$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer File: 5157764b-7b30-4f19-a9ca-30a5dfefa332.cer (raw, json) Hash identifier: grxgNQ6bOIPS1RNXZ5TB7Cra85cSfGLn7d21v0DhbWY= Subject key identifier: BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B1EF9DE1354D1FF28B60DC000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 00:45:24 +0000 Certificate not after: Sun 12 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 401134 IP: 23.136.68.0/24 IP: 2602:f8c7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1e:f9:de:13:54:d1:ff:28:b6:0d:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 8 00:45:24 2025 GMT Not After : Dec 12 01:45:24 2027 GMT Subject: CN=5157764b-7b30-4f19-a9ca-30a5dfefa332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:0f:8c:8c:69:de:26:6d:eb:a0:fe:2b:74: 18:3a:72:0b:a7:c0:16:0c:bc:06:77:ce:15:78:d1: 26:40:dc:a1:39:41:c3:61:3b:53:5b:f5:40:11:50: f9:1a:a4:e9:12:e8:39:c5:f9:ea:e9:e2:cd:d7:c4: 82:5a:db:66:01:81:4f:32:2f:f0:fd:a0:1d:c9:98: 54:02:b1:5b:bf:d5:3e:1a:b0:76:83:43:6a:23:90: db:55:74:ad:86:23:10:52:2c:04:95:7d:b8:57:23: b4:d7:34:56:91:8e:fe:ae:30:bd:0e:6c:63:ac:70: 6b:a6:d7:30:ae:d9:22:a6:07:7d:89:54:1e:7a:a3: 92:a3:d8:21:99:6a:14:2d:f1:6a:d0:ef:0e:eb:6b: 08:73:53:84:df:72:e6:86:3e:80:af:cc:32:ab:e2: 58:ac:7b:93:4d:38:60:b1:2c:4c:85:eb:1f:17:c9: dc:26:e8:68:91:72:28:58:db:66:a2:c3:81:9b:a5: 17:f0:1e:07:ec:ef:5e:20:5e:a2:3a:5f:44:36:ab: e0:a4:c2:af:62:59:6d:ce:e8:e9:1c:33:0b:c2:d1: f7:cb:18:77:19:b2:cc:d8:d4:a9:b4:3f:47:4a:ee: e3:8f:c1:17:ee:8a:b9:dd:d1:7a:03:fc:79:ed:65: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.136.68.0/24 IPv6: 2602:f8c7::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401134 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8c:95:f5:f2:37:99:4c:57:97:05:19:07:67:87:27:ca:1e: cc:07:1f:8c:ac:f2:02:27:09:94:e7:8a:a8:f2:96:6b:08:8a: e4:29:0c:6f:97:01:d1:d7:1c:62:5a:8e:0e:9d:43:5b:b4:62: 90:2d:0c:18:b5:39:ba:44:0e:7c:ee:e3:e7:32:dc:c6:f6:bb: ea:32:a8:5e:b4:24:2d:b3:4e:93:d1:4e:37:42:08:8d:28:8b: 4f:9c:fc:ae:3c:7e:55:31:7f:00:51:3b:1b:19:8b:3e:5e:bd: 20:29:ea:19:33:33:80:25:69:52:5a:1f:18:8c:58:6e:e7:c0: 4c:e3:5c:78:81:4b:c5:7d:41:d7:a4:7e:90:3b:4e:dd:c4:4d: 1a:6e:a3:08:27:3f:67:ac:58:d3:f3:21:08:b2:c0:db:77:a6: 79:bd:96:b9:ee:e5:66:47:96:a6:f7:1f:03:27:7f:bd:43:df: cf:26:f0:3d:35:54:53:85:0c:59:18:9b:37:1d:0f:e6:e5:b4: 8e:83:62:f1:f5:47:93:ef:d3:e1:a0:a8:66:9b:2c:89:bf:2c: fe:32:6b:69:c6:94:c8:30:43:28:3f:08:4d:30:61:79:8a:00: ae:0f:81:b9:c8:50:85:c3:34:ff:c1:be:ac:ac:e4:d1:2a:63: 37:5b:ff:dd -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEse+d4TVNH/KLYNwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDkwODAwNDUyNFoXDTI3MTIxMjAxNDUyNFowLzEtMCsGA1UEAxMk NTE1Nzc2NGItN2IzMC00ZjE5LWE5Y2EtMzBhNWRmZWZhMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymUPjIxp3iZt66D+K3QYOnILp8AWDLwGd84V eNEmQNyhOUHDYTtTW/VAEVD5GqTpEug5xfnq6eLN18SCWttmAYFPMi/w/aAdyZhU ArFbv9U+GrB2g0NqI5DbVXSthiMQUiwElX24VyO01zRWkY7+rjC9DmxjrHBrptcw rtkipgd9iVQeeqOSo9ghmWoULfFq0O8O62sIc1OE33Lmhj6Ar8wyq+JYrHuTTThg sSxMhesfF8ncJuhokXIoWNtmosOBm6UX8B4H7O9eIF6iOl9ENqvgpMKvYlltzujp HDMLwtH3yxh3GbLM2NSptD9HSu7jj8EX7oq53dF6A/x57WVMDwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFL14378bORilb8d5qB304ZnqIVV6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 MTU3NzY0Yi03YjMwLTRmMTktYTljYS0zMGE1ZGZlZmEzMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzUxNTc3NjRiLTdiMzAtNGYxOS1h OWNhLTMwYTVkZmVmYTMzMi81MTU3NzY0Yi03YjMwLTRmMTktYTljYS0zMGE1ZGZl ZmEzMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiEQwDgQCAAIwCAMGACYC+McAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYe7jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARjJX18jeZTFeXBRkHZ4cnyh7M Bx+MrPICJwmU54qo8pZrCIrkKQxvlwHR1xxiWo4OnUNbtGKQLQwYtTm6RA587uPn MtzG9rvqMqhetCQts06T0U43QgiNKItPnPyuPH5VMX8AUTsbGYs+Xr0gKeoZMzOA JWlSWh8YjFhu58BM41x4gUvFfUHXpH6QO07dxE0abqMIJz9nrFjT8yEIssDbd6Z5 vZa57uVmR5am9x8DJ3+9Q9/PJvA9NVRThQxZGJs3HQ/m5bSOg2Lx9UeT79PhoKhm myyJvyz+MmtpxpTIMEMoPwhNMGF5igCuD4G5yFCFwzT/wb6srOTRKmM3W//d -----END CERTIFICATE-----Generated at Fri Oct 10 20:03:29 2025 by rpki-client