$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer File: a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer (raw, json) Hash identifier: QkoUHnaIlHnzDvALjrRHajryu1voJuZsrpyejDO/kxs= Subject key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BA7C561F46B3D96B79D617A50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Oct 2025 00:45:23 +0000 Certificate not after: Sun 30 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 216.152.77.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:c5:61:f4:6b:3d:96:b7:9d:61:7a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 27 00:45:23 2025 GMT Not After : Jan 30 01:45:23 2028 GMT Subject: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:d1:be:ab:cb:79:44:bb:36:b4:54:ff:0d: 84:88:9c:9e:cc:02:85:b9:46:7a:9c:93:7d:7a:98: 3a:cf:ee:e4:26:19:3c:7d:77:de:51:59:72:3c:f4: b6:8a:7f:93:85:71:51:09:6f:b8:0a:a3:a0:10:8b: 74:46:e8:fa:f5:f5:ba:7a:ff:fd:39:50:b5:fa:88: de:03:b9:ac:03:af:cf:27:01:a8:17:0b:69:ac:0c: af:1b:88:b1:67:67:78:75:68:b1:91:54:3e:73:dd: 65:79:0f:07:7d:04:f2:8c:c9:f5:20:78:26:df:f2: ae:bb:ff:54:ac:a1:36:91:87:bb:b2:63:17:dc:1b: 82:5c:d1:3c:0d:73:48:3f:8f:93:ac:9e:ae:08:2c: c1:fe:a9:00:86:69:ff:ab:c3:22:85:0a:ea:ba:02: 1c:c4:b7:31:c7:91:e1:0c:0a:ba:4c:0f:4c:1f:7b: 73:78:9b:a7:66:2a:5d:84:8f:c7:f3:db:59:a5:52: d1:33:d7:d4:90:81:db:18:7b:8c:72:30:f0:bc:11: 75:18:a0:71:02:5c:ec:6d:a4:77:ca:89:50:44:7c: c6:15:a0:89:31:e6:83:ed:88:bf:a3:0c:7f:74:c3: d2:2b:9b:e0:97:e0:55:d2:74:b0:59:30:07:6b:cb: 54:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 216.152.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:13:ba:7a:45:53:79:df:c5:c0:7a:13:db:f9:79:59:54:da: c7:39:a2:c9:9a:52:39:4a:03:ed:71:1f:49:89:fe:a1:f9:fd: dd:e2:fa:52:9c:ef:24:52:fb:48:09:e0:47:52:f9:37:53:d6: b9:47:9f:0e:d5:0b:44:88:29:20:d3:07:14:73:69:4a:47:f2: e8:1d:a8:80:77:1b:0a:80:40:db:70:0f:8b:bd:26:d9:f5:46: 97:e7:b1:d2:f3:dc:b8:6f:77:08:9b:5e:21:46:a8:a8:f2:30: 8c:63:47:ed:d9:0c:a5:e9:17:7d:62:50:12:d3:e9:c1:b6:2a: 3b:6f:cb:1d:3d:c9:72:1e:a4:22:0b:5f:d5:16:94:7a:50:f6: 1f:33:81:57:72:1f:b8:7a:1f:7c:a7:c3:92:c9:be:15:03:cb: 5c:09:1a:81:c8:ab:2f:e7:2f:69:ee:c3:1e:ae:10:cc:cc:0e: 0d:46:2e:85:b5:04:75:1a:67:a1:8d:72:e8:87:28:42:d5:82: 69:c8:b8:63:84:d5:66:4f:81:c9:19:f5:65:a4:6c:b2:5b:79: 82:21:0e:b1:7c:b4:85:2d:2c:6a:52:e3:da:f8:ed:a9:7e:eb: bc:00:0a:3b:81:ab:c7:62:5e:bf:48:30:6e:21:80:2c:29:5d: 66:b3:b0:4b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEunxWH0az2Wt51helAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAyNzAwNDUyM1oXDTI4MDEzMDAxNDUyM1owLzEtMCsGA1UEAxMk YTdlYWZlNjUtY2MxNi00OGE3LWIyMjEtYjAwYmZjMTgxZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlnRvqvLeUS7NrRU/w2EiJyezAKFuUZ6nJN9 epg6z+7kJhk8fXfeUVlyPPS2in+ThXFRCW+4CqOgEIt0Ruj69fW6ev/9OVC1+oje A7msA6/PJwGoFwtprAyvG4ixZ2d4dWixkVQ+c91leQ8HfQTyjMn1IHgm3/Kuu/9U rKE2kYe7smMX3BuCXNE8DXNIP4+TrJ6uCCzB/qkAhmn/q8MihQrqugIcxLcxx5Hh DAq6TA9MH3tzeJunZipdhI/H89tZpVLRM9fUkIHbGHuMcjDwvBF1GKBxAlzsbaR3 yolQRHzGFaCJMeaD7Yi/owx/dMPSK5vgl+BV0nSwWTAHa8tUlwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFL/uLKdDbdqoKyDM468f25JTuR93MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h N2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMxODFmM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2E3ZWFmZTY1LWNjMTYtNDhhNy1i MjIxLWIwMGJmYzE4MWYzZi9hN2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMx ODFmM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADYmE0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfBO6ekVTed/FwHoT2/l5 WVTaxzmiyZpSOUoD7XEfSYn+ofn93eL6UpzvJFL7SAngR1L5N1PWuUefDtULRIgp INMHFHNpSkfy6B2ogHcbCoBA23APi70m2fVGl+ex0vPcuG93CJteIUaoqPIwjGNH 7dkMpekXfWJQEtPpwbYqO2/LHT3Jch6kIgtf1RaUelD2HzOBV3IfuHoffKfDksm+ FQPLXAkagcirL+cvae7DHq4QzMwODUYuhbUEdRpnoY1y6IcoQtWCaci4Y4TVZk+B yRn1ZaRsslt5giEOsXy0hS0salLj2vjtqX7rvAAKO4Grx2Jev0gwbiGALCldZrOw Sw== -----END CERTIFICATE-----Generated at Wed Nov 5 08:57:23 2025 by rpki-client