$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer File: c32e4c57-f588-46c2-a752-708ae6efb1cc.cer (raw, json) Hash identifier: 2c/jGgvKTrVBaDegREmApsD9PIx6q7HTKJDgzD393ww= Subject key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584A5B8E12B458CDA26075860980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Jun 2025 00:45:34 +0000 Certificate not after: Sun 03 Oct 2027 00:45:34 +0000 Subordinate resources: IP: 23.233.0.0/17 IP: 24.52.192.0/18 IP: 24.212.128.0/17 IP: 24.246.0.0 -- 24.246.95.255 IP: 45.72.128.0/17 IP: 104.195.128.0/17 IP: 104.246.128.0/17 IP: 107.179.128.0/17 IP: 107.190.0.0/17 IP: 108.162.128.0/18 IP: 135.23.0.0/16 IP: 192.0.128.0/17 IP: 198.48.128.0/17 IP: 198.84.128.0/17 IP: 207.136.64.0/18 IP: 209.161.192.0/18 IP: 216.154.0.0 -- 216.154.191.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:8e:12:b4:58:cd:a2:60:75:86:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 30 00:45:34 2025 GMT Not After : Oct 3 00:45:34 2027 GMT Subject: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:1d:bb:d0:61:b0:8b:31:0c:92:94:80:ce: 1b:ed:99:ba:b1:e1:0f:cc:90:2e:fd:90:b4:fd:0a: ee:61:6a:27:2c:8a:f1:2e:86:8a:1b:67:78:c3:f2: c3:49:e8:22:2a:7e:e3:26:b1:2d:aa:eb:d8:47:11: 3f:90:a5:79:89:68:07:97:bc:23:d7:4d:07:3a:94: 70:c5:1f:6c:a3:91:eb:61:58:16:54:56:2b:cc:fb: aa:fc:85:0f:f3:ea:9b:05:5d:5d:f0:e4:af:76:ce: 71:57:51:55:c6:80:5b:8f:e1:41:82:e8:70:a9:e6: 34:e5:3d:c6:ce:6a:e5:7f:f5:9d:89:4a:db:26:96: 6d:5e:05:17:75:cf:83:0d:e4:a2:52:3c:82:57:42: 14:ff:90:63:97:ff:2e:71:77:26:03:45:6f:79:23: cf:63:1c:d8:ff:89:50:6a:dd:b7:aa:82:73:a2:5b: f6:df:c7:af:c1:56:aa:57:ac:62:8d:68:a6:44:c6: c0:7b:90:8d:62:a6:9f:30:57:97:c6:5b:a3:8c:46: be:90:75:10:0d:a2:e5:f2:87:ef:45:52:2d:35:f1: 0d:87:42:24:80:4b:1f:04:9a:b7:79:05:0c:2c:24: 70:fd:38:da:49:91:a1:57:d5:f3:93:1e:bb:78:2f: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.233.0.0/17 24.52.192.0/18 24.212.128.0/17 24.246.0.0-24.246.95.255 45.72.128.0/17 104.195.128.0/17 104.246.128.0/17 107.179.128.0/17 107.190.0.0/17 108.162.128.0/18 135.23.0.0/16 192.0.128.0/17 198.48.128.0/17 198.84.128.0/17 207.136.64.0/18 209.161.192.0/18 216.154.0.0-216.154.191.