$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2.cer File: d0e47806-215f-45bb-9c6b-3331009060f2.cer (raw, json) Hash identifier: ckRNLab2Ci1mlBAAGS307CVl11YAFIyIDMNJvCPHL3U= Subject key identifier: 3E:78:E4:16:F0:F2:15:DD:AD:99:E9:30:4B:18:DA:CD:DC:8D:EA:AD Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B74BC1BB60FD95966362B3A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2/d0e47806-215f-45bb-9c6b-3331009060f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 18:00:29 +0000 Certificate not after: Sat 24 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 399759 IP: 130.12.136.0/22 IP: 206.168.52.0/22 IP: 216.73.168.0/22 IP: 2602:fb48::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:bc:1b:b6:0f:d9:59:66:36:2b:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 8 18:00:29 2025 GMT Not After : Apr 24 00:45:34 2027 GMT Subject: CN=d0e47806-215f-45bb-9c6b-3331009060f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:38:a9:b3:c9:85:67:22:1b:f3:27:6f:bc: f0:8b:d3:53:d7:d3:ce:14:27:b1:fe:a5:26:c1:d0: dc:e4:77:46:f2:ec:3b:5d:7a:3e:5f:a1:fe:7a:0d: f2:69:77:09:f9:22:cc:f4:82:1a:3a:a4:78:41:18: 4b:83:94:83:de:d9:26:b5:aa:ea:c0:a0:6e:52:ec: db:3d:c1:2a:a3:3e:d8:16:30:ee:77:18:22:c1:2d: e6:93:57:6a:57:15:d9:6c:e9:6a:d7:62:49:04:1a: 12:20:5d:77:6d:bc:28:9a:50:66:39:56:4b:3c:c1: e3:cf:56:17:b5:ed:03:e9:59:73:0b:0b:97:c6:21: a9:47:68:11:1e:9c:61:f5:99:48:53:a3:2e:dd:09: c7:51:4c:12:1a:81:09:e4:d3:ce:64:c0:1e:1c:1b: 04:dd:65:4e:6d:af:a0:06:16:93:2a:66:15:c6:1f: b6:13:73:e5:52:db:97:9a:5f:39:78:d5:ab:9d:87: 9b:3d:6d:fc:94:f4:c9:03:c0:de:25:aa:22:9e:08: 0e:b5:7a:41:4d:45:81:05:90:fc:bb:39:82:7c:15: 79:89:91:67:56:64:60:30:53:dc:7d:03:d2:1b:57: 4c:74:d9:db:19:38:bc:a6:a5:a7:fa:d1:18:fb:f8: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:78:E4:16:F0:F2:15:DD:AD:99:E9:30:4B:18:DA:CD:DC:8D:EA:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0e47806-215f-45bb-9c6b-3331009060f2/d0e47806-215f-45bb-9c6b-3331009060f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 130.12.136.0/22 206.168.52.0/22 216.73.168.0/22 IPv6: 2602:fb48::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399759 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b0:0e:f2:5d:97:3e:cd:ae:ad:0b:e6:21:6c:7a:4c:c8:1e: 9d:23:bc:d9:0b:b0:5f:cc:0d:19:0d:e1:95:43:b1:23:c9:26: 89:fa:1f:6a:1c:54:e8:2f:7e:f8:b8:f2:bd:d5:bd:8b:a1:39: 2f:f5:30:84:84:09:44:fb:6d:84:16:92:f5:55:e3:64:c1:4d: d6:91:cb:68:a3:30:db:9e:74:57:0f:5f:4d:5d:1f:0d:22:c7: 4a:20:03:2d:41:dc:a8:20:70:c2:71:49:02:5f:33:3c:bc:7d: d3:5a:52:ea:d1:56:ba:67:7d:14:c1:e8:87:70:71:11:3d:35: 9b:dd:95:1e:cf:0d:32:0a:f4:eb:60:66:d8:f6:83:99:d0:04: ab:37:79:f0:e0:25:bb:5d:2d:59:33:67:8e:c8:ee:3c:2e:06: b3:e2:1c:0d:38:c5:29:d3:08:8f:ac:e3:21:7c:95:d5:4d:11: 95:9e:52:a0:75:e1:86:64:cc:9d:3f:11:a3:d8:ea:46:24:1a: 7e:f3:c5:42:a2:ab:c2:f2:8a:fc:fe:3f:04:c9:42:5c:79:f1: d6:a7:47:62:ef:2a:e1:63:45:6c:e0:c4:0f:4a:2a:96:e5:d8: 8c:a3:24:f8:ea:d1:1a:64:62:f1:17:66:50:72:94:8e:8a:72: ac:5f:6c:c9 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEt0vBu2D9lZZjYrOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAwODE4MDAyOVoXDTI3MDQyNDAwNDUzNFowLzEtMCsGA1UEAxMk ZDBlNDc4MDYtMjE1Zi00NWJiLTljNmItMzMzMTAwOTA2MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Q4qbPJhWciG/Mnb7zwi9NT19POFCex/qUm wdDc5HdG8uw7XXo+X6H+eg3yaXcJ+SLM9IIaOqR4QRhLg5SD3tkmtarqwKBuUuzb PcEqoz7YFjDudxgiwS3mk1dqVxXZbOlq12JJBBoSIF13bbwomlBmOVZLPMHjz1YX te0D6VlzCwuXxiGpR2gRHpxh9ZlIU6Mu3QnHUUwSGoEJ5NPOZMAeHBsE3WVOba+g BhaTKmYVxh+2E3PlUtuXml85eNWrnYebPW38lPTJA8DeJaoinggOtXpBTUWBBZD8 uzmCfBV5iZFnVmRgMFPcfQPSG1dMdNnbGTi8pqWn+tEY+/j+IwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFD545Bbw8hXdrZnpMEsY2s3cjeqtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k MGU0NzgwNi0yMTVmLTQ1YmItOWM2Yi0zMzMxMDA5MDYwZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2QwZTQ3ODA2LTIxNWYtNDViYi05 YzZiLTMzMzEwMDkwNjBmMi9kMGU0NzgwNi0yMTVmLTQ1YmItOWM2Yi0zMzMxMDA5 MDYwZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAKCDIgDBALOqDQDBALYSagwDgQCAAIwCAMGACYC +0gAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYZjzBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMsA7yXZc+ za6tC+YhbHpMyB6dI7zZC7BfzA0ZDeGVQ7EjySaJ+h9qHFToL374uPK91b2LoTkv 9TCEhAlE+22EFpL1VeNkwU3WkctoozDbnnRXD19NXR8NIsdKIAMtQdyoIHDCcUkC XzM8vH3TWlLq0Va6Z30UweiHcHERPTWb3ZUezw0yCvTrYGbY9oOZ0ASrN3nw4CW7 XS1ZM2eOyO48Lgaz4hwNOMUp0wiPrOMhfJXVTRGVnlKgdeGGZMydPxGj2OpGJBp+ 88VCoqvC8or8/j8EyUJcefHWp0di7yrhY0Vs4MQPSiqW5diMoyT46tEaZGLxF2ZQ cpSOinKsX2zJ -----END CERTIFICATE-----Generated at Sun Oct 19 22:46:16 2025 by rpki-client