$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer File: 64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer (raw, json) Hash identifier: b7MrRaBZvULk3CDYQwPkF97uFpZuQg2oXHIxOxFOAuM= Subject key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A7FD8FAD28433C47EE5BBE600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 13 Jul 2025 00:45:36 +0000 Certificate not after: Sat 16 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 143.127.0.0/16 IP: 166.98.0.0/16 IP: 198.153.190.0 -- 198.153.196.255 IP: 198.187.197.0 -- 198.187.198.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:d8:fa:d2:84:33:c4:7e:e5:bb:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 13 00:45:36 2025 GMT Not After : Oct 16 00:45:36 2027 GMT Subject: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:a8:a3:26:24:56:4d:3f:ae:40:95:7d:d1: 64:2b:3f:96:a7:95:e0:d3:3f:23:ce:f3:e0:44:7c: c1:dd:c6:2a:6b:9d:d6:ca:0f:6f:b4:e9:31:1a:50: 98:4e:a3:e7:de:85:ca:53:d7:24:d8:41:9d:94:cd: ed:44:a3:90:fa:f8:ca:09:01:36:87:33:21:eb:68: 57:bd:01:2c:35:30:cd:33:f8:68:80:f3:96:15:3d: 27:d0:02:61:df:42:b6:d7:87:00:63:1b:f1:23:bb: 8a:2f:da:b2:2a:2c:9b:70:59:12:d2:6f:91:dc:97: 95:ae:ce:22:ba:99:7b:61:c8:e4:41:8a:52:86:82: 4a:e8:d3:b8:35:ba:86:96:21:e6:a9:39:22:f9:53: d8:39:07:04:6b:45:b1:65:78:d2:39:7a:2c:cb:81: cb:80:49:6b:21:ba:c9:27:e3:e8:58:91:4e:f9:19: 8a:88:58:14:40:0b:53:f7:aa:fd:da:7e:21:f6:8f: 4f:73:69:e2:b9:c5:9b:dc:e9:ed:2e:03:00:d5:a0: b9:97:1d:f2:89:dc:56:0e:91:27:3c:53:be:f6:fb: b2:71:0d:33:5a:25:1e:bb:63:33:5f:1d:89:06:2a: c0:a1:4f:e8:e8:1c:3d:5a:bc:3b:b5:38:08:e7:72: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 143.127.0.0/16 166.98.0.0/16 198.153.190.0-198.153.196.255 198.187.197.0-198.187.198.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:8d:ae:55:1e:6d:a8:38:bf:62:f7:50:5c:54:b7:1e:38:3a: 3a:4a:42:b9:a2:68:79:af:d0:89:68:5a:1f:32:49:89:7a:ba: 8e:65:22:aa:22:6e:a7:3c:83:f7:40:39:28:65:2e:cf:62:08: b7:c7:8e:3d:95:f8:09:d4:e3:01:2b:18:6c:7e:a5:22:63:63: 87:7d:06:9f:36:1e:e6:14:ad:2d:53:92:0f:24:af:be:74:00: fb:e4:d3:45:cf:4b:68:b6:bf:95:e8:6e:1c:44:7b:fa:d9:06: 9f:5d:d1:73:d1:3f:3c:67:cc:52:b5:3e:cd:99:33:cc:cf:5c: a3:ec:aa:30:4c:e5:1c:58:9d:85:05:74:88:7f:68:95:1b:6e: 05:cb:33:a0:d5:56:b9:d2:77:19:e1:68:f7:a2:f1:4e:52:12: 3f:13:64:b2:73:11:42:fc:f2:1a:bc:ba:aa:7b:2a:45:e5:9a: a4:b6:cd:e0:b6:06:50:60:02:7d:cd:4e:c4:38:a7:61:61:c8: 39:09:f0:fb:14:bf:6b:d1:92:3e:d9:d9:11:e1:a0:d3:44:7b: a8:20:6b:8a:4b:4e:b6:5e:79:ff:f0:31:19:f1:c8:6f:f2:3f: 93:28:d9:8e:c6:a0:c6:25:a3:a3:fe:da:c7:cf:84:e6:c1:6c: b4:6f:c7:6c -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEp/2PrShDPEfuW75gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDcxMzAwNDUzNloXDTI3MTAxNjAwNDUzNlowLzEtMCsGA1UEAxMk NjRkN2NiMmUtMTE3Yy00MzFlLTk1YWEtYTBjYzRjMmQ4OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXWooyYkVk0/rkCVfdFkKz+Wp5Xg0z8jzvPg RHzB3cYqa53Wyg9vtOkxGlCYTqPn3oXKU9ck2EGdlM3tRKOQ+vjKCQE2hzMh62hX vQEsNTDNM/hogPOWFT0n0AJh30K214cAYxvxI7uKL9qyKiybcFkS0m+R3JeVrs4i upl7YcjkQYpShoJK6NO4NbqGliHmqTki+VPYOQcEa0WxZXjSOXosy4HLgElrIbrJ J+PoWJFO+RmKiFgUQAtT96r92n4h9o9Pc2niucWb3OntLgMA1aC5lx3yidxWDpEn PFO+9vuycQ0zWiUeu2MzXx2JBirAoU/o6Bw9Wrw7tTgI53Ig0QIDAQABo4IEHzCC BBswHQYDVR0OBBYEFDTiuJR7ltXAGnDyHp3Nq9v17qs3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82 NGQ3Y2IyZS0xMTdjLTQzMWUtOTVhYS1hMGNjNGMyZDg5YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY0ZDdjYjJlLTExN2MtNDMxZS05 NWFhLWEwY2M0YzJkODliYi82NGQ3Y2IyZS0xMTdjLTQzMWUtOTVhYS1hMGNjNGMy ZDg5YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMCwEAgABMCYDAwCPfwMDAKZiMAwDBAHGmb4DBADGmcQwDAMEAMa7 xQMEAMa7xjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBjja5VHm2oOL9i91BcVLceODo6SkK5omh5r9CJaFof MkmJerqOZSKqIm6nPIP3QDkoZS7PYgi3x449lfgJ1OMBKxhsfqUiY2OHfQafNh7m FK0tU5IPJK++dAD75NNFz0totr+V6G4cRHv62QafXdFz0T88Z8xStT7NmTPMz1yj 7KowTOUcWJ2FBXSIf2iVG24FyzOg1Va50ncZ4Wj3ovFOUhI/E2SycxFC/PIavLqq eypF5Zqkts3gtgZQYAJ9zU7EOKdhYcg5CfD7FL9r0ZI+2dkR4aDTRHuoIGuKS062 Xnn/8DEZ8chv8j+TKNmOxqDGJaOj/trHz4TmwWy0b8ds -----END CERTIFICATE-----Generated at Mon Aug 4 07:46:16 2025 by rpki-client