$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer File: 4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer (raw, json) Hash identifier: Y3rV5OuUzMeCL6VzjVLsNnBaLYNJFrgYivMFIG7Kh5Y= Subject key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A58C368D4C0D291BC4CB55780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Jun 2025 00:45:37 +0000 Certificate not after: Sat 02 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 63037 IP: 192.64.70.0/23 IP: 2605:bb80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:c3:68:d4:c0:d2:91:bc:4c:b5:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 29 00:45:37 2025 GMT Not After : Oct 2 00:45:37 2027 GMT Subject: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:90:b2:2d:15:85:c0:8a:f5:e4:31:6c:9d: 53:dd:b3:48:91:36:e1:c2:a8:fc:3f:d4:6f:ef:ce: a3:58:02:77:3b:f1:cd:d2:61:37:f6:e0:bf:cc:f0: fa:d9:33:90:a2:d1:ec:21:65:f2:9e:43:70:15:70: b4:54:81:e2:ba:89:94:da:49:a6:60:8d:da:70:39: c5:16:84:58:1a:ee:b0:a7:dd:a3:1e:98:d0:5b:e4: bd:c1:03:fa:0a:15:73:78:4a:4a:ce:d5:ef:1f:45: 7c:52:07:8b:0f:8e:cb:b0:3f:db:b9:41:f9:35:02: 0c:0b:33:2e:8b:19:73:8d:ac:88:aa:ec:7a:6f:a3: a1:57:3d:ed:35:0c:8d:ee:c8:fb:a4:5b:b4:19:d5: 08:8c:3c:ac:93:0f:4c:27:05:90:fe:14:34:34:45: cd:a8:af:5a:e2:70:39:0d:77:26:1d:32:3b:24:11: 87:97:fa:9a:3c:d0:18:e1:1c:63:08:4f:2a:9e:46: 99:da:d6:44:7d:03:2c:84:24:a7:c2:fd:e4:3a:9e: 11:cb:09:93:e7:8f:a4:04:0f:bb:23:8a:eb:ce:7f: ed:92:a7:40:ba:73:6b:ba:ad:1c:95:dd:1d:d8:4c: ae:ae:30:25:19:db:4d:d9:3d:7f:d6:55:8d:c4:ad: 94:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.64.70.0/23 IPv6: 2605:bb80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63037 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6c:11:c3:22:69:2a:dc:2a:6a:3f:a0:07:f2:98:59:53:6e: ae:3c:63:ba:97:59:e6:2d:9a:04:b7:dc:99:d5:7f:fc:33:05: b0:c6:aa:25:eb:56:3e:2a:47:22:52:5e:4c:a7:41:24:b5:d4: 90:f3:ec:f8:e7:e5:73:d6:97:3a:ee:f2:a1:d5:c3:2d:36:97: 35:fe:06:3b:7a:07:55:14:c5:16:e5:ee:e3:16:33:19:f6:a0: ef:4e:46:24:80:fe:63:1a:2e:1e:14:81:49:75:8c:8c:69:08: e3:48:1f:88:13:f3:a2:4b:6a:90:d4:50:67:a6:2a:ab:54:eb: 7c:d1:8e:24:42:7c:15:10:0c:3e:41:0f:b7:d2:5b:dd:a9:e4: f3:f6:d1:b9:43:60:57:74:cb:1c:0c:fd:cc:4a:ae:dd:2f:c6: 6e:c9:9b:eb:38:dd:5b:37:95:11:91:03:2b:8c:55:3b:0d:8b: 04:f1:cf:8a:82:2d:e1:f1:99:99:29:2a:4e:99:f1:f3:7a:ad: b7:38:cb:f9:02:37:01:fd:20:b3:bb:7f:52:ce:7c:76:49:b6: 6a:04:38:c4:3a:d4:fa:96:2a:e0:6c:2d:cd:8f:98:e4:17:c5: 7a:c3:bb:97:22:ef:15:f6:a5:5b:72:35:7e:44:39:8f:29:bd: 71:81:49:06 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpYw2jUwNKRvEy1V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYyOTAwNDUzN1oXDTI3MTAwMjAwNDUzN1owLzEtMCsGA1UEAxMk NGFkYzlmNDItODIwMS00YWYyLWEzYzItMjIzZDFlMjY4N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQSQsi0VhcCK9eQxbJ1T3bNIkTbhwqj8P9Rv 786jWAJ3O/HN0mE39uC/zPD62TOQotHsIWXynkNwFXC0VIHiuomU2kmmYI3acDnF FoRYGu6wp92jHpjQW+S9wQP6ChVzeEpKztXvH0V8UgeLD47LsD/buUH5NQIMCzMu ixlzjayIqux6b6OhVz3tNQyN7sj7pFu0GdUIjDyskw9MJwWQ/hQ0NEXNqK9a4nA5 DXcmHTI7JBGHl/qaPNAY4RxjCE8qnkaZ2tZEfQMshCSnwv3kOp4RywmT54+kBA+7 I4rrzn/tkqdAunNruq0cld0d2EyurjAlGdtN2T1/1lWNxK2UcQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFOG7aJiDc98lWFjP60ZBoAH8YT1fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUyNjg3YTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzRhZGM5ZjQyLTgyMDEtNGFmMi1h M2MyLTIyM2QxZTI2ODdhMi80YWRjOWY0Mi04MjAxLTRhZjItYTNjMi0yMjNkMWUy Njg3YTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAHAQEYwDQQCAAIwBwMFACYFu4AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPY9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEBsEcMiaSrcKmo/oAfymFlTbq48 Y7qXWeYtmgS33JnVf/wzBbDGqiXrVj4qRyJSXkynQSS11JDz7Pjn5XPWlzru8qHV wy02lzX+Bjt6B1UUxRbl7uMWMxn2oO9ORiSA/mMaLh4UgUl1jIxpCONIH4gT86JL apDUUGemKqtU63zRjiRCfBUQDD5BD7fSW92p5PP20blDYFd0yxwM/cxKrt0vxm7J m+s43Vs3lRGRAyuMVTsNiwTxz4qCLeHxmZkpKk6Z8fN6rbc4y/kCNwH9ILO7f1LO fHZJtmoEOMQ61PqWKuBsLc2PmOQXxXrDu5ci7xX2pVtyNX5EOY8pvXGBSQY= -----END CERTIFICATE-----Generated at Sat Nov 1 03:44:47 2025 by rpki-client