$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer File: d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer (raw, json) Hash identifier: liKW4xOr1dyg0Af43M2mBG6cEE1GD9ncCAyRgL/ZFqE= Subject key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285849B6D7B7D641521C134B503280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 May 2025 00:45:35 +0000 Certificate not after: Thu 05 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 397701 IP: 192.64.12.0/24 IP: 199.193.137.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:d7:b7:d6:41:52:1c:13:4b:50:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 2 00:45:35 2025 GMT Not After : Aug 5 00:45:35 2027 GMT Subject: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:3b:b1:f2:04:81:0f:99:4e:f5:17:06:98: c9:3a:a9:e1:59:61:44:ad:b7:d0:bc:9d:b2:21:90: ef:2c:33:db:b6:2f:19:b9:f7:8e:48:54:c9:e1:d2: 24:ff:7a:a6:8c:06:ce:3c:2b:09:5f:a8:fd:3a:d0: d1:9a:17:0c:18:37:ca:b6:69:ce:db:bd:13:86:ed: 3f:ee:97:ba:3e:c8:86:22:f8:3d:d3:0e:0d:36:eb: 20:4d:92:bd:4a:a7:da:eb:f4:d2:75:c3:95:1f:88: 98:ed:62:8e:04:00:a0:ec:15:f4:d8:63:5e:ea:15: f9:49:a8:ea:25:be:49:41:16:f8:ad:45:4e:14:ae: a7:f0:20:8a:b5:4a:1d:6a:a8:f8:0f:db:38:be:a6: 97:e6:76:b9:e3:3e:53:80:ae:02:14:d2:cf:f5:11: 62:d7:7b:5a:fd:22:f6:9b:14:26:8a:de:a1:de:ff: 4c:3e:17:e9:e0:00:c4:0c:88:5e:eb:77:d0:a7:d0: 0c:07:31:c3:e3:2c:0a:4e:40:56:eb:8e:81:46:57: ff:9d:36:47:2a:a4:cc:8e:15:d5:f4:03:5a:88:0e: 4e:22:7f:7f:1c:3a:03:03:71:e4:48:29:55:8e:1f: a7:b5:8f:f3:55:19:7a:5d:24:a9:35:ba:9a:0c:f8: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.64.12.0/24 199.193.137.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397701 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cd:c7:cc:af:72:1b:d7:7e:e4:4b:c0:db:95:ac:cd:bf:6e: d7:3e:20:ba:cc:cf:0c:fb:e1:50:71:7a:1d:2b:b3:75:93:18: 0c:59:ce:ba:d9:df:3b:56:ce:3a:8d:bd:14:2c:7d:20:78:b4: b2:4a:d0:75:ea:7a:3e:71:70:b3:80:b4:59:a5:c5:38:dc:97: ff:44:96:e2:1a:c9:e0:38:26:8c:fc:2b:d4:b7:6a:5e:bd:36: c8:66:67:81:d0:2b:6c:03:2d:d1:4f:6f:04:2b:a0:9d:a1:ac: 83:ae:a2:5c:a6:f6:cd:01:a0:59:4a:3f:a0:1b:5f:b0:15:49: 53:7b:d7:8a:db:b5:5c:82:e5:2c:9d:f1:0a:c5:c1:98:44:e2: 77:62:19:6a:55:e9:8f:7b:c3:02:05:7a:8e:da:dc:7d:e2:49: 52:27:1b:34:9f:af:50:1b:d1:90:eb:25:b5:eb:0a:a5:b1:a0: 40:ec:03:14:c0:a9:43:59:35:7e:a7:46:3e:41:0e:70:1a:c0: 90:7b:c3:b3:da:a8:6c:04:e2:ad:39:77:63:8c:5f:f4:20:96: 20:4f:ae:52:93:bb:c6:d6:87:3c:bc:6a:92:56:a8:ae:cb:13: ab:cd:f7:2d:96:1d:a1:2c:f1:74:2d:db:22:84:bc:28:3c:2e: e9:97:a7:8a -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEm217fWQVIcE0tQMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDUwMjAwNDUzNVoXDTI3MDgwNTAwNDUzNVowLzEtMCsGA1UEAxMk ZDI0NDJlNDktZmIzMS00YmY3LWFlZTYtMmE3MDMzYTU3Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgA7sfIEgQ+ZTvUXBpjJOqnhWWFErbfQvJ2y IZDvLDPbti8ZufeOSFTJ4dIk/3qmjAbOPCsJX6j9OtDRmhcMGDfKtmnO270Thu0/ 7pe6PsiGIvg90w4NNusgTZK9Sqfa6/TSdcOVH4iY7WKOBACg7BX02GNe6hX5Sajq Jb5JQRb4rUVOFK6n8CCKtUodaqj4D9s4vqaX5na54z5TgK4CFNLP9RFi13ta/SL2 mxQmit6h3v9MPhfp4ADEDIhe63fQp9AMBzHD4ywKTkBW646BRlf/nTZHKqTMjhXV 9ANaiA5OIn9/HDoDA3HkSClVjh+ntY/zVRl6XSSpNbqaDPjdPwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFDeiA1aVkiw1vZnCWpuCIHdzFB59MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k MjQ0MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcwMzNhNTdjZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QyNDQyZTQ5LWZiMzEtNGJmNy1h ZWU2LTJhNzAzM2E1N2NmYS9kMjQ0MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcwMzNh NTdjZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAQAwDBADHwYkwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhGFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIXNx8yvchvXfuRLwNuVrM2/btc+ILrMzwz74VBx eh0rs3WTGAxZzrrZ3ztWzjqNvRQsfSB4tLJK0HXqej5xcLOAtFmlxTjcl/9EluIa yeA4Joz8K9S3al69NshmZ4HQK2wDLdFPbwQroJ2hrIOuolym9s0BoFlKP6AbX7AV SVN714rbtVyC5Syd8QrFwZhE4ndiGWpV6Y97wwIFeo7a3H3iSVInGzSfr1Ab0ZDr JbXrCqWxoEDsAxTAqUNZNX6nRj5BDnAawJB7w7PaqGwE4q05d2OMX/QgliBPrlKT u8bWhzy8apJWqK7LE6vN9y2WHaEs8XQt2yKEvCg8LumXp4o= -----END CERTIFICATE-----Generated at Wed Nov 5 04:20:33 2025 by rpki-client