$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer File: 40163235-a725-497c-92e8-c077e46672e7.cer (raw, json) Hash identifier: tjTy1eB9BtqoV3a/1DuwCkBpzvaLmmfWixgzVMOSxPM= Subject key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584BBA0899A80CE78EEEE8F6D280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Nov 2025 13:45:23 +0000 Certificate not after: Sat 05 Feb 2028 13:45:23 +0000 Subordinate resources: AS: 400773 IP: 23.157.24.0/23 IP: 209.135.164.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:08:99:a8:0c:e7:8e:ee:e8:f6:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Nov 2 13:45:23 2025 GMT Not After : Feb 5 13:45:23 2028 GMT Subject: CN=40163235-a725-497c-92e8-c077e46672e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:f3:dd:a9:b1:64:a6:9d:7c:ec:78:31:82: 15:09:dd:11:6e:e3:b6:b7:e9:b1:b8:00:73:64:0a: 4a:54:44:8e:ac:f2:50:e1:74:b2:3d:2f:78:b4:b4: 3c:2a:aa:66:17:22:31:43:2d:92:5d:6d:59:b7:1e: ab:5d:37:d5:35:3b:fb:b3:6a:f6:2e:fe:54:53:36: 8e:1c:9d:4d:19:23:88:99:70:58:3d:02:0b:9f:78: f7:44:dc:d0:4e:84:f2:10:73:46:eb:71:21:ad:5e: 6c:03:d9:10:4a:b8:84:f6:39:96:fc:5d:d7:78:dc: 25:6b:a2:e1:ce:04:62:13:23:4a:ec:bb:a8:06:c4: b7:73:10:89:52:f9:4e:e4:34:52:35:e1:d6:6b:e6: 8a:ca:e0:8f:30:01:97:9b:78:f4:6e:a4:a3:79:e4: 12:dc:17:3e:f9:a4:50:b1:4b:fc:53:11:45:92:c4: 4f:1f:f8:bd:e1:49:f3:c1:9e:b3:b9:38:f9:c1:9d: 5e:3f:a2:9a:dd:fe:d4:54:0e:b3:94:99:da:c6:c5: ac:5d:d2:15:cd:62:42:3e:5f:84:e0:d4:83:fe:98: b3:cc:de:5f:a8:12:4a:de:88:d5:ad:4e:dc:9d:99: 83:f9:85:c3:9b:d1:d9:44:d2:47:a7:cf:45:09:e7: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.157.24.0/23 209.135.164.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400773 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:61:3c:ac:f5:48:41:7e:8a:c5:7a:a1:2c:c0:d9:f8:8c:f6: 59:ef:ff:61:33:e4:0d:dd:d5:8a:36:2f:0d:45:1f:b1:75:37: 14:c1:7d:a2:a1:a8:d5:77:d0:63:a1:77:4f:48:13:f3:2c:7e: c6:6b:ee:55:89:09:12:a8:a7:bc:60:24:2f:45:6f:c1:a1:86: a9:33:41:52:2c:76:a5:22:76:d7:e0:6f:0c:53:3f:45:74:97: 61:cd:6f:73:00:03:8b:d1:fc:33:f8:59:3c:9b:9f:e1:c7:3c: 3f:24:20:b8:3f:7f:ed:ea:5a:c9:35:c4:51:ff:9c:9f:0a:75: 14:a8:dd:25:ad:24:6b:8f:0f:0e:1b:b7:ac:aa:ec:17:b7:b9: 46:da:24:29:ec:c4:1e:e9:ed:ae:84:eb:bd:26:07:1e:68:04: 2a:22:6a:ef:44:eb:5f:f1:fb:37:9a:f1:55:cd:85:04:6f:4e: 03:20:a0:a0:09:49:98:8f:6d:a3:15:e3:29:81:c8:ae:d3:01: 86:99:77:84:22:f2:de:fc:97:91:73:6a:3e:9f:9a:09:d0:1f: 1d:8d:98:fc:e7:e6:dd:27:8e:56:2f:5a:62:92:16:71:26:5b: bb:b4:67:ef:f4:70:73:66:34:e3:2c:f6:aa:d2:1b:3a:f4:d8: a7:22:0f:2f -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEu6CJmoDOeO7uj20oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTEwMjEzNDUyM1oXDTI4MDIwNTEzNDUyM1owLzEtMCsGA1UEAxMk NDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMrz3amxZKadfOx4MYIVCd0RbuO2t+mxuABz ZApKVESOrPJQ4XSyPS94tLQ8KqpmFyIxQy2SXW1Ztx6rXTfVNTv7s2r2Lv5UUzaO HJ1NGSOImXBYPQILn3j3RNzQToTyEHNG63EhrV5sA9kQSriE9jmW/F3XeNwla6Lh zgRiEyNK7LuoBsS3cxCJUvlO5DRSNeHWa+aKyuCPMAGXm3j0bqSjeeQS3Bc++aRQ sUv8UxFFksRPH/i94UnzwZ6zuTj5wZ1eP6Ka3f7UVA6zlJnaxsWsXdIVzWJCPl+E 4NSD/pizzN5fqBJK3ojVrU7cnZmD+YXDm9HZRNJHp89FCeeXvwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFAmFIgWvrrkwrP5DLpJT7BEvszPPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzQwMTYzMjM1LWE3MjUtNDk3Yy05 MmU4LWMwNzdlNDY2NzJlNy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2 NjcyZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAEXnRgDBALRh6QwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBh2FMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJBhPKz1SEF+isV6oSzA2fiM9lnv/2Ez5A3d1Yo2 Lw1FH7F1NxTBfaKhqNV30GOhd09IE/MsfsZr7lWJCRKop7xgJC9Fb8GhhqkzQVIs dqUidtfgbwxTP0V0l2HNb3MAA4vR/DP4WTybn+HHPD8kILg/f+3qWsk1xFH/nJ8K dRSo3SWtJGuPDw4bt6yq7Be3uUbaJCnsxB7p7a6E670mBx5oBCoiau9E61/x+zea 8VXNhQRvTgMgoKAJSZiPbaMV4ymByK7TAYaZd4Qi8t78l5Fzaj6fmgnQHx2NmPzn 5t0njlYvWmKSFnEmW7u0Z+/0cHNmNOMs9qrSGzr02KciDy8= -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:23 2025 by rpki-client