$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer File: 9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer (raw, json) Hash identifier: m6iQFNZBv2T/xWkfqQ7KQiAbFmvk4PBmTOg5rY/w068= Subject key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A426DF0831C4ED72825F0BD10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Jun 2025 00:45:37 +0000 Certificate not after: Fri 24 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 13937 AS: 14918 AS: 19662 AS: 25749 AS: 40611 IP: 65.38.32.0/20 IP: 192.48.234.0/24 IP: 198.162.16.0/22 IP: 199.60.19.0/24 IP: 199.60.230.0/23 IP: 204.174.80.0 -- 204.174.99.255 IP: 204.239.40.0 -- 204.239.42.255 IP: 207.200.128.0/19 IP: 208.87.52.0/22 IP: 208.99.128.0/19 IP: 216.86.96.0/19 IP: 216.99.32.0/20 IP: 216.113.192.0/19 IP: 216.210.96.0/20 IP: 2605:1000::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:6d:f0:83:1c:4e:d7:28:25:f0:bd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jun 21 00:45:37 2025 GMT Not After : Sep 24 00:45:37 2027 GMT Subject: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:12:90:ea:e2:23:5a:69:95:c7:71:62:4f: 86:97:05:02:34:4c:88:08:f5:98:95:0a:d3:cf:1a: 05:1f:00:50:e9:a2:0b:d0:71:85:a8:38:35:14:4e: 93:7d:e0:af:bc:78:32:eb:f7:3b:65:a6:83:6f:a5: df:a9:fa:11:af:c1:e9:51:6e:25:cf:15:91:63:6e: 98:5f:6d:f7:a1:99:4d:2e:8d:d0:a1:af:94:37:a4: 4b:46:4a:bc:31:24:88:d7:dd:e4:55:02:af:68:6e: ba:1f:bc:7d:69:7c:19:22:3a:7f:51:a2:d2:dc:39: 7a:46:5e:1f:53:cc:03:00:f3:39:84:40:6c:6a:19: 18:95:8b:d3:6a:92:ed:bb:a2:c0:40:63:b2:bd:db: 47:b5:93:43:ec:2b:84:03:a1:f2:4b:e0:f0:10:b4: 57:7e:74:1d:57:97:47:54:91:6a:d4:15:2f:1f:a0: c7:35:20:aa:66:a1:1d:1f:8c:db:bd:20:34:76:da: 25:b4:a0:c9:9d:31:ec:56:e5:6d:a1:7b:5b:4e:53: 2f:b7:df:f4:5f:f9:f2:89:e7:d8:b2:d3:aa:b4:2a: a1:d2:45:9f:09:84:07:f1:e5:65:fb:2e:6d:11:2b: 5c:7f:b9:1e:df:90:64:f9:69:51:76:dd:78:6d:02: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 65.38.32.0/20 192.48.234.0/24 198.162.16.0/22 199.60.19.0/24 199.60.230.0/23 204.174.80.0-204.174.99.255 204.239.40.0-204.239.42.255 207.200.128.0/19 208.87.52.0/22 208.99.128.0/19 216.86.96.0/19 216.99.32.0/20 216.113.192.0/19 216.210.96.0/20 IPv6: 2605:1000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13937 14918 19662 25749 40611 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c0:e8:32:a5:32:9c:5a:a2:12:7b:5b:d1:60:3e:9e:10:46: 0e:7e:46:cb:eb:11:7e:cd:83:c2:6c:54:76:ce:cc:f6:98:9b: 