$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer File: 61e7cca0-e65d-417d-a651-371c91be9c95.cer (raw, json) Hash identifier: fNUP3y4Nk+JQe/qUbMhcTrlfRute5PtjHnNQYE4ljjY= Subject key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A6C4E319134003CF0632CE4A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Jul 2025 00:45:36 +0000 Certificate not after: Sat 09 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 1448 IP: 156.146.128.0/17 IP: 158.41.128.0/17 IP: 158.51.140.0/22 IP: 2605:9840::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:4e:31:91:34:00:3c:f0:63:2c:e4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jul 6 00:45:36 2025 GMT Not After : Oct 9 00:45:36 2027 GMT Subject: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:69:ee:6f:2f:f8:53:76:34:7b:fc:97:f1: fc:95:0a:30:86:a0:d4:59:43:c4:bb:3d:51:1c:6a: 9f:c0:92:01:05:4b:4d:87:66:00:04:87:e8:5a:1a: 33:4f:d4:6c:3b:dd:ef:f6:c2:08:66:7c:ef:dc:a1: e3:0d:64:8e:e1:46:fe:33:c7:ac:e5:9f:87:6a:57: db:a6:6e:cd:fa:d6:5e:e1:6f:9a:28:fb:00:5c:da: 2f:77:f0:6a:fe:b0:00:2d:7a:a8:d3:8d:f6:6c:82: bb:fa:36:45:29:48:82:fa:90:4f:27:2d:f1:88:34: 9c:64:ae:11:24:d1:21:35:6c:3a:85:54:3f:8b:f7: 6d:17:db:a0:62:f5:09:6e:8b:5f:e6:a7:c0:8f:b1: 60:d9:a3:27:0b:fd:a7:2c:ef:2a:a7:fd:27:6e:30: cb:89:66:9c:a2:be:d9:1e:fc:16:e4:3a:f5:d6:43: 27:0e:6a:c1:2d:63:34:0f:0e:41:49:5e:6a:cf:d1: a4:ad:c9:77:01:8d:1b:11:65:30:64:52:f8:1d:1b: 54:a8:04:85:b3:e5:73:1f:bb:f9:69:dd:b8:35:7e: 86:14:4d:c7:2b:ac:1a:a8:77:4f:bf:1d:e0:68:4b: 91:66:ee:0d:ce:d5:37:4a:7f:da:ee:2a:0e:df:11: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 158.51.140.0/22 IPv6: 2605:9840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1448 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f5:10:4d:b1:a6:5e:b3:69:ce:c3:6e:4a:3f:a4:52:b6:8d: a2:24:2e:9f:4c:6e:78:af:39:dc:9d:3e:3c:11:f9:e2:b6:4a: 44:4b:c4:6b:d3:9f:17:7d:b7:dd:fc:c8:c8:08:b3:d9:2a:81: 33:98:ff:1e:4f:bf:6f:eb:4c:01:dd:7e:c7:f8:10:2e:8d:91: eb:61:92:da:a2:79:19:09:88:c5:53:e6:f7:86:b4:fd:a7:7e: 5a:2c:6e:83:0c:5a:3a:70:b9:3a:a3:84:23:6b:b6:ea:90:eb: 8e:ba:a0:f0:6b:72:c6:67:53:5e:d6:65:37:3a:a3:ae:c6:b1: 6b:87:f8:48:5f:6a:77:fd:05:73:4f:2a:f5:dc:d7:79:bd:a4: ed:84:8d:b8:4b:56:ef:47:a7:4f:d0:d6:19:b8:56:72:54:49: e7:5b:6b:65:bc:15:e2:3b:80:b8:27:fb:cb:e9:9f:4e:29:8c: 84:d2:af:63:ed:1a:47:a6:04:09:9c:5b:03:aa:b8:e6:75:b7: ed:97:8e:1a:a9:ef:da:47:1d:f3:89:4e:db:f5:c2:b3:27:59: 19:5d:ce:76:68:8b:4d:2d:9e:a1:cb:b6:92:26:c7:56:a4:c4: 8d:2b:9e:1d:11:0f:fe:8e:75:82:74:23:31:bb:ba:37:6c:0b: 3b:27:db:e4 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEpsTjGRNAA88GMs5KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDcwNjAwNDUzNloXDTI3MTAwOTAwNDUzNlowLzEtMCsGA1UEAxMk NjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcpp7m8v+FN2NHv8l/H8lQowhqDUWUPEuz1R HGqfwJIBBUtNh2YABIfoWhozT9RsO93v9sIIZnzv3KHjDWSO4Ub+M8es5Z+Halfb pm7N+tZe4W+aKPsAXNovd/Bq/rAALXqo0432bIK7+jZFKUiC+pBPJy3xiDScZK4R JNEhNWw6hVQ/i/dtF9ugYvUJbotf5qfAj7Fg2aMnC/2nLO8qp/0nbjDLiWacor7Z HvwW5Dr11kMnDmrBLWM0Dw5BSV5qz9Gkrcl3AY0bEWUwZFL4HRtUqASFs+VzH7v5 ad24NX6GFE3HK6waqHdPvx3gaEuRZu4NztU3Sn/a7ioO3xHDLQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFGSin7ASo3TyCeIDjuvixtNjJFchMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82 MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzYxZTdjY2EwLWU2NWQtNDE3ZC1h NjUxLTM3MWM5MWJlOWM5NS82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFi ZTljOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAeckoADBAeeKYADBAKeM4wwDQQCAAIwBwMFACYF mEAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICBagwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhPUQTbGmXrNp zsNuSj+kUraNoiQun0xueK853J0+PBH54rZKREvEa9OfF3233fzIyAiz2SqBM5j/ Hk+/b+tMAd1+x/gQLo2R62GS2qJ5GQmIxVPm94a0/ad+WixugwxaOnC5OqOEI2u2 6pDrjrqg8GtyxmdTXtZlNzqjrsaxa4f4SF9qd/0Fc08q9dzXeb2k7YSNuEtW70en T9DWGbhWclRJ51trZbwV4juAuCf7y+mfTimMhNKvY+0aR6YECZxbA6q45nW37ZeO Gqnv2kcd84lO2/XCsydZGV3OdmiLTS2eocu2kibHVqTEjSueHREP/o51gnQjMbu6 N2wLOyfb5A== -----END CERTIFICATE-----Generated at Wed Nov 5 05:07:20 2025 by rpki-client