$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8.cer File: 61a98034-fe16-431f-9842-402073e93fa8.cer (raw, json) Hash identifier: D0NaagKpphzIwzzfYkHvZvlQdSHwJEY2tK4Y4SpUziY= Subject key identifier: 2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B381A072F945248225E980300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Sep 2025 00:45:24 +0000 Certificate not after: Tue 21 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 62628 IP: 208.99.52.0/23 IP: 2602:80c:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:1a:07:2f:94:52:48:22:5e:98:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 17 00:45:24 2025 GMT Not After : Dec 21 01:45:24 2027 GMT Subject: CN=61a98034-fe16-431f-9842-402073e93fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:a0:5e:ec:81:af:3f:9e:45:89:c2:5a:b2: 67:18:d1:0e:c6:c1:18:bd:b7:96:8c:95:7b:a6:a7: 11:51:fb:0b:88:2e:31:53:d0:c0:37:23:b7:2b:47: be:f8:fd:fd:90:bd:52:a2:fc:c6:e6:f6:61:3d:99: 6b:4e:e0:b9:5e:76:81:37:b8:d2:80:95:74:62:8e: cd:45:1d:3f:34:25:03:57:36:16:77:e6:6f:01:28: 71:f7:d5:05:e6:ee:7b:8f:7a:df:c2:3c:ba:2b:37: 36:e0:49:f5:c7:10:32:09:f1:2a:17:85:80:1a:c6: 7e:72:cf:90:5d:ea:22:d4:26:31:df:c1:76:7d:9c: 5f:ce:f7:74:0b:72:18:ee:c5:e8:fa:ae:8f:6f:a6: c8:dc:bd:8a:f4:8d:de:e2:0c:aa:a0:80:22:de:bd: 93:ba:2b:fc:e2:be:24:43:ce:f3:b4:3e:b5:a1:ce: 9c:6a:a3:42:49:26:2b:64:35:68:ec:4d:22:ff:c3: 71:60:91:0f:8c:f9:76:02:14:04:92:76:63:c6:bc: 11:56:26:4a:be:3d:dd:eb:25:c6:a8:f0:aa:d9:84: 73:78:2c:6d:2c:f5:67:d8:b2:50:4c:d4:31:26:b0: 92:e6:4b:52:78:b2:00:86:ac:c7:6b:50:8b:8a:ef: 48:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FA:CC:02:3E:41:92:1C:1A:F1:C5:F6:89:2F:2F:FA:7B:65:5A:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61a98034-fe16-431f-9842-402073e93fa8/61a98034-fe16-431f-9842-402073e93fa8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.99.52.0/23 IPv6: 2602:80c:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62628 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:54:9c:60:7a:a2:92:f1:19:51:83:e8:d9:8a:d9:b0:4e:ca: 72:ca:05:9d:1f:92:e6:b9:b3:6d:47:59:6e:7a:ab:8f:f3:a6: ce:0c:60:67:76:29:31:9d:b0:22:2f:f2:b4:5d:58:4c:15:ad: a7:64:fb:1b:90:11:c1:14:40:48:23:87:ac:80:61:3a:85:ab: dd:36:76:a7:8b:b7:d0:f3:76:df:18:87:1b:47:46:ba:f4:26: f4:8d:d5:57:1a:4d:fa:58:81:bf:85:51:9e:d6:f8:e0:d8:87: f0:43:a6:3b:80:9b:87:16:16:30:98:89:b0:42:40:4e:e4:37: 37:85:45:9a:51:37:0e:1f:0b:c8:16:c5:28:8c:62:a7:e6:1c: 1b:e9:4a:75:b3:b2:14:92:c2:c1:b9:3e:22:68:d6:68:8f:89: c4:a4:b7:fa:02:f7:05:57:64:d0:06:46:87:8d:16:59:f6:06: 08:a1:07:62:76:12:3c:25:cf:9b:ba:a5:bc:f3:3b:e6:1a:d2: d0:9a:77:f1:b8:51:cd:a5:48:d0:69:70:5f:4c:e0:57:4d:43: 16:ff:e7:c5:70:c4:a0:7a:32:f7:44:1e:f3:ac:9b:b0:6c:7c: bf:fb:2a:b6:0f:5f:b8:a3:6c:3d:50:6a:c1:30:94:c9:59:26: 9e:3a:78:b3 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEs4GgcvlFJIIl6YAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkxNzAwNDUyNFoXDTI3MTIyMTAxNDUyNFowLzEtMCsGA1UEAxMk NjFhOTgwMzQtZmUxNi00MzFmLTk4NDItNDAyMDczZTkzZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloygXuyBrz+eRYnCWrJnGNEOxsEYvbeWjJV7 pqcRUfsLiC4xU9DANyO3K0e++P39kL1SovzG5vZhPZlrTuC5XnaBN7jSgJV0Yo7N RR0/NCUDVzYWd+ZvAShx99UF5u57j3rfwjy6Kzc24En1xxAyCfEqF4WAGsZ+cs+Q Xeoi1CYx38F2fZxfzvd0C3IY7sXo+q6Pb6bI3L2K9I3e4gyqoIAi3r2Tuiv84r4k Q87ztD61oc6caqNCSSYrZDVo7E0i/8NxYJEPjPl2AhQEknZjxrwRViZKvj3d6yXG qPCq2YRzeCxtLPVn2LJQTNQxJrCS5ktSeLIAhqzHa1CLiu9IUwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC36zAI+QZIcGvHF9okvL/p7ZVqGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82 MWE5ODAzNC1mZTE2LTQzMWYtOTg0Mi00MDIwNzNlOTNmYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzYxYTk4MDM0LWZlMTYtNDMxZi05 ODQyLTQwMjA3M2U5M2ZhOC82MWE5ODAzNC1mZTE2LTQzMWYtOTg0Mi00MDIwNzNl OTNmYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHQYzQwDgQCAAIwCAMGACYCCAxAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD0pDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtVJxgeqKS8RlRg+jZitmwTspy ygWdH5LmubNtR1luequP86bODGBndikxnbAiL/K0XVhMFa2nZPsbkBHBFEBII4es gGE6havdNnani7fQ83bfGIcbR0a69Cb0jdVXGk36WIG/hVGe1vjg2IfwQ6Y7gJuH FhYwmImwQkBO5Dc3hUWaUTcOHwvIFsUojGKn5hwb6Up1s7IUksLBuT4iaNZoj4nE pLf6AvcFV2TQBkaHjRZZ9gYIoQdidhI8Jc+buqW88zvmGtLQmnfxuFHNpUjQaXBf TOBXTUMW/+fFcMSgejL3RB7zrJuwbHy/+yq2D1+4o2w9UGrBMJTJWSaeOniz -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:41 2025 by rpki-client