$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer File: e35c7007-7a33-480f-a32e-40481f8f1792.cer (raw, json) Hash identifier: bPQU0Bek2Zor/hWGQNBy7NGQY8tiZt7BGe4orBrt5ao= Subject key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584ACE040A5CAD0B29B2173C1480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Aug 2025 00:45:25 +0000 Certificate not after: Sat 13 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 53636 IP: 199.47.148.0/22 IP: 199.59.144.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:04:0a:5c:ad:0b:29:b2:17:3c:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 10 00:45:25 2025 GMT Not After : Nov 13 01:45:25 2027 GMT Subject: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:a5:d6:30:a1:1a:65:36:11:91:a9:1e:f3: dd:fa:39:d5:15:f2:d6:a1:1c:7b:c2:6f:8a:85:0a: fd:c3:8b:a0:1e:3d:b7:2f:82:4e:8c:c6:78:7f:cf: f5:d0:01:99:1b:84:a4:1c:13:d4:a5:03:a1:83:17: 15:4a:22:64:ee:46:3e:29:b1:d6:af:43:51:16:58: d4:64:4f:86:7d:9f:d8:d0:de:23:e6:c3:da:53:02: cc:7d:28:9d:9b:90:ec:60:51:a4:15:3a:d0:79:8d: ff:ee:08:b5:d7:38:6e:b4:5d:e1:1b:e6:dc:3c:8c: f6:23:da:90:30:fe:bf:2a:fc:d7:38:ec:e0:6a:82: c1:30:0a:45:31:1e:d4:1c:d8:aa:ac:24:61:1d:a9: 84:90:75:3a:c6:bb:01:08:6d:c5:a6:54:72:8b:c4: 83:e7:e0:f3:5b:d2:a7:15:55:11:f8:48:90:68:cc: 93:ca:e2:a1:ca:18:58:ba:23:c4:a8:f8:e4:a3:a5: 3d:1e:2b:19:cc:5f:ce:bd:4f:29:d5:6f:d7:58:1a: 3d:2a:47:d0:d5:56:d3:0e:39:57:9b:67:2e:f8:a9: 5e:e0:a3:eb:b5:e7:9a:05:08:68:81:c6:06:1d:0e: 34:af:f2:7a:c7:33:3b:58:c9:1e:12:4e:ef:2a:c6: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 199.47.148.0/22 199.59.144.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53636 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0e:a2:72:bd:91:f4:ce:da:61:92:5a:71:8b:66:2b:3e:70: 6c:31:d9:f5:68:ee:12:50:db:78:af:b2:17:30:43:51:cf:a0: 9d:3b:fe:b5:a4:9f:9f:04:27:9b:7d:19:40:1d:38:ff:7c:59: f3:36:eb:5d:55:da:da:f2:c0:7f:a7:69:27:19:36:04:5e:44: 95:46:fa:d3:c5:09:43:f8:fc:03:75:81:c2:48:08:db:9c:a8: 6e:c9:48:fc:91:4f:a8:10:44:c8:53:05:13:da:42:34:35:f6: 4c:23:2c:2f:c8:1c:90:ad:8e:5a:1c:86:fc:04:23:fe:f2:73: 69:21:d9:42:08:9e:a8:07:e9:c9:43:cc:a1:69:11:c9:7e:4e: 44:0d:a7:b0:02:98:94:87:7c:e0:02:af:59:97:f2:36:33:84: 24:e3:5f:24:fd:ba:59:80:0c:71:e9:e3:9e:93:46:5f:7f:77: 09:4f:54:e0:16:0a:c5:aa:c4:5e:cc:b1:ad:6e:b9:50:84:5f: 8c:cc:7f:ce:60:1e:12:ea:b4:b0:34:ca:09:22:df:d0:62:20: 61:ed:c6:fe:af:ed:05:b8:b0:ce:47:dd:d4:f5:f9:b0:6c:1d: 06:c5:65:a6:dd:1e:1c:1e:6c:b2:c1:df:15:c6:7d:14:af:15: b4:8e:91:75 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWErOBApcrQspshc8FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgxMDAwNDUyNVoXDTI3MTExMzAxNDUyNVowLzEtMCsGA1UEAxMk ZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYxNzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYul1jChGmU2EZGpHvPd+jnVFfLWoRx7wm+K hQr9w4ugHj23L4JOjMZ4f8/10AGZG4SkHBPUpQOhgxcVSiJk7kY+KbHWr0NRFljU ZE+GfZ/Y0N4j5sPaUwLMfSidm5DsYFGkFTrQeY3/7gi11zhutF3hG+bcPIz2I9qQ MP6/KvzXOOzgaoLBMApFMR7UHNiqrCRhHamEkHU6xrsBCG3FplRyi8SD5+DzW9Kn FVUR+EiQaMyTyuKhyhhYuiPEqPjko6U9HisZzF/OvU8p1W/XWBo9KkfQ1VbTDjlX m2cu+Kle4KPrteeaBQhogcYGHQ40r/J6xzM7WMkeEk7vKsZKLQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGnFk7PLSk9r8sceGbJ6ZoW6wursMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l MzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2UzNWM3MDA3LTdhMzMtNDgwZi1h MzJlLTQwNDgxZjhmMTc5Mi9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4 ZjE3OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHL5QDBALHO5AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANGEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADwOonK9kfTO2mGSWnGLZis+cGwx2fVo7hJQ23iv shcwQ1HPoJ07/rWkn58EJ5t9GUAdOP98WfM2611V2trywH+naScZNgReRJVG+tPF CUP4/AN1gcJICNucqG7JSPyRT6gQRMhTBRPaQjQ19kwjLC/IHJCtjlochvwEI/7y c2kh2UIInqgH6clDzKFpEcl+TkQNp7ACmJSHfOACr1mX8jYzhCTjXyT9ulmADHHp 456TRl9/dwlPVOAWCsWqxF7Msa1uuVCEX4zMf85gHhLqtLA0ygki39BiIGHtxv6v 7QW4sM5H3dT1+bBsHQbFZabdHhwebLLB3xXGfRSvFbSOkXU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:50 2025 by rpki-client