$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da.cer File: 35108378-f5ea-460b-b05b-51d13b62a6da.cer (raw, json) Hash identifier: FzkYBkwiJLMmq/pt9tVV+VZDaFk+53QVGHKwXyd+vYo= Subject key identifier: 61:98:3A:9D:81:B1:27:18:BD:9B:9A:B6:D6:11:EA:E5:D5:BC:79:CE Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A9363C1ABFDE85D1DEDEAFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/35108378-f5ea-460b-b05b-51d13b62a6da.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Jul 2025 00:45:35 +0000 Certificate not after: Sat 23 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 16876 AS: 20144 AS: 23518 AS: 26299 AS: 26710 -- 26711 AS: 27500 AS: 40528 IP: 192.0.32.0/20 IP: 199.4.28.0/22 IP: 199.4.138.0/24 IP: 199.7.81.0 -- 199.7.83.255 IP: 199.7.94.0/23 IP: 199.43.132.0/22 IP: 199.91.192.0/21 IP: 199.253.182.0/23 IP: 208.77.188.0/22 IP: 2001:500:3::/48 IP: 2001:500:11::/48 IP: 2001:500:86:: -- 2001:500:89:ffff:ffff:ffff:ffff:ffff IP: 2001:500:8c::/46 IP: 2001:500:9c::/46 IP: 2602:800:9000::/44 IP: 2620:0:2d0::/48 IP: 2620:0:22b0::/48 IP: 2620:0:2830::/48 IP: 2620:0:2ed0::/48 IP: 2620:0:2ee0::/48 IP: 2620:f:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:63:c1:ab:fd:e8:5d:1d:ed:ea:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jul 20 00:45:35 2025 GMT Not After : Oct 23 00:45:35 2027 GMT Subject: CN=35108378-f5ea-460b-b05b-51d13b62a6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:fd:c7:41:f6:ae:cc:4a:03:ab:60:fb:f9: 2f:11:a7:ab:67:02:94:0a:90:3f:49:81:55:25:53: f0:e6:fc:12:17:89:9e:f3:b0:61:cf:22:be:2b:04: 82:9b:74:54:d3:6d:86:be:66:0c:30:bb:8c:80:57: 4e:dc:29:22:46:31:3c:20:26:f2:d1:42:38:8d:2b: 90:e0:eb:70:13:db:f2:14:bb:5a:45:23:17:cb:9e: 23:f0:77:59:5b:78:a0:26:d3:08:51:a8:fe:b4:f4: b6:c0:31:12:c6:3e:2e:28:53:49:a0:c3:0a:10:17: 93:b2:4a:50:f9:8d:1c:38:e5:9e:29:11:a8:5f:12: 7a:ee:3e:19:db:7f:32:fe:eb:f2:71:dc:a9:bc:b0: 00:cf:59:c5:db:f3:1b:76:91:6a:f1:2e:a9:1e:59: 13:d7:ce:88:c3:76:d3:b9:be:d6:c8:1c:62:e8:47: 7d:f5:b5:ba:df:50:73:ea:84:32:3b:9a:eb:76:8e: 09:7b:56:f1:3f:e4:e2:3b:b7:51:26:56:1a:70:68: 5c:ff:40:4a:3b:95:8a:32:16:2c:96:d9:0f:fa:2f: bc:8d:65:98:ce:e2:9a:63:b5:51:e7:59:8e:26:dd: 86:89:6d:4d:eb:d4:fd:e2:d7:7c:d8:48:f0:ce:f7: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:98:3A:9D:81:B1:27:18:BD:9B:9A:B6:D6:11:EA:E5:D5:BC:79:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/35108378-f5ea-460b-b05b-51d13b62a6da/35108378-f5ea-460b-b05b-51d13b62a6da.