$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer File: 1931273b-f68a-4770-b714-cad22762621f.cer (raw, json) Hash identifier: SM7r4rGPklhTD2b4INfoVGyviBcVqm8HTQh0CA5AQxQ= Subject key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B74B90E3EB10B150C6241F000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 17:54:20 +0000 Certificate not after: Wed 30 Dec 2026 01:45:28 +0000 Subordinate resources: AS: 13411 IP: 130.12.132.0/22 IP: 206.168.236.0/22 IP: 2602:fb96::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:b9:0e:3e:b1:0b:15:0c:62:41:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 8 17:54:20 2025 GMT Not After : Dec 30 01:45:28 2026 GMT Subject: CN=1931273b-f68a-4770-b714-cad22762621f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:15:b9:56:bb:e1:7e:77:8c:42:47:7e:1f: c0:85:33:d8:38:6e:c4:0a:73:94:24:b4:38:83:ee: d8:aa:9a:2d:3e:40:21:26:5d:a4:aa:2b:3b:d8:33: 1a:84:a0:17:8a:b0:cb:ea:e3:46:6e:9a:77:ee:41: 8b:6c:b4:1b:8f:f5:d3:0f:5c:2c:23:8d:65:db:43: a0:e8:e2:94:c2:d2:6f:f0:9b:d0:9d:82:f3:15:9b: 09:15:b7:13:86:0a:4e:97:61:18:db:6a:a5:ea:81: e1:4c:2d:63:7c:7d:5d:24:7e:50:56:5c:51:f9:4b: 33:74:a0:f5:b6:31:2c:bc:b8:f9:08:fc:93:23:44: 06:7a:7a:2f:3e:04:ec:2d:52:ad:d7:db:1d:81:b2: e9:81:d5:c0:16:86:f1:6f:29:95:64:33:cc:1e:f5: 38:b1:46:5d:74:67:bd:b4:80:93:76:7b:8c:d6:64: de:5c:e0:b7:b7:5e:bd:1e:89:22:9e:65:63:fa:02: fb:0a:53:1c:c6:d6:35:4d:8f:24:45:4c:62:f1:19: 16:bc:d0:5a:6b:04:ae:9a:7f:96:49:eb:25:54:3b: 97:d7:59:10:11:b5:7b:8e:b5:42:79:d5:ae:52:f4: 6c:da:43:c1:ca:f9:b9:55:40:ca:3f:9c:83:8c:15: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 130.12.132.0/22 206.168.236.0/22 IPv6: 2602:fb96::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13411 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6b:89:e1:17:b8:df:f6:a9:43:0b:2b:8d:ac:66:20:ba:29: b2:10:9f:e4:bc:af:49:9b:7b:75:43:cb:f8:e5:2a:e2:09:3b: 93:a7:dd:c9:cb:25:91:a7:79:c4:4c:c0:26:56:1c:b7:d7:b4: 93:97:e4:75:9f:f8:2c:c9:3a:37:e5:c3:4d:4b:fd:a2:f4:cb: b0:e8:c2:9f:d0:43:99:e2:09:60:74:8f:38:fe:f7:e1:ad:5a: 64:aa:ff:a9:17:55:e3:2a:68:0a:ba:ae:af:20:11:2a:76:b4: b5:a5:d7:e1:aa:db:18:5b:c4:8e:98:4a:1e:31:dc:ad:d9:38: 68:df:12:58:5d:d0:0f:62:5d:fa:5e:62:1d:8c:c1:57:be:99: 98:da:2c:cd:51:35:33:29:13:80:42:65:ce:88:72:b4:36:47: 99:e1:24:f3:57:5e:3d:b1:26:76:7f:5a:39:67:9f:bf:d7:4b: 61:f0:ea:f1:66:23:d6:a3:b6:82:c1:d6:8d:00:4a:6e:5a:07: c3:73:c7:ec:20:1e:e7:d0:36:ff:b8:b5:85:16:43:d5:61:18: 14:f5:0e:c7:87:be:a5:6d:99:a9:a1:a0:7d:06:ab:d4:46:40: 67:ea:2b:70:51:cf:ee:9d:9c:81:8c:d3:0b:1a:cc:f2:5b:3f: 25:75:38:2f -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEt0uQ4+sQsVDGJB8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAwODE3NTQyMFoXDTI2MTIzMDAxNDUyOFowLzEtMCsGA1UEAxMk MTkzMTI3M2ItZjY4YS00NzcwLWI3MTQtY2FkMjI3NjI2MjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVMVuVa74X53jEJHfh/AhTPYOG7ECnOUJLQ4 g+7YqpotPkAhJl2kqis72DMahKAXirDL6uNGbpp37kGLbLQbj/XTD1wsI41l20Og 6OKUwtJv8JvQnYLzFZsJFbcThgpOl2EY22ql6oHhTC1jfH1dJH5QVlxR+UszdKD1 tjEsvLj5CPyTI0QGenovPgTsLVKt19sdgbLpgdXAFobxbymVZDPMHvU4sUZddGe9 tICTdnuM1mTeXOC3t169HokinmVj+gL7ClMcxtY1TY8kRUxi8RkWvNBaawSumn+W SeslVDuX11kQEbV7jrVCedWuUvRs2kPByvm5VUDKP5yDjBVsfQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPcWkLXjyZtyJcSHp+pRdvJOPPatMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8x OTMxMjczYi1mNjhhLTQ3NzAtYjcxNC1jYWQyMjc2MjYyMWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE5MzEyNzNiLWY2OGEtNDc3MC1i NzE0LWNhZDIyNzYyNjIxZi8xOTMxMjczYi1mNjhhLTQ3NzAtYjcxNC1jYWQyMjc2 MjYyMWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAKCDIQDBALOqOwwDgQCAAIwCAMGBCYC+5YAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjRjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADhrieEXuN/2qUMLK42s ZiC6KbIQn+S8r0mbe3VDy/jlKuIJO5On3cnLJZGnecRMwCZWHLfXtJOX5HWf+CzJ Ojflw01L/aL0y7Dowp/QQ5niCWB0jzj+9+GtWmSq/6kXVeMqaAq6rq8gESp2tLWl 1+Gq2xhbxI6YSh4x3K3ZOGjfElhd0A9iXfpeYh2MwVe+mZjaLM1RNTMpE4BCZc6I crQ2R5nhJPNXXj2xJnZ/Wjlnn7/XS2Hw6vFmI9ajtoLB1o0ASm5aB8Nzx+wgHufQ Nv+4tYUWQ9VhGBT1DseHvqVtmamhoH0Gq9RGQGfqK3BRz+6dnIGM0wsazPJbPyV1 OC8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:32 2025 by rpki-client