$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer File: af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer (raw, json) Hash identifier: jFmeS/nvBE8gfn1UEzsbgdmeBJndF5d6hFBqJvWqcWI= Subject key identifier: 41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B916FE794FD8A023057D4B0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Oct 2025 00:45:23 +0000 Certificate not after: Sat 22 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 30323 IP: 23.174.96.0/24 IP: 173.195.97.0/24 IP: 2620:66:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:6f:e7:94:fd:8a:02:30:57:d4:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 19 00:45:23 2025 GMT Not After : Jan 22 01:45:23 2028 GMT Subject: CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:53:d5:62:17:e7:b4:45:db:43:40:e5:f3: 23:3c:57:11:e6:f8:31:5a:33:39:e9:ee:11:69:37: 3f:f0:24:6c:c1:99:31:85:52:d8:22:ae:c7:c9:e3: 87:d8:6a:60:ad:49:c7:bb:48:bb:ca:6e:3a:2d:f2: 23:cd:1a:68:7a:0d:04:85:c5:18:fd:f3:83:e7:f1: 47:ec:69:73:01:1d:68:7e:25:cd:1c:a8:17:40:a2: 1e:ba:a2:fe:56:dd:7f:bb:0a:cb:39:8c:97:fc:1b: 6a:8a:75:3e:8b:fe:36:00:d7:93:cb:ac:be:96:02: f2:74:cb:8e:df:0c:d6:da:db:5e:aa:1e:c9:e4:87: 1c:fa:90:b3:fb:d0:94:7d:c6:38:9c:ec:0f:84:f2: 42:fa:65:9d:28:55:71:d2:49:3b:b2:7e:85:f9:7f: 0c:b3:b1:58:b2:6c:17:bc:04:48:0b:42:ab:8d:a7: 9f:3d:00:d0:0e:91:e5:33:66:5f:90:0f:63:49:86: 0c:50:77:73:54:25:3a:c4:48:dc:40:cf:6d:f5:7c: 0f:99:1c:82:a2:c1:64:d5:bc:c0:6c:c2:9c:9f:98: cb:9e:58:ea:1e:7e:12:c3:6e:10:8a:47:22:bd:f4: 76:86:da:7d:05:b7:12:65:36:ad:94:d2:d0:75:9d: 98:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.174.96.0/24 173.195.97.0/24 IPv6: 2620:66:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30323 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c5:a8:8f:61:d4:16:45:d3:7c:4f:16:1b:ad:84:ac:26:9b: 20:71:8c:e2:23:71:f0:94:4b:dc:ab:14:89:de:47:37:68:37: 63:03:12:44:85:ea:47:bc:f0:fd:6f:9a:1c:6f:f4:0d:dd:32: 3f:cd:83:78:f3:e0:d5:24:89:04:78:2e:a5:83:b3:74:71:e9: 39:e2:7a:f9:33:af:be:cc:21:25:4d:d6:ef:8f:b9:54:37:fc: 57:99:eb:7c:08:dc:c1:56:12:8e:1f:8d:ec:09:89:9a:fd:ea: 47:71:92:d7:11:42:5b:e2:48:ab:e3:12:20:d6:1e:25:1e:65: 31:e4:cd:e5:e5:2b:55:2f:7e:65:5f:d6:9a:31:21:cf:b1:99: 74:86:ef:c9:6d:6c:71:ec:a9:2d:c7:b3:d0:a9:d1:af:cb:38: 84:02:f7:60:b0:88:4c:a2:92:be:22:e1:36:f8:a6:28:60:66: e7:24:ce:df:87:6f:15:5f:ad:11:13:75:27:86:08:1c:83:23: 6a:68:50:82:72:a5:04:16:07:16:f0:9e:3e:2d:dd:50:88:93: 2e:8d:1c:49:d8:54:ca:04:ec:6d:a6:0d:48:eb:f1:17:d5:65: f9:9b:ad:93:28:eb:b2:eb:b5:fd:67:36:70:4d:d1:bc:e8:b8: e3:ff:e4:27 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEuRb+eU/YoCMFfUsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAxOTAwNDUyM1oXDTI4MDEyMjAxNDUyM1owLzEtMCsGA1UEAxMk YWYyZjY5NjEtMDkxZi00YmIyLTkwZDEtZGNkZDk2OWYxYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy91T1WIX57RF20NA5fMjPFcR5vgxWjM56e4R aTc/8CRswZkxhVLYIq7HyeOH2GpgrUnHu0i7ym46LfIjzRpoeg0EhcUY/fOD5/FH 7GlzAR1ofiXNHKgXQKIeuqL+Vt1/uwrLOYyX/BtqinU+i/42ANeTy6y+lgLydMuO 3wzW2tteqh7J5Icc+pCz+9CUfcY4nOwPhPJC+mWdKFVx0kk7sn6F+X8Ms7FYsmwX vARIC0KrjaefPQDQDpHlM2ZfkA9jSYYMUHdzVCU6xEjcQM9t9XwPmRyCosFk1bzA bMKcn5jLnljqHn4Sw24QikcivfR2htp9BbcSZTatlNLQdZ2YqwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFEHVIkRlcrs8Z2dl5yg+v300FxggMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h ZjJmNjk2MS0wOTFmLTRiYjItOTBkMS1kY2RkOTY5ZjFjNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2FmMmY2OTYxLTA5MWYtNGJiMi05 MGQxLWRjZGQ5NjlmMWM3NS9hZjJmNjk2MS0wOTFmLTRiYjItOTBkMS1kY2RkOTY5 ZjFjNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXrmADBACtw2EwDwQCAAIwCQMHACYgAGagADAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJ2czBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2xaiPYdQWRdN8TxYb rYSsJpsgcYziI3HwlEvcqxSJ3kc3aDdjAxJEhepHvPD9b5ocb/QN3TI/zYN48+DV JIkEeC6lg7N0cek54nr5M6++zCElTdbvj7lUN/xXmet8CNzBVhKOH43sCYma/epH cZLXEUJb4kir4xIg1h4lHmUx5M3l5StVL35lX9aaMSHPsZl0hu/JbWxx7Kktx7PQ qdGvyziEAvdgsIhMopK+IuE2+KYoYGbnJM7fh28VX60RE3UnhggcgyNqaFCCcqUE FgcW8J4+Ld1QiJMujRxJ2FTKBOxtpg1I6/EX1WX5m62TKOuy67X9ZzZwTdG86Ljj /+Qn -----END CERTIFICATE-----Generated at Sun Oct 19 22:40:39 2025 by rpki-client