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 192.0.32.0/20 199.4.28.0/22 199.4.138.0/24 199.7.81.0-199.7.83.255 199.7.94.0/23 199.43.132.0/22 199.91.192.0/21 199.253.182.0/23 208.77.188.0/22 IPv6: 2001:500:3::/48 2001:500:11::/48 2001:500:86::-2001:500:89:ffff:ffff:ffff:ffff:ffff 2001:500:8c::/46 2001:500:9c::/46 2602:800:9000::/44 2620:0:2d0::/48 2620:0:22b0::/48 2620:0:2830::/48 2620:0:2ed0::/48 2620:0:2ee0::/48 2620:f:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16876 20144 23518 26299 26710-26711 27500 40528 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:77:ce:83:40:b7:b2:35:05:6b:5d:be:88:89:7c:7b:59:8d: e2:cb:29:b3:cd:86:b8:45:52:3c:6a:0f:96:51:75:6f:5e:91: 02:1d:80:1b:ca:af:16:26:89:21:81:17:e2:98:96:6f:c5:4d: 28:42:9f:1d:0f:c6:96:3a:67:f5:76:23:8c:7d:a2:4e:c5:1c: 5e:93:b5:bf:4b:51:34:5b:57:98:d3:77:9b:89:07:a8:22:fe: 17:cf:99:5e:43:6d:3f:62:48:42:13:62:dd:af:f7:44:4e:60: 96:6c:09:bd:59:45:bc:c7:87:6c:03:c2:ae:94:11:b6:a0:e7: 77:7a:d7:d7:40:12:bf:9c:04:c7:6e:ce:b2:a6:05:3f:26:b9: 3d:3a:de:e6:cc:af:fe:93:57:47:13:91:8b:27:1c:eb:2e:33: 85:ff:e9:79:3f:b3:ed:3e:b1:78:75:84:94:15:0b:0e:01:58: 15:c7:3f:d5:46:52:98:90:3b:20:42:5d:94:cc:ea:2b:6b:65: 32:36:16:02:3c:64:ea:6d:05:5f:eb:37:38:45:f3:60:6b:84: 80:dc:64:5a:f2:5f:bd:ac:3e:8c:ac:90:89:de:e7:d7:d2:f6: 7c:e6:3e:75:07:54:06:8a:a4:70:09:c2:82:88:27:63:bd:f6: 15:ef:20:e5 -----BEGIN CERTIFICATE----- MIIH4TCCBsmgAwIBAgIUAQ0Mn0MoWEqTY8Gr/ehdHe3q+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDcyMDAwNDUzNVoXDTI3MTAyMzAwNDUzNVowLzEtMCsGA1UEAxMk MzUxMDgzNzgtZjVlYS00NjBiLWIwNWItNTFkMTNiNjJhNmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBD9x0H2rsxKA6tg+/kvEaerZwKUCpA/SYFV JVPw5vwSF4me87BhzyK+KwSCm3RU022GvmYMMLuMgFdO3CkiRjE8ICby0UI4jSuQ 4OtwE9vyFLtaRSMXy54j8HdZW3igJtMIUaj+tPS2wDESxj4uKFNJoMMKEBeTskpQ +Y0cOOWeKRGoXxJ67j4Z238y/uvycdypvLAAz1nF2/MbdpFq8S6pHlkT186Iw3bT ub7WyBxi6Ed99bW631Bz6oQyO5rrdo4Je1bxP+TiO7dRJlYacGhc/0BKO5WKMhYs ltkP+i+8jWWYzuKaY7VR51mOJt2GiW1N69T94td82EjwzvcLXQIDAQABo4IE8zCC BO8wHQYDVR0OBBYEFGGYOp2BsScYvZuattYR6uXVvHnOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8z NTEwODM3OC1mNWVhLTQ2MGItYjA1Yi01MWQxM2I2MmE2ZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzM1MTA4Mzc4LWY1ZWEtNDYwYi1i MDViLTUxZDEzYjYyYTZkYS8zNTEwODM3OC1mNWVhLTQ2MGItYjA1Yi01MWQxM2I2 MmE2ZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwgdgGCCsGAQUF BwEHAQH/BIHIMIHFMEQEAgABMD4DBATAACADBALHBBwDBADHBIowDAMEAMcHUQME AscHUAMEAccHXgMEAscrhAMEA8dbwAMEAcf9tgMEAtBNvDB9BAIAAjB3AwcAIAEF AAADAwcAIAEFAAARMBIDBwEgAQUAAIYDBwEgAQUAAIgDBwIgAQUAAIwDBwIgAQUA AJwDBwQmAggAkAADBwAmIAAAAtADBwAmIAAAIrADBwAmIAAAKDADBwAmIAAALtAD BwAmIAAALuADBwAmIAAPgAAwOAYIKwYBBQUHAQgBAf8EKTAnoCUwIwICQewCAk6w AgJb3gICZrswCAICaFYCAmhXAgJrbAIDAJ5QMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHR3zoNAt7I1BWtd voiJfHtZjeLLKbPNhrhFUjxqD5ZRdW9ekQIdgBvKrxYmiSGBF+KYlm/FTShCnx0P xpY6Z/V2I4x9ok7FHF6Ttb9LUTRbV5jTd5uJB6gi/hfPmV5DbT9iSEITYt2v90RO YJZsCb1ZRbzHh2wDwq6UEbag53d619dAEr+cBMduzrKmBT8muT063ubMr/6TV0cT kYsnHOsuM4X/6Xk/s+0+sXh1hJQVCw4BWBXHP9VGUpiQOyBCXZTM6itrZTI2FgI8 ZOptBV/rNzhF82BrhIDcZFryX72sPoyskIne59fS9nzmPnUHVAaKpHAJwoKIJ2O9 9hXvIOU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:16 2025 by rpki-client