$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer File: 4df6cec2-94eb-4439-960f-00719026d770.cer (raw, json) Hash identifier: 934Kvh0vGPMDZpC+4dZFuMntxlxZvYt2tp0j8HoOT60= Subject key identifier: C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B75851060B695C2D3597CAEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 00:45:23 +0000 Certificate not after: Wed 12 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 400768 IP: 64.28.43.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:85:10:60:b6:95:c2:d3:59:7c:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 9 00:45:23 2025 GMT Not After : Jan 12 01:45:23 2028 GMT Subject: CN=4df6cec2-94eb-4439-960f-00719026d770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b0:ce:7c:fd:fd:5e:1f:04:ac:a1:0e:86:12: 9c:ae:ed:e9:e5:f0:6d:0a:e7:a2:8e:86:86:68:37: ed:4d:32:94:d9:ce:25:e1:c7:0f:04:7d:e5:17:6e: 59:0b:17:f0:43:cb:cc:3a:af:bc:f0:c0:9c:c0:c0: 8e:0e:76:22:aa:88:51:bd:a0:7c:da:56:db:58:5a: 59:e1:1e:c8:f3:76:5f:d6:eb:90:85:26:f8:ea:77: 8a:20:54:72:5e:b3:8b:2c:f8:f0:ed:a2:40:40:62: 84:2b:f7:86:b5:ec:51:eb:18:8a:c4:00:16:46:6a: a9:ca:bb:1b:e3:5c:d6:e8:57:87:e3:90:76:e5:bd: 83:36:aa:d0:9c:f5:d3:33:96:ad:2f:53:2c:c3:47: 4c:a7:ad:27:8f:dc:69:aa:5b:d1:c3:40:23:44:9b: d2:4d:24:57:2f:ad:6e:5f:6e:4e:5f:94:ec:2d:9a: 4f:7c:b5:21:15:42:f6:ef:2f:45:9f:20:69:e8:ca: 22:6e:94:a8:b8:42:38:4d:d2:3e:8e:5a:b3:cc:f2: d3:d8:1e:f1:e2:f5:eb:37:fe:56:7f:a7:01:fd:49: 52:b0:0b:d1:fe:46:ba:28:75:80:a2:c5:ef:f0:22: 55:a8:4d:a6:46:ac:7b:73:38:71:37:43:da:ca:f0: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 64.28.43.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400768 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8a:0a:b4:00:ee:19:dc:e9:ba:4b:e6:f4:8a:66:ba:45:c9: 97:1d:54:cd:66:5e:8f:38:8b:8f:51:74:28:73:42:bf:79:21: 11:72:55:4d:66:9c:49:10:df:2c:de:3e:89:a9:99:23:6a:16: e6:76:e8:23:d4:4f:19:11:14:d8:9d:55:0e:2a:67:af:96:ba: d4:54:3c:38:be:1a:ac:7f:fb:77:1a:c1:54:93:57:6a:75:a8: 87:ad:84:3e:b2:ea:e2:00:29:7e:6b:f4:6a:38:75:b7:b1:ec: d0:48:07:f3:c9:8c:2e:43:fa:e1:3b:89:80:17:de:73:3e:64: 15:e9:e9:6f:69:3d:23:da:89:e3:b6:8b:77:ff:90:ac:92:ff: 4c:5d:54:81:be:a9:57:40:d5:38:91:72:08:68:29:57:36:d8: 2f:f3:d2:47:db:e3:38:b3:6c:b9:1a:ba:f6:ad:f0:00:3d:d6: b4:e5:06:3a:10:39:ef:10:6f:a2:51:d2:60:7f:44:d5:a0:e1: 28:63:14:24:89:04:1a:16:bb:33:d4:c0:b7:4d:5b:90:1c:7d: 1b:cf:b3:11:74:72:39:4a:2b:21:2e:a1:1b:b9:4c:d2:f3:7a: a3:6f:d0:7f:a4:75:c6:2d:f1:ae:a3:be:3a:2a:a7:bd:2e:67: e2:29:6b:df -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEt1hRBgtpXC01l8rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAwOTAwNDUyM1oXDTI4MDExMjAxNDUyM1owLzEtMCsGA1UEAxMk NGRmNmNlYzItOTRlYi00NDM5LTk2MGYtMDA3MTkwMjZkNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7DOfP39Xh8ErKEOhhKcru3p5fBtCueijoaG aDftTTKU2c4l4ccPBH3lF25ZCxfwQ8vMOq+88MCcwMCODnYiqohRvaB82lbbWFpZ 4R7I83Zf1uuQhSb46neKIFRyXrOLLPjw7aJAQGKEK/eGtexR6xiKxAAWRmqpyrsb 41zW6FeH45B25b2DNqrQnPXTM5atL1Msw0dMp60nj9xpqlvRw0AjRJvSTSRXL61u X25OX5TsLZpPfLUhFUL27y9FnyBp6MoibpSouEI4TdI+jlqzzPLT2B7x4vXrN/5W f6cB/UlSsAvR/ka6KHWAosXv8CJVqE2mRqx7czhxN0PayvAacwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMedLCF2uQUOWTUXL8hx+snqAbQ0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 ZGY2Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcxOTAyNmQ3NzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzRkZjZjZWMyLTk0ZWItNDQzOS05 NjBmLTAwNzE5MDI2ZDc3MC80ZGY2Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcxOTAy NmQ3NzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABAHCswGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFKKCrQA7hnc6bpL5vSKZrpFyZcdVM1mXo84i49RdChzQr95 IRFyVU1mnEkQ3yzePompmSNqFuZ26CPUTxkRFNidVQ4qZ6+WutRUPDi+Gqx/+3ca wVSTV2p1qIethD6y6uIAKX5r9Go4dbex7NBIB/PJjC5D+uE7iYAX3nM+ZBXp6W9p PSPaieO2i3f/kKyS/0xdVIG+qVdA1TiRcghoKVc22C/z0kfb4zizbLkauvat8AA9 1rTlBjoQOe8Qb6JR0mB/RNWg4ShjFCSJBBoWuzPUwLdNW5AcfRvPsxF0cjlKKyEu oRu5TNLzeqNv0H+kdcYt8a6jvjoqp70uZ+Ipa98= -----END CERTIFICATE-----Generated at Fri Oct 10 20:03:23 2025 by rpki-client