$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer File: 9c3739a8-4c8d-47b0-8413-77e27a96700c.cer (raw, json) Hash identifier: 80pZZ9SIoZ440nlKCS0K3AIZ4U1ucjYaDf9wwRq2DIw= Subject key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B2A249C42E1CF03AF3F10D720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 12 Sep 2025 00:45:25 +0000 Certificate not after: Thu 16 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 17045 IP: 23.153.240.0/24 IP: 158.51.225.0/24 IP: 2605:84c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:24:9c:42:e1:cf:03:af:3f:10:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 12 00:45:25 2025 GMT Not After : Dec 16 01:45:25 2027 GMT Subject: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ba:62:5a:6f:72:20:11:fa:2b:56:33:10:68: 92:ad:72:d6:d5:cb:38:e9:31:47:86:6d:c4:d1:d4: 42:5c:cd:aa:57:75:f9:23:48:d6:d5:17:6e:b0:c4: a2:54:87:f3:08:32:33:1c:9b:4a:27:86:44:45:bf: f4:76:c1:0f:6a:30:13:36:15:e9:74:a5:e1:51:69: f1:84:39:2c:28:b6:29:65:60:cf:17:77:9f:5e:36: 2a:a3:64:1c:8b:09:cb:7d:9f:d3:02:27:70:0d:bb: 19:ee:3d:c4:70:23:49:d3:f8:18:56:b2:24:35:df: 55:6b:ed:41:76:f0:ff:6f:55:49:76:c5:0e:53:be: be:ff:09:53:4c:9c:67:64:04:69:6c:86:0d:a5:b5: 1f:59:4f:66:78:76:d9:6c:da:8a:89:c2:3d:36:79: 94:76:49:03:69:b7:80:53:37:31:8c:db:3a:f2:3b: 1f:56:8b:83:27:8b:e3:67:5d:9c:3b:f7:20:c0:dd: 0a:f2:05:fb:40:2f:1f:7a:39:be:7e:4d:73:15:8c: df:f3:71:8f:e6:24:fd:4d:03:ca:ab:bd:00:f0:e0: 74:41:cc:52:68:09:1e:4c:24:e4:c6:89:b3:e9:3f: 52:ad:9d:61:af:ca:f5:76:1b:2c:95:a9:25:c6:91: 16:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.153.240.0/24 158.51.225.0/24 IPv6: 2605:84c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17045 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:43:94:7c:6c:3d:17:1d:47:cd:a8:cb:c6:b5:cb:60:2b:54: 92:2a:ac:2b:21:de:25:15:56:9b:17:fb:24:40:eb:0d:66:4c: a0:8d:0c:ec:e6:10:39:d5:f3:20:60:84:b5:35:df:54:78:da: 24:0a:13:64:57:c8:53:e4:16:ac:d8:5e:b4:7c:f3:19:28:d1: 5e:64:08:1b:3a:d7:48:c3:b3:f4:15:42:15:69:25:d0:ce:6c: b8:0b:a0:50:27:64:5c:f4:53:ee:b0:ec:2f:cb:7f:7e:a5:c2: 2c:09:70:0b:b4:8e:9a:b1:0c:c3:bd:61:de:1f:4e:d5:75:f7: aa:cc:8b:4f:1b:0a:74:39:0f:dd:d7:2d:9a:03:ae:b2:a2:db: 84:35:d5:88:00:b8:07:ff:e2:93:bb:c4:8d:d2:fb:10:12:a0: 1e:a4:6d:7b:b0:6b:91:8c:10:cb:fb:10:a4:3b:9f:f9:55:1f: 48:ee:39:89:2c:83:f9:db:1f:a0:59:58:0f:c2:d6:1b:0a:d3: 3a:b0:24:71:0a:3b:e3:62:3c:43:e8:28:00:de:3f:6b:76:01: e5:f9:cf:75:4c:fe:36:bc:90:28:b2:96:f4:80:d6:54:43:e9: ae:c7:f1:00:c7:b5:f5:b6:9a:fb:33:72:d2:6a:6f:9f:d9:14: 40:9f:11:c4 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEsqJJxC4c8Drz8Q1yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkxMjAwNDUyNVoXDTI3MTIxNjAxNDUyNVowLzEtMCsGA1UEAxMk OWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3MDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7piWm9yIBH6K1YzEGiSrXLW1cs46TFHhm3E 0dRCXM2qV3X5I0jW1RdusMSiVIfzCDIzHJtKJ4ZERb/0dsEPajATNhXpdKXhUWnx hDksKLYpZWDPF3efXjYqo2QciwnLfZ/TAidwDbsZ7j3EcCNJ0/gYVrIkNd9Va+1B dvD/b1VJdsUOU76+/wlTTJxnZARpbIYNpbUfWU9meHbZbNqKicI9NnmUdkkDabeA UzcxjNs68jsfVouDJ4vjZ12cO/cgwN0K8gX7QC8fejm+fk1zFYzf83GP5iT9TQPK q70A8OB0QcxSaAkeTCTkxomz6T9SrZ1hr8r1dhsslaklxpEW4wIDAQABo4IELzCC BCswHQYDVR0OBBYEFPsCHYE/I/4Sm4OTvrQUpSelvVl5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzljMzczOWE4LTRjOGQtNDdiMC04 NDEzLTc3ZTI3YTk2NzAwYy85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5 NjcwMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXmfADBACeM+EwDQQCAAIwBwMFACYFhMAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICQpUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAikOUfGw9Fx1HzajLxrXL YCtUkiqsKyHeJRVWmxf7JEDrDWZMoI0M7OYQOdXzIGCEtTXfVHjaJAoTZFfIU+QW rNhetHzzGSjRXmQIGzrXSMOz9BVCFWkl0M5suAugUCdkXPRT7rDsL8t/fqXCLAlw C7SOmrEMw71h3h9O1XX3qsyLTxsKdDkP3dctmgOusqLbhDXViAC4B//ik7vEjdL7 EBKgHqRte7BrkYwQy/sQpDuf+VUfSO45iSyD+dsfoFlYD8LWGwrTOrAkcQo742I8 Q+goAN4/a3YB5fnPdUz+NryQKLKW9IDWVEPprsfxAMe19baa+zNy0mpvn9kUQJ8R xA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:18:23 2025 by rpki-client