$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer File: f4f85718-cda0-442f-9727-709a536e1e27.cer (raw, json) Hash identifier: OXj51EBH+thvOGNhSEZkkivl249qb6d3g9pLlwdRENo= Subject key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BBF9DF76092919CCC208EAC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Nov 2025 13:45:22 +0000 Certificate not after: Mon 07 Feb 2028 13:45:22 +0000 Subordinate resources: IP: 63.136.112.0/21 IP: 162.211.136.0/22 IP: 192.0.4.0/22 IP: 199.201.84.0/22 IP: 208.157.144.0/21 IP: 208.168.224.0/19 IP: 209.27.52.0/22 IP: 209.27.60.0/22 IP: 2606:600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:9d:f7:60:92:91:9c:cc:20:8e:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 4 13:45:22 2025 GMT Not After : Feb 7 13:45:22 2028 GMT Subject: CN=f4f85718-cda0-442f-9727-709a536e1e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:bb:f8:df:98:55:1c:ef:a5:0d:59:34:04: c1:50:5f:2e:a2:8c:02:04:7b:de:32:42:fc:73:41: 69:5b:21:55:da:ba:4c:9f:f3:ac:d7:9a:e5:ce:24: 00:fd:fe:e2:c9:e4:7e:98:10:fa:78:44:e1:09:2c: 21:3a:3d:d6:e0:07:22:86:7d:94:e0:12:78:38:ec: 1a:7d:03:ff:33:1d:7f:15:82:eb:8a:ae:a3:c9:82: 43:38:35:13:ac:3e:a9:a2:73:14:4f:f5:ec:32:58: 37:e0:4d:21:57:c5:7d:3a:1a:d9:c2:00:40:5a:2a: ca:a8:b4:48:8d:f6:3c:df:51:22:ec:e3:da:93:d9: 86:d7:75:40:e9:39:3b:9c:57:9e:bb:fa:af:ac:be: cc:80:04:42:bb:2a:09:db:2f:0e:4b:3a:ad:49:f2: b1:64:84:67:46:e1:50:57:0f:39:1c:fa:78:6f:33: b8:23:53:be:78:79:3e:9b:2d:ad:73:64:48:84:20: 37:31:7b:ae:7c:d7:3e:6b:e1:42:cf:d9:05:39:c6: 3f:de:e6:e2:68:fd:fe:b3:4a:35:a8:e6:05:62:24: 08:c3:56:18:15:a4:9a:a1:2c:9b:6b:45:09:c6:54: 30:a3:96:84:f3:21:c3:cc:41:5d:f5:b0:6b:89:fd: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 63.136.112.0/21 162.211.136.0/22 192.0.4.0/22 199.201.84.0/22 208.157.144.0/21 208.168.224.0/19 209.27.52.0/22 209.27.60.0/22 IPv6: 2606:600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:dd:28:9b:2b:20:19:1e:94:83:cf:d8:69:46:8b:11:da:76: 6e:76:85:48:ec:3e:30:fc:c3:bb:d5:6f:14:68:21:c9:70:43: 36:e2:8d:4e:35:59:a1:fd:8c:e6:d8:3e:43:a5:5a:68:4b:63: c7:d2:1b:34:68:b8:0d:ca:0b:ff:6c:7a:7f:ca:87:e8:1e:23: dc:ed:94:7c:a7:40:ac:50:5e:f7:51:5a:7c:b0:df:5d:c8:69: 11:9c:e2:cd:e2:00:fe:c4:dd:18:44:48:bc:d4:db:7c:76:ae: 9a:e2:1d:2f:ee:b7:a4:da:23:e8:b5:66:e9:46:7f:1e:67:70: 19:b1:d4:80:67:79:2a:68:cc:22:2a:47:51:e3:6c:0b:d5:68: 78:48:89:ec:dd:26:7b:73:b5:ed:f6:69:1a:e0:ee:e6:1a:27: 35:98:17:72:0d:6d:46:16:95:77:7f:3e:be:aa:b0:0c:79:81: df:14:b3:4b:3f:38:41:ea:1c:c9:5e:cd:c2:7d:5f:21:41:59: e4:f6:39:1e:b6:ee:aa:37:41:09:4c:ec:80:2e:9e:2e:52:4d: 6c:72:0e:04:c0:e1:53:01:31:cb:6a:c6:c0:3b:19:38:e7:f0: 20:33:a7:62:be:59:14:3d:b9:da:6e:6a:48:2f:61:12:e2:45: 41:2a:b5:7f -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWEu/nfdgkpGczCCOrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTEwNDEzNDUyMloXDTI4MDIwNzEzNDUyMlowLzEtMCsGA1UEAxMk ZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUxZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJu7+N+YVRzvpQ1ZNATBUF8uoowCBHveMkL8 c0FpWyFV2rpMn/Os15rlziQA/f7iyeR+mBD6eEThCSwhOj3W4Acihn2U4BJ4OOwa fQP/Mx1/FYLriq6jyYJDODUTrD6ponMUT/XsMlg34E0hV8V9OhrZwgBAWirKqLRI jfY831Ei7OPak9mG13VA6Tk7nFeeu/qvrL7MgARCuyoJ2y8OSzqtSfKxZIRnRuFQ Vw85HPp4bzO4I1O+eHk+my2tc2RIhCA3MXuufNc+a+FCz9kFOcY/3ubiaP3+s0o1 qOYFYiQIw1YYFaSaoSyba0UJxlQwo5aE8yHDzEFd9bBrif3y2wIDAQABo4IEODCC BDQwHQYDVR0OBBYEFGtv4LsjBughpf8tT2+fXDWvO0J/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m NGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Y0Zjg1NzE4LWNkYTAtNDQyZi05 NzI3LTcwOWE1MzZlMWUyNy9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2 ZTFlMjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAM/iHADBAKi04gDBALAAAQDBALHyVQDBAPQnZAD BAXQqOADBALRGzQDBALRGzwwDQQCAAIwBwMFACYGBgAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYt0omysg GR6Ug8/YaUaLEdp2bnaFSOw+MPzDu9VvFGghyXBDNuKNTjVZof2M5tg+Q6VaaEtj x9IbNGi4DcoL/2x6f8qH6B4j3O2UfKdArFBe91FafLDfXchpEZzizeIA/sTdGERI vNTbfHaumuIdL+63pNoj6LVm6UZ/HmdwGbHUgGd5KmjMIipHUeNsC9VoeEiJ7N0m e3O17fZpGuDu5honNZgXcg1tRhaVd38+vqqwDHmB3xSzSz84QeocyV7Nwn1fIUFZ 5PY5HrbuqjdBCUzsgC6eLlJNbHIOBMDhUwExy2rGwDsZOOfwIDOnYr5ZFD252m5q SC9hEuJFQSq1fw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:07 2025 by rpki-client