$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102.cer File: caa8771d-81d7-474e-8d02-b2c215e51102.cer (raw, json) Hash identifier: 7RTOrRNCr88wdfCjl3JFs3mZZcN+O0BbIhWNgmlVkvA= Subject key identifier: 5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B943A994725BDB03C65C41680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Oct 2025 00:45:24 +0000 Certificate not after: Sun 23 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 33549 AS: 394369 IP: 64.25.108.0/23 IP: 64.191.44.0/23 IP: 104.37.148.0/22 IP: 135.84.136.0/22 IP: 202.170.192.0/22 IP: 2604:6440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:3a:99:47:25:bd:b0:3c:65:c4:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 20 00:45:24 2025 GMT Not After : Jan 23 01:45:24 2028 GMT Subject: CN=caa8771d-81d7-474e-8d02-b2c215e51102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:f6:77:93:24:5b:f1:04:59:ff:e5:40:57: 43:86:f9:13:e8:f0:62:17:2c:86:82:f8:f8:22:e0: c8:d3:3b:88:20:2e:fb:8b:54:77:c2:d3:8e:98:83: a1:78:a4:e0:de:f4:26:d5:e0:dd:bf:f6:a1:8c:f0: 95:46:3d:91:e2:6d:03:cd:c4:c5:f9:d6:ce:7c:47: e4:79:c7:a5:41:c3:07:6f:bf:60:17:9e:44:99:50: 8b:71:0a:1a:d6:3d:8f:ff:c4:b0:b4:d6:a3:95:18: 33:17:17:80:eb:ce:d6:75:f0:39:64:27:4b:40:47: c0:71:a9:58:2f:7a:5a:f2:1f:84:a6:7a:4f:97:e8: 5a:62:a2:81:f2:1f:cb:8b:c3:ac:dd:43:6a:61:61: 62:f8:44:37:2e:0e:c4:b1:d0:29:05:c8:63:a6:66: bc:c9:33:ae:df:e2:c2:44:13:d4:af:0d:c1:e7:9b: 05:c8:36:97:0f:23:e2:c3:05:4e:78:71:da:5b:26: 6b:1b:77:4f:e3:32:a1:bc:52:a7:42:bc:e4:65:25: 65:a7:34:51:ef:8e:e6:18:d9:4e:81:94:b0:45:d7: 30:36:18:37:fc:0a:49:d4:61:d3:b3:47:de:f0:b1: 0d:ea:9f:a5:9f:37:a7:05:51:34:af:1c:a8:51:c7: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FB:16:9E:5A:70:5B:F0:A1:A7:05:E3:5A:5A:09:07:AB:79:82:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caa8771d-81d7-474e-8d02-b2c215e51102/caa8771d-81d7-474e-8d02-b2c215e51102.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 64.25.108.0/23 64.191.44.0/23 104.37.148.0/22 135.84.136.0/22 202.170.192.0/22 IPv6: 2604:6440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33549 394369 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e5:9b:75:c5:7a:d4:07:51:31:3b:75:7f:f3:70:18:cc:f5: a2:6f:99:ad:66:2a:d7:7d:67:ee:6e:71:52:58:d3:64:5d:0f: 40:25:b7:c0:6f:ff:7c:ea:cb:1a:18:9d:b7:66:d0:4b:5b:48: 30:18:fa:84:5b:f5:f8:2d:d9:cc:8f:b5:12:e6:5f:23:5f:92: ad:50:c5:0f:91:77:1b:8a:9d:18:f2:06:a8:d7:4d:99:88:4e: ad:c6:1f:b1:9b:8d:8a:5c:ec:16:51:49:09:b4:8d:30:c4:6f: 56:42:99:97:2e:c2:21:0c:0a:ce:ca:4a:fb:f4:e8:cf:49:b4: bc:46:88:64:29:9d:c8:b0:39:ec:5d:90:dd:d7:94:73:30:dd: 19:b7:3f:29:57:dc:15:7d:c4:da:1f:b8:a4:cf:b1:9d:63:50: 1f:76:a1:88:92:48:1e:de:16:0c:90:14:17:b5:ac:6b:c3:5c: 11:6d:1c:72:00:af:e2:78:35:13:91:28:73:b0:7d:be:cd:ca: 92:bd:b4:75:57:33:82:d0:59:f7:bd:e5:33:a3:d3:d5:01:4f: 4a:ce:24:88:44:de:01:9c:63:7a:83:d8:6c:93:4e:ab:d4:2a: 34:cd:42:44:25:35:92:65:6a:9b:15:90:49:1c:51:ec:ee:d3: 61:8a:9a:66 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEuUOplHJb2wPGXEFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAyMDAwNDUyNFoXDTI4MDEyMzAxNDUyNFowLzEtMCsGA1UEAxMk Y2FhODc3MWQtODFkNy00NzRlLThkMDItYjJjMjE1ZTUxMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc32d5MkW/EEWf/lQFdDhvkT6PBiFyyGgvj4 IuDI0zuIIC77i1R3wtOOmIOheKTg3vQm1eDdv/ahjPCVRj2R4m0DzcTF+dbOfEfk ecelQcMHb79gF55EmVCLcQoa1j2P/8SwtNajlRgzFxeA687WdfA5ZCdLQEfAcalY L3pa8h+EpnpPl+haYqKB8h/Li8Os3UNqYWFi+EQ3Lg7EsdApBchjpma8yTOu3+LC RBPUrw3B55sFyDaXDyPiwwVOeHHaWyZrG3dP4zKhvFKnQrzkZSVlpzRR747mGNlO gZSwRdcwNhg3/ApJ1GHTs0fe8LEN6p+lnzenBVE0rxyoUcdU4wIDAQABo4IERzCC BEMwHQYDVR0OBBYEFFr7Fp5acFvwoacF41paCQereYJ7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9j YWE4NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMyMTVlNTExMDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2NhYTg3NzFkLTgxZDctNDc0ZS04 ZDAyLWIyYzIxNWU1MTEwMi9jYWE4NzcxZC04MWQ3LTQ3NGUtOGQwMi1iMmMyMTVl NTExMDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAFAGWwDBAFAvywDBAJoJZQDBAKHVIgDBALKqsAw DQQCAAIwBwMFACYEZEAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAIMNAgMGBIEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPOWbdcV61AdRMTt1f/NwGMz1om+ZrWYq131n7m5xUljTZF0PQCW3 wG//fOrLGhidt2bQS1tIMBj6hFv1+C3ZzI+1EuZfI1+SrVDFD5F3G4qdGPIGqNdN mYhOrcYfsZuNilzsFlFJCbSNMMRvVkKZly7CIQwKzspK+/Toz0m0vEaIZCmdyLA5 7F2Q3deUczDdGbc/KVfcFX3E2h+4pM+xnWNQH3ahiJJIHt4WDJAUF7Wsa8NcEW0c cgCv4ng1E5Eoc7B9vs3Kkr20dVczgtBZ973lM6PT1QFPSs4kiETeAZxjeoPYbJNO q9QqNM1CRCU1kmVqmxWQSRxR7O7TYYqaZg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:47 2025 by rpki-client