$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer File: 3cd40041-6571-4f30-b76a-4746a4c2d957.cer (raw, json) Hash identifier: 9S1EBMMpxgHzeiMYzIWxRytaYGwp/0VPcGgq1nDmV+I= Subject key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AE724318F62E810FA8EF64060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 Aug 2025 00:45:25 +0000 Certificate not after: Mon 22 Nov 2027 01:45:25 +0000 Subordinate resources: IP: 205.207.255.0/24 IP: 2620:13e:5000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:24:31:8f:62:e8:10:fa:8e:f6:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 19 00:45:25 2025 GMT Not After : Nov 22 01:45:25 2027 GMT Subject: CN=3cd40041-6571-4f30-b76a-4746a4c2d957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:33:02:70:f3:af:68:23:41:e9:d6:b2:55: 69:3b:01:01:ed:56:6a:38:57:81:85:22:8b:e3:f8: e2:66:b5:1a:1a:8b:46:9a:45:fe:72:9d:64:93:43: 89:cf:52:fc:60:33:36:0c:7a:22:4f:ac:e1:04:fe: d5:fb:82:38:be:0a:fc:22:47:51:2c:a5:29:bf:44: a4:9d:ef:cd:85:27:f6:b1:e8:f3:ea:e2:78:87:76: 1d:d0:9a:3e:21:83:1b:93:80:d9:6d:c2:d8:21:9c: 3d:48:36:ad:e6:04:53:99:70:6b:0d:04:c7:2f:cb: 27:60:c7:3b:89:b8:d1:b0:63:f4:f2:4a:15:7b:60: 36:1e:2d:3b:ec:ca:fa:e6:c9:ee:90:6c:d3:5f:b2: 51:f2:2e:d6:70:fe:22:88:2b:7c:9f:e0:6f:47:df: a5:09:e8:f1:a5:5d:8f:0b:ec:f9:12:99:fe:e3:06: 0f:59:1a:fd:8d:7d:dc:d0:5e:f7:58:ff:8c:68:4e: e1:43:1f:31:0b:fe:14:c2:71:82:c4:99:7a:3f:f2: 70:df:ed:2d:4f:df:53:dc:80:02:b8:3d:51:21:3f: 55:d3:f0:6a:b4:82:3b:2f:f2:02:c2:34:c6:6c:04: 58:6c:d7:b9:d5:89:59:b8:a4:63:75:c1:3d:e7:d1: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 205.207.255.0/24 IPv6: 2620:13e:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:bd:12:75:64:54:0a:60:5e:85:8c:01:e2:8c:65:03:7b:41: d9:37:76:56:af:90:f5:b8:82:52:41:1b:53:39:3f:8c:87:07: df:1c:26:6a:91:98:b3:f9:16:1f:9d:34:01:98:9c:82:1c:1e: 19:41:a9:76:90:fe:04:b6:64:12:dc:06:23:e6:01:2f:57:57: 6a:59:52:3c:c4:b9:89:17:d3:db:07:b5:4c:b8:b1:7e:9c:b7: 3c:63:d8:b1:06:43:fd:0a:70:fc:a9:9d:19:5d:93:04:88:23: f7:aa:30:4f:ce:f6:b8:23:8c:fd:e1:ba:0a:41:cd:6b:47:3a: d2:bd:5c:fd:17:7f:cd:6a:89:6f:13:d2:c2:ce:ba:be:7d:15: 74:b6:db:10:b8:5f:c0:d2:47:60:d7:cd:2c:cb:c1:b7:2b:40: 35:f1:66:83:b5:9a:6f:06:93:f4:ce:cf:33:8b:95:2a:c0:d3: 15:76:fa:6c:f5:05:cd:69:c3:48:64:91:03:48:f2:b9:09:79: f0:89:f6:f2:7e:45:95:5f:97:ee:a4:5f:b4:a5:b7:47:57:a3: db:3a:e1:6b:27:92:c2:a1:e6:e2:75:2a:e7:22:91:24:84:80: 0a:43:98:09:6a:44:47:89:c7:b5:5e:d7:4d:c3:99:6c:5b:23: d5:fb:0d:b1 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWErnJDGPYugQ+o72QGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgxOTAwNDUyNVoXDTI3MTEyMjAxNDUyNVowLzEtMCsGA1UEAxMk M2NkNDAwNDEtNjU3MS00ZjMwLWI3NmEtNDc0NmE0YzJkOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYgzAnDzr2gjQenWslVpOwEB7VZqOFeBhSKL 4/jiZrUaGotGmkX+cp1kk0OJz1L8YDM2DHoiT6zhBP7V+4I4vgr8IkdRLKUpv0Sk ne/NhSf2sejz6uJ4h3Yd0Jo+IYMbk4DZbcLYIZw9SDat5gRTmXBrDQTHL8snYMc7 ibjRsGP08koVe2A2Hi077Mr65snukGzTX7JR8i7WcP4iiCt8n+BvR9+lCejxpV2P C+z5Epn+4wYPWRr9jX3c0F73WP+MaE7hQx8xC/4UwnGCxJl6P/Jw3+0tT99T3IAC uD1RIT9V0/BqtII7L/ICwjTGbARYbNe51YlZuKRjdcE959EigQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFAt3SMGbnlrLUS+WnDPAtsiC2w4hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z Y2Q0MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2YTRjMmQ5NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzNjZDQwMDQxLTY1NzEtNGYzMC1i NzZhLTQ3NDZhNGMyZDk1Ny8zY2Q0MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2YTRj MmQ5NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADNz/8wDwQCAAIwCQMHBCYgAT5QADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCOvRJ1ZFQKYF6FjAHijGUDe0HZN3ZWr5D1uIJSQRtTOT+MhwffHCZqkZiz+RYf nTQBmJyCHB4ZQal2kP4EtmQS3AYj5gEvV1dqWVI8xLmJF9PbB7VMuLF+nLc8Y9ix BkP9CnD8qZ0ZXZMEiCP3qjBPzva4I4z94boKQc1rRzrSvVz9F3/NaolvE9LCzrq+ fRV0ttsQuF/A0kdg180sy8G3K0A18WaDtZpvBpP0zs8zi5UqwNMVdvps9QXNacNI ZJEDSPK5CXnwifbyfkWVX5fupF+0pbdHV6PbOuFrJ5LCoebidSrnIpEkhIAKQ5gJ akRHice1XtdNw5lsWyPV+w2x -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:47 2025 by rpki-client