$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer File: d0aed758-847b-4853-9fce-f0451b5fa2b3.cer (raw, json) Hash identifier: JX/c1f2OEbfRr3nqP23rkNNIZ0jyiuMLYRxmGNRGkPs= Subject key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AD92EC55929F95239DB71F980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 00:45:24 +0000 Certificate not after: Wed 17 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 54643 IP: 23.111.64.0/20 IP: 66.85.28.0/22 IP: 67.231.16.0/20 IP: 104.36.148.0/22 IP: 104.193.172.0/22 IP: 2607:7b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:2e:c5:59:29:f9:52:39:db:71:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 14 00:45:24 2025 GMT Not After : Nov 17 01:45:24 2027 GMT Subject: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:44:ba:f1:09:58:23:de:48:71:4c:72:9c:da: 28:4d:42:a8:13:20:71:dc:bb:dd:87:82:3f:4e:5b: 1d:65:d9:f3:d5:e9:5a:0c:62:fb:ea:bc:f7:e1:c0: c6:99:b1:7d:da:3c:1a:f1:84:05:d4:69:89:db:ee: 51:70:9c:59:bd:04:fc:0f:d7:fa:a1:2a:07:eb:ce: a2:d4:eb:13:a5:3b:60:fa:77:52:38:bb:a3:f3:3d: 7d:3c:26:79:45:ae:ba:f6:b0:a1:3f:c4:01:49:b5: 23:18:f0:dc:50:ca:f8:44:52:07:be:63:c6:6e:7b: 20:72:98:aa:85:ef:14:ae:10:44:bf:b0:55:c1:36: 82:04:37:86:07:ae:22:04:13:a2:0c:59:bf:de:ee: 81:6d:e0:b5:0d:91:48:6d:00:17:92:95:0d:7a:81: 2f:80:2f:80:f1:ba:c9:26:ca:1d:37:b8:5b:8f:df: e3:ec:c0:67:71:3d:fc:1b:23:6f:d7:bb:2e:68:1b: dc:65:31:78:67:70:c4:06:00:dc:44:8c:79:49:85: e5:2b:3e:37:27:a9:87:bb:f1:6e:7b:b5:dd:65:8a: 4e:43:ea:e3:e1:c7:d8:75:3c:33:ce:22:99:c3:48: f6:bb:98:f2:49:6d:7d:19:2d:27:0e:d3:72:51:9a: 64:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.111.64.0/20 66.85.28.0/22 67.231.16.0/20 104.36.148.0/22 104.193.172.0/22 IPv6: 2607:7b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54643 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:89:ef:5a:ce:db:8d:26:ed:55:a7:f3:e5:4b:93:e8:40:9e: 24:e9:1c:3c:d0:14:d2:bf:11:f9:4d:c0:6f:b7:c6:76:fa:7c: 3a:c3:6a:8a:e4:0c:21:90:52:be:30:a6:a6:9a:51:5d:76:1a: fc:6d:fc:bb:68:66:8c:c7:94:33:86:52:9e:d9:6c:1f:fb:cc: 08:4a:e1:e4:22:38:3b:5a:ff:c5:06:73:72:cb:05:b3:e0:2f: 75:b2:24:fa:24:fd:a0:31:b1:6a:1d:84:5b:5c:a8:7c:90:d7: 06:6b:fb:6a:31:bd:cc:2a:ad:e4:96:43:f0:23:2d:10:51:5b: 41:06:df:ec:65:41:3a:b8:20:a9:2c:05:45:51:29:34:91:b4: 7d:92:b1:80:01:6b:0f:55:30:b6:3d:b9:c5:03:9c:bb:ce:14: 5c:c0:68:c8:29:86:3c:94:04:de:67:ae:91:05:44:64:f5:4e: b9:59:3e:31:d5:87:53:e8:0b:e9:2c:e0:6e:7e:a7:98:45:9c: 08:0e:69:3e:e6:87:aa:7b:d0:fc:f2:ad:cb:12:7b:39:26:d2: f8:53:6d:d8:96:d4:b2:20:81:ec:52:4d:94:db:2a:8f:1b:b4: cd:49:a9:92:41:2f:1d:5f:2d:d7:24:1a:7a:ce:8c:67:8d:dc: 5e:52:6b:67 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWErZLsVZKflSOdtx+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgxNDAwNDUyNFoXDTI3MTExNzAxNDUyNFowLzEtMCsGA1UEAxMk ZDBhZWQ3NTgtODQ3Yi00ODUzLTlmY2UtZjA0NTFiNWZhMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kS68QlYI95IcUxynNooTUKoEyBx3Lvdh4I/ TlsdZdnz1elaDGL76rz34cDGmbF92jwa8YQF1GmJ2+5RcJxZvQT8D9f6oSoH686i 1OsTpTtg+ndSOLuj8z19PCZ5Ra669rChP8QBSbUjGPDcUMr4RFIHvmPGbnsgcpiq he8UrhBEv7BVwTaCBDeGB64iBBOiDFm/3u6BbeC1DZFIbQAXkpUNeoEvgC+A8brJ JsodN7hbj9/j7MBncT38GyNv17suaBvcZTF4Z3DEBgDcRIx5SYXlKz43J6mHu/Fu e7XdZYpOQ+rj4cfYdTwzziKZw0j2u5jySW19GS0nDtNyUZpk2wIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFCYpST/zgrqS+sgsb6tIB/NlJVwnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k MGFlZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1MWI1ZmEyYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QwYWVkNzU4LTg0N2ItNDg1My05 ZmNlLWYwNDUxYjVmYTJiMy9kMGFlZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1MWI1 ZmEyYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAQXb0ADBAJCVRwDBARD5xADBAJoJJQDBAJowaww DQQCAAIwBwMFACYHewAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANVzMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAE+J71rO240m7VWn8+VLk+hAniTpHDzQFNK/EflNwG+3xnb6fDrDaorkDCGQ Ur4wpqaaUV12Gvxt/LtoZozHlDOGUp7ZbB/7zAhK4eQiODta/8UGc3LLBbPgL3Wy JPok/aAxsWodhFtcqHyQ1wZr+2oxvcwqreSWQ/AjLRBRW0EG3+xlQTq4IKksBUVR KTSRtH2SsYABaw9VMLY9ucUDnLvOFFzAaMgphjyUBN5nrpEFRGT1TrlZPjHVh1Po C+ks4G5+p5hFnAgOaT7mh6p70PzyrcsSezkm0vhTbdiW1LIggexSTZTbKo8btM1J qZJBLx1fLdckGnrOjGeN3F5Sa2c= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:39 2025 by rpki-client