$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer File: b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer (raw, json) Hash identifier: RwHtCUbVdLlkl1JYel2of/s3jjVM8kk8WJ9AmepFbyc= Subject key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A15C2FDB3BEC71D9457D3F900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Jun 2025 00:45:37 +0000 Certificate not after: Wed 08 Sep 2027 00:45:37 +0000 Subordinate resources: IP: 164.55.224.0/19 IP: 192.234.235.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:c2:fd:b3:be:c7:1d:94:57:d3:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 5 00:45:37 2025 GMT Not After : Sep 8 00:45:37 2027 GMT Subject: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:12:a9:3c:6e:a3:9c:e7:ed:46:c2:df:ac: 18:ef:ed:7f:14:e3:fd:58:dc:82:e8:fb:3c:36:e6: 20:94:0d:7c:4e:8f:47:2e:f8:18:2a:c1:70:2c:4d: 24:4c:7d:5d:d5:9f:2b:9c:24:c8:cb:60:5b:17:9f: 08:30:ef:9b:ae:4d:1b:69:6d:f0:9d:b5:a9:de:4d: 0f:9f:3a:f8:f2:3c:ed:0f:8e:05:b9:e6:a9:46:b8: 09:19:f2:26:57:31:07:c3:1d:8f:f1:1a:b0:17:5a: df:e1:4c:31:ae:c9:fe:5e:d0:ed:09:46:e9:61:49: a9:03:4f:9b:14:f0:86:6c:bd:e9:cf:c7:1f:ca:ed: 3d:9f:2d:62:71:4c:39:bf:3e:87:21:6d:39:ab:60: e9:7b:80:5d:3d:80:27:2d:e7:70:86:5c:b3:01:4f: e2:d3:76:78:e0:cb:4f:0a:e5:30:b1:70:6e:ed:09: 4b:9a:ec:24:06:48:9e:43:2c:95:df:e9:d9:b6:ec: 1c:82:03:04:c3:e2:ff:97:6d:8b:b0:e8:bc:98:9b: d3:31:5c:ef:64:64:17:a6:16:cf:a3:ff:19:19:51: 90:7a:cd:13:ee:2e:69:44:d3:d9:55:8f:88:f9:44: 63:61:29:33:b6:f3:29:f1:46:a2:ec:73:0c:90:96: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 164.55.224.0/19 192.234.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:32:67:51:95:02:da:96:fc:92:83:22:01:64:ee:a0:a4:6b: c4:c7:9b:cd:ed:79:0f:96:cd:4e:88:23:4b:9a:93:c1:26:20: 5c:0f:0b:1e:78:6d:41:f0:35:c2:da:6a:57:e5:d0:23:15:95: a7:2d:91:58:72:ff:d6:3a:0a:92:1b:f3:8e:e2:91:6c:85:96: 2f:1f:e0:83:0c:a2:7f:9e:7b:1d:ac:42:e4:64:4a:65:dc:73: 96:da:85:89:9a:2b:3e:11:fb:51:0f:c3:81:7d:c2:bf:0c:a0: b2:ab:86:79:d4:c9:18:ca:a0:f8:19:ad:ee:61:ee:32:e6:0d: 9c:64:9c:8e:4a:5a:c9:07:98:e2:ed:2f:aa:18:97:ca:8d:56: 9d:f4:bb:2e:da:95:3f:60:9c:d6:c1:5f:b6:ee:8a:e6:1f:ef: 93:7d:aa:14:cc:f8:5f:2e:d5:df:26:8b:1b:a4:17:fb:23:ce: 09:80:19:d3:35:e6:e3:a1:98:2d:1e:e6:f1:d6:e8:1b:2a:74: d9:ab:c4:b3:54:7e:0c:b5:1c:44:19:a9:ee:f2:84:88:a0:df: d9:5c:22:c0:43:a8:00:94:fc:e1:ec:49:30:4a:db:48:b2:ef: 6a:3e:57:84:ef:dd:d3:6c:0b:44:d2:9e:d8:69:fd:bb:d3:32: 59:0e:a7:9c -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEoVwv2zvscdlFfT+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYwNTAwNDUzN1oXDTI3MDkwODAwNDUzN1owLzEtMCsGA1UEAxMk YjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVhMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+wSqTxuo5zn7UbC36wY7+1/FOP9WNyC6Ps8 NuYglA18To9HLvgYKsFwLE0kTH1d1Z8rnCTIy2BbF58IMO+brk0baW3wnbWp3k0P nzr48jztD44FueapRrgJGfImVzEHwx2P8RqwF1rf4Uwxrsn+XtDtCUbpYUmpA0+b FPCGbL3pz8cfyu09ny1icUw5vz6HIW05q2Dpe4BdPYAnLedwhlyzAU/i03Z44MtP CuUwsXBu7QlLmuwkBkieQyyV3+nZtuwcggMEw+L/l22LsOi8mJvTMVzvZGQXphbP o/8ZGVGQes0T7i5pRNPZVY+I+URjYSkztvMp8Uai7HMMkJYXwQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFO/oxZY+PWYVLqdRvpxmDJUyiaRbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IwY2EwMmU3LTdhMTItNGQ5MC04 ZmViLThmMTMwYWFlYTM4MC9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFh ZWEzODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAWkN+ADBADA6uswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQTJnUZUC2pb8 koMiAWTuoKRrxMebze15D5bNTogjS5qTwSYgXA8LHnhtQfA1wtpqV+XQIxWVpy2R WHL/1joKkhvzjuKRbIWWLx/ggwyif557HaxC5GRKZdxzltqFiZorPhH7UQ/DgX3C vwygsquGedTJGMqg+Bmt7mHuMuYNnGScjkpayQeY4u0vqhiXyo1WnfS7LtqVP2Cc 1sFftu6K5h/vk32qFMz4Xy7V3yaLG6QX+yPOCYAZ0zXm46GYLR7m8dboGyp02avE s1R+DLUcRBmp7vKEiKDf2VwiwEOoAJT84exJMErbSLLvaj5XhO/d02wLRNKe2Gn9 u9MyWQ6nnA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:55:11 2025 by rpki-client