$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer File: cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer (raw, json) Hash identifier: BQA5CPuRrx8PGTZhaIzpt7S2Ez68jLLXOe5YIRnfYDA= Subject key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B4BA4D1618B4E18CBBE471E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Sep 2025 00:45:24 +0000 Certificate not after: Tue 28 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 22966 IP: 198.51.243.0 -- 198.51.244.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:a4:d1:61:8b:4e:18:cb:be:47:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 24 00:45:24 2025 GMT Not After : Dec 28 01:45:24 2027 GMT Subject: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:2e:6e:03:69:5e:cf:9a:e1:d6:92:c9:8a: 70:7f:0b:eb:77:e0:22:38:f9:66:2d:3f:2a:6e:c8: ad:ca:e4:22:04:f6:9f:5f:83:b6:48:11:31:a5:3a: c7:65:e9:5c:10:17:32:45:0b:dd:12:2f:d7:ea:11: 40:69:94:6f:ba:18:7a:2b:97:0c:22:54:19:fe:e9: eb:b1:0b:3d:58:73:20:9a:0c:b7:00:b3:76:2e:4a: 79:1e:28:d8:34:36:f4:ce:c5:f3:50:8f:82:aa:2c: 4b:d1:fd:63:d3:4a:f5:18:cf:50:e8:17:fe:08:15: b6:d2:05:e2:33:ec:bd:b8:71:ea:89:0d:91:65:9c: f3:a3:57:95:97:2d:9c:f5:92:1f:ac:43:66:f6:a9: 03:fb:e5:4d:5c:30:f4:e4:7b:64:1e:76:36:21:54: c4:90:21:d6:1c:5e:8a:fc:73:86:ee:60:6c:30:be: 79:71:3f:63:1b:ef:74:5e:be:eb:66:6b:02:9d:c1: e2:33:6a:3b:6a:b9:b7:57:bb:98:3e:8c:a9:fe:d8: 5c:b9:83:9a:d1:85:8b:b7:6a:a0:b6:03:19:de:ee: ff:95:2f:ae:28:d4:78:79:3e:64:f2:65:19:f8:4b: 24:c6:3b:cf:5e:9f:96:74:32:9c:a1:80:7e:3f:5a: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22966 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d9:82:8e:3d:12:3b:4e:bc:04:20:70:11:dc:bd:2b:a0:01: 51:e3:c7:2f:31:d3:af:7f:f9:45:aa:d5:e1:c6:33:5b:0a:e3: 6e:50:64:19:e1:69:ff:12:de:95:ea:69:f5:c5:6d:48:e7:8d: b7:da:c8:36:18:66:31:11:11:12:e4:1a:99:99:45:78:32:97: 64:c9:1a:4f:87:22:79:af:4d:a5:4d:6f:51:e8:c1:b1:9a:6a: 00:c7:0a:bd:6a:9d:b4:63:b5:7a:37:d9:40:35:b5:21:13:3a: 2c:2b:c9:14:8b:39:d3:6d:57:58:d4:ba:ee:6d:45:22:92:bc: 88:8e:5c:3e:0e:6d:82:a3:89:37:06:25:c4:0c:d3:dd:84:2a: 8b:f7:81:6c:a4:b1:35:b5:73:f4:02:05:05:c4:56:11:dd:4f: 45:b2:d7:ea:02:9d:b6:17:ac:a1:71:e1:f2:44:b1:f6:1c:5b: af:8d:f4:d7:8c:2d:38:a1:9c:88:16:e1:dd:bc:b4:ea:07:75: e4:d5:91:b1:6d:53:b9:8c:86:25:68:d8:8b:da:b3:f8:5f:4b: ea:a8:34:f0:40:99:9d:84:97:ca:94:02:d8:13:4b:50:72:84: e5:2c:db:ae:05:6f:60:1d:36:c1:7a:70:ac:17:e9:42:96:68: 7e:63:4b:6e -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEtLpNFhi04Yy75HHiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkyNDAwNDUyNFoXDTI3MTIyODAxNDUyNFowLzEtMCsGA1UEAxMk Y2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIwYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3YubgNpXs+a4daSyYpwfwvrd+AiOPlmLT8q bsityuQiBPafX4O2SBExpTrHZelcEBcyRQvdEi/X6hFAaZRvuhh6K5cMIlQZ/unr sQs9WHMgmgy3ALN2Lkp5HijYNDb0zsXzUI+CqixL0f1j00r1GM9Q6Bf+CBW20gXi M+y9uHHqiQ2RZZzzo1eVly2c9ZIfrENm9qkD++VNXDD05HtkHnY2IVTEkCHWHF6K /HOG7mBsML55cT9jG+90Xr7rZmsCncHiM2o7arm3V7uYPoyp/thcuYOa0YWLt2qg tgMZ3u7/lS+uKNR4eT5k8mUZ+EskxjvPXp+WdDKcoYB+P1rRZQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFNYm4YqPtA+12xxwH4b7SrrV4hkKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j ZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NkMmQ3ZDg1LTYxZDAtNGJhNi1i NGQyLWFmZGE5YjgyMGE3OC9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4 MjBhNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMYz8wMEAMYz9DAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgJZtjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAC2YKOPRI7TrwEIHAR3L0roAFR48cvMdOvf/lF qtXhxjNbCuNuUGQZ4Wn/Et6V6mn1xW1I54232sg2GGYxERES5BqZmUV4MpdkyRpP hyJ5r02lTW9R6MGxmmoAxwq9ap20Y7V6N9lANbUhEzosK8kUiznTbVdY1LrubUUi kryIjlw+Dm2Co4k3BiXEDNPdhCqL94FspLE1tXP0AgUFxFYR3U9FstfqAp22F6yh ceHyRLH2HFuvjfTXjC04oZyIFuHdvLTqB3Xk1ZGxbVO5jIYlaNiL2rP4X0vqqDTw QJmdhJfKlALYE0tQcoTlLNuuBW9gHTbBenCsF+lClmh+Y0tu -----END CERTIFICATE-----Generated at Thu Oct 16 21:40:23 2025 by rpki-client