$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer File: 52a20e5a-3a5d-4417-92d7-250e134c6d09.cer (raw, json) Hash identifier: CR97nYMNcpuf6/YhMkKanf9hYXXrnuZfe/5pNHxmWEc= Subject key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584AE45982EA779291CCF1B88980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 00:45:25 +0000 Certificate not after: Sun 21 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 35860 IP: 63.133.208.0/22 IP: 74.119.52.0/22 IP: 192.149.254.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:59:82:ea:77:92:91:cc:f1:b8:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 18 00:45:25 2025 GMT Not After : Nov 21 01:45:25 2027 GMT Subject: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:25:5e:53:38:06:24:c8:8d:30:f5:59:be: 20:05:68:7b:a2:21:00:6a:d9:6e:c1:d9:20:f4:73: 21:eb:f8:eb:84:f0:12:f9:4e:67:7c:8d:e6:e8:4a: 13:96:67:34:11:6d:eb:60:54:58:96:4d:07:44:95: 71:52:43:b0:9c:e0:f8:74:95:31:84:54:37:05:b6: fd:dd:f9:60:f9:9c:59:45:ab:3f:9f:9f:d2:44:7e: e7:04:4b:c2:94:56:04:91:f9:95:26:8e:17:16:ba: 40:b9:f9:b2:6d:e0:0d:00:a5:92:d3:19:2c:86:75: b7:65:0c:aa:33:61:78:5c:fe:35:e2:8b:cb:c8:2f: 8c:5f:6d:8e:32:9f:3c:40:0f:e6:1c:53:3e:c3:90: a4:ae:6d:64:83:d7:47:f0:27:3c:d4:c1:98:c5:af: 2d:c0:cf:7b:40:59:62:14:54:50:2c:b5:aa:82:2d: 21:4a:ce:57:06:f0:73:6c:5f:e3:da:74:78:e5:5c: c6:75:b7:3f:20:ac:03:12:f1:85:b9:c6:a1:65:82: 0c:63:fd:be:6e:d0:cd:ee:ea:c1:f4:27:ae:dd:2b: 7c:cc:7a:4c:fe:02:32:e7:69:59:c6:d8:2f:2a:c8: 0e:5f:65:a2:1b:a8:09:5c:c3:59:dc:bf:21:5c:65: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/22 74.119.52.0/22 192.149.254.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35860 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fc:ae:3d:d9:ba:cd:0c:c4:63:00:80:de:fa:66:8d:07:a1: 7c:4d:07:78:b3:2f:0a:03:5b:b1:5a:c4:43:32:c4:b1:fb:0f: cf:52:84:4f:c5:4f:8e:76:ad:a7:ce:2a:61:c6:f8:17:b7:04: d9:b4:7c:62:69:e3:7c:d5:a8:20:5a:b6:8c:9c:b3:eb:23:9b: 1c:3b:3d:ec:02:e7:ca:2a:66:77:23:b1:a3:ef:33:f3:08:25: 01:55:5c:c8:2e:60:3f:4f:92:1b:59:15:cb:23:35:d2:7e:0d: 63:df:47:12:56:ad:d5:b2:75:87:7d:88:cd:44:31:70:22:71: 5c:15:f6:fa:3a:59:43:e7:36:1b:ea:70:c0:24:67:02:ff:c1: 32:16:0c:99:2c:db:58:01:79:b2:16:76:87:15:57:c3:86:7d: d8:6f:a7:b8:82:e0:ce:78:f5:de:23:29:29:63:1f:83:b2:c7: f5:43:70:a0:cd:bc:fe:4e:6e:0d:68:e5:27:32:cd:dc:15:05: cb:0d:c4:8c:da:1d:84:d6:fb:95:c4:3b:d2:fb:ad:2f:86:0f: ee:06:53:2e:fe:16:72:74:61:a2:f0:c2:0e:9b:6d:03:20:62: bd:b4:38:b0:ba:0f:eb:53:1d:6b:24:d8:31:20:a0:5b:1c:6a: bf:dc:2d:a0 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWErkWYLqd5KRzPG4iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDgxODAwNDUyNVoXDTI3MTEyMTAxNDUyNVowLzEtMCsGA1UEAxMk NTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL4lXlM4BiTIjTD1Wb4gBWh7oiEAatluwdkg 9HMh6/jrhPAS+U5nfI3m6EoTlmc0EW3rYFRYlk0HRJVxUkOwnOD4dJUxhFQ3Bbb9 3flg+ZxZRas/n5/SRH7nBEvClFYEkfmVJo4XFrpAufmybeANAKWS0xkshnW3ZQyq M2F4XP414ovLyC+MX22OMp88QA/mHFM+w5Ckrm1kg9dH8Cc81MGYxa8twM97QFli FFRQLLWqgi0hSs5XBvBzbF/j2nR45VzGdbc/IKwDEvGFucahZYIMY/2+btDN7urB 9Ceu3St8zHpM/gIy52lZxtgvKsgOX2WiG6gJXMNZ3L8hXGUX4wIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFBykVGiXzO3sxoad8DTU1/qXMGJwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzUyYTIwZTVhLTNhNWQtNDQxNy05 MmQ3LTI1MGUxMzRjNmQwOS81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0 YzZkMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAI/hdADBAJKdzQDBAHAlf4wGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAIwUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEf8rj3Zus0MxGMAgN76Zo0HoXxNB3iz LwoDW7FaxEMyxLH7D89ShE/FT452rafOKmHG+Be3BNm0fGJp43zVqCBatoycs+sj mxw7PewC58oqZncjsaPvM/MIJQFVXMguYD9PkhtZFcsjNdJ+DWPfRxJWrdWydYd9 iM1EMXAicVwV9vo6WUPnNhvqcMAkZwL/wTIWDJks21gBebIWdocVV8OGfdhvp7iC 4M549d4jKSljH4Oyx/VDcKDNvP5Obg1o5ScyzdwVBcsNxIzaHYTW+5XEO9L7rS+G D+4GUy7+FnJ0YaLwwg6bbQMgYr20OLC6D+tTHWsk2DEgoFscar/cLaA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:55 2025 by rpki-client