$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer File: 2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer (raw, json) Hash identifier: qIYZjuwbJqB9w+fA/o5ciOGCh11qSYfJ92vuFvCrIus= Subject key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584BBF9DF7BFFE762530BBCE1D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Nov 2025 13:45:22 +0000 Certificate not after: Mon 07 Feb 2028 13:45:22 +0000 Subordinate resources: AS: 400790 IP: 207.228.216.0/22 IP: 2606:f6c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:9d:f7:bf:fe:76:25:30:bb:ce:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Nov 4 13:45:22 2025 GMT Not After : Feb 7 13:45:22 2028 GMT Subject: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:8b:c2:b8:e5:f8:9f:16:31:9b:26:03:2b: 7e:b4:53:d2:f4:a9:80:4d:23:c3:c1:b8:9d:cd:cc: 69:02:3c:96:ec:0d:ae:4c:d7:15:63:86:4c:98:22: b8:2d:1d:4a:8b:ed:11:11:c8:70:00:a4:2d:84:f9: 4f:3c:c9:2d:2e:ac:7c:c3:06:c1:d9:e8:0a:0f:9a: 1c:8e:28:51:16:c3:5a:6a:9a:3f:88:18:66:12:81: 45:37:50:aa:5d:61:39:2f:98:ff:27:30:85:27:65: 30:bb:cd:a8:ed:36:1a:dd:6f:fe:3f:58:35:80:88: 86:46:72:2f:75:d0:05:1c:30:74:a2:15:c7:9a:ae: bd:c4:f7:c1:ab:5a:c6:e3:a9:20:cc:68:b0:d5:2c: 51:eb:8a:e6:67:98:99:0f:6a:fc:71:5d:c0:17:66: 8c:a8:cf:8e:9d:08:c7:7c:db:f9:f4:7a:92:cf:57: bd:96:c9:e7:46:8a:9d:da:49:b8:f6:2d:94:4e:4b: da:4e:f1:74:b6:1a:c0:df:bd:c6:f1:10:b3:59:c4: 63:8b:24:06:0d:ca:6f:fd:4d:ba:90:b7:f0:b7:a8: 96:30:8e:b8:4c:9b:9c:a1:8f:fd:29:0b:06:9f:dc: bf:9e:81:3c:69:ec:e7:6a:6f:b4:53:20:23:b5:7d: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 207.228.216.0/22 IPv6: 2606:f6c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400790 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:82:de:f8:4b:d9:08:f8:cb:46:3c:f8:e0:e2:6f:c6:1a:05: 9a:aa:ad:79:31:a4:2c:9e:5c:cf:11:62:42:80:a8:e8:21:6b: e4:52:a4:34:93:58:0c:75:36:03:98:53:0f:f2:cc:98:17:1f: 27:56:7b:09:26:a8:d1:0c:2f:a9:d2:fd:37:a3:aa:c5:f0:f8: 05:35:69:ee:a2:17:87:2a:1c:0e:03:a4:f5:54:7f:59:78:9f: 4f:59:42:85:37:3c:c4:01:2b:07:eb:d1:f0:a9:55:fb:26:da: c6:b7:cd:b3:5b:95:cf:a0:fe:74:94:18:25:ef:62:15:49:9d: fb:39:d6:01:3a:67:e7:09:e9:b5:41:99:7c:99:de:54:4c:f7: 1e:85:30:89:1f:e1:8e:ae:dc:56:c7:be:9b:3e:b2:0e:74:fc: fb:d7:d1:31:d6:64:c5:bb:64:c1:e4:2f:8a:0d:72:9b:d0:a1: 8f:7c:40:b3:31:d8:9d:54:11:a9:21:ff:c2:96:88:61:29:ac: 53:65:78:d9:aa:7f:02:65:e9:bf:56:d0:76:99:41:aa:1c:d5: 23:57:1d:0a:22:d6:99:c3:3e:23:ea:f6:ef:09:5c:15:d3:c8: 4b:32:41:45:f8:a5:00:70:f6:9f:1f:6f:cf:d8:7f:e0:e8:c4: dd:b5:6f:bf -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEu/nfe//nYlMLvOHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTEwNDEzNDUyMloXDTI4MDIwNzEzNDUyMlowLzEtMCsGA1UEAxMk MmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4YmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeeLwrjl+J8WMZsmAyt+tFPS9KmATSPDwbid zcxpAjyW7A2uTNcVY4ZMmCK4LR1Ki+0REchwAKQthPlPPMktLqx8wwbB2egKD5oc jihRFsNaapo/iBhmEoFFN1CqXWE5L5j/JzCFJ2Uwu82o7TYa3W/+P1g1gIiGRnIv ddAFHDB0ohXHmq69xPfBq1rG46kgzGiw1SxR64rmZ5iZD2r8cV3AF2aMqM+OnQjH fNv59HqSz1e9lsnnRoqd2km49i2UTkvaTvF0thrA373G8RCzWcRjiyQGDcpv/U26 kLfwt6iWMI64TJucoY/9KQsGn9y/noE8aeznam+0UyAjtX1NUwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLjlbfKk/KeaJ4WVVhnJbtw4hXQ7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y ZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzJlNjllNTVkLTNiYWYtNDFlNi05 ZTY3LWJiZTVlZDg4OGJlOS8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4 ODhiZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALP5NgwDQQCAAIwBwMFACYG9sAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh2WMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABqC3vhL2Qj4y0Y8+ODib8YaBZqq rXkxpCyeXM8RYkKAqOgha+RSpDSTWAx1NgOYUw/yzJgXHydWewkmqNEML6nS/Tej qsXw+AU1ae6iF4cqHA4DpPVUf1l4n09ZQoU3PMQBKwfr0fCpVfsm2sa3zbNblc+g /nSUGCXvYhVJnfs51gE6Z+cJ6bVBmXyZ3lRM9x6FMIkf4Y6u3FbHvps+sg50/PvX 0THWZMW7ZMHkL4oNcpvQoY98QLMx2J1UEakh/8KWiGEprFNleNmqfwJl6b9W0HaZ Qaoc1SNXHQoi1pnDPiPq9u8JXBXTyEsyQUX4pQBw9p8fb8/Yf+DoxN21b78= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:12 2025 by rpki-client