$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer File: 5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer (raw, json) Hash identifier: b5ZvE8BN5njg+En1dLDLf8KcD24leqas/CzkB5HczjQ= Subject key identifier: D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AF7E44C49068E59BABA053100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Aug 2025 00:45:25 +0000 Certificate not after: Sun 28 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 26730 IP: 162.221.182.0/23 IP: 2620:135:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:e4:4c:49:06:8e:59:ba:ba:05:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 25 00:45:25 2025 GMT Not After : Nov 28 01:45:25 2027 GMT Subject: CN=5a77e320-aa58-4bb9-bf65-322bab53aa7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:c9:3c:73:a1:ff:a9:db:ec:cf:51:b9:93: bf:36:5e:81:5a:2e:3a:33:a9:99:89:dd:03:89:c0: ee:13:81:d7:1f:fe:d7:4a:77:03:d0:4a:cf:59:d8: 6d:33:ba:2e:1f:43:b9:63:4d:9c:52:9f:4a:f4:2f: 22:32:84:a4:a5:f1:0f:41:43:c0:7e:09:2c:d3:16: 98:d5:e7:0c:c1:47:93:a3:4d:5a:53:47:69:33:2d: ca:30:b2:36:e1:a7:c0:da:ca:41:31:4c:1f:6f:0b: 49:59:46:2f:1b:ac:57:4b:69:ee:35:1a:aa:64:ef: ae:b3:bf:1b:46:4d:27:16:28:be:1b:21:47:7b:3c: 39:88:1a:7d:95:b5:92:9e:30:c1:84:a2:5e:8f:50: b1:26:27:88:0e:3e:61:33:cd:75:73:6b:07:af:2e: db:b6:34:8b:6e:1f:8b:f4:c4:ac:26:3d:a0:3f:ab: f6:f9:66:39:5e:2b:2f:90:2c:5f:32:01:09:dc:bc: 32:cd:02:ab:4b:53:97:b7:64:27:bc:d4:cc:ec:cb: 23:80:a5:c5:31:bc:28:84:1f:98:05:ec:28:01:8a: ea:66:eb:dc:6e:7d:ee:5a:ab:48:5e:05:70:ca:db: 38:d8:5a:8d:57:59:32:17:37:96:6e:bf:0e:05:fd: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 162.221.182.0/23 IPv6: 2620:135:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26730 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:fa:fc:e5:7f:65:7d:e8:90:e9:65:0c:74:59:31:a0:35:bc: 86:17:4e:1e:a3:2c:30:de:d9:a1:d0:f1:c9:ba:63:64:41:e1: f7:65:a0:34:8a:b5:71:c5:e1:42:2d:1f:1c:b7:f0:63:5a:55: 53:3c:ab:1a:3a:08:4a:12:58:7e:da:67:76:f6:e2:d4:62:1e: 0c:ab:3d:1c:dd:46:df:c8:28:09:c2:77:99:5c:01:81:34:7b: 68:b0:50:38:27:ee:a2:d6:ba:0d:8b:d1:4d:40:00:b3:37:63: b5:81:a7:a3:56:5d:bf:aa:d6:4e:99:65:99:a5:53:bf:2f:89: a6:8d:67:93:59:65:d6:e6:93:6d:21:0c:c3:57:98:ca:d3:db: 8b:2b:4f:db:69:9d:e0:d8:5b:ec:5e:52:17:e2:a0:39:36:a8: 8a:fb:13:08:a5:a9:54:3d:d1:b9:a8:fc:c1:a4:d6:60:08:16: 41:48:dd:6d:c7:57:25:c2:e9:c5:d4:8c:9d:89:0a:02:ba:5c: c3:ce:c6:91:73:cb:85:dc:7d:d1:d9:58:82:98:da:9c:55:09: cb:59:dc:26:15:86:3e:ce:84:49:4c:f6:03:90:d0:d2:f6:21: fd:32:7d:90:e9:17:82:a8:e0:c2:11:ac:31:9a:45:f0:05:22: 65:45:05:68 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEr35ExJBo5ZuroFMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgyNTAwNDUyNVoXDTI3MTEyODAxNDUyNVowLzEtMCsGA1UEAxMk NWE3N2UzMjAtYWE1OC00YmI5LWJmNjUtMzIyYmFiNTNhYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzrJPHOh/6nb7M9RuZO/Nl6BWi46M6mZid0D icDuE4HXH/7XSncD0ErPWdhtM7ouH0O5Y02cUp9K9C8iMoSkpfEPQUPAfgks0xaY 1ecMwUeTo01aU0dpMy3KMLI24afA2spBMUwfbwtJWUYvG6xXS2nuNRqqZO+us78b Rk0nFii+GyFHezw5iBp9lbWSnjDBhKJej1CxJieIDj5hM811c2sHry7btjSLbh+L 9MSsJj2gP6v2+WY5XisvkCxfMgEJ3LwyzQKrS1OXt2QnvNTM7MsjgKXFMbwohB+Y BewoAYrqZuvcbn3uWqtIXgVwyts42FqNV1kyFzeWbr8OBf1TUQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNQyCOM9/8X63AMdbVE65sZq2lEDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 YTc3ZTMyMC1hYTU4LTRiYjktYmY2NS0zMjJiYWI1M2FhN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzVhNzdlMzIwLWFhNTgtNGJiOS1i ZjY1LTMyMmJhYjUzYWE3Yy81YTc3ZTMyMC1hYTU4LTRiYjktYmY2NS0zMjJiYWI1 M2FhN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAGi3bYwDwQCAAIwCQMHBCYgATUQADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJoajBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCW+vzlf2V96JDpZQx0WTGgNbyG F04eoyww3tmh0PHJumNkQeH3ZaA0irVxxeFCLR8ct/BjWlVTPKsaOghKElh+2md2 9uLUYh4Mqz0c3UbfyCgJwneZXAGBNHtosFA4J+6i1roNi9FNQACzN2O1gaejVl2/ qtZOmWWZpVO/L4mmjWeTWWXW5pNtIQzDV5jK09uLK0/baZ3g2FvsXlIX4qA5NqiK +xMIpalUPdG5qPzBpNZgCBZBSN1tx1clwunF1IydiQoCulzDzsaRc8uF3H3R2ViC mNqcVQnLWdwmFYY+zoRJTPYDkNDS9iH9Mn2Q6ReCqODCEawxmkXwBSJlRQVo -----END CERTIFICATE-----Generated at Wed Sep 17 07:19:13 2025 by rpki-client