$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0.cer File: d9c16922-7f72-4551-905c-fa3b40d9efd0.cer (raw, json) Hash identifier: fxgEuPl5aXqK1e9+tM8mdZnzTGfAh4BOgSwaTRA6xuk= Subject key identifier: 96:BB:FD:D5:17:36:B1:D5:15:C2:5C:F3:43:C7:F2:3B:F0:94:A8:4A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B2FB9F9F57AAC3674E829AF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 14 Sep 2025 00:45:25 +0000 Certificate not after: Sat 18 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 394887 IP: 23.182.192.0/24 IP: 172.110.172.0/22 IP: 2620:134:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:b9:f9:f5:7a:ac:36:74:e8:29:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 14 00:45:25 2025 GMT Not After : Dec 18 01:45:25 2027 GMT Subject: CN=d9c16922-7f72-4551-905c-fa3b40d9efd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:13:21:26:30:0c:45:03:37:6c:40:af:2e: 65:36:a5:65:11:5e:2d:c3:45:79:dd:aa:6d:6a:bb: 53:f3:ba:eb:12:5f:a0:07:a1:b5:eb:0d:d5:b9:76: ac:4a:ee:92:82:cc:a6:86:49:14:4e:f1:2c:14:79: 70:3f:50:36:d1:f1:ab:7a:22:b7:70:52:1a:69:ee: 09:4b:37:1b:77:0c:d1:15:76:f3:98:33:7f:37:29: b7:21:0f:27:3e:eb:55:08:04:db:cd:ad:0a:65:80: e1:51:3f:d2:e1:ed:b9:60:9f:ca:0f:bd:66:6b:1d: 62:7b:ba:38:8d:1d:4a:eb:44:59:c3:3e:c6:f4:b4: ad:6f:f1:0a:36:c0:c9:aa:99:77:da:46:de:b4:9e: a6:a7:8e:6f:1c:01:56:21:73:53:cc:26:dc:d6:74: df:a7:08:6e:b4:68:06:43:9b:c1:81:9b:a9:dc:e3: 3e:02:40:0d:d6:d1:f5:3d:d5:72:fb:4a:57:ae:d5: a3:72:5e:f2:57:e8:37:5d:ef:2a:12:79:e7:5c:a2: 9d:0c:45:ed:15:44:28:65:31:49:6f:69:e8:03:71: b2:d9:69:70:ad:c3:a6:6b:e6:24:d9:a2:e4:fd:f0: 70:91:d4:87:fa:92:13:66:88:b2:55:a8:4a:e0:79: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BB:FD:D5:17:36:B1:D5:15:C2:5C:F3:43:C7:F2:3B:F0:94:A8:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.182.192.0/24 172.110.172.0/22 IPv6: 2620:134:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394887 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:36:6f:da:12:83:43:a8:df:6c:60:48:c1:1a:6e:b2:66:6c: df:b7:2d:4b:9a:ae:54:37:08:7d:78:c7:72:00:e0:80:20:08: 1a:2b:45:27:ec:29:d1:90:61:eb:89:4d:49:32:db:23:ee:55: ab:0a:2b:d7:cd:4a:85:57:26:86:86:ac:cd:9f:68:dd:69:73: 71:ca:97:92:e3:d4:3f:d0:e7:fa:e1:93:d1:84:8c:88:f1:63: cf:86:31:69:87:82:e6:fa:a8:4d:ce:7f:90:5b:3c:e5:0e:3f: ea:bc:50:be:e7:cb:de:c0:11:3f:94:74:6d:46:11:eb:56:b4: 6b:ce:5d:4a:52:c7:43:6b:d2:f4:d8:b7:57:9a:9a:ac:cf:34: a8:47:b5:82:e2:91:bd:1f:4d:07:d4:28:3a:58:ee:b4:4c:27: a6:20:bd:c6:a5:dc:f1:9b:d5:43:a8:3c:c6:ca:cd:04:f7:5a: f3:8c:a3:10:cd:bd:84:73:d8:9d:f1:a8:bf:02:42:ca:70:4c: 0b:3b:18:9b:ea:53:9c:98:25:ab:b7:e8:f1:b2:63:19:60:73: 19:c5:ce:e9:4d:5b:a9:b2:f1:3a:cf:e5:67:99:a1:18:a6:4c: 5f:c5:23:8e:99:d4:25:36:fc:1c:db:d0:9f:c9:67:98:27:f7: 48:84:5e:47 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEsvufn1eqw2dOgprwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDkxNDAwNDUyNVoXDTI3MTIxODAxNDUyNVowLzEtMCsGA1UEAxMk ZDljMTY5MjItN2Y3Mi00NTUxLTkwNWMtZmEzYjQwZDllZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUQTISYwDEUDN2xAry5lNqVlEV4tw0V53apt artT87rrEl+gB6G16w3VuXasSu6SgsymhkkUTvEsFHlwP1A20fGreiK3cFIaae4J SzcbdwzRFXbzmDN/Nym3IQ8nPutVCATbza0KZYDhUT/S4e25YJ/KD71max1ie7o4 jR1K60RZwz7G9LStb/EKNsDJqpl32kbetJ6mp45vHAFWIXNTzCbc1nTfpwhutGgG Q5vBgZup3OM+AkAN1tH1PdVy+0pXrtWjcl7yV+g3Xe8qEnnnXKKdDEXtFUQoZTFJ b2noA3Gy2WlwrcOma+Yk2aLk/fBwkdSH+pITZoiyVahK4HmvBwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFJa7/dUXNrHVFcJc80PH8jvwlKhKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k OWMxNjkyMi03ZjcyLTQ1NTEtOTA1Yy1mYTNiNDBkOWVmZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Q5YzE2OTIyLTdmNzItNDU1MS05 MDVjLWZhM2I0MGQ5ZWZkMC9kOWMxNjkyMi03ZjcyLTQ1NTEtOTA1Yy1mYTNiNDBk OWVmZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXtsADBAKsbqwwDwQCAAIwCQMHBCYgATTAADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGBocwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAizZv2hKDQ6jfbGBI wRpusmZs37ctS5quVDcIfXjHcgDggCAIGitFJ+wp0ZBh64lNSTLbI+5Vqwor181K hVcmhoaszZ9o3WlzccqXkuPUP9Dn+uGT0YSMiPFjz4YxaYeC5vqoTc5/kFs85Q4/ 6rxQvufL3sARP5R0bUYR61a0a85dSlLHQ2vS9Ni3V5qarM80qEe1guKRvR9NB9Qo OljutEwnpiC9xqXc8ZvVQ6g8xsrNBPda84yjEM29hHPYnfGovwJCynBMCzsYm+pT nJglq7fo8bJjGWBzGcXO6U1bqbLxOs/lZ5mhGKZMX8UjjpnUJTb8HNvQn8lnmCf3 SIReRw== -----END CERTIFICATE-----Generated at Mon Sep 15 23:24:32 2025 by rpki-client