$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer File: f5b47d91-eb0d-4085-9bc2-452042c0b313.cer (raw, json) Hash identifier: JnzQSRQo6DinOjwtTmuo/YdB999I2OhQxJOZ04OpBDQ= Subject key identifier: DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584BAD5ABFAD7F084A29E139BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Oct 2025 00:45:23 +0000 Certificate not after: Tue 01 Feb 2028 01:45:23 +0000 Subordinate resources: AS: 31775 IP: 64.201.232.0/22 IP: 104.153.28.0/22 IP: 104.244.192.0/22 IP: 149.76.32.0/19 IP: 162.0.160.0/19 IP: 199.241.26.0/23 IP: 2605:9480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:5a:bf:ad:7f:08:4a:29:e1:39:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 29 00:45:23 2025 GMT Not After : Feb 1 01:45:23 2028 GMT Subject: CN=f5b47d91-eb0d-4085-9bc2-452042c0b313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:4d:38:5e:0f:c0:3f:7a:85:02:07:2c:58: fc:37:5f:ee:5e:74:cd:57:ca:11:bd:ae:17:44:27: bb:81:fa:08:89:57:81:d9:df:2b:59:b7:15:b3:df: 7a:e9:06:53:2c:d9:6a:9d:55:51:48:1b:51:55:8b: 60:7f:27:22:95:fa:a8:aa:95:84:81:20:ec:72:64: 70:44:f4:b8:59:fc:52:01:9e:a9:bd:d0:ce:23:1f: 28:16:47:89:32:b1:7a:e3:7a:8e:d2:f1:63:b1:c4: 0e:69:67:0d:a3:84:65:98:2d:00:dd:22:93:cf:b1: d2:36:68:7a:70:2e:e8:30:e5:b4:42:15:d3:92:27: d8:29:7a:5f:d0:11:79:ba:a9:c9:e7:0d:a4:1e:88: 47:14:29:02:80:24:b0:9d:81:00:40:93:62:f5:f9: d7:aa:bb:d9:99:09:05:30:a5:69:7c:cd:75:10:31: 4b:f8:ea:45:4a:18:f7:04:60:b0:65:16:35:ce:41: 0a:d5:36:82:37:8f:bd:89:16:91:fd:f3:df:9a:92: bb:2f:54:11:c0:22:58:14:00:6e:5e:60:80:f3:f6: 82:2d:c0:98:ed:49:46:c5:cd:5e:b4:68:60:fa:48: a0:34:5f:ba:9d:c9:41:ef:b0:53:22:29:e4:6d:5e: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.201.232.0/22 104.153.28.0/22 104.244.192.0/22 149.76.32.0/19 162.0.160.0/19 199.241.26.0/23 IPv6: 2605:9480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31775 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:8a:7f:6c:e5:9a:4e:d4:3d:5e:c9:03:9e:59:a5:99:7e:38: 29:64:58:85:b1:d0:b5:ec:15:5b:9e:c4:d2:3d:89:ff:42:dd: 7e:40:5f:b3:9c:d9:94:dc:7e:0d:63:93:6b:d8:e4:f1:da:c3: a8:cc:70:c9:b5:10:c2:d3:91:7e:d7:f8:34:38:9e:d6:09:8b: 37:33:53:18:c3:d9:70:4e:c3:f0:56:ef:33:63:17:02:bb:30: db:ba:5d:0b:cb:c1:2b:5d:90:92:1c:60:77:79:4f:a3:e4:e3: af:9d:31:c4:7d:fd:97:e8:59:7b:6d:ad:2e:b0:af:39:62:00: 0a:c5:7d:27:51:aa:7a:1b:11:d5:5d:1c:7c:4d:ed:82:28:9a: 77:b1:09:31:d1:ba:8b:0a:ae:06:f0:bb:2e:4b:3a:33:c8:0a: 1a:ef:93:09:64:a7:8d:6f:af:b6:f2:c4:7d:22:41:39:e2:e7: e5:fa:9e:d3:de:c9:20:b0:fe:2d:ce:23:59:e3:95:b5:84:8b: d8:4c:07:e9:a9:99:54:db:0e:2e:a5:fe:ab:d5:b6:65:20:43: 62:7f:4b:e3:52:3f:b9:57:fa:2e:1e:d8:74:bf:72:6d:53:6d: 5f:78:24:af:00:1a:c4:5f:e6:94:37:9b:ea:13:05:2e:95:cd: 92:69:d6:65 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEutWr+tfwhKKeE5vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MTAyOTAwNDUyM1oXDTI4MDIwMTAxNDUyM1owLzEtMCsGA1UEAxMk ZjViNDdkOTEtZWIwZC00MDg1LTliYzItNDUyMDQyYzBiMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPBNOF4PwD96hQIHLFj8N1/uXnTNV8oRva4X RCe7gfoIiVeB2d8rWbcVs9966QZTLNlqnVVRSBtRVYtgfycilfqoqpWEgSDscmRw RPS4WfxSAZ6pvdDOIx8oFkeJMrF643qO0vFjscQOaWcNo4RlmC0A3SKTz7HSNmh6 cC7oMOW0QhXTkifYKXpf0BF5uqnJ5w2kHohHFCkCgCSwnYEAQJNi9fnXqrvZmQkF MKVpfM11EDFL+OpFShj3BGCwZRY1zkEK1TaCN4+9iRaR/fPfmpK7L1QRwCJYFABu XmCA8/aCLcCY7UlGxc1etGhg+kigNF+6nclB77BTIinkbV6MjwIDAQABo4IERzCC BEMwHQYDVR0OBBYEFN6/AzzSozv5hka97a/cLiH1AMJwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m NWI0N2Q5MS1lYjBkLTQwODUtOWJjMi00NTIwNDJjMGIzMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Y1YjQ3ZDkxLWViMGQtNDA4NS05 YmMyLTQ1MjA0MmMwYjMxMy9mNWI0N2Q5MS1lYjBkLTQwODUtOWJjMi00NTIwNDJj MGIzMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAJAyegDBAJomRwDBAJo9MADBAWVTCADBAWiAKAD BAHH8RowDQQCAAIwBwMFACYFlIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfB8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADIp/bOWaTtQ9XskDnlmlmX44KWRYhbHQtewVW57E0j2J/0LdfkBf s5zZlNx+DWOTa9jk8drDqMxwybUQwtORftf4NDie1gmLNzNTGMPZcE7D8FbvM2MX Arsw27pdC8vBK12Qkhxgd3lPo+Tjr50xxH39l+hZe22tLrCvOWIACsV9J1GqehsR 1V0cfE3tgiiad7EJMdG6iwquBvC7Lks6M8gKGu+TCWSnjW+vtvLEfSJBOeLn5fqe 097JILD+Lc4jWeOVtYSL2EwH6amZVNsOLqX+q9W2ZSBDYn9L41I/uVf6Lh7YdL9y bVNtX3gkrwAaxF/mlDeb6hMFLpXNkmnWZQ== -----END CERTIFICATE-----Generated at Thu Oct 30 21:43:24 2025 by rpki-client