$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6.cer File: bdc4d216-9fdc-4d71-91cb-90828e6718a6.cer (raw, json) Hash identifier: t6I3+NHQDg/4W013U1YdIIVFEcOP8q8jZSVPlf8PlW8= Subject key identifier: 8B:BC:6A:83:C6:E1:F9:22:AB:25:AB:9B:27:FE:25:8B:E7:C9:4C:73 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584ABA793BBC13ADAA11DB493200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6/bdc4d216-9fdc-4d71-91cb-90828e6718a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 Aug 2025 00:45:23 +0000 Certificate not after: Sat 06 Nov 2027 00:45:23 +0000 Subordinate resources: AS: 13578 IP: 199.188.48.0/21 IP: 2602:808:5000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:79:3b:bc:13:ad:aa:11:db:49:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 3 00:45:23 2025 GMT Not After : Nov 6 00:45:23 2027 GMT Subject: CN=bdc4d216-9fdc-4d71-91cb-90828e6718a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:91:ea:38:aa:1b:0a:a3:84:7f:91:78:f9: ea:e1:a7:69:ce:45:81:42:de:09:9d:35:74:f8:4c: 0e:21:db:19:88:f1:d8:a7:fa:b6:6d:8f:d4:58:3b: b5:07:88:78:3e:4d:a5:08:e3:72:0d:85:28:c5:22: 0f:bc:16:42:d8:8d:37:df:67:9b:de:29:65:90:e3: c7:01:2f:04:cc:6d:8e:35:b2:79:e8:fb:4a:cd:6c: d3:44:80:a7:6b:74:44:ea:2a:c8:b0:db:eb:70:c0: bd:50:0f:a5:e6:a6:62:74:83:d5:71:05:bd:64:da: 94:05:08:66:0e:1e:22:b2:68:c4:08:c1:84:26:31: a3:76:d4:ed:21:32:75:dc:3c:02:56:f1:40:4f:52: e6:43:14:ec:0f:7a:dd:f4:93:fa:b5:2d:0c:7f:e9: c7:69:48:ca:0c:19:00:b3:5d:74:d7:fa:b1:6e:8b: b5:f8:77:bd:7d:73:d2:ed:b9:42:c3:c8:81:fd:aa: d1:b4:e2:18:f9:f8:04:4f:88:fc:0e:8a:4b:57:c6: 49:cd:4c:8a:49:69:ac:3c:18:86:9f:3a:2d:fc:1c: 37:9f:58:f8:20:a0:e9:b1:a4:6b:3d:f9:01:ec:37: cf:ce:02:f0:f4:13:1b:27:d9:34:dc:c5:ee:05:03: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BC:6A:83:C6:E1:F9:22:AB:25:AB:9B:27:FE:25:8B:E7:C9:4C:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6/bdc4d216-9fdc-4d71-91cb-90828e6718a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 199.188.48.0/21 IPv6: 2602:808:5000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13578 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2a:f9:c6:8e:80:01:c7:c9:14:fb:09:14:45:d0:21:e9:d4: 23:5d:96:56:f4:bc:e9:e9:af:8e:b4:f0:73:b3:8f:0c:57:d9: 65:d8:8c:af:bf:46:ce:df:8d:04:94:f8:ae:a9:d1:7b:8e:78: 5f:7f:50:7f:60:52:4a:11:34:72:8d:3b:d4:b9:ea:ea:2c:b3: 97:f4:73:96:2f:18:9a:fd:0a:a9:e2:55:95:a6:ad:8c:f4:71: 4c:7f:7b:0b:a4:e0:22:ca:71:55:4b:e7:ed:c8:48:44:ae:b5: 30:85:27:5a:6a:d8:c2:53:02:5f:41:2f:e8:03:f2:13:3f:18: d2:d4:c5:82:11:42:2d:ef:aa:81:6b:15:c4:40:67:77:3c:71: f0:22:ac:6c:32:44:83:78:45:fa:ca:68:e9:e5:50:2f:d8:11: 36:49:2d:25:b7:fe:e1:a6:14:3a:0f:0b:27:9e:91:31:7c:89: 87:da:0d:80:a4:c5:1b:40:ef:06:96:99:7b:47:c8:f7:10:c6: 03:fa:cf:c5:91:7a:fe:20:ee:4c:af:ac:4a:65:3c:d6:62:0d: bb:49:08:c7:75:9a:0a:76:d1:5f:8f:8a:52:5e:29:38:0d:51: e9:7b:9f:4d:68:38:f9:0c:33:46:8c:9b:06:b3:87:ff:5a:e9: fb:de:2b:79 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEq6eTu8E62qEdtJMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgwMzAwNDUyM1oXDTI3MTEwNjAwNDUyM1owLzEtMCsGA1UEAxMk YmRjNGQyMTYtOWZkYy00ZDcxLTkxY2ItOTA4MjhlNjcxOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsmR6jiqGwqjhH+RePnq4adpzkWBQt4JnTV0 +EwOIdsZiPHYp/q2bY/UWDu1B4h4Pk2lCONyDYUoxSIPvBZC2I0332eb3illkOPH AS8EzG2ONbJ56PtKzWzTRICna3RE6irIsNvrcMC9UA+l5qZidIPVcQW9ZNqUBQhm Dh4ismjECMGEJjGjdtTtITJ13DwCVvFAT1LmQxTsD3rd9JP6tS0Mf+nHaUjKDBkA s1101/qxbou1+He9fXPS7blCw8iB/arRtOIY+fgET4j8DopLV8ZJzUyKSWmsPBiG nzot/Bw3n1j4IKDpsaRrPfkB7DfPzgLw9BMbJ9k03MXuBQNirwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIu8aoPG4fkiqyWrmyf+JYvnyUxzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i ZGM0ZDIxNi05ZmRjLTRkNzEtOTFjYi05MDgyOGU2NzE4YTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2JkYzRkMjE2LTlmZGMtNGQ3MS05 MWNiLTkwODI4ZTY3MThhNi9iZGM0ZDIxNi05ZmRjLTRkNzEtOTFjYi05MDgyOGU2 NzE4YTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAPHvDAwDwQCAAIwCQMHBCYCCAhQADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgI1CjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHKvnGjoABx8kU+wkURdAh6dQj XZZW9Lzp6a+OtPBzs48MV9ll2Iyvv0bO340ElPiuqdF7jnhff1B/YFJKETRyjTvU uerqLLOX9HOWLxia/Qqp4lWVpq2M9HFMf3sLpOAiynFVS+ftyEhErrUwhSdaatjC UwJfQS/oA/ITPxjS1MWCEUIt76qBaxXEQGd3PHHwIqxsMkSDeEX6ymjp5VAv2BE2 SS0lt/7hphQ6DwsnnpExfImH2g2ApMUbQO8Glpl7R8j3EMYD+s/FkXr+IO5Mr6xK ZTzWYg27SQjHdZoKdtFfj4pSXik4DVHpe59NaDj5DDNGjJsGs4f/Wun73it5 -----END CERTIFICATE-----Generated at Sat Nov 1 17:13:12 2025 by rpki-client