$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer File: 03cb17c9-7597-4c95-a127-009654391416.cer (raw, json) Hash identifier: k2SQA8DMi/wcuRQK23lPe/gUya/U+LbJkv5U1/8cn3A= Subject key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B3284A83139D984179E20CB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Sep 2025 00:45:24 +0000 Certificate not after: Sun 19 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 40776 IP: 2602:f8ab::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:84:a8:31:39:d9:84:17:9e:20:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 15 00:45:24 2025 GMT Not After : Dec 19 01:45:24 2027 GMT Subject: CN=03cb17c9-7597-4c95-a127-009654391416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:30:17:82:2e:9a:15:67:ac:ae:6f:cc:c2: d0:d5:ea:9d:62:5e:02:cb:9f:e8:c2:b7:d1:42:b9: a9:cf:a1:e0:cc:cb:5a:8a:20:e6:2e:95:83:5d:09: aa:88:fb:2d:6c:2a:61:67:0a:9a:b4:2b:b7:a9:4c: e5:03:83:78:ee:77:06:2b:96:cb:da:7c:3d:4a:9a: 60:4a:3a:bb:5c:11:ce:73:f5:c3:f5:5b:c4:11:36: 91:eb:ac:eb:4a:3b:5e:df:9a:c2:61:12:e4:91:dc: 07:c5:73:19:a4:0d:83:a7:20:f2:84:42:fb:d5:c8: e7:65:bf:1a:25:34:4a:f9:a9:28:f3:7c:d3:19:44: 5c:2c:b5:8c:84:bf:91:de:1c:7c:22:af:6e:af:2d: 40:1b:29:15:cb:78:d4:ff:a1:16:38:28:ff:a9:27: 3d:ad:c9:c9:2a:ed:fb:db:45:3c:bb:6c:ea:0b:98: 56:77:4e:4e:91:f4:f2:c2:c6:3b:c6:4c:a0:cb:74: 4c:fe:49:66:5a:7d:f7:4a:6d:58:1a:34:af:01:44: c3:82:df:86:19:03:c6:dc:67:70:33:c2:20:8a:8a: ed:2d:da:a2:0f:9f:d0:ad:2d:3f:c0:4a:98:46:f8: e5:f1:13:9e:74:71:50:a3:7c:30:56:2f:43:2c:9c: bb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8ab::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40776 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:33:d9:9f:67:39:80:88:cd:46:65:51:23:34:42:53:e5:b3: 89:93:b6:83:5d:45:71:11:e7:41:97:a9:c6:cd:07:7f:94:1a: e9:fb:08:d1:27:24:52:0a:eb:52:7e:54:fa:f5:44:bc:5c:56: ba:42:df:7c:4a:ac:b2:98:f9:f9:d5:89:ae:e5:5c:1c:0b:46: 24:3f:23:37:32:2d:f0:43:7e:13:35:99:6f:4c:31:3d:8b:40: 8f:13:36:35:c9:47:48:8d:94:c2:50:50:61:bb:82:59:17:42: 76:0f:fd:1e:e2:9c:23:6f:07:da:0a:19:40:3b:82:38:f5:bd: 5e:2a:b8:16:c1:f8:5f:5c:66:5e:2a:fa:12:ac:2b:6d:e5:a2: 89:aa:b4:7a:69:b8:2e:ae:7f:ab:23:59:19:2e:98:15:cb:dc: 22:05:d8:47:54:25:5b:f3:20:f8:1b:5f:aa:b4:23:ea:a9:18: 7c:95:fb:1a:44:d6:0e:a5:30:b6:54:a5:2a:87:c9:ef:2a:15: f9:17:7c:18:df:63:1a:20:ac:e0:8d:16:40:af:8e:4b:93:51: 2e:b6:02:68:9a:1d:a7:a3:0e:3f:0b:49:ef:6b:f5:0d:ed:6c: 5f:ec:95:6a:55:e3:35:d9:05:9a:a3:e8:8f:1a:f7:d7:66:f2: 5b:0d:30:30 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEsyhKgxOdmEF54gy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkxNTAwNDUyNFoXDTI3MTIxOTAxNDUyNFowLzEtMCsGA1UEAxMk MDNjYjE3YzktNzU5Ny00Yzk1LWExMjctMDA5NjU0MzkxNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDgwF4IumhVnrK5vzMLQ1eqdYl4Cy5/owrfR Qrmpz6HgzMtaiiDmLpWDXQmqiPstbCphZwqatCu3qUzlA4N47ncGK5bL2nw9Sppg Sjq7XBHOc/XD9VvEETaR66zrSjte35rCYRLkkdwHxXMZpA2DpyDyhEL71cjnZb8a JTRK+ako83zTGURcLLWMhL+R3hx8Iq9ury1AGykVy3jU/6EWOCj/qSc9rcnJKu37 20U8u2zqC5hWd05OkfTywsY7xkygy3RM/klmWn33Sm1YGjSvAUTDgt+GGQPG3Gdw M8IgiortLdqiD5/QrS0/wEqYRvjl8ROedHFQo3wwVi9DLJy7pwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFCzvYIWYzgMvK1Gt7nMvyH0mO3OXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w M2NiMTdjOS03NTk3LTRjOTUtYTEyNy0wMDk2NTQzOTE0MTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzAzY2IxN2M5LTc1OTctNGM5NS1h MTI3LTAwOTY1NDM5MTQxNi8wM2NiMTdjOS03NTk3LTRjOTUtYTEyNy0wMDk2NTQz OTE0MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvirADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMAn0gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFDPZn2c5gIjNRmVRIzRCU+WziZO2g11FcRHnQZepxs0H f5Qa6fsI0SckUgrrUn5U+vVEvFxWukLffEqsspj5+dWJruVcHAtGJD8jNzIt8EN+ EzWZb0wxPYtAjxM2NclHSI2UwlBQYbuCWRdCdg/9HuKcI28H2goZQDuCOPW9Xiq4 FsH4X1xmXir6EqwrbeWiiaq0emm4Lq5/qyNZGS6YFcvcIgXYR1QlW/Mg+BtfqrQj 6qkYfJX7GkTWDqUwtlSlKofJ7yoV+Rd8GN9jGiCs4I0WQK+OS5NRLrYCaJodp6MO PwtJ72v1De1sX+yValXjNdkFmqPojxr312byWw0wMA== -----END CERTIFICATE-----Generated at Mon Sep 15 23:33:28 2025 by rpki-client