$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer File: c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer (raw, json) Hash identifier: 7s6GRjt0OoTbxhEKNHQd9EbyvEldPN6n3c/oRQa53Rg= Subject key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BB0256F9D25F92E2881F17200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Oct 2025 00:45:24 +0000 Certificate not after: Wed 02 Feb 2028 01:45:24 +0000 Subordinate resources: AS: 4471 AS: 4501 AS: 7949 AS: 12129 IP: 65.183.160.0/19 IP: 66.51.144.0/20 IP: 66.103.224.0/19 IP: 67.214.112.0/20 IP: 69.39.64.0/19 IP: 74.126.0.0/19 IP: 199.231.52.0/22 IP: 199.249.0.0/21 IP: 204.232.80.0/20 IP: 205.251.176.0/20 IP: 207.91.192.0/18 IP: 209.124.32.0/19 IP: 209.131.0.0/19 IP: 216.109.192.0/20 IP: 216.150.224.0/20 IP: 216.234.96.0/19 IP: 2001:504:131::/48 IP: 2607:f790::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:25:6f:9d:25:f9:2e:28:81:f1:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 30 00:45:24 2025 GMT Not After : Feb 2 01:45:24 2028 GMT Subject: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:fa:c1:05:c7:f9:43:3e:2b:74:be:f1:b1: f5:0e:b1:e4:7c:07:da:01:cb:21:b9:41:9b:79:55: df:9f:23:ce:f5:08:e1:9a:47:05:dc:fc:7a:33:b8: 85:37:d7:80:7e:9c:0a:4a:87:d3:f6:b3:51:cc:ed: 45:3f:7b:86:6c:7b:10:8c:7b:94:f9:2b:60:e8:d9: 4d:51:74:e7:1e:b7:dd:76:fd:eb:df:eb:61:14:e5: 0a:ff:cd:74:11:d3:7d:87:72:27:ce:eb:c8:ea:01: 10:87:db:9c:73:56:15:00:ac:ef:54:59:3e:08:5d: c9:fe:0a:87:ab:d3:be:ea:5f:36:2e:08:5a:e4:0c: 85:1e:0e:2f:ea:b6:9f:4c:92:7a:1b:03:be:4a:59: 16:1c:b3:7f:68:ab:70:62:9a:6d:1c:22:19:ca:51: 31:0d:f6:23:81:4c:79:ee:9c:5a:b4:31:3f:c6:b0: bc:b1:d1:23:b0:6d:60:75:7a:64:7a:a3:59:47:6d: 7b:75:38:6b:2c:82:79:06:0b:64:d8:fe:e9:b9:b5: 27:d3:63:b6:88:5d:66:e7:bb:7d:cb:fc:0b:c6:86: 13:ff:2b:44:46:30:28:70:07:fe:ae:42:3a:c7:cd: 04:51:d7:f9:20:f3:7c:d3:9c:1f:9d:66:39:a0:c7: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 65.183.160.0/19 66.51.144.0/20 66.103.224.0/19 67.214.112.0/20 69.39.64.0/19 74.126.0.0/19 199.231.52.0/22 199.249.0.0/21 204.232.80.0/20 205.251.176.0/20 207.91.192.0/18 209.124.32.0/19 209.131.0.0/19 216.109.192.0/20 216.150.224.0/20 216.234.96.0/19 IPv6: 2001:504:131::/48 2607:f790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4471 4501 7949 12129 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:7f:94:9e:79:c7:4f:98:5b:ee:8a:b4:8c:25:55:a9:62:2f: 