$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer File: 960e110b-8a58-4e15-a2f1-8d907656427c.cer (raw, json) Hash identifier: ECiyWJyRmoudfeFmsxK6ZtKNmW8mTT+7j1gSgFkaC2c= Subject key identifier: 1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AB4E3DF3D6A1AB34F0F15F500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 00:45:24 +0000 Certificate not after: Thu 04 Nov 2027 00:45:24 +0000 Subordinate resources: AS: 27437 IP: 69.10.16.0/20 IP: 216.105.160.0/22 IP: 2620:dd:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:e3:df:3d:6a:1a:b3:4f:0f:15:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 1 00:45:24 2025 GMT Not After : Nov 4 00:45:24 2027 GMT Subject: CN=960e110b-8a58-4e15-a2f1-8d907656427c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:c2:a7:8c:22:00:d0:54:ca:2d:05:97:6b: 89:31:31:9c:ec:0a:48:96:c5:10:22:79:0c:6d:02: 78:5a:7d:e3:48:39:21:9d:58:f8:b5:19:e5:10:b7: e7:fb:7c:28:d0:24:8a:ec:d2:19:0f:f4:2e:94:66: 2e:81:34:70:76:9f:c1:68:74:4d:99:76:ae:9e:39: fe:6c:c2:26:d9:50:1a:83:c4:d1:2e:dd:3c:83:d6: 5b:66:c6:79:f2:0f:44:52:20:4a:82:c6:4c:9b:c7: e4:15:a8:18:51:96:81:be:1f:12:cf:a5:92:54:6e: ab:d1:4e:98:65:f9:fe:9e:f3:60:69:28:ef:64:d9: 9e:b0:84:c7:9f:65:bd:fc:63:fa:3e:03:1f:6a:1e: 78:44:9c:45:ae:78:46:73:85:eb:8f:35:50:90:2e: 87:6d:69:50:f4:60:af:cc:bb:3e:ce:c7:59:2c:fb: 2d:60:2d:af:7f:87:2d:f9:9c:6d:ad:eb:92:71:b3: 20:5f:01:67:37:37:59:dc:ab:fb:20:f6:43:50:21: 37:fb:5f:37:0d:3c:20:db:9d:34:13:ad:d6:7b:58: e6:fd:8a:b8:e3:bf:23:70:b2:b9:20:c7:f8:17:95: d6:d6:5b:25:0b:19:f4:11:c2:23:59:4a:18:a2:cd: 4e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 69.10.16.0/20 216.105.160.0/22 IPv6: 2620:dd:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27437 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3d:cb:29:24:99:3b:1e:5a:70:72:98:58:87:e1:93:3b:a9: 22:06:fb:c5:93:4f:36:b0:86:70:6e:20:44:11:3c:b2:a4:cf: af:8f:db:f2:4f:0d:45:af:15:89:a9:10:6e:15:67:48:8c:e9: 83:ba:e6:af:51:27:ad:c7:2b:f1:cc:0a:6b:40:4e:f7:6b:e3: 58:da:ae:5b:78:ea:ec:6e:11:a7:97:91:3c:ee:60:f1:31:77: 37:dc:48:02:3a:bc:65:e8:0e:83:27:ab:73:dc:4a:d9:57:70: b6:82:d7:19:88:73:95:f4:b2:90:ab:ae:ae:31:64:97:7a:fa: ce:ce:bb:16:f0:25:b1:d3:cc:7d:59:b9:f9:27:13:2c:0a:ee: 35:f2:2c:f7:f8:c5:47:40:ec:98:82:8a:6b:44:bd:81:6d:9f: 29:ac:ad:93:7a:2f:ca:76:99:ec:39:14:b0:19:3d:e9:08:04: 2e:c2:5a:33:97:85:1e:4e:1b:7d:da:2f:20:9a:95:38:70:8d: 6b:bb:6c:21:2e:5b:66:17:6a:e0:04:e3:d1:aa:f1:ca:cc:2d: d4:99:66:5d:4f:83:c2:02:39:a6:a7:05:58:e5:55:09:ac:99: 14:ed:0d:7d:1d:7f:76:2e:98:5d:e6:49:29:c2:1e:0f:b4:f1: 12:3d:56:22 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEq04989ahqzTw8V9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgwMTAwNDUyNFoXDTI3MTEwNDAwNDUyNFowLzEtMCsGA1UEAxMk OTYwZTExMGItOGE1OC00ZTE1LWEyZjEtOGQ5MDc2NTY0MjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGDCp4wiANBUyi0Fl2uJMTGc7ApIlsUQInkM bQJ4Wn3jSDkhnVj4tRnlELfn+3wo0CSK7NIZD/QulGYugTRwdp/BaHRNmXaunjn+ bMIm2VAag8TRLt08g9ZbZsZ58g9EUiBKgsZMm8fkFagYUZaBvh8Sz6WSVG6r0U6Y Zfn+nvNgaSjvZNmesITHn2W9/GP6PgMfah54RJxFrnhGc4XrjzVQkC6HbWlQ9GCv zLs+zsdZLPstYC2vf4ct+ZxtreuScbMgXwFnNzdZ3Kv7IPZDUCE3+183DTwg2500 E63We1jm/Yq4478jcLK5IMf4F5XW1lslCxn0EcIjWUoYos1OsQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFBuLpyQaEDToMKRjiuijp40OXZ28MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 NjBlMTEwYi04YTU4LTRlMTUtYTJmMS04ZDkwNzY1NjQyN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk2MGUxMTBiLThhNTgtNGUxNS1h MmYxLThkOTA3NjU2NDI3Yy85NjBlMTEwYi04YTU4LTRlMTUtYTJmMS04ZDkwNzY1 NjQyN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBARFChADBALYaaAwDwQCAAIwCQMHACYgAN2AADAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJrLTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsPcspJJk7HlpwcphY h+GTO6kiBvvFk082sIZwbiBEETyypM+vj9vyTw1FrxWJqRBuFWdIjOmDuuavUSet xyvxzAprQE73a+NY2q5beOrsbhGnl5E87mDxMXc33EgCOrxl6A6DJ6tz3ErZV3C2 gtcZiHOV9LKQq66uMWSXevrOzrsW8CWx08x9Wbn5JxMsCu418iz3+MVHQOyYgopr RL2BbZ8prK2Tei/KdpnsORSwGT3pCAQuwlozl4UeTht92i8gmpU4cI1ru2whLltm F2rgBOPRqvHKzC3UmWZdT4PCAjmmpwVY5VUJrJkU7Q19HX92Lphd5kkpwh4PtPES PVYi -----END CERTIFICATE-----Generated at Mon Aug 4 07:41:47 2025 by rpki-client