$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.cer File: 35bf5b69-9d60-4f63-9abc-a4e6a43e4318.cer (raw, json) Hash identifier: 1VCxVZTw5HP5wCVbduE6qA8PUJcEA2PTVEXj3o5m+84= Subject key identifier: E7:60:A7:89:3C:60:B7:D2:E3:D4:50:6B:F4:10:57:F2:A7:D6:A6:59 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AC204C7DEC99A1B45A977F3A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Aug 2025 17:37:13 +0000 Certificate not after: Mon 08 Nov 2027 18:37:13 +0000 Subordinate resources: AS: 18733 IP: 198.20.216.0/21 IP: 2620:f:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:04:c7:de:c9:9a:1b:45:a9:77:f3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 5 17:37:13 2025 GMT Not After : Nov 8 18:37:13 2027 GMT Subject: CN=35bf5b69-9d60-4f63-9abc-a4e6a43e4318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:9a:1c:c6:23:0e:96:64:f2:57:df:17:b5: 49:d8:cf:dd:7c:9c:67:4c:bc:f7:84:f1:03:07:c0: 37:8a:bd:6a:e2:d4:43:2f:8a:6c:91:bf:c5:4d:d4: 32:fd:99:39:79:e5:b3:68:a2:85:54:5d:bd:6b:5a: e0:cf:6f:88:e9:2d:93:5b:3a:a1:dc:20:52:fc:c6: de:c2:f7:b0:06:ad:1b:93:43:91:eb:36:ca:1e:c9: 0b:d8:11:fe:91:44:47:0a:f6:25:b0:f8:38:56:b2: 1d:b2:92:77:87:8d:29:96:f7:02:0c:77:3b:e0:7c: e1:4b:f7:40:10:87:3b:7e:87:17:7a:06:63:e3:a0: b3:74:2a:1b:9a:44:08:12:22:57:51:a5:27:be:03: 98:d0:37:fd:8d:44:e1:e2:05:43:4e:6a:01:21:62: 72:de:15:8b:ff:a6:5c:ed:d8:58:da:09:00:ef:84: fc:ff:73:19:4c:90:e6:a5:6a:8e:fc:da:99:f8:e1: 79:1f:5d:96:de:e9:df:69:98:8e:b2:e2:6a:eb:86: 2e:41:03:6b:1c:98:fa:70:3f:c2:f3:6f:fd:33:8c: 67:10:ce:9f:3a:0b:01:d5:b3:94:65:42:76:e9:88: 4f:6e:c2:3f:95:62:11:b2:3b:86:07:b0:77:21:f9: 71:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:A7:89:3C:60:B7:D2:E3:D4:50:6B:F4:10:57:F2:A7:D6:A6:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.20.216.0/21 IPv6: 2620:f:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18733 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d4:d4:72:eb:42:15:da:e8:6d:5d:e7:91:45:ea:68:9c:b3: 30:59:92:66:5e:4a:e8:de:01:87:d4:cd:64:b6:6e:f1:fa:a2: 9b:44:2d:29:b4:6c:3e:0a:75:1c:c5:02:02:d4:18:bd:db:80: 3a:09:cb:7d:54:1e:62:75:14:83:01:89:5f:49:04:e1:0b:b6: 08:f7:24:54:74:d0:c5:05:10:6a:02:e9:7c:65:2b:17:36:f9: 72:7a:55:80:e9:ca:4a:c2:a9:f2:25:63:3c:eb:fe:b6:b9:cf: 47:b1:89:36:c4:a9:3e:90:92:0c:ae:91:04:8d:b6:4f:a8:d3: c8:0d:b8:c5:94:76:89:e4:61:31:6f:0f:5d:a1:8a:b7:dc:df: e5:12:a8:2a:be:dc:08:94:72:68:00:b8:f7:8b:82:90:cc:16: ac:1d:d1:3c:0c:a3:4e:0c:2d:8e:ab:98:58:63:8c:16:a2:35: c3:43:9c:1c:c7:70:60:57:1b:09:55:12:5f:1d:e7:fd:8b:d2: 31:3b:07:04:f1:2e:e1:4e:6c:02:be:ac:35:34:67:b7:dd:34: b7:8b:a5:e1:86:e9:5b:ee:35:87:3b:91:6d:9e:c0:9e:b0:51: 0a:99:be:19:35:21:63:2e:ff:36:e2:4e:e9:e4:b6:12:39:8c: 18:81:fd:2d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWErCBMfeyZobRal386AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgwNTE3MzcxM1oXDTI3MTEwODE4MzcxM1owLzEtMCsGA1UEAxMk MzViZjViNjktOWQ2MC00ZjYzLTlhYmMtYTRlNmE0M2U0MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGuaHMYjDpZk8lffF7VJ2M/dfJxnTLz3hPED B8A3ir1q4tRDL4pskb/FTdQy/Zk5eeWzaKKFVF29a1rgz2+I6S2TWzqh3CBS/Mbe wvewBq0bk0OR6zbKHskL2BH+kURHCvYlsPg4VrIdspJ3h40plvcCDHc74HzhS/dA EIc7focXegZj46CzdCobmkQIEiJXUaUnvgOY0Df9jUTh4gVDTmoBIWJy3hWL/6Zc 7dhY2gkA74T8/3MZTJDmpWqO/NqZ+OF5H12W3unfaZiOsuJq64YuQQNrHJj6cD/C 82/9M4xnEM6fOgsB1bOUZUJ26YhPbsI/lWIRsjuGB7B3Iflx2QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOdgp4k8YLfS49RQa/QQV/Kn1qZZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z NWJmNWI2OS05ZDYwLTRmNjMtOWFiYy1hNGU2YTQzZTQzMTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM1YmY1YjY5LTlkNjAtNGY2My05 YWJjLWE0ZTZhNDNlNDMxOC8zNWJmNWI2OS05ZDYwLTRmNjMtOWFiYy1hNGU2YTQz ZTQzMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAPGFNgwDwQCAAIwCQMHACYgAA8gADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJJLTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBd1NRy60IV2uhtXeeRReponLMw WZJmXkro3gGH1M1ktm7x+qKbRC0ptGw+CnUcxQIC1Bi924A6Cct9VB5idRSDAYlf SQThC7YI9yRUdNDFBRBqAul8ZSsXNvlyelWA6cpKwqnyJWM86/62uc9HsYk2xKk+ kJIMrpEEjbZPqNPIDbjFlHaJ5GExbw9doYq33N/lEqgqvtwIlHJoALj3i4KQzBas HdE8DKNODC2Oq5hYY4wWojXDQ5wcx3BgVxsJVRJfHef9i9IxOwcE8S7hTmwCvqw1 NGe33TS3i6Xhhulb7jWHO5FtnsCesFEKmb4ZNSFjLv824k7p5LYSOYwYgf0t -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:56 2025 by rpki-client