$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer File: 9bc88207-e7c7-453e-a4ab-77b72152c33a.cer (raw, json) Hash identifier: bO9ntbh45jiNWo0uSC+LdJOmNHtI7aJPys6aUqf0Ty8= Subject key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584ADAA5F465EFC570EFBAB4B398 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 13:21:22 +0000 Certificate not after: Fri 11 Sep 2026 00:45:20 +0000 Subordinate resources: AS: 22379 IP: 64.111.84.0/22 IP: 65.49.240.0/20 IP: 134.65.8.0/21 IP: 134.65.32.0/21 IP: 134.65.174.0/23 IP: 149.20.70.0/23 IP: 160.32.64.0/18 IP: 160.32.248.0 -- 160.32.253.255 IP: 173.46.224.0/19 IP: 184.75.144.0/20 IP: 199.73.12.0/22 IP: 209.127.208.0/22 IP: 216.52.100.0/23 IP: 216.86.72.0/21 IP: 2606:5e80::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:a5:f4:65:ef:c5:70:ef:ba:b4:b3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 14 13:21:22 2025 GMT Not After : Sep 11 00:45:20 2026 GMT Subject: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:fb:c6:55:d9:e5:bb:3f:24:ba:c0:e1:48: 4c:93:8d:1e:bf:00:02:89:7a:d1:c6:ba:06:24:8b: ad:be:fa:6c:61:4c:d1:7f:ac:d1:c5:7d:74:68:64: db:66:f9:18:7d:16:50:25:bc:56:8c:d5:34:43:6d: eb:2b:d1:16:6d:cf:18:ff:1b:2b:e2:2b:d9:92:78: 47:03:5a:49:f3:33:75:3a:29:71:09:91:65:6c:88: 2c:e9:f6:fe:0c:1f:ab:5e:db:06:e2:6e:16:d1:64: f1:18:68:0b:d5:58:bc:e0:f1:cb:56:da:0b:73:52: 72:e0:c6:21:82:f1:3d:d2:4a:7d:f8:96:83:f7:b3: b5:05:cb:fe:d6:ae:f9:2b:01:97:04:22:76:c6:1c: 7d:d8:4d:94:8e:d8:0d:4a:15:2f:55:83:63:69:ce: a4:37:e7:de:4c:48:94:ad:2e:22:53:6d:22:f8:97: f0:57:1b:1e:c6:50:6f:bc:7d:92:3e:fd:62:85:15: 19:0f:eb:30:ca:79:c5:33:2f:78:16:b6:07:25:44: a3:82:1f:1b:2e:f5:ee:b0:8a:55:4b:92:28:eb:df: f7:00:5c:8e:f2:a9:80:f1:b4:ef:bd:d9:ca:1e:86: 13:6e:5b:48:e4:95:0d:27:cb:8b:c1:91:9f:22:01: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.111.84.0/22 65.49.240.0/20 134.65.8.0/21 134.65.32.0/21 134.65.174.0/23 149.20.70.0/23 160.32.64.0/18 160.32.248.0-160.32.253.255 173.46.224.0/19 184.75.144.0/20 199.73.12.0/22 209.127.208.0/22 216.52.100.0/23 216.86.72.0/21 IPv6: 2606:5e80::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22379 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1e:10:ac:a8:c0:67:d0:8c:7a:a3:19:d0:03:4d:04:3b:03: 64:02:7f:59:33:51:b1:95:e3:ca:34:58:11:8b:6b:2a:08:15: 7c:3c:f5:6c:93:f0:37:8d:fe:10:c7:57:eb:6f:b9:14:bd:03: f5:d6:f3:3a:3d:00:a2:21:42:d2:80:5b:78:17:85:74:d8:9a: 57:fa:70:88:a8:fc:a7:e7:2d:1d:d7:af:2b:41:d8:d2:46:0b: cf:27:10:38:fc:7d:65:6a:57:27:0c:22:08:ef:21:cd:07:7d: c5:a7:54:45:e0:d1:bd:98:48:27:ff:3f:17:dc:ab:ff:f8:2b: 94:1c:de:f3:19:9f:cf:c8:23:cf:40:3e:72:69:df:3b:14:13: 33:ef:e5:28:5f:b4:fe:06:9f:00:2e:89:d0:cc:53:cd:59:b2: a4:0c:ed:91:df:ca:fa:21:2c:a7:81:0b:63:8c:0a:93:40:00: 6c:0b:d6:e3:5d:cd:87:2a:2c:6d:23:fb:5e:2d:d3:74:05:e3: bb:31:94:37:a7:26:ee:c8:73:d9:d6:b0:70:0a:95:45:f5:35: f7:a2:4b:da:2d:1c:72:14:4f:17:64:6c:0d:b2:7e:3c:f8:0d: 84:4e:34:35:47:64:86:43:6c:e1:7f:1e:be:64:a4:ee:9b:33: 73:4a:67:1d -----BEGIN CERTIFICATE----- MIIHbjCCBlagAwIBAgIUAQ0Mn0MoWErapfRl78Vw77q0s5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgxNDEzMjEyMloXDTI2MDkxMTAwNDUyMFowLzEtMCsGA1UEAxMk OWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJjMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziT7xlXZ5bs/JLrA4UhMk40evwACiXrRxroG JIutvvpsYUzRf6zRxX10aGTbZvkYfRZQJbxWjNU0Q23rK9EWbc8Y/xsr4ivZknhH A1pJ8zN1OilxCZFlbIgs6fb+DB+rXtsG4m4W0WTxGGgL1Vi84PHLVtoLc1Jy4MYh gvE90kp9+JaD97O1Bcv+1q75KwGXBCJ2xhx92E2UjtgNShUvVYNjac6kN+feTEiU rS4iU20i+JfwVxsexlBvvH2SPv1ihRUZD+swynnFMy94FrYHJUSjgh8bLvXusIpV S5Io69/3AFyO8qmA8bTvvdnKHoYTbltI5JUNJ8uLwZGfIgF8CwIDAQABo4IEgDCC BHwwHQYDVR0OBBYEFEkwHhxNolnIxWWvlHvFYHTSliL/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzliYzg4MjA3LWU3YzctNDUzZS1h NGFiLTc3YjcyMTUyYzMzYS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1 MmMzM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgYQGCCsGAQUF BwEHAQH/BHUwczBiBAIAATBcAwQCQG9UAwQEQTHwAwQDhkEIAwQDhkEgAwQBhkGu AwQBlRRGAwQGoCBAMAwDBAOgIPgDBAGgIPwDBAWtLuADBAS4S5ADBALHSQwDBALR f9ADBAHYNGQDBAPYVkgwDQQCAAIwBwMFBCYGXoAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICV2swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAFx4QrKjAZ9CMeqMZ0ANNBDsDZAJ/WTNRsZXjyjRY EYtrKggVfDz1bJPwN43+EMdX62+5FL0D9dbzOj0AoiFC0oBbeBeFdNiaV/pwiKj8 p+ctHdevK0HY0kYLzycQOPx9ZWpXJwwiCO8hzQd9xadUReDRvZhIJ/8/F9yr//gr lBze8xmfz8gjz0A+cmnfOxQTM+/lKF+0/gafAC6J0MxTzVmypAztkd/K+iEsp4EL Y4wKk0AAbAvW413NhyosbSP7Xi3TdAXjuzGUN6cm7shz2dawcAqVRfU196JL2i0c chRPF2RsDbJ+PPgNhE40NUdkhkNs4X8evmSk7pszc0pnHQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:47 2025 by rpki-client