05:c1:10:2b:7c:ec:6a:29:ef:ba:29:5b:5d:ae:ca:82:be:07: e2:d7:b0:de:15:7f:e7:3e:78:33:b7:b0:41:df:45:51:c2:f9: 2b:3c:42:82:d3:6a:33:fc:44:cf:95:d4:e4:d0:14:65:d7:20: b2:5e:ea:34:fe:d7:bb:4f:0b:ea:6d:68:ed:90:81:b8:01:af: 50:bc:54:61:a1:d3:7b:06:6c:dd:02:dd:82:de:da:1f:07:18: 80:bd:a3:6a:68:5e:45:b2:13:4e:80:d0:eb:20:b2:8c:3d:e1: e0:f2:62:89:57:ca:c0:3e:8f:97:84:0d:28:e4:b2:46:a6:b6: 5c:05:86:8a:ed:a6:6c:5d:5f:14:06:b2:f1:f7:f4:4b:13:5a: be:55:dd:d9:3f:5c:3f:ca:9a:46:6b:f3:81:67:b8:58:3c:bc: 5a:a5:5b:f3:69:86:61:a1:9b:84:b3:07:06:a7:6a:46:a3:f5: 62:a5:f1:0e:48:55:88:15:3c:d6:6e:3a:b5:e7:d0:77:72:54: ec:fa:8d:48:40:b7:38:0e:c9:6b:f0:87:94:6f:6d:f6:2a:f4: 10:e1:f5:2d -----BEGIN CERTIFICATE----- MIIHhzCCBm+gAwIBAgIUAQ0Mn0MoWEpCbfCDHE7XKCXwvRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDYyMTAwNDUzN1oXDTI3MDkyNDAwNDUzN1owLzEtMCsGA1UEAxMk OTMwOTQ5OGUtOGJlZS00ZGIzLWI0ZWYtNWZkNmYzNTc2ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoYSkOriI1pplcdxYk+GlwUCNEyICPWYlQrT zxoFHwBQ6aIL0HGFqDg1FE6TfeCvvHgy6/c7ZaaDb6XfqfoRr8HpUW4lzxWRY26Y X233oZlNLo3Qoa+UN6RLRkq8MSSI193kVQKvaG66H7x9aXwZIjp/UaLS3Dl6Rl4f U8wDAPM5hEBsahkYlYvTapLtu6LAQGOyvdtHtZND7CuEA6HyS+DwELRXfnQdV5dH VJFq1BUvH6DHNSCqZqEdH4zbvSA0dtoltKDJnTHsVuVtoXtbTlMvt9/0X/nyiefY stOqtCqh0kWfCYQH8eVl+y5tEStcf7ke35Bk+WlRdt14bQLdhwIDAQABo4IEmTCC BJUwHQYDVR0OBBYEFBehLC/T4+o755/9OGXv+TWl2GGpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85 MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1NzZlYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzkzMDk0OThlLThiZWUtNGRiMy1i NGVmLTVmZDZmMzU3NmViMy85MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1 NzZlYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwgYwGCCsGAQUF BwEHAQH/BH0wezBqBAIAATBkAwQEQSYgAwQAwDDqAwQCxqIQAwQAxzwTAwQBxzzm MAwDBATMrlADBALMrmAwDAMEA8zvKAMEAMzvKgMEBc/IgAMEAtBXNAMEBdBjgAME BdhWYAMEBNhjIAMEBdhxwAMEBNjSYDANBAIAAjAHAwUAJgUQADAqBggrBgEFBQcB CAEB/wQbMBmgFzAVAgI2cQICOkYCAkzOAgJklQIDAJ6jMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGnA6DKl MpxaohJ7W9FgPp4QRg5+RsvrEX7Ng8JsVHbOzPaYmwXBECt87Gop77opW12uyoK+ B+LXsN4Vf+c+eDO3sEHfRVHC+Ss8QoLTajP8RM+V1OTQFGXXILJe6jT+17tPC+pt aO2QgbgBr1C8VGGh03sGbN0C3YLe2h8HGIC9o2poXkWyE06A0Osgsow94eDyYolX ysA+j5eEDSjkskamtlwFhortpmxdXxQGsvH39EsTWr5V3dk/XD/KmkZr84FnuFg8 vFqlW/NphmGhm4SzBwanakaj9WKl8Q5IVYgVPNZuOrXn0HdyVOz6jUhAtzgOyWvw h5RvbfYq9BDh9S0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:50 2025 by rpki-client