$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer File: 75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer (raw, json) Hash identifier: Y2j8t1W+EqYout6iE9jTe/UaYriGEiDn4ZQYJPbvCRw= Subject key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B7A64BF22537BDC6655392A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 18:39:19 +0000 Certificate not after: Mon 01 Feb 2027 01:45:26 +0000 Subordinate resources: AS: 399533 IP: 23.151.16.0/23 IP: 64.112.76.0/22 IP: 142.248.96.0/22 IP: 208.64.216.0/22 IP: 208.86.32.0/22 IP: 209.142.68.0/22 IP: 2602:fd91::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:64:bf:22:53:7b:dc:66:55:39:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 10 18:39:19 2025 GMT Not After : Feb 1 01:45:26 2027 GMT Subject: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:72:62:99:9f:f5:15:47:08:2a:fc:94:cd: 66:d3:dd:de:0b:63:40:8a:86:e0:8a:1c:85:a9:60: e2:1e:67:10:86:20:de:5c:6e:06:9e:dd:32:03:a4: 37:d7:b9:84:6b:74:79:77:d1:8f:10:33:8f:76:a6: 6c:a4:e9:0a:6a:20:93:98:70:b7:e3:fc:db:0b:60: 7b:ba:42:50:29:41:29:b6:b2:ed:cf:8b:98:d8:f0: 62:d0:5d:6e:08:a7:55:b7:14:54:df:3c:97:93:93: 5b:b5:5b:4c:e8:52:33:8b:64:17:57:d8:7e:57:42: 27:2f:54:be:ed:3d:65:0c:df:ca:48:80:59:98:ac: 7c:2a:50:c0:6a:d8:43:ca:ee:58:30:09:05:a4:3d: 12:7e:35:7b:fe:0d:78:92:88:6d:75:63:69:bf:67: 90:29:04:8b:25:ae:59:02:6f:6e:9d:db:02:2f:92: 2c:4e:1e:a1:92:fe:21:98:38:3b:11:33:0d:04:64: a7:1b:a8:aa:0a:e8:de:ac:5a:90:f2:68:ad:91:0d: ef:a2:0e:1b:6e:0f:dd:3a:bb:41:6e:ec:ee:b2:4c: 12:68:a2:6b:3a:47:0e:fa:07:3b:bb:05:00:cf:d3: e5:0d:c4:73:64:66:59:e7:85:5c:30:38:ca:9e:d4: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.151.16.0/23 64.112.76.0/22 142.248.96.0/22 208.64.216.0/22 208.86.32.0/22 209.142.68.0/22 IPv6: 2602:fd91::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399533 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fc:1b:f6:0f:60:44:fd:d7:53:a8:62:3b:64:7d:b3:fb:46: 90:17:06:ce:f3:33:83:81:8a:06:69:f6:88:18:42:e8:9d:39: 01:a7:c7:90:f1:cb:9a:cf:1b:d3:4c:7b:fb:1a:b7:96:22:1b: 4b:fc:de:db:d0:24:35:a0:7e:3a:5b:42:25:19:5e:52:23:af: cf:e6:17:04:c7:43:53:fe:53:4f:12:db:76:bf:20:b0:3c:1f: c7:26:25:c3:d8:b3:74:46:a5:60:6b:5b:7d:9c:83:c5:e3:06: ed:3b:aa:2e:66:6c:2a:0d:1d:81:49:26:5e:72:51:80:4b:92: 63:01:81:19:48:e9:9f:59:72:b3:97:0e:5a:62:ea:64:62:eb: c8:c4:93:1e:97:f1:bb:e8:27:ed:42:fb:e6:6a:6c:d3:4e:93: 84:0c:e4:6d:b5:e6:7d:90:fb:21:73:5c:bd:35:96:8c:b4:0e: 95:62:22:de:b3:7f:d2:bc:93:1d:75:a4:c5:fa:43:51:ee:37: 2f:e9:96:10:38:66:5b:ca:6f:bd:6c:d7:fe:a6:b0:f3:b3:fb: a1:d8:28:43:57:d5:09:78:1d:48:ea:70:fc:20:64:e1:2f:23: 8e:81:6b:72:d5:0c:37:33:9f:3c:3a:8d:9e:52:1d:71:7c:c5: bc:f3:96:8b -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWEt6ZL8iU3vcZlU5KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAxMDE4MzkxOVoXDTI3MDIwMTAxNDUyNlowLzEtMCsGA1UEAxMk NzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcyMDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN9yYpmf9RVHCCr8lM1m093eC2NAiobgihyF qWDiHmcQhiDeXG4Gnt0yA6Q317mEa3R5d9GPEDOPdqZspOkKaiCTmHC34/zbC2B7 ukJQKUEptrLtz4uY2PBi0F1uCKdVtxRU3zyXk5NbtVtM6FIzi2QXV9h+V0InL1S+ 7T1lDN/KSIBZmKx8KlDAathDyu5YMAkFpD0SfjV7/g14kohtdWNpv2eQKQSLJa5Z Am9undsCL5IsTh6hkv4hmDg7ETMNBGSnG6iqCujerFqQ8mitkQ3vog4bbg/dOrtB buzuskwSaKJrOkcO+gc7uwUAz9PlDcRzZGZZ54VcMDjKntRFvwIDAQABo4IESTCC BEUwHQYDVR0OBBYEFFAlyeKwfHtlWqpC4kPY7qD8WOSiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzc1YjljYjhlLTdhNzctNDA4ZS04 MWQ5LTA3NWY4ZWY3MjAwZS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVm NzIwMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAEXlxADBAJAcEwDBAKO+GADBALQQNgDBALQViAD BALRjkQwDgQCAAIwCAMGBCYC/ZEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYY rTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCP/Bv2D2BE/ddTqGI7ZH2z+0aQFwbO8zODgYoGafaIGELonTkB p8eQ8cuazxvTTHv7GreWIhtL/N7b0CQ1oH46W0IlGV5SI6/P5hcEx0NT/lNPEtt2 vyCwPB/HJiXD2LN0RqVga1t9nIPF4wbtO6ouZmwqDR2BSSZeclGAS5JjAYEZSOmf WXKzlw5aYupkYuvIxJMel/G76CftQvvmamzTTpOEDORtteZ9kPshc1y9NZaMtA6V YiLes3/SvJMddaTF+kNR7jcv6ZYQOGZbym+9bNf+prDzs/uh2ChDV9UJeB1I6nD8 IGThLyOOgWty1Qw3M588Oo2eUh1xfMW885aL -----END CERTIFICATE-----Generated at Sat Oct 11 08:34:15 2025 by rpki-client