$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer File: 08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer (raw, json) Hash identifier: 6ERt3emLR/1bW+XCJVqeb8YMgGHtlv9fy45IQ9fooD8= Subject key identifier: 0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B13CF2307AD50972690461500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Sep 2025 00:45:24 +0000 Certificate not after: Wed 08 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 394428 IP: 74.80.246.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:cf:23:07:ad:50:97:26:90:46:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 4 00:45:24 2025 GMT Not After : Dec 8 01:45:24 2027 GMT Subject: CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:32:4b:46:23:ba:bd:29:e6:09:11:40:d0: a7:60:9b:f0:22:fe:96:6f:4d:20:94:6c:32:18:df: 1b:79:35:e2:a0:11:8c:6d:0b:53:a7:4c:e0:ed:25: fe:74:ac:1f:22:e0:71:d1:b9:6b:b7:a6:c4:6d:bb: ec:85:c9:d0:62:ef:db:6b:ce:87:6f:e4:59:88:92: fe:09:7a:bb:b2:ad:4f:de:12:a0:af:8e:41:a1:e9: 92:54:65:96:99:7f:9d:66:c8:b6:6b:57:f2:27:ca: a1:e2:99:c6:ab:02:7b:a2:58:c2:c8:fb:07:d0:d5: f8:bf:6e:90:e9:24:31:87:e2:f0:90:d4:1a:b7:4e: 43:8e:12:c5:46:fd:71:de:61:d8:70:ac:bb:aa:c9: 7e:e2:5f:5a:12:90:71:7e:d6:e6:fc:f9:32:96:9d: 2c:ac:61:03:21:8e:95:ab:4f:f3:c0:61:c8:07:a9: ca:a7:d6:f8:2f:2e:cb:6f:ed:90:33:fc:a7:62:04: 14:af:41:e7:f1:39:bf:9e:ab:66:94:83:3f:4c:f9: d3:af:35:3d:c7:e0:47:6f:c7:14:86:bd:a8:80:e9: ea:ed:8d:2b:75:ab:29:7b:e2:f3:4c:77:12:4d:7b: 70:78:e0:64:78:7a:3c:d3:ad:80:a1:65:2d:1b:e3: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 74.80.246.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394428 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5d:aa:f5:aa:3e:76:58:2f:dc:59:e8:0a:71:87:58:58:71: bf:78:c2:15:f2:b4:90:f5:8f:6e:1a:80:9d:1c:d2:f1:f6:9d: 08:21:6d:8a:4a:ad:69:07:25:66:8b:b3:43:dd:8b:16:94:5f: ee:76:7d:31:c0:05:57:44:92:13:09:7d:1a:e1:fe:f1:ff:26: 6b:72:64:0d:a6:8f:6e:21:33:ed:f9:bb:3f:ca:2a:6f:19:26: 96:5f:bc:f9:b8:bc:7a:44:00:73:b3:e8:a6:7b:ff:5a:91:87: 33:4c:39:4f:1c:44:ca:7f:04:07:e8:22:7c:fd:d8:94:5b:6f: 48:86:19:e2:21:45:d9:36:39:6a:e7:f1:f5:48:92:db:1a:24: be:28:b5:b1:f1:bd:fe:a7:04:79:04:77:56:a5:f4:9b:df:e9: 02:a7:e3:6b:81:cb:29:d6:fb:75:ea:81:db:07:62:b5:6b:08: a1:8b:2b:23:77:d8:22:24:e4:e6:60:43:b6:1e:c3:49:59:a7: 28:3b:a3:73:6c:e6:1e:84:b0:84:1a:f7:bd:80:f2:1c:fb:dc: b5:05:82:bf:26:0b:39:dc:fc:2e:0e:fd:93:52:a2:40:f5:27: b9:f5:1d:81:3c:54:1c:e8:8d:6a:d5:24:4d:65:64:67:ec:64: 6a:2e:d2:58 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsTzyMHrVCXJpBGFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDkwNDAwNDUyNFoXDTI3MTIwODAxNDUyNFowLzEtMCsGA1UEAxMk MDhjNDI0YWItMjBjMy00YTUyLWJiYTItMWNjZGRlZWUyZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uwyS0Yjur0p5gkRQNCnYJvwIv6Wb00glGwy GN8beTXioBGMbQtTp0zg7SX+dKwfIuBx0blrt6bEbbvshcnQYu/ba86Hb+RZiJL+ CXq7sq1P3hKgr45BoemSVGWWmX+dZsi2a1fyJ8qh4pnGqwJ7oljCyPsH0NX4v26Q 6SQxh+LwkNQat05DjhLFRv1x3mHYcKy7qsl+4l9aEpBxftbm/Pkylp0srGEDIY6V q0/zwGHIB6nKp9b4Ly7Lb+2QM/ynYgQUr0Hn8Tm/nqtmlIM/TPnTrzU9x+BHb8cU hr2ogOnq7Y0rdaspe+LzTHcSTXtweOBkeHo8062AoWUtG+ODSwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAzKwqwb+LcE5tKFN7dVMkvn3OgNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w OGM0MjRhYi0yMGMzLTRhNTItYmJhMi0xY2NkZGVlZTJlMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzA4YzQyNGFiLTIwYzMtNGE1Mi1i YmEyLTFjY2RkZWVlMmUzNC8wOGM0MjRhYi0yMGMzLTRhNTItYmJhMi0xY2NkZGVl ZTJlMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFKUPYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgS8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACBdqvWqPnZYL9xZ6Apxh1hYcb94whXytJD1j24agJ0c0vH2 nQghbYpKrWkHJWaLs0PdixaUX+52fTHABVdEkhMJfRrh/vH/JmtyZA2mj24hM+35 uz/KKm8ZJpZfvPm4vHpEAHOz6KZ7/1qRhzNMOU8cRMp/BAfoInz92JRbb0iGGeIh Rdk2OWrn8fVIktsaJL4otbHxvf6nBHkEd1al9Jvf6QKn42uByynW+3XqgdsHYrVr CKGLKyN32CIk5OZgQ7Yew0lZpyg7o3Ns5h6EsIQa972A8hz73LUFgr8mCznc/C4O /ZNSokD1J7n1HYE8VBzojWrVJE1lZGfsZGou0lg= -----END CERTIFICATE-----Generated at Fri Oct 10 17:55:52 2025 by rpki-client