$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer File: da61168f-5649-4fda-acc2-e65f377d2592.cer (raw, json) Hash identifier: FchNKXBC4+5eTJpc7YUAhhv3y6uTVlLjFygbptfp7zc= Subject key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B5F2F9A2400ED946562E37680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Oct 2025 00:45:24 +0000 Certificate not after: Tue 04 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 1787 AS: 13619 AS: 17168 AS: 20186 AS: 21931 AS: 23109 AS: 40319 AS: 398928 AS: 398934 AS: 399616 IP: 155.46.96.0 -- 155.46.255.255 IP: 159.42.128.0/17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:2f:9a:24:00:ed:94:65:62:e3:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 1 00:45:24 2025 GMT Not After : Jan 4 01:45:24 2028 GMT Subject: CN=da61168f-5649-4fda-acc2-e65f377d2592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:6b:6f:9c:73:c0:82:1d:95:5d:9a:11:93: 4a:1d:21:86:1c:03:04:d6:06:f0:97:ee:0f:bd:f0: 64:00:96:61:3d:b0:b8:82:e9:93:11:6b:da:7b:39: df:9a:b0:d0:ee:af:45:b8:c2:a9:ce:23:c3:65:37: 17:6e:bb:fd:48:50:05:9b:28:36:5f:3f:6a:1b:7f: 9a:31:bd:44:8f:19:09:c5:e6:1b:8f:93:8b:8d:3f: 67:79:55:b9:ea:d6:c9:87:78:a2:54:88:dc:91:d9: db:d6:ef:a9:2e:21:e7:5b:89:0d:a1:a7:90:29:51: 36:8f:eb:ff:a0:37:b3:f3:ab:49:35:0c:7a:98:f6: a0:89:31:f6:e1:18:57:02:50:36:0f:1e:19:14:1f: d0:c2:2a:a0:be:b6:b8:a6:93:6b:98:02:4e:fa:2b: 50:89:a2:07:11:a9:a2:19:bd:23:3e:ec:dc:29:52: c5:89:4a:5c:b0:73:19:38:4c:76:36:3f:d0:d6:f3: 0e:5f:83:cc:f8:1c:24:eb:34:f8:88:d6:77:d8:e2: 40:c4:28:ae:fc:5d:0b:d0:74:48:0b:a5:75:2b:fa: 89:53:75:f4:93:81:18:0f:d9:ad:80:9c:2f:ac:ea: c9:26:12:d8:ba:e7:6e:11:2e:1b:16:b6:8f:56:bf: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 155.46.96.0-155.46.255.255 159.42.128.0/17 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1787 13619 17168 20186 21931 23109 40319 398928 398934 399616 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:36:9e:79:da:10:6a:f7:3a:98:54:82:be:5a:8c:1f:18:8a: d9:c1:d1:46:31:68:7e:60:53:c6:a7:89:df:e0:c2:3f:2e:0d: af:01:16:b5:8c:9d:65:37:34:e4:11:09:bc:93:ab:66:6e:29: 03:95:55:db:2b:00:97:2b:45:fa:38:35:09:60:b8:69:3c:c9: 4b:da:61:6f:2e:af:25:ec:8a:3a:fe:80:e6:e3:0d:ea:33:04: 34:47:f4:b2:60:cc:68:cf:00:b0:1c:50:e2:a7:f1:0a:94:31: f0:61:b9:0c:14:3b:7d:6c:73:da:aa:74:43:9c:ce:83:77:b0: fa:6a:c0:37:23:51:48:ba:e4:7c:a6:86:38:48:fb:0a:60:34: 9f:f4:2d:c0:44:3e:ee:b1:6d:20:98:37:b5:78:25:db:d6:64: e4:e2:e0:1b:d2:ad:e5:70:04:aa:a2:b1:87:4e:60:fd:25:dd: 4b:fb:04:41:c6:b7:fc:07:41:1a:c5:8a:5a:34:e8:91:b0:65: 51:b6:ef:2d:72:fd:a5:5f:2e:ae:6b:b1:08:52:d4:df:96:1d: a7:eb:dd:27:68:f3:98:99:22:75:5c:28:6e:83:20:8f:9f:1b: 3b:3c:14:b6:db:eb:f7:f9:3b:cc:6c:97:d8:8d:1f:a4:74:84: 12:7b:51:6d -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEtfL5okAO2UZWLjdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAwMTAwNDUyNFoXDTI4MDEwNDAxNDUyNFowLzEtMCsGA1UEAxMk ZGE2MTE2OGYtNTY0OS00ZmRhLWFjYzItZTY1ZjM3N2QyNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P1rb5xzwIIdlV2aEZNKHSGGHAME1gbwl+4P vfBkAJZhPbC4gumTEWvaeznfmrDQ7q9FuMKpziPDZTcXbrv9SFAFmyg2Xz9qG3+a Mb1EjxkJxeYbj5OLjT9neVW56tbJh3iiVIjckdnb1u+pLiHnW4kNoaeQKVE2j+v/ oDez86tJNQx6mPagiTH24RhXAlA2Dx4ZFB/Qwiqgvra4ppNrmAJO+itQiaIHEami Gb0jPuzcKVLFiUpcsHMZOEx2Nj/Q1vMOX4PM+Bwk6zT4iNZ32OJAxCiu/F0L0HRI C6V1K/qJU3X0k4EYD9mtgJwvrOrJJhLYuuduES4bFraPVr+0sQIDAQABo4IETzCC BEswHQYDVR0OBBYEFOBjswxTJjrVagNadIyTFBXPAAxYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k YTYxMTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVmMzc3ZDI1OTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2RhNjExNjhmLTU2NDktNGZkYS1h Y2MyLWU2NWYzNzdkMjU5Mi9kYTYxMTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVmMzc3 ZDI1OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLAYIKwYBBQUH AQcBAf8EHTAbMBkEAgABMBMwCwMEBZsuYAMDAJsuAwQHnyqAMEEGCCsGAQUFBwEI AQH/BDIwMKAuMCwCAgb7AgI1MwICQxACAk7aAgJVqwICWkUCAwCdfwIDBhZQAgMG FlYCAwYZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBmNp552hBq9zqYVIK+WowfGIrZwdFGMWh+YFPGp4nf 4MI/Lg2vARa1jJ1lNzTkEQm8k6tmbikDlVXbKwCXK0X6ODUJYLhpPMlL2mFvLq8l 7Io6/oDm4w3qMwQ0R/SyYMxozwCwHFDip/EKlDHwYbkMFDt9bHPaqnRDnM6Dd7D6 asA3I1FIuuR8poY4SPsKYDSf9C3ARD7usW0gmDe1eCXb1mTk4uAb0q3lcASqorGH TmD9Jd1L+wRBxrf8B0EaxYpaNOiRsGVRtu8tcv2lXy6ua7EIUtTflh2n690naPOY mSJ1XChugyCPnxs7PBS22+v3+TvMbJfYjR+kdIQSe1Ft -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:20 2025 by rpki-client