$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a.cer File: 65a67cfc-305d-4049-900c-33f3b01e742a.cer (raw, json) Hash identifier: W+i6ce+/MNhUEYBEDBzrTkDLabt2QbByJ7C3dKSEiPI= Subject key identifier: 9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584AF24EEE6A00F42C9214FE63C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 23 Aug 2025 00:45:25 +0000 Certificate not after: Fri 26 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 394637 IP: 104.128.177.0/24 IP: 2620:e5:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:4e:ee:6a:00:f4:2c:92:14:fe:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 23 00:45:25 2025 GMT Not After : Nov 26 01:45:25 2027 GMT Subject: CN=65a67cfc-305d-4049-900c-33f3b01e742a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c6:21:48:55:ab:56:e2:91:22:94:1d:f4:0b: 24:30:fe:31:ba:cb:e5:17:a8:75:62:8b:69:d0:4a: 76:aa:39:03:96:aa:93:5e:f1:b2:ba:08:1c:31:4f: b3:ca:23:25:da:ba:b7:f0:c1:8a:9f:a0:25:dd:6c: bd:84:f6:d3:20:4d:b8:38:cc:3b:22:0f:7e:4e:c7: af:f0:f5:8b:89:e9:4d:cd:0f:11:b4:d6:42:0c:62: ec:0b:35:dd:a1:8b:7e:dd:be:43:0d:02:10:5c:ed: 2c:14:7b:e5:92:16:c6:f7:34:9c:17:b8:07:90:58: 4e:ba:bf:9c:ce:c9:e0:aa:a0:b1:d5:c1:40:f1:2f: 0c:a6:a3:f7:d6:4d:71:0a:fa:d8:88:c2:3b:ed:ed: b3:23:79:71:69:5a:b1:a2:93:2d:93:51:45:c5:5b: ba:d2:29:a7:6a:35:1d:95:b5:a8:41:57:c2:3d:a7: 88:7d:7e:57:c5:53:92:f5:d7:f5:13:f7:59:a0:79: df:17:4e:7f:08:11:c6:a2:35:3c:d5:8d:c1:57:55: 49:94:d5:9d:c7:d8:ae:39:a0:7a:b6:c6:18:ea:eb: 7e:fd:22:c3:e6:a1:3d:fe:d7:0d:45:9a:46:37:6a: 92:9c:13:78:c8:86:63:3f:d8:53:58:fa:f6:8c:09: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:19:C0:2B:20:98:B1:32:4C:21:5C:81:AF:F2:7E:65:9A:93:A5:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65a67cfc-305d-4049-900c-33f3b01e742a/65a67cfc-305d-4049-900c-33f3b01e742a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 104.128.177.0/24 IPv6: 2620:e5:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394637 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:02:71:97:ba:19:ed:e2:b0:56:2e:3a:6d:8c:63:1f:42:8d: 75:3e:12:03:99:0d:5d:3a:b3:b4:7e:ba:10:45:b2:f6:03:76: 77:07:89:03:ef:62:77:ca:2e:8e:dc:42:dc:01:06:1b:d7:5e: 3f:d5:21:46:16:6f:1b:17:99:f2:9e:1c:f8:cf:0d:85:fe:d8: b9:42:40:28:85:43:6c:db:1c:1a:22:b8:4c:f1:a6:21:b5:da: 88:42:9a:78:2e:17:95:e6:6b:b8:b9:05:74:ed:24:2f:ca:3a: 07:59:7b:f1:c5:7d:c4:96:bc:c6:91:67:a7:2c:7d:4d:13:72: 89:d2:79:5e:da:72:e2:fd:cb:ad:65:28:9e:e8:fe:e1:19:3d: d1:60:74:f5:ff:ed:47:00:18:d9:ab:cd:77:67:d4:94:a8:df: 2f:b3:a9:0c:44:74:ba:13:89:de:2e:7a:1a:64:47:07:16:06: 8a:bf:99:9a:38:a3:b7:85:3c:ef:0e:bd:10:1e:5c:9c:3e:e3: 41:74:92:7a:c9:d3:23:21:ed:3e:32:3d:5f:c4:b5:8e:a0:05: 83:00:cd:bb:98:f3:18:6b:8a:2b:38:be:4d:68:a9:0e:e5:b7: 50:bc:a5:85:b2:0a:84:c7:e4:70:96:4d:89:bf:d7:ae:20:ad: 07:3e:46:6b -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEryTu5qAPQskhT+Y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDgyMzAwNDUyNVoXDTI3MTEyNjAxNDUyNVowLzEtMCsGA1UEAxMk NjVhNjdjZmMtMzA1ZC00MDQ5LTkwMGMtMzNmM2IwMWU3NDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksYhSFWrVuKRIpQd9AskMP4xusvlF6h1Yotp 0Ep2qjkDlqqTXvGyuggcMU+zyiMl2rq38MGKn6Al3Wy9hPbTIE24OMw7Ig9+Tsev 8PWLielNzQ8RtNZCDGLsCzXdoYt+3b5DDQIQXO0sFHvlkhbG9zScF7gHkFhOur+c zsngqqCx1cFA8S8MpqP31k1xCvrYiMI77e2zI3lxaVqxopMtk1FFxVu60imnajUd lbWoQVfCPaeIfX5XxVOS9df1E/dZoHnfF05/CBHGojU81Y3BV1VJlNWdx9iuOaB6 tsYY6ut+/SLD5qE9/tcNRZpGN2qSnBN4yIZjP9hTWPr2jAnbBQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFJ4ZwCsgmLEyTCFcga/yfmWak6VwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82 NWE2N2NmYy0zMDVkLTQwNDktOTAwYy0zM2YzYjAxZTc0MmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzY1YTY3Y2ZjLTMwNWQtNDA0OS05 MDBjLTMzZjNiMDFlNzQyYS82NWE2N2NmYy0zMDVkLTQwNDktOTAwYy0zM2YzYjAx ZTc0MmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBABogLEwDwQCAAIwCQMHACYgAOVAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGBY0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGgJxl7oZ7eKwVi46bYxjH0KN dT4SA5kNXTqztH66EEWy9gN2dweJA+9id8oujtxC3AEGG9deP9UhRhZvGxeZ8p4c +M8Nhf7YuUJAKIVDbNscGiK4TPGmIbXaiEKaeC4XleZruLkFdO0kL8o6B1l78cV9 xJa8xpFnpyx9TRNyidJ5Xtpy4v3LrWUonuj+4Rk90WB09f/tRwAY2avNd2fUlKjf L7OpDER0uhOJ3i56GmRHBxYGir+Zmjijt4U87w69EB5cnD7jQXSSesnTIyHtPjI9 X8S1jqAFgwDNu5jzGGuKKzi+TWipDuW3ULylhbIKhMfkcJZNib/XriCtBz5Gaw== -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:19 2025 by rpki-client