$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer File: 563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer (raw, json) Hash identifier: c3QXTWtvC6vl1UwJmhBoZKb3KwSnDo9zmXIWRiOCQo0= Subject key identifier: E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B5DCA4295143959D7512B2CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 12:45:24 +0000 Certificate not after: Mon 03 Jan 2028 13:45:24 +0000 Subordinate resources: AS: 19207 AS: 33103 IP: 208.93.48.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:ca:42:95:14:39:59:d7:51:2b:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 30 12:45:24 2025 GMT Not After : Jan 3 13:45:24 2028 GMT Subject: CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:bc:46:41:41:b5:62:3a:8f:40:69:27:bd: 24:22:d2:e6:3d:55:50:47:bc:9f:5f:00:34:0f:f8: 06:bf:1d:65:f0:61:0c:cc:a5:e7:4e:65:aa:77:31: 51:2b:5e:2b:e7:ec:97:6a:25:65:f2:61:0f:7b:01: 6b:4e:0d:c6:9e:8b:2a:0e:de:5c:11:c9:89:11:41: bd:67:29:43:0e:85:cc:4d:8f:40:0e:8a:23:79:e8: d6:83:13:a7:5c:50:c2:4b:f9:da:ac:58:d6:e1:d1: b9:64:98:47:6a:04:0a:ef:fa:ef:89:27:98:53:3e: 56:74:76:84:14:05:ea:f0:b3:45:a6:2d:ff:4a:56: d9:49:06:60:00:c5:65:03:8e:9b:11:b2:a3:48:c7: 3b:38:fb:22:90:bb:e9:bd:25:12:f0:cd:df:50:24: 6a:12:d0:43:33:9e:a6:7d:d9:ac:dc:fb:65:08:9a: 3e:09:6c:41:39:89:5a:22:ec:41:17:a0:71:d1:06: ce:0f:29:5b:26:5d:98:da:b3:1a:a3:bd:e1:e3:9a: cc:7d:2c:8e:1b:e3:35:6a:0d:ea:c1:72:c8:31:7b: fa:cc:c4:f5:ad:14:b9:f2:8a:3a:50:1e:8b:5f:01: d6:5d:b4:88:a7:26:ba:e6:5d:7a:7e:70:cf:70:4b: 26:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.93.48.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19207 33103 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c1:f1:a4:36:0b:0a:9e:e2:c0:36:5c:1a:5b:d8:23:ce:a1: 00:d1:13:22:83:dc:67:1a:d2:6b:2e:87:5f:9e:9a:4b:42:0f: 27:9a:15:5a:f2:8d:b6:35:df:41:53:10:20:10:e1:26:06:d0: 0a:70:72:69:e6:0c:80:a5:d5:3d:a0:b3:0f:c9:f9:71:13:d5: 83:3c:e6:04:22:97:ba:c1:d8:2d:f3:09:1c:16:01:30:b0:f2: 85:0c:c1:0c:71:72:fd:5b:10:db:52:fb:db:35:a6:d1:ea:24: 14:d4:01:f1:bf:fe:e7:c8:04:ff:00:57:51:c1:22:7f:84:a1: d8:26:68:01:03:7f:14:ac:86:f8:55:ad:c6:18:4d:7a:a5:67: cd:ae:03:ed:cf:db:69:51:a4:01:8a:b9:18:49:d4:7f:88:3a: a5:8d:0f:3d:de:d5:67:e3:40:b7:37:47:34:2e:42:5b:6e:ec: 6f:bc:52:99:25:f4:f7:6f:b4:5b:5e:9e:af:00:d8:c9:3f:d0: 84:be:7e:f1:d4:c8:78:3f:1d:9e:55:e6:62:1c:09:1b:f6:f1: ce:a5:11:d8:7b:f6:61:7f:cf:44:c3:47:68:6a:b1:b7:29:77: 24:f1:70:9d:5b:eb:26:a4:6c:d9:4a:31:84:2f:ea:8e:39:a1: cf:ee:24:af -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEtdykKVFDlZ11ErLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkzMDEyNDUyNFoXDTI4MDEwMzEzNDUyNFowLzEtMCsGA1UEAxMk NTYzYzJhZDMtNGU1ZS00NzU4LWIxYmUtMDdiZjRjZTk0NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVy8RkFBtWI6j0BpJ70kItLmPVVQR7yfXwA0 D/gGvx1l8GEMzKXnTmWqdzFRK14r5+yXaiVl8mEPewFrTg3GnosqDt5cEcmJEUG9 ZylDDoXMTY9ADoojeejWgxOnXFDCS/narFjW4dG5ZJhHagQK7/rviSeYUz5WdHaE FAXq8LNFpi3/SlbZSQZgAMVlA46bEbKjSMc7OPsikLvpvSUS8M3fUCRqEtBDM56m fdms3PtlCJo+CWxBOYlaIuxBF6Bx0QbODylbJl2Y2rMao73h45rMfSyOG+M1ag3q wXLIMXv6zMT1rRS58oo6UB6LXwHWXbSIpya65l16fnDPcEsmWQIDAQABo4IEHzCC BBswHQYDVR0OBBYEFOQdaK0qocpWEpNT4HcrMEcjYxUbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 NjNjMmFkMy00ZTVlLTQ3NTgtYjFiZS0wN2JmNGNlOTQ1MjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU2M2MyYWQzLTRlNWUtNDc1OC1i MWJlLTA3YmY0Y2U5NDUyMi81NjNjMmFkMy00ZTVlLTQ3NTgtYjFiZS0wN2JmNGNl OTQ1MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQXTAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC SwcCAwCBTzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAawfGkNgsKnuLANlwaW9gjzqEA0RMig9xnGtJrLodf nppLQg8nmhVa8o22Nd9BUxAgEOEmBtAKcHJp5gyApdU9oLMPyflxE9WDPOYEIpe6 wdgt8wkcFgEwsPKFDMEMcXL9WxDbUvvbNabR6iQU1AHxv/7nyAT/AFdRwSJ/hKHY JmgBA38UrIb4Va3GGE16pWfNrgPtz9tpUaQBirkYSdR/iDqljQ893tVn40C3N0c0 LkJbbuxvvFKZJfT3b7RbXp6vANjJP9CEvn7x1Mh4Px2eVeZiHAkb9vHOpRHYe/Zh f89Ew0doarG3KXck8XCdW+smpGzZSjGEL+qOOaHP7iSv -----END CERTIFICATE-----Generated at Sun Oct 19 01:19:26 2025 by rpki-client