$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer File: fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer (raw, json) Hash identifier: MVklhrmf8yHMhjHJw+5GR643v5v6sAf+QHPBWC/vNJQ= Subject key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B66A5DC7F03E4CB9E52C0C400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Oct 2025 16:54:20 +0000 Certificate not after: Mon 08 Feb 2027 19:14:45 +0000 Subordinate resources: AS: 401468 IP: 23.128.124.0/24 IP: 192.43.161.0/24 IP: 2602:f9a0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:a5:dc:7f:03:e4:cb:9e:52:c0:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 3 16:54:20 2025 GMT Not After : Feb 8 19:14:45 2027 GMT Subject: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:08:7d:b6:1e:f4:a0:3a:13:11:42:09:26: cb:ec:33:00:9e:13:0e:84:74:ee:87:45:b7:c4:2d: 54:d4:e6:a9:2a:9e:12:d2:f6:54:62:f0:c3:ba:50: b7:af:64:1f:9f:60:11:21:6a:eb:c6:f9:fb:cc:70: 6e:36:5b:75:38:34:dd:10:4a:b6:8a:db:d9:e8:ce: 2c:93:14:13:3a:39:ad:9d:ab:8a:8a:17:a5:8e:c3: 4f:20:07:62:49:05:8f:e9:55:87:d1:d4:44:67:7a: df:70:41:27:4d:d4:c3:a3:66:01:da:3a:a1:86:a3: e3:8d:58:ad:c9:b5:26:3c:b1:e2:da:42:ac:ac:74: bc:b7:e1:11:cc:49:bb:0f:81:e0:51:fb:a3:33:0e: f3:44:0a:20:50:77:91:71:9f:4b:51:b6:fe:dc:ec: 34:fb:1a:e1:69:79:47:8b:7b:7b:4c:bc:72:ab:f7: b6:11:8e:39:a4:55:ad:4c:04:95:6e:19:85:4a:20: 81:2d:b7:26:26:06:ec:ab:90:e0:73:40:4a:6d:e9: 62:9f:be:9d:61:17:d1:36:c7:3f:86:fc:ac:70:fb: 2f:fb:c1:ef:25:83:0b:c9:e7:4e:68:b3:8d:74:bc: cc:df:f8:44:48:f9:9b:cb:c4:10:c2:fe:a5:90:cc: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.128.124.0/24 192.43.161.0/24 IPv6: 2602:f9a0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401468 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ff:94:f1:77:4b:a7:40:bb:3d:4c:46:1f:9f:da:9c:b8:75: 70:6c:2e:0a:74:82:c3:91:83:4e:05:76:c8:c7:8c:74:d5:99: 68:84:e7:b4:b0:6c:93:57:05:8c:3a:c3:9c:47:e2:c9:5d:48: 50:b9:21:cf:6d:44:88:58:11:3c:40:6e:e6:39:f7:94:d7:b8: 63:72:ff:8e:69:e1:bd:a7:7e:ec:e6:24:c3:86:c2:d7:46:f5: 18:1a:d7:a9:92:d8:6b:a2:b7:37:fd:da:a4:41:53:33:79:e0: 6d:cf:fa:e0:17:2b:8a:98:58:50:0c:75:1a:42:57:4a:9d:17: a5:a7:69:37:54:19:d8:d8:92:6f:39:9d:c5:02:98:ad:3e:bd: 2b:a3:1c:93:63:c7:96:6b:6c:2b:e8:f2:07:97:75:45:16:6f: 27:76:04:96:8f:9c:ab:aa:74:72:2c:a9:f3:52:96:9b:07:72: 97:64:e6:d4:8f:e8:9f:65:a8:60:7c:93:f0:1e:8f:02:9c:ec: 07:50:1a:1f:7e:ba:7c:e6:e0:3c:b0:ea:c7:2f:23:0e:44:ec: 91:fb:15:25:55:5c:cc:c6:7c:9d:ec:98:76:b2:b6:f5:dc:0a: 89:f9:64:a3:ab:f3:a2:2e:40:5c:c4:b4:94:10:6e:0f:27:b9: 2a:be:24:fa -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEtmpdx/A+TLnlLAxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAwMzE2NTQyMFoXDTI3MDIwODE5MTQ0NVowLzEtMCsGA1UEAxMk ZmMwMzUwNjMtYmMwYi00MWMwLTlmNTAtOWNmYTBmOWRiNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsAIfbYe9KA6ExFCCSbL7DMAnhMOhHTuh0W3 xC1U1OapKp4S0vZUYvDDulC3r2Qfn2ARIWrrxvn7zHBuNlt1ODTdEEq2itvZ6M4s kxQTOjmtnauKiheljsNPIAdiSQWP6VWH0dREZ3rfcEEnTdTDo2YB2jqhhqPjjVit ybUmPLHi2kKsrHS8t+ERzEm7D4HgUfujMw7zRAogUHeRcZ9LUbb+3Ow0+xrhaXlH i3t7TLxyq/e2EY45pFWtTASVbhmFSiCBLbcmJgbsq5Dgc0BKbelin76dYRfRNsc/ hvyscPsv+8HvJYMLyedOaLONdLzM3/hESPmby8QQwv6lkMyOqwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFIlALaJdOKIBp/1HMVQqjYHfTmoqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9m YzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5ZGI2OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2ZjMDM1MDYzLWJjMGItNDFjMC05 ZjUwLTljZmEwZjlkYjY5Ny9mYzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5 ZGI2OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgHwDBADAK6EwDgQCAAIwCAMGACYC+aAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYgPDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZ/5Txd0unQLs9TEYf n9qcuHVwbC4KdILDkYNOBXbIx4x01ZlohOe0sGyTVwWMOsOcR+LJXUhQuSHPbUSI WBE8QG7mOfeU17hjcv+OaeG9p37s5iTDhsLXRvUYGtepkthrorc3/dqkQVMzeeBt z/rgFyuKmFhQDHUaQldKnRelp2k3VBnY2JJvOZ3FApitPr0roxyTY8eWa2wr6PIH l3VFFm8ndgSWj5yrqnRyLKnzUpabB3KXZObUj+ifZahgfJPwHo8CnOwHUBoffrp8 5uA8sOrHLyMOROyR+xUlVVzMxnyd7Jh2srb13AqJ+WSjq/OiLkBcxLSUEG4PJ7kq viT6 -----END CERTIFICATE-----Generated at Sun Oct 19 22:49:28 2025 by rpki-client