$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer File: 171c42a2-3dc6-43af-b734-e91956bdfe19.cer (raw, json) Hash identifier: Ky0N+1gd+rJgqhL5PyVtl3OZ2t0vOn78g4TkDqFsaCc= Subject key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B3284A84C59AF39A56CFF3A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Sep 2025 00:45:24 +0000 Certificate not after: Sun 19 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 397865 IP: 135.84.120.0/23 IP: 216.168.136.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:84:a8:4c:59:af:39:a5:6c:ff:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 15 00:45:24 2025 GMT Not After : Dec 19 01:45:24 2027 GMT Subject: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:8b:f7:f0:46:6b:fb:3a:82:4c:2c:80:3e: cf:0c:cd:66:69:47:de:74:86:0e:dc:d3:b1:0c:59: 5a:6b:93:41:ee:41:37:05:cf:ba:e5:55:af:2a:4e: bd:15:74:31:53:41:5c:17:e9:2c:42:2d:e6:d8:f7: 29:fc:18:a9:dc:d9:df:02:10:cf:88:13:b1:e9:66: 0a:e9:8c:4f:f1:de:2e:70:ff:27:de:31:09:86:f0: f6:c7:51:db:1b:4d:9f:3d:e8:d2:ac:48:01:d7:63: 8b:72:43:eb:32:15:6a:bc:b9:0e:30:dd:8a:c9:40: 71:82:e4:b5:16:fa:9b:a3:80:ee:6c:38:05:66:8f: c8:d5:12:d0:8c:00:40:bc:e8:a6:16:e8:08:fc:67: ef:a0:2c:ed:2e:a3:fa:34:27:ce:7f:8c:dd:1a:16: 32:80:cb:45:81:51:38:31:db:b4:c8:4a:be:d9:12: 93:e0:7c:bc:7d:d2:0d:8f:7a:08:e7:e1:d0:3f:e6: d0:44:8c:aa:b4:19:a8:10:34:7f:79:a9:95:e1:46: 52:e5:25:3b:48:27:3f:71:17:84:da:88:33:d9:c5: 3e:71:4b:6e:cb:66:83:f5:3a:ae:42:5c:f7:9c:ba: 2a:15:2a:d9:a2:91:57:0c:52:c8:70:e3:a7:5d:45: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 216.168.136.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397865 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:31:d5:c7:34:1a:14:19:26:90:d0:b2:62:2f:4b:d0:a1:55: 4a:98:df:0c:9b:77:62:ca:72:e3:58:96:30:80:d4:91:5c:d0: bd:2a:8e:24:08:28:32:69:66:7f:06:54:1a:f8:9b:24:8e:7f: 65:3c:7c:39:97:13:cb:cf:a9:d6:fc:c0:26:8c:a0:ee:7c:5a: 01:cc:cb:2e:15:f3:4e:e4:b9:3d:33:c2:e6:a8:87:77:ff:50: 52:08:68:5b:ee:70:b3:d3:06:a9:e1:b9:43:3d:63:eb:1b:ea: 20:20:89:bc:c1:a4:ce:3e:2c:d5:b6:c3:4d:69:d7:8e:ae:7d: 6b:0f:51:5e:90:65:b7:d9:f1:b0:94:fb:77:fb:74:cf:01:0c: 12:92:82:c6:15:8a:ec:01:8c:49:9b:4e:20:1f:a1:c7:43:0d: bc:8a:b3:64:4b:a6:1d:68:5a:a9:44:30:7e:b3:81:8d:02:7c: 3d:04:9b:8a:a2:d0:4d:f3:29:6c:83:3e:6f:84:ec:91:32:49: 0a:dd:4a:68:11:ea:bb:49:d0:70:1e:3e:41:e3:b3:a8:32:35: cb:50:d8:09:58:f6:66:89:8a:1a:d4:f4:02:7c:d8:f7:12:93: 55:5f:1c:10:42:5b:ea:1c:5c:4a:5e:76:b7:62:8d:78:4b:b0: ed:e0:b7:b8 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEsyhKhMWa85pWz/OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkxNTAwNDUyNFoXDTI3MTIxOTAxNDUyNFowLzEtMCsGA1UEAxMk MTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRmZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovKL9/BGa/s6gkwsgD7PDM1maUfedIYO3NOx DFlaa5NB7kE3Bc+65VWvKk69FXQxU0FcF+ksQi3m2Pcp/Bip3NnfAhDPiBOx6WYK 6YxP8d4ucP8n3jEJhvD2x1HbG02fPejSrEgB12OLckPrMhVqvLkOMN2KyUBxguS1 Fvqbo4DubDgFZo/I1RLQjABAvOimFugI/GfvoCztLqP6NCfOf4zdGhYygMtFgVE4 Mdu0yEq+2RKT4Hy8fdINj3oI5+HQP+bQRIyqtBmoEDR/eamV4UZS5SU7SCc/cReE 2ogz2cU+cUtuy2aD9TquQlz3nLoqFSrZopFXDFLIcOOnXUUA/QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFOuw1TymVvZWT8UWcLjtiZDeDybTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x NzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE3MWM0MmEyLTNkYzYtNDNhZi1i NzM0LWU5MTk1NmJkZmUxOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZi ZGZlMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAGHVHgDBAHYqIgwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhIpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHQx1cc0GhQZJpDQsmIvS9ChVUqY3wybd2LKcuNY ljCA1JFc0L0qjiQIKDJpZn8GVBr4mySOf2U8fDmXE8vPqdb8wCaMoO58WgHMyy4V 807kuT0zwuaoh3f/UFIIaFvucLPTBqnhuUM9Y+sb6iAgibzBpM4+LNW2w01p146u fWsPUV6QZbfZ8bCU+3f7dM8BDBKSgsYViuwBjEmbTiAfocdDDbyKs2RLph1oWqlE MH6zgY0CfD0Em4qi0E3zKWyDPm+E7JEySQrdSmgR6rtJ0HAePkHjs6gyNctQ2AlY 9maJihrU9AJ82PcSk1VfHBBCW+ocXEpedrdijXhLsO3gt7g= -----END CERTIFICATE-----Generated at Thu Oct 16 21:49:05 2025 by rpki-client