$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer File: b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer (raw, json) Hash identifier: bR6zESuTEYROyUIwiY1Z10YlYMAGNzvKh4GKZOEMQrc= Subject key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849E0B7FA4CD23D8E015E1C9E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 17 May 2025 00:45:35 +0000 Certificate not after: Fri 20 Aug 2027 00:45:35 +0000 Subordinate resources: IP: 64.45.64.0/18 IP: 65.18.0.0 -- 65.18.111.255 IP: 141.114.0.0/16 IP: 204.197.0.0/17 IP: 207.166.224.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:b7:fa:4c:d2:3d:8e:01:5e:1c:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 17 00:45:35 2025 GMT Not After : Aug 20 00:45:35 2027 GMT Subject: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:07:d1:b3:61:56:9b:39:2f:d1:7e:e3:32: aa:ae:74:37:60:ba:6d:45:5f:f3:22:0c:c6:67:ae: fc:2b:50:97:47:2c:66:95:94:f3:d6:c1:fc:18:90: 90:4b:97:09:b3:b5:ff:e4:36:32:35:f9:2d:a6:f4: 8c:2c:22:f0:09:7d:17:4e:a9:86:9b:d6:78:1d:05: 9f:14:59:b3:4e:ae:13:3c:ab:39:9b:8c:82:5c:ce: 01:a8:fb:2e:6f:c2:51:d9:77:3e:9b:09:11:b3:49: 2c:9b:e7:ba:8e:02:92:eb:f0:d4:7e:cb:5f:f3:2f: 85:4c:67:e3:8c:01:56:38:71:c8:30:18:6c:10:90: fc:6a:e9:11:83:d2:0f:7c:0d:c2:98:40:af:cb:19: 9d:68:93:b0:3f:b0:1e:16:f8:87:7c:10:6b:d4:8f: 1d:51:82:7d:09:55:a0:80:85:49:a0:2f:8e:ee:b3: b0:de:50:1a:ce:c4:d1:3a:76:ff:06:0a:f8:f0:04: e5:cf:62:9a:bf:7b:9f:d3:02:eb:fd:63:8f:e7:3a: 4e:f9:d2:88:0b:b5:3f:ec:8f:b3:43:a7:41:1e:8b: 94:f1:86:66:aa:96:76:c4:3c:91:5d:b8:81:e5:53: a3:a9:66:64:e3:67:eb:5c:18:50:12:f7:09:53:c3: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.45.64.0/18 65.18.0.0-65.18.111.255 141.114.0.0/16 204.197.0.0/17 207.166.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:85:03:c0:47:21:3f:1a:78:e3:43:07:e5:66:e0:18:3a:65: ba:58:41:f7:f9:2f:bb:50:bb:7c:04:f3:70:77:58:b2:d3:5a: 9c:b0:04:f2:ee:ef:31:8b:e8:79:57:a9:93:d7:df:f4:66:38: 0d:72:46:ef:c9:24:95:84:49:9e:57:3c:91:c0:50:f3:b5:db: 3d:4e:bc:9b:8e:ba:59:e0:54:9b:01:8b:88:b7:43:58:cc:23: 51:a8:1f:ce:62:5a:05:cd:dc:58:5e:95:24:9b:bd:1f:29:fc: ea:c6:d5:3e:e9:83:45:d4:2a:50:ab:aa:31:17:9a:e4:37:d4: 88:35:2c:f3:59:3c:17:d3:91:56:27:18:5d:42:04:80:4c:2a: 03:23:53:08:a3:0c:25:1f:75:b8:f1:f5:df:b7:00:5c:ff:95: 77:71:c8:5f:cf:81:14:0f:a8:16:93:c9:cf:4b:17:da:34:e8: 0e:ef:25:d0:81:ed:a8:dd:b3:27:2d:24:fb:46:6a:5e:77:d7: c4:71:6a:02:27:0e:b9:7d:61:bb:f9:7c:9e:8e:68:1b:af:d1: 4a:eb:5f:ae:31:d5:85:cd:96:6a:4f:2f:e5:ed:b7:79:88:8f: 66:57:4e:ff:a1:f0:17:04:b6:4e:b8:ea:c2:20:6c:21:37:35: ba:92:18:4f -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEngt/pM0j2OAV4cnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUxNzAwNDUzNVoXDTI3MDgyMDAwNDUzNVowLzEtMCsGA1UEAxMk YjE3Y2UyMmItNjFhMC00YWU5LTljYzAtZjUwZjNiYjc1MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PEH0bNhVps5L9F+4zKqrnQ3YLptRV/zIgzG Z678K1CXRyxmlZTz1sH8GJCQS5cJs7X/5DYyNfktpvSMLCLwCX0XTqmGm9Z4HQWf FFmzTq4TPKs5m4yCXM4BqPsub8JR2Xc+mwkRs0ksm+e6jgKS6/DUfstf8y+FTGfj jAFWOHHIMBhsEJD8aukRg9IPfA3CmECvyxmdaJOwP7AeFviHfBBr1I8dUYJ9CVWg gIVJoC+O7rOw3lAazsTROnb/Bgr48ATlz2Kav3uf0wLr/WOP5zpO+dKIC7U/7I+z Q6dBHouU8YZmqpZ2xDyRXbiB5VOjqWZk42frXBhQEvcJU8OUswIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFLdrXxiKYVsjgsPyqXUUVaUhsYfhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2JiNzUzMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IxN2NlMjJiLTYxYTAtNGFlOS05 Y2MwLWY1MGYzYmI3NTMwZC9iMTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2Ji NzUzMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQDBAZALUAwCwMDAUESAwQEQRJgAwMAjXIDBAfMxQAD BAXPpuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAc4UDwEchPxp440MH5WbgGDplulhB9/kvu1C7fATzcHdY stNanLAE8u7vMYvoeVepk9ff9GY4DXJG78kklYRJnlc8kcBQ87XbPU68m466WeBU mwGLiLdDWMwjUagfzmJaBc3cWF6VJJu9Hyn86sbVPumDRdQqUKuqMRea5DfUiDUs 81k8F9ORVicYXUIEgEwqAyNTCKMMJR91uPH137cAXP+Vd3HIX8+BFA+oFpPJz0sX 2jToDu8l0IHtqN2zJy0k+0ZqXnfXxHFqAicOuX1hu/l8no5oG6/RSutfrjHVhc2W ak8v5e23eYiPZldO/6HwFwS2TrjqwiBsITc1upIYTw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:21:07 2025 by rpki-client