$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732.cer File: 135ec5a7-d9dd-467e-ac4a-236383b21732.cer (raw, json) Hash identifier: XNL2qLbXUKNH2FQa7o1df1OjKLNqQfsDE7T0NeRxhJs= Subject key identifier: 15:10:86:1D:D7:ED:97:C6:5A:D8:83:16:D1:7B:F0:B6:26:9F:54:1D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B153875498A09C4407BF3AA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/135ec5a7-d9dd-467e-ac4a-236383b21732.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Sep 2025 12:53:26 +0000 Certificate not after: Wed 08 Dec 2027 13:53:26 +0000 Subordinate resources: AS: 19210 IP: 68.170.16.0/20 IP: 2620:11b:4000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:38:75:49:8a:09:c4:40:7b:f3:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 4 12:53:26 2025 GMT Not After : Dec 8 13:53:26 2027 GMT Subject: CN=135ec5a7-d9dd-467e-ac4a-236383b21732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:bd:3f:40:45:51:08:98:11:04:a9:bd:57: 1e:d3:be:b9:71:0c:2b:fa:f1:fa:5d:a9:fd:ff:00: 33:5e:16:d1:b7:77:d8:86:98:1b:47:27:7a:46:1c: dc:d0:13:6c:2c:23:5d:51:53:c5:41:c5:c8:82:4c: ac:98:51:a4:f4:0b:31:a3:a5:42:b2:2c:c1:41:29: 07:65:98:83:c3:b7:f3:05:ff:48:45:43:bd:2a:a9: 7c:90:45:5b:29:c6:e7:fd:ef:5f:1a:32:c5:38:8a: 0f:33:3a:e6:b1:88:3a:77:9b:f2:b9:d8:63:d5:b6: 65:d1:4a:c8:be:6d:c7:b4:93:11:d2:44:53:52:98: ed:d0:7a:22:36:8b:6c:79:59:71:66:98:af:03:e0: d4:9d:85:8c:59:1e:dc:4f:aa:e1:a7:c2:60:a8:6e: 10:a1:83:f1:00:b2:c4:a6:6b:f5:cf:de:85:3a:40: 7f:01:82:69:ab:6b:e9:c6:19:31:ae:c6:fc:3a:be: 6c:7f:05:5d:1e:dc:d0:27:e1:95:aa:8f:ae:1d:fb: 1b:d7:87:83:54:50:a1:fd:15:1e:9a:94:36:23:99: 82:d9:fd:b1:04:7d:73:ef:6c:cc:7e:d5:c1:1e:d0: 9e:b7:35:b9:c5:c6:fb:c8:b0:54:a4:d9:63:af:f4: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:10:86:1D:D7:ED:97:C6:5A:D8:83:16:D1:7B:F0:B6:26:9F:54:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/135ec5a7-d9dd-467e-ac4a-236383b21732.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 68.170.16.0/20 IPv6: 2620:11b:4000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19210 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b5:75:ba:74:bf:be:d9:15:0c:93:74:8c:a5:d9:55:c5:46: 6a:ac:49:64:ff:50:be:da:1d:82:7b:22:8f:5a:e6:b1:a8:fb: b7:39:31:f9:34:b9:ef:46:a8:c7:07:43:9b:c4:fd:67:87:91: 28:c9:a2:2c:11:44:1e:1a:81:6d:7d:d2:49:a3:a4:6c:fb:96: da:94:8a:8a:ff:a3:62:c8:38:46:5d:75:6c:c6:a6:72:08:a7: c6:04:f3:db:f2:21:fc:bb:b0:a3:32:04:fd:99:81:7d:42:e4: 42:0f:0d:a2:c7:bd:9b:75:61:87:91:12:9c:90:f1:b2:0a:5e: 27:a9:60:13:d5:f8:bb:21:1e:d6:b7:f9:d5:16:2a:8d:9d:bd: 50:9e:d3:ad:87:d5:d4:f2:48:d9:46:60:8a:c5:0c:15:e7:cd: 9b:82:e7:0a:8a:9c:5a:72:65:92:f0:5c:9b:f3:68:ba:78:7c: 18:92:40:64:f3:29:e3:e9:0e:a2:59:85:18:ec:7e:ef:13:c5: 6b:df:48:7d:11:bd:24:3d:b7:e6:44:d2:e8:9e:51:77:29:4f: 6d:a6:af:8b:9e:b3:09:65:95:e0:55:fa:83:4e:5d:71:c1:09: 18:08:2e:ec:7f:db:85:14:9a:28:a7:8f:e4:b7:33:ab:15:24: 66:02:fc:83 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEsVOHVJignEQHvzqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkwNDEyNTMyNloXDTI3MTIwODEzNTMyNlowLzEtMCsGA1UEAxMk MTM1ZWM1YTctZDlkZC00NjdlLWFjNGEtMjM2MzgzYjIxNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVq9P0BFUQiYEQSpvVce0765cQwr+vH6Xan9 /wAzXhbRt3fYhpgbRyd6Rhzc0BNsLCNdUVPFQcXIgkysmFGk9Asxo6VCsizBQSkH ZZiDw7fzBf9IRUO9Kql8kEVbKcbn/e9fGjLFOIoPMzrmsYg6d5vyudhj1bZl0UrI vm3HtJMR0kRTUpjt0HoiNotseVlxZpivA+DUnYWMWR7cT6rhp8JgqG4QoYPxALLE pmv1z96FOkB/AYJpq2vpxhkxrsb8Or5sfwVdHtzQJ+GVqo+uHfsb14eDVFCh/RUe mpQ2I5mC2f2xBH1z72zMftXBHtCetzW5xcb7yLBUpNljr/R59QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBUQhh3X7ZfGWtiDFtF78LYmn1QdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x MzVlYzVhNy1kOWRkLTQ2N2UtYWM0YS0yMzYzODNiMjE3MzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzEzNWVjNWE3LWQ5ZGQtNDY3ZS1h YzRhLTIzNjM4M2IyMTczMi8xMzVlYzVhNy1kOWRkLTQ2N2UtYWM0YS0yMzYzODNi MjE3MzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAREqhAwDgQCAAIwCAMGACYgARtAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAksKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIO1dbp0v77ZFQyTdIyl2VXFRmqs SWT/UL7aHYJ7Io9a5rGo+7c5Mfk0ue9GqMcHQ5vE/WeHkSjJoiwRRB4agW190kmj pGz7ltqUior/o2LIOEZddWzGpnIIp8YE89vyIfy7sKMyBP2ZgX1C5EIPDaLHvZt1 YYeREpyQ8bIKXiepYBPV+LshHta3+dUWKo2dvVCe062H1dTySNlGYIrFDBXnzZuC 5wqKnFpyZZLwXJvzaLp4fBiSQGTzKePpDqJZhRjsfu8TxWvfSH0RvSQ9t+ZE0uie UXcpT22mr4ueswllleBV+oNOXXHBCRgILux/24UUmiinj+S3M6sVJGYC/IM= -----END CERTIFICATE-----Generated at Mon Sep 15 23:33:05 2025 by rpki-client