$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer File: ebd609f9-488f-4ccb-b562-f82edd8191dd.cer (raw, json) Hash identifier: xDxDkikbrC0s1oUxmFkLXLasYoxcRPxsQAO37xc3zPw= Subject key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584B00445B2B998E49B6E4096700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Aug 2025 00:45:25 +0000 Certificate not after: Wed 01 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 25623 AS: 26563 AS: 27552 AS: 30071 IP: 198.160.60.0/22 IP: 199.114.248.0/22 IP: 206.53.143.0/24 IP: 208.118.224.0/20 IP: 216.93.240.0/20 IP: 2001:504:47::/48 IP: 2001:4830::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:44:5b:2b:99:8e:49:b6:e4:09:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 28 00:45:25 2025 GMT Not After : Dec 1 01:45:25 2027 GMT Subject: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:5a:29:67:55:49:c9:c2:d9:f5:eb:44:fc: 92:45:6e:43:41:8b:08:98:53:9f:bc:56:fc:b3:b0: 72:27:41:2b:38:6b:68:5c:b7:d9:3e:e4:82:c5:4e: 76:58:be:e8:09:17:b1:1d:c7:8d:c1:e2:a9:3f:09: 96:e9:d4:15:8f:4b:40:91:fb:30:9c:ed:ae:73:b9: 93:2b:2d:c1:43:35:1e:be:76:2f:96:14:6f:48:dc: 8a:07:4b:a4:2f:19:57:98:a8:06:ce:9a:4e:3c:0a: e8:05:d8:e2:37:34:d2:24:16:1c:f0:56:32:a7:4b: 46:73:2d:d3:53:06:f5:c0:74:d0:f9:bc:d2:d9:4a: 9f:82:40:ae:83:f3:6a:2c:28:4f:77:5f:ee:08:0c: 1a:bb:58:03:83:d5:09:53:a6:b3:95:6b:36:78:f6: b9:f9:8d:b5:d2:8a:54:f0:46:fc:fb:1f:65:5c:7d: 5b:af:30:d2:39:d8:04:5a:5f:3a:5a:a7:f2:22:85: 87:89:21:12:d4:88:d8:b1:42:3b:db:d9:54:02:cb: 27:4a:82:2d:6c:99:3b:0e:29:3e:de:c1:f3:9b:c8: 9d:f3:3b:4b:9b:61:81:da:1e:a5:54:71:0f:12:2a: 06:a3:33:5e:ee:f7:b7:be:75:c5:3d:02:ee:b4:52: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.160.60.0/22 199.114.248.0/22 206.53.143.0/24 208.118.224.0/20 216.93.240.0/20 IPv6: 2001:504:47::/48 2001:4830::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25623 26563 27552 30071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:12:fa:25:b3:91:29:b5:a3:65:51:db:83:5d:c7:ca:f9:f3: 6a:bb:3a:4f:1c:30:4b:14:01:1a:04:5a:6b:84:70:bb:a8:4a: 30:4c:56:2c:e1:f3:fc:4f:8f:9f:77:02:5a:47:ac:13:98:61: 5f:db:2b:10:2a:a3:a7:77:57:a2:fc:91:7f:87:9b:70:b1:3e: 02:e1:d6:66:9b:7a:c4:d4:3c:50:d3:d2:30:1c:72:b4:83:b5: 2b:19:0e:08:6f:80:06:93:b9:62:33:c1:b6:a0:64:e1:3a:0d: 0e:29:db:d6:6e:d2:d3:4b:be:4b:83:ae:0d:03:d6:0b:b6:8a: 5c:ed:22:d0:01:c1:92:3d:a9:dd:2c:f2:5b:95:60:01:cf:54: 8d:4e:b2:64:18:73:26:eb:9c:f1:b6:ee:fd:7c:93:bd:f3:d9: 8b:f2:1b:1d:53:86:87:d2:3b:43:44:eb:b7:73:e7:eb:68:f2: 2d:62:2b:cc:1c:62:9a:7f:a2:f6:c8:6c:0f:f7:e6:57:f7:9b: a3:ad:16:75:a3:d3:3e:b3:5b:41:e9:2e:3f:19:d7:6b:1a:fa: b1:49:0d:1c:c8:d7:00:5f:9d:be:cc:e3:15:22:da:56:40:2b: dd:0d:df:2f:9e:f5:be:ef:25:d7:e8:68:50:11:8b:55:79:9a: f3:65:0d:6f -----BEGIN CERTIFICATE----- MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWEsARFsrmY5JtuQJZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgyODAwNDUyNVoXDTI3MTIwMTAxNDUyNVowLzEtMCsGA1UEAxMk ZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouVaKWdVScnC2fXrRPySRW5DQYsImFOfvFb8 s7ByJ0ErOGtoXLfZPuSCxU52WL7oCRexHceNweKpPwmW6dQVj0tAkfswnO2uc7mT Ky3BQzUevnYvlhRvSNyKB0ukLxlXmKgGzppOPAroBdjiNzTSJBYc8FYyp0tGcy3T Uwb1wHTQ+bzS2UqfgkCug/NqLChPd1/uCAwau1gDg9UJU6azlWs2ePa5+Y210opU 8Eb8+x9lXH1brzDSOdgEWl86WqfyIoWHiSES1IjYsUI729lUAssnSoItbJk7Dik+ 3sHzm8id8ztLm2GB2h6lVHEPEioGozNe7ve3vnXFPQLutFJIvwIDAQABo4IEVjCC BFIwHQYDVR0OBBYEFP8KG+aMRdNWKjDwQ43CF3JEwKWUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l YmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ViZDYwOWY5LTQ4OGYtNGNjYi1i NTYyLWY4MmVkZDgxOTFkZC9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4 MTkxZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MCQEAgABMB4DBALGoDwDBALHcvgDBADONY8DBATQduADBATYXfAw FgQCAAIwEAMHACABBQQARwMFACABSDAwJQYIKwYBBQUHAQgBAf8EFjAUoBIwEAIC ZBcCAmfDAgJroAICdXcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQhL6JbORKbWjZVHbg13Hyvnzars6Txww SxQBGgRaa4Rwu6hKMExWLOHz/E+Pn3cCWkesE5hhX9srECqjp3dXovyRf4ebcLE+ AuHWZpt6xNQ8UNPSMBxytIO1KxkOCG+ABpO5YjPBtqBk4ToNDinb1m7S00u+S4Ou DQPWC7aKXO0i0AHBkj2p3SzyW5VgAc9UjU6yZBhzJuuc8bbu/XyTvfPZi/IbHVOG h9I7Q0Trt3Pn62jyLWIrzBximn+i9shsD/fmV/ebo60WdaPTPrNbQekuPxnXaxr6 sUkNHMjXAF+dvszjFSLaVkAr3Q3fL571vu8l1+hoUBGLVXma82UNbw== -----END CERTIFICATE-----Generated at Wed Sep 10 09:07:56 2025 by rpki-client