$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b.cer File: d55c153d-2f1d-4d5f-842d-75b64073df8b.cer (raw, json) Hash identifier: /0TI6TtOQiY9QAM6Hkz+tFS1ifVoth4uDlXtdnvFoxY= Subject key identifier: A3:77:07:DA:D9:E3:11:E1:5A:26:E0:E9:4A:C8:12:35:37:7F:6A:F3 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BB2051829D0DECB698CB38080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/d55c153d-2f1d-4d5f-842d-75b64073df8b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Oct 2025 16:51:51 +0000 Certificate not after: Wed 02 Feb 2028 17:51:51 +0000 Subordinate resources: AS: 19211 IP: 66.187.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:05:18:29:d0:de:cb:69:8c:b3:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 30 16:51:51 2025 GMT Not After : Feb 2 17:51:51 2028 GMT Subject: CN=d55c153d-2f1d-4d5f-842d-75b64073df8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:17:47:8a:5b:11:98:87:fd:0f:43:c3:fb: 4d:53:ef:15:26:15:4f:60:86:0f:1d:22:22:02:67: 24:81:d7:b1:de:81:d5:ba:80:d8:a7:aa:e1:46:aa: d6:78:a8:e5:9f:ff:01:a2:8c:2e:d6:2d:50:28:76: 5b:79:ca:8e:47:cf:5a:35:2c:c5:2f:fc:7f:ed:e9: 71:86:68:08:2e:2d:69:09:97:b0:61:d6:fb:44:46: 43:cc:19:31:9a:d2:cc:ad:e5:d5:bb:ad:5a:3f:f9: 90:e3:2a:88:80:c3:23:d8:4f:e9:2a:1e:d4:35:1a: ad:1c:be:a1:8c:7f:1a:8f:57:e6:59:dd:19:7b:7d: 7f:5c:6f:e0:c3:c0:50:7f:cd:4b:bd:b3:e6:20:8b: ec:a0:0b:f4:13:1c:84:56:19:51:e3:f4:45:58:72: 5c:8e:4e:8d:7e:f7:92:81:97:6c:50:62:bf:a5:06: 19:23:7b:f7:44:f7:6e:5f:6d:fc:17:9f:0a:8b:83: 3e:e8:9e:a6:9d:2d:90:8e:be:e4:f6:28:01:57:64: e5:91:77:d1:53:34:06:2f:97:3f:fa:34:2e:fe:5b: 95:d3:be:b4:c1:c0:ec:ce:01:5b:cb:cc:04:02:bd: 91:c8:21:12:ff:0a:55:a1:8a:0c:aa:dd:17:ab:df: 95:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:77:07:DA:D9:E3:11:E1:5A:26:E0:E9:4A:C8:12:35:37:7F:6A:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d55c153d-2f1d-4d5f-842d-75b64073df8b/d55c153d-2f1d-4d5f-842d-75b64073df8b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.187.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19211 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ca:79:b6:7d:68:89:3a:71:6b:84:52:93:91:3a:20:0b:d7: 49:36:80:f1:8e:44:20:73:8b:7c:b3:24:48:34:43:1b:32:c1: d0:47:09:31:b1:d2:dd:1b:e5:3e:e7:31:e7:4e:f1:77:2a:b1: 17:cc:4d:07:0a:8a:5f:04:c6:7d:e5:6c:cc:da:a6:e4:f8:ec: 00:da:6d:58:81:3b:70:c9:db:e6:d8:97:7d:9c:27:42:4f:98: 47:28:a6:2b:de:48:42:d8:33:14:b6:bf:67:41:0d:24:70:75: 78:e3:a8:31:c6:e9:e3:e3:94:51:78:91:a3:1f:ce:69:1c:ac: 39:8a:ff:61:88:de:ab:c2:df:5e:aa:9f:f2:38:87:2d:19:7d: 1e:91:8d:1c:2d:05:e9:e3:a6:5f:a3:d3:d5:0d:09:fc:9e:ae: 9a:3b:de:2d:20:d1:92:c5:29:fe:fa:82:bb:4f:ae:58:b9:05: 33:05:b4:14:d4:26:19:b8:ef:5b:bf:d6:3b:24:3f:a0:8d:84: f3:a6:4f:f2:c2:84:6f:69:46:e2:b8:ba:fa:9d:53:07:95:4d: ac:60:74:93:94:92:52:1b:e4:ae:3d:ac:14:a0:66:45:b3:02: e7:50:b1:70:fb:b9:71:0a:4f:f5:91:27:28:8e:f9:a4:54:0a: c2:05:af:01 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEuyBRgp0N7LaYyzgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAzMDE2NTE1MVoXDTI4MDIwMjE3NTE1MVowLzEtMCsGA1UEAxMk ZDU1YzE1M2QtMmYxZC00ZDVmLTg0MmQtNzViNjQwNzNkZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOgXR4pbEZiH/Q9Dw/tNU+8VJhVPYIYPHSIi Amckgdex3oHVuoDYp6rhRqrWeKjln/8Boowu1i1QKHZbecqOR89aNSzFL/x/7elx hmgILi1pCZewYdb7REZDzBkxmtLMreXVu61aP/mQ4yqIgMMj2E/pKh7UNRqtHL6h jH8aj1fmWd0Ze31/XG/gw8BQf81LvbPmIIvsoAv0ExyEVhlR4/RFWHJcjk6NfveS gZdsUGK/pQYZI3v3RPduX238F58Ki4M+6J6mnS2Qjr7k9igBV2TlkXfRUzQGL5c/ +jQu/luV0760wcDszgFby8wEAr2RyCES/wpVoYoMqt0Xq9+VSQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKN3B9rZ4xHhWibg6UrIEjU3f2rzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k NTVjMTUzZC0yZjFkLTRkNWYtODQyZC03NWI2NDA3M2RmOGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Q1NWMxNTNkLTJmMWQtNGQ1Zi04 NDJkLTc1YjY0MDczZGY4Yi9kNTVjMTUzZC0yZjFkLTRkNWYtODQyZC03NWI2NDA3 M2RmOGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJCu/gwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SwswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEASsp5tn1oiTpxa4RSk5E6IAvXSTaA8Y5EIHOLfLMkSDRDGzLB 0EcJMbHS3RvlPucx507xdyqxF8xNBwqKXwTGfeVszNqm5PjsANptWIE7cMnb5tiX fZwnQk+YRyimK95IQtgzFLa/Z0ENJHB1eOOoMcbp4+OUUXiRox/OaRysOYr/YYje q8LfXqqf8jiHLRl9HpGNHC0F6eOmX6PT1Q0J/J6umjveLSDRksUp/vqCu0+uWLkF MwW0FNQmGbjvW7/WOyQ/oI2E86ZP8sKEb2lG4ri6+p1TB5VNrGB0k5SSUhvkrj2s FKBmRbMC51CxcPu5cQpP9ZEnKI75pFQKwgWvAQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:36:49 2025 by rpki-client