$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer File: 60d1709e-04fe-45bd-bf22-78ea6043afe1.cer (raw, json) Hash identifier: IUQt49JqPsUskLMSJwOgo1bPr6nbAmgCT0unIyqjYhg= Subject key identifier: 23:AF:2B:CC:CF:5C:DA:AB:C5:3C:17:1E:14:BC:49:8C:80:44:3F:20 Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 Certificate issuer: /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Certificate serial: 010D0C9F4328584B822406BDF98D3E48CF71EDB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 13:15:22 +0000 Certificate not after: Sun 16 Jan 2028 14:15:22 +0000 Subordinate resources: IP: 192.149.23.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:24:06:bd:f9:8d:3e:48:cf:71:ed:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2 Validity Not Before: Oct 13 13:15:22 2025 GMT Not After : Jan 16 14:15:22 2028 GMT Subject: CN=60d1709e-04fe-45bd-bf22-78ea6043afe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:4d:29:3a:aa:6e:ad:eb:d8:fa:a9:bb:37: d3:b4:d0:61:4a:cb:92:d1:e3:3f:58:b8:f5:7b:bd: b1:a9:9a:2c:29:97:9a:cf:ab:80:08:7f:fb:31:d8: de:b4:a7:fb:e0:d4:b1:35:db:1d:8c:40:71:f2:af: 4a:f1:88:1b:3f:31:3f:2b:62:94:54:5f:f6:95:85: 98:4d:16:b3:67:9d:ea:f6:e8:d6:df:92:da:6e:64: 44:b9:1b:78:fb:1f:79:8c:3b:04:9d:00:5a:bd:a8: db:01:97:fb:de:4f:63:bd:7e:6d:01:1e:5d:40:19: b1:e0:8b:93:18:d8:64:e8:cc:50:16:13:72:9e:63: 56:08:0b:69:6d:6e:69:55:5f:fa:90:b7:fa:f2:b6: c9:18:95:71:d0:80:b0:4b:51:05:10:8d:40:5d:46: d9:42:35:33:88:ff:e5:f5:ea:a6:b9:90:99:24:1b: b1:b6:1a:ee:fe:32:44:cf:a0:25:97:99:07:34:83: fc:73:7e:c7:4d:d6:10:73:ed:b7:7d:a8:94:54:ca: 36:5b:03:b3:85:0c:45:83:a1:ea:d6:f7:49:03:be: ec:be:aa:da:45:d0:ca:54:7b:21:48:58:13:ba:3c: f7:49:97:5b:f3:26:cb:20:8f:9b:e9:e4:de:46:c8: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AF:2B:CC:CF:5C:DA:AB:C5:3C:17:1E:14:BC:49:8C:80:44:3F:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl X509v3 Authority Key Identifier: keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer sbgp-ipAddrBlock: critical IPv4: 192.149.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4c:b0:4c:79:95:17:45:01:6c:78:f9:a1:d9:86:1e:d1:65: 47:31:e7:d2:5d:77:46:d1:7e:0e:54:ed:00:16:9b:f8:af:c4: ca:6a:aa:fe:fa:d9:ac:6f:0b:ca:c5:01:ff:ec:4f:a9:73:df: 5d:db:b9:65:9d:7c:d0:43:6d:7d:d8:ee:95:c4:de:bc:3b:d0: 8f:0e:d4:17:8b:5e:8a:57:22:62:e7:93:0e:91:14:24:83:ec: d2:03:f9:7a:cf:ba:4b:4b:0e:a5:4c:d7:bc:ad:3f:a2:5d:05: 87:a7:8e:4b:13:bf:63:88:54:e7:b4:1c:d8:47:ad:80:76:b2: 43:31:4b:af:a8:fb:d6:43:17:7b:f3:bf:c7:43:95:45:29:71: 4b:53:8a:d8:b3:08:77:6f:36:26:e7:03:e8:41:f7:b7:8c:db: cd:79:8c:ea:bc:31:40:dc:a5:eb:f0:8b:8a:4d:fe:51:d7:4f: 3a:93:1f:1d:b2:29:48:92:9a:d1:44:8b:aa:59:72:55:f5:4f: 0e:9b:1e:16:08:3f:f9:ce:b8:d4:a9:52:3f:c9:57:9e:9a:b7: b5:35:d2:e2:d2:7d:c1:15:ea:7f:4b:fa:2a:63:75:7a:d7:ae: 19:4b:af:52:b9:81:55:87:2c:00:70:a6:06:99:dd:a1:c2:25: 0b:58:c1:ce -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEuCJAa9+Y0+SM9x7bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi NGUyMB4XDTI1MTAxMzEzMTUyMloXDTI4MDExNjE0MTUyMlowLzEtMCsGA1UEAxMk NjBkMTcwOWUtMDRmZS00NWJkLWJmMjItNzhlYTYwNDNhZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd1NKTqqbq3r2PqpuzfTtNBhSsuS0eM/WLj1 e72xqZosKZeaz6uACH/7MdjetKf74NSxNdsdjEBx8q9K8YgbPzE/K2KUVF/2lYWY TRazZ53q9ujW35LabmREuRt4+x95jDsEnQBavajbAZf73k9jvX5tAR5dQBmx4IuT GNhk6MxQFhNynmNWCAtpbW5pVV/6kLf68rbJGJVx0ICwS1EFEI1AXUbZQjUziP/l 9eqmuZCZJBuxthru/jJEz6All5kHNIP8c37HTdYQc+23faiUVMo2WwOzhQxFg6Hq 1vdJA77svqraRdDKVHshSFgTujz3SZdb8ybLII+b6eTeRshNcwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCOvK8zPXNqrxTwXHhS8SYyARD8gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82 MGQxNzA5ZS0wNGZlLTQ1YmQtYmYyMi03OGVhNjA0M2FmZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzYwZDE3MDllLTA0ZmUtNDViZC1i ZjIyLTc4ZWE2MDQzYWZlMS82MGQxNzA5ZS0wNGZlLTQ1YmQtYmYyMi03OGVhNjA0 M2FmZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2 ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1 ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5 uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1 ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAlRcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEEywTHmVF0UBbHj5odmG HtFlRzHn0l13RtF+DlTtABab+K/Eymqq/vrZrG8LysUB/+xPqXPfXdu5ZZ180ENt fdjulcTevDvQjw7UF4teilciYueTDpEUJIPs0gP5es+6S0sOpUzXvK0/ol0Fh6eO SxO/Y4hU57Qc2EetgHayQzFLr6j71kMXe/O/x0OVRSlxS1OK2LMId282JucD6EH3 t4zbzXmM6rwxQNyl6/CLik3+UddPOpMfHbIpSJKa0USLqllyVfVPDpseFgg/+c64 1KlSP8lXnpq3tTXS4tJ9wRXqf0v6KmN1eteuGUuvUrmBVYcsAHCmBpndocIlC1jB zg== -----END CERTIFICATE-----Generated at Tue Oct 14 02:53:33 2025 by rpki-client