$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer File: 80713a6d-ea31-48fc-a530-e2898cffb87a.cer (raw, json) Hash identifier: Owm0hGVUVZ6TlHub4TQBFIYvTNg8uD2xm5RyHbHioUw= Subject key identifier: BF:6D:BF:CA:7B:EF:E6:FF:CC:BB:E1:4E:71:3C:AF:63:8F:93:0B:BC Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B7B1A6D4658D9167331DD21A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Oct 2025 00:45:22 +0000 Certificate not after: Fri 14 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 192.132.1.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:1a:6d:46:58:d9:16:73:31:dd:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 11 00:45:22 2025 GMT Not After : Jan 14 01:45:22 2028 GMT Subject: CN=80713a6d-ea31-48fc-a530-e2898cffb87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:a9:79:7a:e2:08:ff:34:0f:d9:45:9a:ac: a1:49:47:85:22:fa:bd:f8:a3:04:37:3e:88:c6:f7: 40:6a:a6:29:6b:3d:dc:ee:c8:a2:43:3b:c0:2d:95: 08:d8:b0:72:59:7e:cf:92:b0:65:59:30:34:e0:70: 8f:56:af:c4:19:8c:82:12:a7:07:08:33:0f:0f:4c: 83:0c:2d:35:4c:d6:29:68:80:2b:8f:88:4a:71:f9: 72:e6:a1:de:b6:d6:af:1d:5d:fc:ec:f1:a7:b2:06: 96:d2:04:66:2f:76:1b:46:73:6a:16:46:4a:97:31: 05:83:b0:23:1a:ab:77:8d:57:72:eb:ec:e9:33:cb: 43:69:50:88:53:e4:b6:34:d2:3c:97:48:05:6b:4b: f4:a0:9c:24:ae:b4:e4:01:97:f3:be:97:a0:54:5e: 60:33:a0:c5:b1:51:c7:51:e3:16:32:eb:eb:66:10: a1:b4:37:ce:b9:fa:13:d5:f8:1d:14:a2:28:b4:19: ee:7c:33:ff:70:cd:37:5b:bd:38:41:2f:4a:fd:d2: 8f:50:b5:3f:89:8a:f1:51:98:b0:4f:9d:ac:14:32: a9:92:80:bf:67:4a:0b:bc:f3:e7:bd:67:e5:47:4e: fb:fb:a2:f8:42:5b:42:f3:85:39:60:ef:5f:80:04: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6D:BF:CA:7B:EF:E6:FF:CC:BB:E1:4E:71:3C:AF:63:8F:93:0B:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.132.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9a:e3:a3:53:40:32:d4:d5:26:40:df:f4:84:46:b0:d9:f3: 42:65:e2:da:80:7e:7c:e3:bf:28:e9:b1:10:0d:ef:1a:59:94: c6:92:b6:70:fd:85:c2:30:0b:94:1b:c7:29:1f:86:97:b1:54: b5:9c:58:ed:da:49:97:fe:7c:02:6f:f5:39:ee:a6:f6:ed:c5: e8:77:99:ad:94:9e:3b:62:73:5a:f5:c1:8f:d5:f8:59:6a:77: 91:5d:9b:06:0b:83:d7:1e:84:61:34:1f:81:53:76:1a:9d:be: 0c:64:42:97:3e:4f:93:8e:64:bb:61:fe:38:6a:d5:12:1b:dd: 7c:7f:47:f0:d6:1f:1d:b7:26:bf:4d:4e:50:7b:aa:b0:97:5b: 3c:41:19:cf:44:f4:f6:f7:36:b0:dd:fc:68:ad:4d:90:eb:22: 51:a0:62:79:21:41:98:36:8f:d5:8d:cf:d7:92:19:ff:e1:3e: 96:48:eb:05:86:ab:4c:0e:3b:6a:6c:e7:58:ae:54:da:21:a3: 29:2f:a8:d6:57:62:20:5e:7a:78:c1:ce:83:fb:e1:eb:b5:bb: 7a:9a:e0:28:1d:b3:60:a7:db:62:8e:8d:c2:60:60:1b:4a:db: 93:cf:23:d6:8b:aa:42:1b:a4:e6:7a:e2:af:fa:af:e7:0d:b1: 95:19:78:de -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt7Gm1GWNkWczHdIaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAxMTAwNDUyMloXDTI4MDExNDAxNDUyMlowLzEtMCsGA1UEAxMk ODA3MTNhNmQtZWEzMS00OGZjLWE1MzAtZTI4OThjZmZiODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0WpeXriCP80D9lFmqyhSUeFIvq9+KMENz6I xvdAaqYpaz3c7siiQzvALZUI2LByWX7PkrBlWTA04HCPVq/EGYyCEqcHCDMPD0yD DC01TNYpaIArj4hKcfly5qHettavHV387PGnsgaW0gRmL3YbRnNqFkZKlzEFg7Aj Gqt3jVdy6+zpM8tDaVCIU+S2NNI8l0gFa0v0oJwkrrTkAZfzvpegVF5gM6DFsVHH UeMWMuvrZhChtDfOufoT1fgdFKIotBnufDP/cM03W704QS9K/dKPULU/iYrxUZiw T52sFDKpkoC/Z0oLvPPnvWflR077+6L4QltC84U5YO9fgARLvQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFL9tv8p77+b/zLvhTnE8r2OPkwu8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 MDcxM2E2ZC1lYTMxLTQ4ZmMtYTUzMC1lMjg5OGNmZmI4N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzgwNzEzYTZkLWVhMzEtNDhmYy1h NTMwLWUyODk4Y2ZmYjg3YS84MDcxM2E2ZC1lYTMxLTQ4ZmMtYTUzMC1lMjg5OGNm ZmI4N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAhAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOZrjo1NAMtTVJkDf9IRG sNnzQmXi2oB+fOO/KOmxEA3vGlmUxpK2cP2FwjALlBvHKR+Gl7FUtZxY7dpJl/58 Am/1Oe6m9u3F6HeZrZSeO2JzWvXBj9X4WWp3kV2bBguD1x6EYTQfgVN2Gp2+DGRC lz5Pk45ku2H+OGrVEhvdfH9H8NYfHbcmv01OUHuqsJdbPEEZz0T09vc2sN38aK1N kOsiUaBieSFBmDaP1Y3P15IZ/+E+lkjrBYarTA47amznWK5U2iGjKS+o1ldiIF56 eMHOg/vh67W7eprgKB2zYKfbYo6NwmBgG0rbk88j1ouqQhuk5nrir/qv5w2xlRl4 3g== -----END CERTIFICATE-----Generated at Wed Nov 5 02:46:59 2025 by rpki-client