$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer File: 52a20e5a-3a5d-4417-92d7-250e134c6d09.cer (raw, json) Hash identifier: UXE0yl5+KC6N2xa6RrkpND41FJUZcsA7tpDXA6fcSKw= Subject key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B7A94663AC2AD915664061938 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 20:15:19 +0000 Certificate not after: Sun 21 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 35860 IP: 63.133.208.0/22 IP: 74.119.52.0/22 IP: 142.248.40.0/22 IP: 192.149.254.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:94:66:3a:c2:ad:91:56:64:06:19:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 10 20:15:19 2025 GMT Not After : Nov 21 01:45:25 2027 GMT Subject: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:25:5e:53:38:06:24:c8:8d:30:f5:59:be: 20:05:68:7b:a2:21:00:6a:d9:6e:c1:d9:20:f4:73: 21:eb:f8:eb:84:f0:12:f9:4e:67:7c:8d:e6:e8:4a: 13:96:67:34:11:6d:eb:60:54:58:96:4d:07:44:95: 71:52:43:b0:9c:e0:f8:74:95:31:84:54:37:05:b6: fd:dd:f9:60:f9:9c:59:45:ab:3f:9f:9f:d2:44:7e: e7:04:4b:c2:94:56:04:91:f9:95:26:8e:17:16:ba: 40:b9:f9:b2:6d:e0:0d:00:a5:92:d3:19:2c:86:75: b7:65:0c:aa:33:61:78:5c:fe:35:e2:8b:cb:c8:2f: 8c:5f:6d:8e:32:9f:3c:40:0f:e6:1c:53:3e:c3:90: a4:ae:6d:64:83:d7:47:f0:27:3c:d4:c1:98:c5:af: 2d:c0:cf:7b:40:59:62:14:54:50:2c:b5:aa:82:2d: 21:4a:ce:57:06:f0:73:6c:5f:e3:da:74:78:e5:5c: c6:75:b7:3f:20:ac:03:12:f1:85:b9:c6:a1:65:82: 0c:63:fd:be:6e:d0:cd:ee:ea:c1:f4:27:ae:dd:2b: 7c:cc:7a:4c:fe:02:32:e7:69:59:c6:d8:2f:2a:c8: 0e:5f:65:a2:1b:a8:09:5c:c3:59:dc:bf:21:5c:65: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/22 74.119.52.0/22 142.248.40.0/22 192.149.254.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35860 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a3:6b:dc:ee:cd:c2:a3:2a:9d:3a:69:94:0f:6b:9b:1c:df: 44:09:ef:62:50:25:d7:ef:29:1e:37:0d:b8:21:a0:0e:53:dc: c8:2b:a4:80:0c:e1:20:82:26:86:5f:60:1a:ee:ea:d4:b6:e9: c0:ac:c6:e8:1d:b8:25:1e:82:50:25:2b:b8:cb:6b:8a:56:66: a9:1b:6c:73:b4:ce:85:05:07:f6:ad:36:6d:13:66:31:df:0a: fa:d6:d4:f4:13:31:a4:bf:0d:c7:17:4a:e3:4e:58:68:f0:d2: 04:7b:ba:1f:1b:e1:0d:6a:42:c1:82:91:d0:15:6b:dc:f6:c8: 5d:f4:5f:2b:9f:df:07:66:d5:c5:0b:7d:e6:47:58:75:c8:b1: b6:77:20:f9:3c:b5:e1:c8:96:2b:58:50:d7:e5:e3:af:a0:38: 4b:1d:b9:a5:a0:25:7e:3b:68:49:69:e5:af:96:3e:2c:0f:80: f2:84:1f:29:a9:09:00:79:45:80:b1:37:01:db:15:19:c5:a0: bc:ea:36:b2:49:0a:8e:9b:85:b4:3e:24:c6:70:6d:3b:8c:bb: 75:3e:d9:36:c4:1c:fb:a4:ac:24:e8:ca:98:1a:97:ee:19:5c: b6:ce:2f:e1:66:a1:69:7f:6e:aa:e9:02:a5:3c:bb:e3:d6:15: cd:5d:4b:0d -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEt6lGY6wq2RVmQGGTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAxMDIwMTUxOVoXDTI3MTEyMTAxNDUyNVowLzEtMCsGA1UEAxMk NTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL4lXlM4BiTIjTD1Wb4gBWh7oiEAatluwdkg 9HMh6/jrhPAS+U5nfI3m6EoTlmc0EW3rYFRYlk0HRJVxUkOwnOD4dJUxhFQ3Bbb9 3flg+ZxZRas/n5/SRH7nBEvClFYEkfmVJo4XFrpAufmybeANAKWS0xkshnW3ZQyq M2F4XP414ovLyC+MX22OMp88QA/mHFM+w5Ckrm1kg9dH8Cc81MGYxa8twM97QFli FFRQLLWqgi0hSs5XBvBzbF/j2nR45VzGdbc/IKwDEvGFucahZYIMY/2+btDN7urB 9Ceu3St8zHpM/gIy52lZxtgvKsgOX2WiG6gJXMNZ3L8hXGUX4wIDAQABo4IELTCC BCkwHQYDVR0OBBYEFBykVGiXzO3sxoad8DTU1/qXMGJwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzUyYTIwZTVhLTNhNWQtNDQxNy05 MmQ3LTI1MGUxMzRjNmQwOS81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0 YzZkMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAI/hdADBAJKdzQDBAKO+CgDBAHAlf4wGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAIwUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADmja9zuzcKjKp06aZQPa5sc 30QJ72JQJdfvKR43DbghoA5T3MgrpIAM4SCCJoZfYBru6tS26cCsxugduCUeglAl K7jLa4pWZqkbbHO0zoUFB/atNm0TZjHfCvrW1PQTMaS/DccXSuNOWGjw0gR7uh8b 4Q1qQsGCkdAVa9z2yF30Xyuf3wdm1cULfeZHWHXIsbZ3IPk8teHIlitYUNfl46+g OEsduaWgJX47aElp5a+WPiwPgPKEHympCQB5RYCxNwHbFRnFoLzqNrJJCo6bhbQ+ JMZwbTuMu3U+2TbEHPukrCToypgal+4ZXLbOL+FmoWl/bqrpAqU8u+PWFc1dSw0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:38 2025 by rpki-client