYVX8G1XD8scitw1UVZTNjwIRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 ODU1MWNhOS1jODM0LTRlOTQtOTQ1Mi0zODVhMzY4NWFhMDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU4NTUxY2E5LWM4MzQtNGU5NC05 NDUyLTM4NWEzNjg1YWEwNS81ODU1MWNhOS1jODM0LTRlOTQtOTQ1Mi0zODVhMzY4 NWFhMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXtUADBAKqJ0AwDwQCAAIwCQMHBCYgATagADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAjWYwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAU8UAV0yRPGDnGI6P NVDXItJIwsBLb4nCV+/w/j+7Vn4XxPzRpACa20M28MWR3dWbmQqXZU+MCX0Gs5bX Pe/BD6ASYvO6WHyOdlNSOAuqoEn0T3WUQOMi77j/+n+GupaTkdZfjTMoMwBQu9MO XLmjkbbD4tpUy3LbN7CuzQOQnrQge9OsNwJY/RgzVELWQZhfVoknRK+vMeQL6L6t FCaPI47OhH8+HU3idGi1LBmbGomepa/F8bEFYGBMXTyxW7yYp+X5Uoo78VpHOufE ZEB9PENaqdWtF5BshMy5I6L9k+3KFrG0ww+VuyTq1kLIXyS0kxEmKOC2Tz/DXTNF ABqHqg== -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:45 2025 by rpki-client