$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d.cer File: adc7f8d9-77be-458a-afed-220f2e24643d.cer (raw, json) Hash identifier: 4KH/iURVK+yY8kJsjeTxalO3x2b4/n1rnUFRPTW63AA= Subject key identifier: 56:34:FB:D1:3E:42:45:57:D1:37:1C:EF:79:80:D9:D1:21:84:2E:99 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A8D1EA5E9A51C13D095C8AE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d/adc7f8d9-77be-458a-afed-220f2e24643d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 18:51:30 +0000 Certificate not after: Sat 02 Jan 2027 01:45:26 +0000 Subordinate resources: IP: 23.131.0.0/24 IP: 2620:8:c100::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:1e:a5:e9:a5:1c:13:d0:95:c8:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 17 18:51:30 2025 GMT Not After : Jan 2 01:45:26 2027 GMT Subject: CN=adc7f8d9-77be-458a-afed-220f2e24643d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d0:e0:e9:ea:a5:bf:ab:7c:33:02:7b:ec:91: 1b:64:4f:4a:57:03:c8:ec:3e:2b:75:e8:0b:cb:4f: 3f:8e:73:90:1e:50:ba:fa:7a:3c:82:6c:c5:2b:6d: 4b:a3:6f:29:20:24:7e:5d:67:82:bb:7c:ed:f0:d9: de:f5:10:8d:68:06:22:93:27:f6:65:98:d5:41:0f: 0b:91:96:ba:a9:58:70:c5:24:70:74:66:06:92:53: 22:dc:2e:07:e7:22:45:f1:af:72:d9:16:01:a4:f4: 56:6c:9f:92:bb:dd:b0:7b:72:08:3a:eb:98:c8:9c: 08:2c:12:dd:e5:20:6d:bd:8b:8b:8c:f4:4f:f2:27: c2:42:80:f3:33:eb:af:38:9d:e4:c0:9e:aa:27:4b: cf:3c:39:3b:b1:ac:66:6f:70:06:44:fc:47:8d:f6: 3b:56:45:3f:df:5f:84:6b:d0:a0:fa:ca:f0:78:e0: 82:27:22:dd:6a:9e:82:9f:a7:cd:94:7b:e9:b2:e3: ea:5b:8d:e4:8b:01:c7:5e:ef:87:33:dd:74:d1:06: 78:c8:89:f0:9f:5a:a5:81:2c:9d:d4:35:de:17:8a: 32:67:e8:f1:23:b3:33:e9:99:95:b5:c1:d7:cd:4c: a5:b3:10:e0:ae:76:a9:4c:9c:05:c4:c9:ce:55:ab: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:34:FB:D1:3E:42:45:57:D1:37:1C:EF:79:80:D9:D1:21:84:2E:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d/adc7f8d9-77be-458a-afed-220f2e24643d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.131.0.0/24 IPv6: 2620:8:c100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:bd:43:68:3a:53:c8:35:a1:1a:c6:1b:da:0f:d7:5f:91:ad: 2e:06:f5:51:91:b7:6c:f0:0d:41:66:15:ad:93:6e:ba:dc:eb: 85:f1:2d:f5:2f:d3:f3:78:a4:70:e7:9e:7c:ce:0c:f7:04:85: cd:48:b7:83:92:3f:dc:43:19:c4:28:fa:38:84:b6:de:1f:11: df:dd:a8:8e:06:0d:75:aa:eb:6d:a7:2e:b2:5d:1b:76:73:20: 27:bf:14:3b:81:57:51:ee:13:a4:05:77:71:d5:e1:22:7a:2c: 34:3c:1e:82:e4:00:fe:fd:58:8e:e1:4e:1a:71:cd:c4:19:35: cd:ff:c9:68:db:41:2c:15:83:94:62:a4:27:29:5d:a5:7d:7e: 02:51:ff:88:88:b5:59:0f:93:27:a8:49:c4:76:3b:bc:fc:6e: e4:02:63:a8:d4:01:4f:3d:9c:06:a7:fa:39:09:b5:f8:fb:7f: 47:00:c3:57:ae:15:e5:03:be:2b:82:fc:a4:b3:38:dd:11:4e: e4:05:27:12:3e:53:e0:1a:4d:47:0b:e9:dd:e6:61:a4:5d:00: c5:1f:0b:6e:6c:d1:8d:31:b7:89:85:56:9b:f7:06:af:d1:7c: 36:4d:df:5b:45:60:6b:7d:86:5c:cb:35:19:ed:c0:cb:e6:4f: a0:32:b4:cc -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEqNHqXppRwT0JXIroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDcxNzE4NTEzMFoXDTI3MDEwMjAxNDUyNlowLzEtMCsGA1UEAxMk YWRjN2Y4ZDktNzdiZS00NThhLWFmZWQtMjIwZjJlMjQ2NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldDg6eqlv6t8MwJ77JEbZE9KVwPI7D4rdegL y08/jnOQHlC6+no8gmzFK21Lo28pICR+XWeCu3zt8Nne9RCNaAYikyf2ZZjVQQ8L kZa6qVhwxSRwdGYGklMi3C4H5yJF8a9y2RYBpPRWbJ+Su92we3IIOuuYyJwILBLd 5SBtvYuLjPRP8ifCQoDzM+uvOJ3kwJ6qJ0vPPDk7saxmb3AGRPxHjfY7VkU/31+E a9Cg+srweOCCJyLdap6Cn6fNlHvpsuPqW43kiwHHXu+HM9100QZ4yInwn1qlgSyd 1DXeF4oyZ+jxI7Mz6ZmVtcHXzUylsxDgrnapTJwFxMnOVatQWwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFFY0+9E+QkVX0Tcc73mA2dEhhC6ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h ZGM3ZjhkOS03N2JlLTQ1OGEtYWZlZC0yMjBmMmUyNDY0M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FkYzdmOGQ5LTc3YmUtNDU4YS1h ZmVkLTIyMGYyZTI0NjQzZC9hZGM3ZjhkOS03N2JlLTQ1OGEtYWZlZC0yMjBmMmUy NDY0M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXgwAwDwQCAAIwCQMHACYgAAjBADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQA5vUNoOlPINaEaxhvaD9dfka0uBvVRkbds8A1BZhWtk2663OuF8S31L9PzeKRw 5558zgz3BIXNSLeDkj/cQxnEKPo4hLbeHxHf3aiOBg11quttpy6yXRt2cyAnvxQ7 gVdR7hOkBXdx1eEieiw0PB6C5AD+/ViO4U4acc3EGTXN/8lo20EsFYOUYqQnKV2l fX4CUf+IiLVZD5MnqEnEdju8/G7kAmOo1AFPPZwGp/o5CbX4+39HAMNXrhXlA74r gvykszjdEU7kBScSPlPgGk1HC+nd5mGkXQDFHwtubNGNMbeJhVab9wav0Xw2Td9b RWBrfYZcyzUZ7cDL5k+gMrTM -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:41 2025 by rpki-client