$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer File: caa8771d-81d7-474e-8d02-b2c215e51102.cer (raw, json) Hash identifier: a9N1/UJnNzthAdKaf53eawYNZyOkwa1v5Hi1/kw80Zw= Subject key identifier: 5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584AC79FAB59B99C6C87B7826940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 Aug 2025 17:48:20 +0000 Certificate not after: Tue 20 Oct 2026 00:45:20 +0000 Subordinate resources: AS: 33549 AS: 394369 IP: 64.25.108.0/23 IP: 64.191.44.0/23 IP: 104.37.148.0/22 IP: 135.84.136.0/22 IP: 202.170.192.0/22 IP: 2604:6440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:9f:ab:59:b9:9c:6c:87:b7:82:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 7 17:48:20 2025 GMT Not After : Oct 20 00:45:20 2026 GMT Subject: CN=caa8771d-81d7-474e-8d02-b2c215e51102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:f6:77:93:24:5b:f1:04:59:ff:e5:40:57: 43:86:f9:13:e8:f0:62:17:2c:86:82:f8:f8:22:e0: c8:d3:3b:88:20:2e:fb:8b:54:77:c2:d3:8e:98:83: a1:78:a4:e0:de:f4:26:d5:e0:dd:bf:f6:a1:8c:f0: 95:46:3d:91:e2:6d:03:cd:c4:c5:f9:d6:ce:7c:47: e4:79:c7:a5:41:c3:07:6f:bf:60:17:9e:44:99:50: 8b:71:0a:1a:d6:3d:8f:ff:c4:b0:b4:d6:a3:95:18: 33:17:17:80:eb:ce:d6:75:f0:39:64:27:4b:40:47: c0:71:a9:58:2f:7a:5a:f2:1f:84:a6:7a:4f:97:e8: 5a:62:a2:81:f2:1f:cb:8b:c3:ac:dd:43:6a:61:61: 62:f8:44:37:2e:0e:c4:b1:d0:29:05:c8:63:a6:66: bc:c9:33:ae:df:e2:c2:44:13:d4:af:0d:c1:e7:9b: 05:c8:36:97:0f:23:e2:c3:05:4e:78:71:da:5b:26: 6b:1b:77:4f:e3:32:a1:bc:52:a7:42:bc:e4:65:25: 65:a7:34:51:ef:8e:e6:18:d9:4e:81:94:b0:45:d7: 30:36:18:37:fc:0a:49:d4:61:d3:b3:47:de:f0:b1: 0d:ea:9f:a5:9f:37:a7:05:51:34:af:1c:a8:51:c7: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 64.25.108.0/23 64.191.44.0/23 104.37.148.0/22 135.84.136.0/22 202.170.192.0/22 IPv6: 2604:6440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33549 394369 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:03:d1:63:7b:c0:0d:dc:79:f2:4f:85:82:45:20:6e:13:ac: 90:d4:35:9a:c7:7d:02:9a:0d:29:72:42:32:69:a4:00:72:a4: ef:67:fa:e0:12:5d:a6:0d:3a:60:99:0b:b9:84:7f:ac:55:91: 9b:41:c3:d4:56:91:7d:ba:47:9c:6a:52:f6:0f:a3:8a:5c:a8: cc:22:55:1f:6d:a2:e5:19:65:a1:3d:29:17:49:9e:ee:bb:59: 85:6e:4d:c3:0c:9d:c3:b2:9c:cd:b8:18:83:ef:dc:71:8b:15: e3:5a:51:d5:1d:6a:66:ab:29:34:9f:d6:4c:9a:cd:34:fe:58: 6d:7c:9a:d7:c1:21:2b:c0:45:e6:82:c4:ac:6b:ec:b8:99:41: 12:fb:39:d8:d8:8e:74:d0:8d:79:63:5b:69:f4:ae:2f:9a:d2: 6c:70:64:0c:f1:95:18:52:26:b6:26:41:b1:a5:3d:7a:26:3f: ae:56:08:b7:00:13:5d:c7:d5:7b:7b:1a:2a:27:c1:8b:9b:a5: 9f:bc:d2:46:f7:b7:84:05:2a:ce:1c:6d:05:cf:ab:00:68:7e: 95:7b:b1:24:c6:bd:5a:7a:e9:1d:39:f1:46:6c:5a:b0:36:41: fc:2d:59:29:3c:a4:6d:61:e2:57:87:46:e0:e1:ac:74:94:d0: 30:c5:1a:4f -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWErHn6tZuZxsh7eCaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDgwNzE3NDgyMFoXDTI2MTAyMDAwNDUyMFowLzEtMCsGA1UEAxMk Y2FhODc3MWQtODFkNy00NzRlLThkMDItYjJjMjE1ZTUxMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc32d5MkW/EEWf/lQFdDhvkT6PBiFyyGgvj4 IuDI0zuIIC77i1R3wtOOmIOheKTg3vQm1eDdv/ahjPCVRj2R4m0DzcTF+dbOfEfk ecelQcMHb79gF55EmVCLcQoa1j2P/8SwtNajlRgzFxeA687WdfA5ZCdLQEfAcalY L3pa8h+EpnpPl+haYqKB8h/Li8Os3UNqYWFi+EQ3Lg7EsdApBchjpma8yTOu3+LC RBPUrw3B55sFyDaXDyPiwwVOeHHaWyZrG3dP4zKhvFKnQrzkZSVlpzRR747mGNlO gZSwRdcwNhg3/ApJ1GHTs0fe8LEN6p+lnzenBVE0rxyoUcdU4wIDAQABo4IERzCC BEMwHQYDVR0OBBYEFFr7Fp5acFvwoacF41paCQereYJ7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9j YWE4NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMyMTVlNTExMDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2NhYTg3NzFkLTgxZDctNDc0ZS04 ZDAyLWIyYzIxNWU1MTEwMi9jYWE4NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMyMTVl NTExMDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAFAGWwDBAFAvywDBAJoJZQDBAKHVIgDBALKqsAw DQQCAAIwBwMFACYEZEAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAIMNAgMGBIEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdgPRY3vADdx58k+FgkUgbhOskNQ1msd9ApoNKXJCMmmkAHKk72f6 4BJdpg06YJkLuYR/rFWRm0HD1FaRfbpHnGpS9g+jilyozCJVH22i5RlloT0pF0me 7rtZhW5Nwwydw7KczbgYg+/ccYsV41pR1R1qZqspNJ/WTJrNNP5YbXya18EhK8BF 5oLErGvsuJlBEvs52NiOdNCNeWNbafSuL5rSbHBkDPGVGFImtiZBsaU9eiY/rlYI twATXcfVe3saKifBi5uln7zSRve3hAUqzhxtBc+rAGh+lXuxJMa9WnrpHTnxRmxa sDZB/C1ZKTykbWHiV4dG4OGsdJTQMMUaTw== -----END CERTIFICATE-----Generated at Sun Aug 24 00:34:19 2025 by rpki-client