$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer File: 891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer (raw, json) Hash identifier: NzY5k2nqkqr+CmnxzPhOjElt7ysOTpzfPaJRrtOTvpU= Subject key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AEF843E6D569E5E39557F5270 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Aug 2025 00:45:24 +0000 Certificate not after: Thu 25 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 25605 AS: 30607 AS: 36692 IP: 67.215.64.0/19 IP: 108.171.128.0/19 IP: 162.210.80.0/21 IP: 198.41.8.0 -- 198.41.13.255 IP: 204.194.232.0/21 IP: 208.67.216.0/21 IP: 208.69.32.0/21 IP: 2620:0:cc0::/44 IP: 2620:119::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:84:3e:6d:56:9e:5e:39:55:7f:52:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 22 00:45:24 2025 GMT Not After : Nov 25 01:45:24 2027 GMT Subject: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:8a:6a:b4:be:38:2c:26:ee:e7:2b:27:b1: 0a:7b:02:0f:6b:f6:45:53:5e:d6:55:96:b6:9e:5a: a4:c7:fb:12:c2:37:ae:6f:2e:a4:95:a6:18:48:5a: dc:58:8c:bb:c6:bf:0d:bb:28:13:06:9f:c3:e9:87: 72:00:8b:72:0e:3f:3e:4b:71:f7:d3:71:14:21:ea: 3d:e7:77:3f:84:b0:33:36:f2:d1:67:98:27:f4:72: 64:52:bb:52:63:04:c0:0f:bc:db:60:ca:b8:d6:60: 79:99:e9:76:67:ff:78:e1:fb:21:19:7d:97:f7:1e: 20:04:5e:ef:14:8a:1b:a0:af:f5:fb:d7:83:ef:c8: 3e:41:2a:d5:34:df:b6:80:a1:9d:f3:09:41:42:fc: 9d:c7:25:5c:b0:01:ad:73:77:e8:7c:d2:87:4b:f9: 85:9a:43:f7:fc:63:8b:9c:f0:dc:b4:d1:59:c3:8f: a2:50:29:34:b7:09:92:ef:58:ac:4c:57:30:69:81: 98:69:67:05:89:fd:b3:6e:04:d2:f3:92:49:2e:ab: 41:5b:11:8e:94:87:5c:71:33:1c:f8:a9:31:5b:86: 6b:15:1d:2c:b2:64:db:ad:b2:bc:7d:fe:35:c1:3a: fc:5b:76:9d:1f:7c:44:c0:df:cd:41:c6:e5:85:b0: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 67.215.64.0/19 108.171.128.0/19 162.210.80.0/21 198.41.8.0-198.41.13.255 204.194.232.0/21 208.67.216.0/21 208.69.32.0/21 IPv6: 2620:0:cc0::/44 2620:119::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25605 30607 36692 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:d5:6d:de:3f:61:00:d5:c4:aa:ea:31:f5:72:e9:84:bd:35: 63:f4:ae:95:1a:0a:0f:5c:11:e8:aa:9a:28:bd:e2:ec:69:7d: 44:c0:1d:d1:87:8e:44:29:41:aa:93:1f:57:af:87:2c:0a:0a: af:ed:54:e0:07:a2:2f:46:f1:c7:8a:22:bc:c7:de:1d:79:20: 22:0c:85:73:29:e7:af:74:be:ec:34:0f:19:27:c0:88:cc:2b: 45:ff:a9:61:1d:fa:b7:8d:6c:c7:0b:53:5f:c9:cf:e6:25:3b: 02:e0:5f:c8:a3:56:cd:db:33:14:ac:6f:b4:3d:dd:49:e5:08: 70:95:2f:1d:77:b8:42:72:46:ad:cc:60:20:cc:55:23:98:44: 2e:33:9e:d6:f2:01:fc:76:27:3d:78:1b:2c:f2:51:52:c2:53: 7e:50:f9:a8:d8:32:e0:ed:3b:20:7a:4e:a6:a1:da:fc:c1:99: 73:9b:70:27:3b:24:43:70:bb:37:86:da:64:a1:65:cc:7d:2a: be:ec:78:23:0f:2e:91:1c:3b:be:a9:32:f3:0b:3f:3c:a4:60: ae:3b:c9:b1:64:73:db:97:88:aa:5f:53:f8:0a:66:96:2b:b0: 23:1d:1a:0e:5d:ad:f4:fe:23:96:e4:4d:ad:68:06:a7:a3:65: cb:b9:92:c0 -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWErvhD5tVp5eOVV/UnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgyMjAwNDUyNFoXDTI3MTEyNTAxNDUyNFowLzEtMCsGA1UEAxMk ODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJkZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsSKarS+OCwm7ucrJ7EKewIPa/ZFU17WVZa2 nlqkx/sSwjeuby6klaYYSFrcWIy7xr8NuygTBp/D6YdyAItyDj8+S3H303EUIeo9 53c/hLAzNvLRZ5gn9HJkUrtSYwTAD7zbYMq41mB5mel2Z/944fshGX2X9x4gBF7v FIoboK/1+9eD78g+QSrVNN+2gKGd8wlBQvydxyVcsAGtc3fofNKHS/mFmkP3/GOL nPDctNFZw4+iUCk0twmS71isTFcwaYGYaWcFif2zbgTS85JJLqtBWxGOlIdccTMc +KkxW4ZrFR0ssmTbrbK8ff41wTr8W3adH3xEwN/NQcblhbBqmwIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFJ4x6LSmNAOwTwognzBq3QpguJJLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzg5MWNjMDFhLTM3YmQtNDFjYS04 ZjJhLTIzYzA2MmJiZGVmYy84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJi YmRlZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwZAYIKwYBBQUH AQcBAf8EVTBTMDgEAgABMDIDBAVD10ADBAVsq4ADBAOi0lAwDAMEA8YpCAMEAcYp DAMEA8zC6AMEA9BD2AMEA9BFIDAXBAIAAjARAwcEJiAAAAzAAwYAJiABGQAwIgYI KwYBBQUHAQgBAf8EEzARoA8wDQICZAUCAnePAgMAj1QwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUNVt3j9h ANXEquox9XLphL01Y/SulRoKD1wR6KqaKL3i7Gl9RMAd0YeORClBqpMfV6+HLAoK r+1U4AeiL0bxx4oivMfeHXkgIgyFcynnr3S+7DQPGSfAiMwrRf+pYR36t41sxwtT X8nP5iU7AuBfyKNWzdszFKxvtD3dSeUIcJUvHXe4QnJGrcxgIMxVI5hELjOe1vIB /HYnPXgbLPJRUsJTflD5qNgy4O07IHpOpqHa/MGZc5twJzskQ3C7N4baZKFlzH0q vux4Iw8ukRw7vqky8ws/PKRgrjvJsWRz25eIql9T+ApmliuwIx0aDl2t9P4jluRN rWgGp6Nly7mSwA== -----END CERTIFICATE-----Generated at Wed Nov 5 14:23:09 2025 by rpki-client