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ae:c8:7a:b2:c2:f2:37:6c:94:b5:40:95:c8:62:0b:56:13: e3:ed:5a:94:6a:a2:a2:96:63:c6:b3:94:19:91:0e:22:30:d1: 25:13:c2:88:4a:6b:95:03:0e:84:bb:e0:41:84:79:cb:0d:c9: ea:dd:b1:94:cd:33:a9:68:94:7e:8e:1c:86:9c:6f:d7:a7:01: 82:42:ec:aa:57:07:52:c6:6a:48:f3:d1:d7:5b:e0:dc:20:ae: 69:d8:4a:37:51:b9:6b:8d:27:e7:6a:2f:d4:53:8d:9d:d9:4f: 3e:55:fb:ae:3d:b1:a0:83:d0:bc:41:8a:a2:7f:f9:28:f0:fa: d1:8e:8b:0b:cf:67:ab:5d:94:0f:2a:a2:66:14:63:87:33:f7: cf:91:6e:f9:16:91:9a:8c:28:d3:1a:b8:be:58:75:6f:1c:40: 04:cf:dc:2a:38:d0:13:cd:e4:81:af:9c:8b:4e:ff:4a:40:2e: c5:1d:c8:e5:0f:38:64:f9:20:97:43:87:8f:d3:47:12:00:55: 5c:10:08:4b:65:b5:fd:d9:1e:e6:82:d5:3b:d7:71:12:c8:7d: 06:d7:d1:06:c3:dc:9d:0f:c2:e5:3c:e9:86:54:ec:bc:87:e7: 5e:41:8b:33:69:ac:c6:0d:c3:17:01:39:80:ab:75:5d:56:4d: 5c:69:50:ee -----BEGIN CERTIFICATE----- MIIHWzCCBkOgAwIBAgIUAQ0Mn0MoWEpbjhK0WM2iYHWGCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDYzMDAwNDUzNFoXDTI3MTAwMzAwNDUzNFowLzEtMCsGA1UEAxMk YzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZiMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t0du9BhsIsxDJKUgM4b7Zm6seEPzJAu/ZC0 /QruYWonLIrxLoaKG2d4w/LDSegiKn7jJrEtquvYRxE/kKV5iWgHl7wj100HOpRw xR9so5HrYVgWVFYrzPuq/IUP8+qbBV1d8OSvds5xV1FVxoBbj+FBguhwqeY05T3G zmrlf/WdiUrbJpZtXgUXdc+DDeSiUjyCV0IU/5Bjl/8ucXcmA0VveSPPYxzY/4lQ at23qoJzolv238evwVaqV6xijWimRMbAe5CNYqafMFeXxlujjEa+kHUQDaLl8ofv RVItNfENh0IkgEsfBJq3eQUMLCRw/TjaSZGhV9Xzkx67eC8mEwIDAQABo4IEbTCC BGkwHQYDVR0OBBYEFFKlhQyFUpl3KRB6pLvrkJh0UPCJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j MzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2MzMmU0YzU3LWY1ODgtNDZjMi1h NzUyLTcwOGFlNmVmYjFjYy9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZl ZmIxY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgYwGCCsGAQUF BwEHAQH/BH0wezB5BAIAATBzAwQHF+kAAwQGGDTAAwQHGNSAMAsDAwEY9gMEBRj2 QAMEBy1IgAMEB2jDgAMEB2j2gAMEB2uzgAMEB2u+AAMEBmyigAMDAIcXAwQHwACA AwQHxjCAAwQHxlSAAwQGz4hAAwQG0aHAMAsDAwHYmgMEBtiagDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF rsh6ssLyN2yUtUCVyGILVhPj7VqUaqKilmPGs5QZkQ4iMNElE8KISmuVAw6Eu+BB hHnLDcnq3bGUzTOpaJR+jhyGnG/XpwGCQuyqVwdSxmpI89HXW+DcIK5p2Eo3Ublr jSfnai/UU42d2U8+VfuuPbGgg9C8QYqif/ko8PrRjosLz2erXZQPKqJmFGOHM/fP kW75FpGajCjTGri+WHVvHEAEz9wqONATzeSBr5yLTv9KQC7FHcjlDzhk+SCXQ4eP 00cSAFVcEAhLZbX92R7mgtU713ESyH0G19EGw9ydD8LlPOmGVOy8h+deQYszaazG DcMXATmAq3VdVk1caVDu -----END CERTIFICATE-----Generated at Wed Jul 9 20:12:51 2025 by rpki-client