$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f667747e-80fe-47ea-bfdd-01898c9178b6.cer File: f667747e-80fe-47ea-bfdd-01898c9178b6.cer (raw, json) Hash identifier: VXkxYtWyYoPEgELaT9YOO7wpkEiOaFrzHaD9qVpR7Rg= Subject key identifier: 3A:A3:19:B4:B9:CD:EB:AE:15:26:FF:4A:CC:E2:BC:0D:A8:46:0C:B2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B1C2F30B761820769CDA76630 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f667747e-80fe-47ea-bfdd-01898c9178b6/f667747e-80fe-47ea-bfdd-01898c9178b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f667747e-80fe-47ea-bfdd-01898c9178b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Sep 2025 00:45:25 +0000 Certificate not after: Sat 11 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 14951 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:2f:30:b7:61:82:07:69:cd:a7:66:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 7 00:45:25 2025 GMT Not After : Dec 11 01:45:25 2027 GMT Subject: CN=f667747e-80fe-47ea-bfdd-01898c9178b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:ae:cf:24:d9:39:d1:92:42:3c:f1:6c:2d: 9e:56:69:3a:cc:e5:c4:41:60:93:50:f3:76:8a:ca: 50:88:50:b2:81:31:5a:70:88:fb:0c:ed:ff:98:74: e8:ea:3d:64:0e:0e:40:95:d6:5a:c3:44:52:bc:e2: 72:1a:88:82:d5:06:87:f9:d4:9e:02:b1:b8:ec:fc: 16:dd:08:76:a3:14:86:e6:8e:1b:ae:f8:69:5e:5c: f5:eb:dc:5f:d6:b4:be:48:44:01:24:9d:8b:5f:f8: c2:c5:7c:f9:0e:f7:c6:98:79:62:7a:dd:1b:92:34: a5:b4:ed:90:55:d7:b3:89:b1:da:cd:b5:46:89:26: ae:65:09:05:60:f4:bb:8a:cf:b6:86:7f:1a:22:e4: 88:ef:2c:43:5f:f2:d5:53:99:0d:fa:79:ba:eb:c2: df:34:80:83:d5:22:d8:19:23:2d:79:67:1e:a8:2a: ba:01:38:61:29:b7:70:c0:ec:97:b6:6e:09:e2:41: 6f:5c:c0:88:35:52:b2:08:ef:eb:f0:06:1f:a3:13: bf:42:2b:0b:ca:32:8b:ab:1a:01:27:90:39:2e:e5: 92:96:bc:26:19:25:5e:49:e6:86:ff:ef:2c:38:34: fb:3b:0d:d1:c1:11:b1:c1:b9:8f:2c:b4:8c:81:22: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A3:19:B4:B9:CD:EB:AE:15:26:FF:4A:CC:E2:BC:0D:A8:46:0C:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f667747e-80fe-47ea-bfdd-01898c9178b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f667747e-80fe-47ea-bfdd-01898c9178b6/f667747e-80fe-47ea-bfdd-01898c9178b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14951 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7d:40:9a:07:76:5a:47:79:02:44:77:8b:7a:3c:1b:72:a0: 9f:06:3a:31:57:d7:38:7c:0b:cf:83:93:da:51:24:4f:c9:7c: 17:96:0c:5f:4e:64:0a:71:10:14:cf:08:53:88:76:ea:d0:f9: e9:6e:12:f7:84:22:3b:ee:ea:f4:af:7d:42:4b:83:ad:bb:0c: 23:54:cb:17:c1:c9:71:d1:36:5c:fe:fd:56:ac:f5:8b:94:f5: 93:ce:07:79:a7:84:f9:7a:60:c3:8b:99:bc:09:c6:5c:08:d7: 5e:5f:21:2f:a4:0a:71:4e:41:ba:0a:f6:06:a6:9e:d7:ec:9c: 6d:bd:d8:0d:f1:3b:6b:cf:1d:3a:e4:34:15:38:9c:00:6b:87: 8f:9a:c1:d1:ac:21:72:fb:ea:e7:0f:d1:3b:89:a0:a6:ae:65: 77:e9:2a:9e:34:c2:e8:49:b1:0f:b5:7c:95:44:ee:58:43:56: 08:44:f9:71:cb:8b:a9:26:c5:63:6e:00:61:4d:d9:54:56:49: 6f:09:87:5b:fb:a3:83:0a:1d:fc:5b:3c:4e:56:68:29:e6:05: 95:2f:4d:05:68:98:bf:98:ad:01:0a:92:c9:fa:03:30:59:f4: 51:78:cc:e0:26:6d:49:5c:45:cc:c3:07:ba:f6:74:f9:a7:99: 1c:0e:1d:94 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEscLzC3YYIHac2nZjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkwNzAwNDUyNVoXDTI3MTIxMTAxNDUyNVowLzEtMCsGA1UEAxMk ZjY2Nzc0N2UtODBmZS00N2VhLWJmZGQtMDE4OThjOTE3OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tquzyTZOdGSQjzxbC2eVmk6zOXEQWCTUPN2 ispQiFCygTFacIj7DO3/mHTo6j1kDg5AldZaw0RSvOJyGoiC1QaH+dSeArG47PwW 3Qh2oxSG5o4brvhpXlz169xf1rS+SEQBJJ2LX/jCxXz5DvfGmHliet0bkjSltO2Q VdezibHazbVGiSauZQkFYPS7is+2hn8aIuSI7yxDX/LVU5kN+nm668LfNICD1SLY GSMteWceqCq6AThhKbdwwOyXtm4J4kFvXMCINVKyCO/r8AYfoxO/QisLyjKLqxoB J5A5LuWSlrwmGSVeSeaG/+8sODT7Ow3RwRGxwbmPLLSMgSJMuwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFDqjGbS5zeuuFSb/SszivA2oRgyyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m NjY3NzQ3ZS04MGZlLTQ3ZWEtYmZkZC0wMTg5OGM5MTc4YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Y2Njc3NDdlLTgwZmUtNDdlYS1i ZmRkLTAxODk4YzkxNzhiNi9mNjY3NzQ3ZS04MGZlLTQ3ZWEtYmZkZC0wMTg5OGM5 MTc4YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICOmcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI31Amgd2Wkd5AkR3i3o8G3KgnwY6 MVfXOHwLz4OT2lEkT8l8F5YMX05kCnEQFM8IU4h26tD56W4S94QiO+7q9K99QkuD rbsMI1TLF8HJcdE2XP79Vqz1i5T1k84HeaeE+Xpgw4uZvAnGXAjXXl8hL6QKcU5B ugr2Bqae1+ycbb3YDfE7a88dOuQ0FTicAGuHj5rB0awhcvvq5w/RO4mgpq5ld+kq njTC6EmxD7V8lUTuWENWCET5ccuLqSbFY24AYU3ZVFZJbwmHW/ujgwod/Fs8TlZo KeYFlS9NBWiYv5itAQqSyfoDMFn0UXjM4CZtSVxFzMMHuvZ0+aeZHA4dlA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:36:32 2025 by rpki-client