$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer File: 7c534b20-f6a2-45cc-b3f2-861233813f8e.cer (raw, json) Hash identifier: kxg0mRfnzcjR2T3fRvr9A4NsLUmK5YEJfnXWA0Lkzjk= Subject key identifier: 42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858499DB7941B7AD87CB15F1E4E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 00:45:37 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: AS: 36140 IP: 23.161.64.0/24 IP: 2620:58:c400::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:b7:94:1b:7a:d8:7c:b1:5f:1e:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 23 00:45:37 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=7c534b20-f6a2-45cc-b3f2-861233813f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:eb:de:c8:1a:8f:2d:9c:8f:8a:5e:1b:8d: 6b:f1:db:57:51:e1:b3:de:f9:c1:aa:2d:52:1e:77: cb:64:f0:1c:a9:dd:7b:6a:63:01:46:6a:ea:e3:9e: 69:9a:75:8c:cb:40:1e:22:10:8b:e6:2d:0a:13:c1: cb:b7:20:32:3c:9e:19:1c:89:c1:45:02:3a:48:f4: bf:82:05:c3:9a:3c:30:e9:17:b5:03:75:cd:98:bc: 50:6b:4a:27:09:ed:bf:d9:d6:76:30:b9:03:41:2a: cb:ea:3f:be:a0:05:19:40:26:97:16:32:81:e3:18: 8b:23:35:12:d8:61:82:03:e9:23:55:28:9d:56:4a: c8:10:96:1b:de:00:7c:02:e6:7b:52:06:bc:93:68: 61:7b:5c:19:a1:6d:53:a6:cb:94:b0:64:c3:b7:8f: cb:21:73:74:1d:07:be:68:08:02:cb:a0:16:83:3e: c9:f6:3c:81:e5:4f:86:4c:85:ed:e5:0c:20:36:87: 8a:30:3b:a1:00:cb:06:3f:39:1d:7a:39:28:09:d2: 1f:be:27:e2:f3:f7:53:d1:9b:2d:c2:9b:fc:ce:c3: 54:13:16:8c:c0:f1:e7:37:f0:de:e4:d3:28:29:06: a5:8e:01:4e:e2:0d:f4:ae:60:7a:4c:35:e8:a1:0f: c4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.161.64.0/24 IPv6: 2620:58:c400::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36140 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:82:3a:09:15:1f:d0:23:7e:0c:b7:5b:5c:35:2e:75:b0:ce: 47:80:00:23:9f:15:ee:58:01:e4:1e:43:b4:43:ed:46:9c:e5: aa:b6:d7:46:3a:7b:d1:36:9e:c8:f6:fd:4a:1c:bc:e3:98:38: 07:41:c3:b1:0f:f7:5c:00:95:f3:b2:23:91:2f:77:be:9f:2d: 12:47:e4:28:5f:af:21:55:aa:1f:c9:8f:2c:6f:6e:0f:f5:74: 32:c5:dd:4d:bb:46:56:47:72:d7:35:d4:52:e8:45:f3:5f:71: c9:31:de:68:89:f0:0d:f5:74:27:42:2f:88:fd:25:ce:b9:4d: c4:ac:3d:e4:18:e1:99:02:8a:0d:eb:99:77:36:f1:c5:63:47: 40:e6:60:6f:54:43:a9:25:54:a0:2b:ce:1f:7d:75:b3:01:b1: 3c:e7:2c:e4:02:3b:c4:2e:87:8a:88:f4:67:47:a5:37:2c:ca: 03:d7:91:82:c3:67:16:9a:f4:1f:81:d1:5c:f0:71:f4:76:fe: b4:ee:33:22:f3:c0:1d:6b:76:37:60:3c:cd:2a:65:3a:0c:30: 9e:2f:5e:f9:61:1e:7f:67:f1:c9:b2:44:c5:f0:fd:4c:7e:da: 6c:12:15:99:ff:3c:56:b2:25:9e:1e:70:d2:87:58:90:09:ff: fa:35:0d:86 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEmdt5Qbeth8sV8eTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDQyMzAwNDUzN1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk N2M1MzRiMjAtZjZhMi00NWNjLWIzZjItODYxMjMzODEzZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F7r3sgajy2cj4peG41r8dtXUeGz3vnBqi1S HnfLZPAcqd17amMBRmrq455pmnWMy0AeIhCL5i0KE8HLtyAyPJ4ZHInBRQI6SPS/ ggXDmjww6Re1A3XNmLxQa0onCe2/2dZ2MLkDQSrL6j++oAUZQCaXFjKB4xiLIzUS 2GGCA+kjVSidVkrIEJYb3gB8AuZ7Uga8k2hhe1wZoW1TpsuUsGTDt4/LIXN0HQe+ aAgCy6AWgz7J9jyB5U+GTIXt5QwgNoeKMDuhAMsGPzkdejkoCdIfvifi8/dT0Zst wpv8zsNUExaMwPHnN/De5NMoKQaljgFO4g30rmB6TDXooQ/ExQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFEIdktp5eh/o8UgcoUa2cD794+25MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 YzUzNGIyMC1mNmEyLTQ1Y2MtYjNmMi04NjEyMzM4MTNmOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzdjNTM0YjIwLWY2YTItNDVjYy1i M2YyLTg2MTIzMzgxM2Y4ZS83YzUzNGIyMC1mNmEyLTQ1Y2MtYjNmMi04NjEyMzM4 MTNmOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXoUAwDwQCAAIwCQMHACYgAFjEADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAjSwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAioI6CRUf0CN+DLdbXDUudbDO R4AAI58V7lgB5B5DtEPtRpzlqrbXRjp70TaeyPb9Shy845g4B0HDsQ/3XACV87Ij kS93vp8tEkfkKF+vIVWqH8mPLG9uD/V0MsXdTbtGVkdy1zXUUuhF819xyTHeaInw DfV0J0IviP0lzrlNxKw95BjhmQKKDeuZdzbxxWNHQOZgb1RDqSVUoCvOH311swGx POcs5AI7xC6Hioj0Z0elNyzKA9eRgsNnFpr0H4HRXPBx9Hb+tO4zIvPAHWt2N2A8 zSplOgwwni9e+WEef2fxybJExfD9TH7abBIVmf88VrIlnh5w0odYkAn/+jUNhg== -----END CERTIFICATE-----Generated at Wed Nov 5 04:14:23 2025 by rpki-client