9b:fa:16:b9:46:48:3e:38:fe:ab:8d:2f:1d:e7:2c:82:f8:71: 79:a0:7c:19:da:8a:d0:c7:c0:e1:fd:f6:e6:8b:41:4a:2d:8f: c4:d4:19:08:e7:57:9e:91:70:90:2c:94:7d:bb:15:d1:ea:c1: 56:3e:66:35:90:e7:ea:75:73:50:b8:0d:c7:34:2c:cc:3b:12: db:ce:40:69:42:19:a2:11:37:3b:cb:e4:e0:ef:1f:30:e1:61: 12:fd:e4:1d:65:ca:bd:a6:ea:82:ae:c7:78:33:c0:0e:85:f4: 9f:b4:0c:9b:3b:16:53:cf:81:68:b3:50:38:a6:a0:13:fe:6e: d8:05:74:6e:72:1b:78:c0:60:97:3c:1d:82:12:df:79:2b:df: 21:4e:9b:ee:a3:a9:f7:1e:65:b0:f3:13:fc:92:e4:f2:fc:5e: ee:ac:7e:30:7c:2a:8b:1a:10:70:b0:be:af:e8:be:fb:0b:73: db:af:66:31:ed:35:6c:8a:db:85:ce:c9:72:9d:a8:1c:93:ab: 56:20:c9:ab:56:53:68:b7:84:42:e2:96:bc:98:9b:3f:72:4d: 8b:d4:e2:31:44:a5:7c:8a:d4:5a:64:f2:97:2b:18:70:22:91: f2:a9:c8:e5 -----BEGIN CERTIFICATE----- MIIHiTCCBnGgAwIBAgIUAQ0Mn0MoWEuwJW+dJfkuKIHxcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAzMDAwNDUyNFoXDTI4MDIwMjAxNDUyNFowLzEtMCsGA1UEAxMk YzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHr6wQXH+UM+K3S+8bH1DrHkfAfaAcshuUGb eVXfnyPO9QjhmkcF3Px6M7iFN9eAfpwKSofT9rNRzO1FP3uGbHsQjHuU+Stg6NlN UXTnHrfddv3r3+thFOUK/810EdN9h3InzuvI6gEQh9ucc1YVAKzvVFk+CF3J/gqH q9O+6l82Lgha5AyFHg4v6rafTJJ6GwO+SlkWHLN/aKtwYpptHCIZylExDfYjgUx5 7pxatDE/xrC8sdEjsG1gdXpkeqNZR217dThrLIJ5Bgtk2P7pubUn02O2iF1m57t9 y/wLxoYT/ytERjAocAf+rkI6x80EUdf5IPN805wfnWY5oMciAQIDAQABo4IEmzCC BJcwHQYDVR0OBBYEFFAwrhgU1KLAZXAf9XQgdtSGDWRvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j NDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2M0MjY5NzZlLWZiZmItNGFkOC1h MjhhLWEyNWY1YjA2NzFkZS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIw NjcxZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgZMGCCsGAQUF BwEHAQH/BIGDMIGAMGYEAgABMGADBAVBt6ADBARCM5ADBAVCZ+ADBARD1nADBAVF J0ADBAVKfgADBALH5zQDBAPH+QADBATM6FADBATN+7ADBAbPW8ADBAXRfCADBAXR gwADBATYbcADBATYluADBAXY6mAwFgQCAAIwEAMHACABBQQBMQMFACYH95AwJQYI KwYBBQUHAQgBAf8EFjAUoBIwEAICEXcCAhGVAgIfDQICL2EwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkn+U nnnHT5hb7oq0jCVVqWIvm/oWuUZIPjj+q40vHecsgvhxeaB8GdqK0MfA4f325otB Si2PxNQZCOdXnpFwkCyUfbsV0erBVj5mNZDn6nVzULgNxzQszDsS285AaUIZohE3 O8vk4O8fMOFhEv3kHWXKvabqgq7HeDPADoX0n7QMmzsWU8+BaLNQOKagE/5u2AV0 bnIbeMBglzwdghLfeSvfIU6b7qOp9x5lsPMT/JLk8vxe7qx+MHwqixoQcLC+r+i+ +wtz269mMe01bIrbhc7Jcp2oHJOrViDJq1ZTaLeEQuKWvJibP3JNi9TiMUSlfIrU WmTylysYcCKR8qnI5Q== -----END CERTIFICATE-----Generated at Wed Nov 5 04:21:22 2025 by rpki-client