$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d.cer File: c5866eff-c061-4d47-9ecb-06697eb4f13d.cer (raw, json) Hash identifier: HELx7KYqTGbdZZ97uO0JLw2K+VVhqiVOriEGuox92Yk= Subject key identifier: 3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A7778EE5D30202A7620DA8F20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Jul 2025 00:45:36 +0000 Certificate not after: Wed 13 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 53591 IP: 208.74.136.0/22 IP: 208.94.32.0/22 IP: 2604:4700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:78:ee:5d:30:20:2a:76:20:da:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 10 00:45:36 2025 GMT Not After : Oct 13 00:45:36 2027 GMT Subject: CN=c5866eff-c061-4d47-9ecb-06697eb4f13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:44:e9:e8:24:3b:04:af:ac:c7:e8:e6:94: 48:d6:ca:95:36:72:48:0d:70:a0:87:d6:bf:58:92: 41:25:00:98:b5:f6:01:1b:cf:f2:53:7e:f7:1a:f2: 80:69:fd:2c:88:33:b6:ae:7d:da:74:31:21:ef:8f: 5d:06:c8:9f:4a:3b:e5:5c:cf:80:38:14:56:a3:3e: 86:d0:96:c4:10:58:c2:05:22:f9:74:62:34:ec:52: da:09:61:d9:fa:df:e0:b9:5d:e1:25:9f:d1:ff:bb: ed:9c:0b:38:8c:00:6b:54:17:e9:73:88:46:83:d9: a1:4d:4d:af:05:fe:29:4e:c5:e2:76:a8:e2:d6:b7: 4d:73:1d:1b:e3:7c:8c:b6:31:8f:00:40:47:0b:f0: 8c:6f:44:9c:9a:86:5e:10:48:f9:f7:2c:e1:d5:e4: 46:cb:68:c3:4e:f2:47:e3:5b:ab:42:32:da:95:d7: 9a:3e:6c:28:91:b6:90:39:d6:d3:68:5a:ac:b2:97: 43:d1:c0:53:68:a4:18:25:55:8e:2a:ac:2e:48:a3: 2f:0c:cd:f2:1a:7e:e4:2f:1e:b9:e3:15:5c:67:d2: 9d:11:d1:de:09:4c:8f:56:29:8f:78:c1:fb:ee:a8: 65:43:f2:00:3c:a4:8d:59:d9:08:3f:c0:43:36:9c: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.74.136.0/22 208.94.32.0/22 IPv6: 2604:4700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53591 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ae:d4:25:cf:91:79:10:28:ba:46:29:f2:47:59:66:cd:10: 4b:85:5d:5e:46:fc:2d:7e:b3:62:09:65:52:d1:35:68:2e:76: 42:da:7a:91:e9:f4:bc:a9:95:55:92:a8:ff:c9:fb:f9:81:72: 7e:8e:ed:49:59:ea:89:13:2c:f3:9a:02:49:f6:3c:dc:99:d4: 61:d1:cf:ba:9b:fb:06:a3:4e:7e:ea:67:43:b3:4d:3d:44:29: 8a:30:03:23:fd:38:38:ec:63:9e:76:d0:4a:e4:a9:e8:6e:65: 8d:e5:67:d3:8c:c6:94:6c:c6:1e:44:7a:c2:7b:9c:1c:c7:e2: ec:07:70:ef:d8:61:73:20:b7:ca:07:4c:d7:6d:03:67:ee:23: c5:20:1d:dc:b2:e7:83:3e:34:d2:83:13:d9:01:51:6e:95:07: 2e:ef:50:1b:6f:20:88:ed:62:8c:f8:b7:f9:ea:bc:c0:b0:3c: 55:ac:a1:cd:66:b4:9e:e5:60:33:9d:dc:6d:dd:99:dc:80:9f: b0:ef:db:f4:01:1f:f2:a5:ce:cb:9f:95:16:54:a3:09:e3:3f: 5f:f0:62:56:94:35:ac:92:57:b1:ff:0b:71:d6:d6:1f:c7:b2: b5:6a:4f:a2:9a:79:55:5a:f7:c3:43:5a:32:7e:af:38:c3:19: 7d:8b:8f:9c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEp3eO5dMCAqdiDajyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDcxMDAwNDUzNloXDTI3MTAxMzAwNDUzNlowLzEtMCsGA1UEAxMk YzU4NjZlZmYtYzA2MS00ZDQ3LTllY2ItMDY2OTdlYjRmMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzctE6egkOwSvrMfo5pRI1sqVNnJIDXCgh9a/ WJJBJQCYtfYBG8/yU373GvKAaf0siDO2rn3adDEh749dBsifSjvlXM+AOBRWoz6G 0JbEEFjCBSL5dGI07FLaCWHZ+t/guV3hJZ/R/7vtnAs4jABrVBfpc4hGg9mhTU2v Bf4pTsXidqji1rdNcx0b43yMtjGPAEBHC/CMb0ScmoZeEEj59yzh1eRGy2jDTvJH 41urQjLaldeaPmwokbaQOdbTaFqsspdD0cBTaKQYJVWOKqwuSKMvDM3yGn7kLx65 4xVcZ9KdEdHeCUyPVimPeMH77qhlQ/IAPKSNWdkIP8BDNpxTJwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFD9Rsv4IlK0143w9E6OAWikjUbTtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j NTg2NmVmZi1jMDYxLTRkNDctOWVjYi0wNjY5N2ViNGYxM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2M1ODY2ZWZmLWMwNjEtNGQ0Ny05 ZWNiLTA2Njk3ZWI0ZjEzZC9jNTg2NmVmZi1jMDYxLTRkNDctOWVjYi0wNjY5N2Vi NGYxM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALQSogDBALQXiAwDQQCAAIwBwMFACYERwAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANFXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAiu1CXPkXkQKLpGKfJH WWbNEEuFXV5G/C1+s2IJZVLRNWgudkLaepHp9LyplVWSqP/J+/mBcn6O7UlZ6okT LPOaAkn2PNyZ1GHRz7qb+wajTn7qZ0OzTT1EKYowAyP9ODjsY5520ErkqehuZY3l Z9OMxpRsxh5EesJ7nBzH4uwHcO/YYXMgt8oHTNdtA2fuI8UgHdyy54M+NNKDE9kB UW6VBy7vUBtvIIjtYoz4t/nqvMCwPFWsoc1mtJ7lYDOd3G3dmdyAn7Dv2/QBH/Kl zsuflRZUownjP1/wYlaUNaySV7H/C3HW1h/HsrVqT6KaeVVa98NDWjJ+rzjDGX2L j5w= -----END CERTIFICATE-----Generated at Mon Aug 4 07:50:11 2025 by rpki-client