$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer File: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer (raw, json) Hash identifier: oDvJr2ogFjh1y9RNf9WI133JFoUePGb/QE9OdjiP83s= Subject key identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B7B1A6CF2E68C79A0DB459600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Oct 2025 00:45:22 +0000 Certificate not after: Fri 14 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 31746 IP: 66.132.168.0/22 IP: 66.132.176.0/22 IP: 216.150.6.0/23 IP: 2620:5d:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:1a:6c:f2:e6:8c:79:a0:db:45:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 11 00:45:22 2025 GMT Not After : Jan 14 01:45:22 2028 GMT Subject: CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:35:4d:eb:5c:96:cf:c0:6c:27:ef:a6:2a:b1: 9d:d9:73:d3:cb:fa:b0:59:8f:9d:18:71:43:d1:a3: 18:dd:12:09:6a:e7:46:02:8c:1d:7b:f6:94:87:f2: b9:57:7e:bf:ae:d5:5b:de:d1:6b:86:89:a3:06:e8: ca:91:50:72:1b:4a:78:ad:c0:c2:08:cc:59:17:ba: 54:b4:ac:d6:cc:05:0f:3c:0d:e1:ad:4b:9f:da:11: c7:2c:be:57:d2:92:e7:6e:e5:9b:0f:3e:05:d0:63: d4:1f:73:b3:8a:69:29:27:5e:ea:de:9c:ef:11:41: 65:27:7f:98:a8:c1:9e:1f:71:1d:ad:94:95:0e:c9: 98:64:f3:dd:ca:a0:b5:27:d7:c4:70:7c:de:ae:ed: 6c:28:b2:0a:db:06:42:7f:aa:67:d8:f1:f2:5c:52: 4d:9a:41:2c:dd:9a:e2:79:08:39:19:76:30:7b:23: ea:fb:4d:64:70:26:87:2c:76:e1:9e:b9:b6:dd:73: 57:0a:84:db:c5:95:51:53:0c:16:92:61:64:28:a3: 86:06:4f:b8:c3:d7:8f:6b:0d:42:a8:a7:59:a6:ef: 39:5a:5c:19:08:10:62:31:ba:5a:09:4c:02:0b:f8: 96:d6:da:61:c8:5c:9c:3d:3c:e2:67:7e:02:12:96: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 66.132.168.0/22 66.132.176.0/22 216.150.6.0/23 IPv6: 2620:5d:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31746 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7d:24:b8:d5:72:25:2a:fb:1e:35:76:eb:60:21:ed:bf:1e: 72:d3:bb:5e:fd:75:1e:16:d1:a5:97:4f:3f:91:60:0d:f8:d3: 2a:ae:0e:c4:4c:8b:9b:df:74:e4:a8:b2:6f:f2:30:70:6e:d0: a8:5f:11:81:ec:61:8d:97:bb:6b:c3:11:7b:a4:30:ea:14:23: 28:1c:e7:b5:9a:fe:55:06:32:4b:8a:7c:cd:5e:f8:3d:d1:fb: 2d:65:9b:59:27:20:ed:6d:9e:32:02:43:2f:ff:66:57:37:22: 9d:2c:1b:71:53:32:52:b0:f3:94:ae:5b:bc:ba:ee:93:6b:4d: 1d:bd:00:60:6c:31:48:4d:ca:16:39:1a:e8:d5:9f:4e:6c:f9: 0d:e2:7b:98:c3:e1:42:53:2c:9b:5e:a7:97:46:dc:86:85:f7: ac:4a:46:6f:54:dd:3f:ff:2d:c5:5f:21:8d:d9:38:c8:79:f0: bd:e8:1e:64:17:e9:46:81:4f:9c:b7:45:0d:d7:af:c0:ff:d8: 4d:85:9f:53:5c:35:a4:76:42:27:34:2b:d6:90:0d:45:bd:b2: a0:1e:4a:73:2f:89:8f:06:4f:33:ff:3a:85:16:01:ad:0f:a0: 76:85:c3:bd:e7:68:eb:3f:f6:3c:5f:ba:14:ab:16:a6:ea:d4: 02:b8:3f:b6 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEt7Gmzy5ox5oNtFlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAxMTAwNDUyMloXDTI4MDExNDAxNDUyMlowLzEtMCsGA1UEAxMk ODlmYTAxYWYtY2NhNS00ZDhmLTgwMDMtZjZjOWUyMjU3OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijVN61yWz8BsJ++mKrGd2XPTy/qwWY+dGHFD 0aMY3RIJaudGAowde/aUh/K5V36/rtVb3tFrhomjBujKkVByG0p4rcDCCMxZF7pU tKzWzAUPPA3hrUuf2hHHLL5X0pLnbuWbDz4F0GPUH3OzimkpJ17q3pzvEUFlJ3+Y qMGeH3EdrZSVDsmYZPPdyqC1J9fEcHzeru1sKLIK2wZCf6pn2PHyXFJNmkEs3Zri eQg5GXYweyPq+01kcCaHLHbhnrm23XNXCoTbxZVRUwwWkmFkKKOGBk+4w9ePaw1C qKdZpu85WlwZCBBiMbpaCUwCC/iW1tphyFycPTziZ34CEpbhmwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFMyrrvN7yEr3T7yu0KG85RVrJVtGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIyNTc4YjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzg5ZmEwMWFmLWNjYTUtNGQ4Zi04 MDAzLWY2YzllMjI1NzhiNC84OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIy NTc4YjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBAJChKgDBAJChLADBAHYlgYwDwQCAAIwCQMHACYg AF1AADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJ8AjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBfSS41XIl KvseNXbrYCHtvx5y07te/XUeFtGll08/kWAN+NMqrg7ETIub33TkqLJv8jBwbtCo XxGB7GGNl7trwxF7pDDqFCMoHOe1mv5VBjJLinzNXvg90fstZZtZJyDtbZ4yAkMv /2ZXNyKdLBtxUzJSsPOUrlu8uu6Ta00dvQBgbDFITcoWORro1Z9ObPkN4nuYw+FC UyybXqeXRtyGhfesSkZvVN0//y3FXyGN2TjIefC96B5kF+lGgU+ct0UN16/A/9hN hZ9TXDWkdkInNCvWkA1FvbKgHkpzL4mPBk8z/zqFFgGtD6B2hcO952jrP/Y8X7oU qxam6tQCuD+2 -----END CERTIFICATE-----Generated at Wed Nov 5 06:33:55 2025 by rpki-client