$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer File: 78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer (raw, json) Hash identifier: pG4NHWrVSPyBTDKKD+ZCiNN5iW76Zc1GVlxEKUaaabk= Subject key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B5404DFC5D8C00A439FDD2300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Sep 2025 00:45:25 +0000 Certificate not after: Fri 31 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 23274 IP: 64.6.16.0/20 IP: 2620:11e:8000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:04:df:c5:d8:c0:0a:43:9f:dd:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 27 00:45:25 2025 GMT Not After : Dec 31 01:45:25 2027 GMT Subject: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:03:63:9d:f3:bd:c1:9d:f8:65:ac:40:d2:3c: e4:04:6f:c1:bc:e9:d4:3f:45:e3:0d:60:21:c9:bc: 08:6a:5b:69:fa:da:85:ec:f1:fb:0e:d7:50:3a:c7: bd:a9:cc:75:9d:f7:75:73:5c:ff:d7:46:bf:80:be: b0:a3:4f:82:34:ee:2c:7b:a4:2c:3d:f0:2a:77:f9: 5e:89:da:5c:f3:2f:a7:45:4c:1d:d2:dd:89:54:58: 59:60:f0:3c:9c:99:d1:b3:76:2b:6e:3d:32:83:e6: be:c9:8e:7e:50:6d:3b:ed:c1:8a:77:eb:90:c9:b1: 73:e7:22:de:93:78:5e:66:1d:72:ac:72:f5:4a:6d: 49:24:ac:fc:df:b4:be:c4:0f:6c:45:d9:a9:28:ad: fa:13:f8:08:19:15:81:12:0d:c7:2e:fd:83:d5:3b: bc:fa:bb:e4:b1:51:36:19:a1:bc:2f:35:3b:42:c9: 04:78:21:91:f2:93:bd:70:e2:d8:2e:04:b9:3f:8c: 77:e3:5f:4c:cc:38:83:e7:5f:d1:e1:48:98:80:89: 1a:74:0e:ae:23:81:1b:fb:10:f2:b5:9f:d4:04:df: 0f:65:3d:57:c0:1c:7e:31:2e:cd:bf:8a:58:8c:9d: a6:11:a0:c2:4e:11:24:a8:97:fc:4d:b6:94:54:89: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 64.6.16.0/20 IPv6: 2620:11e:8000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23274 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b9:df:ed:01:f8:76:ca:15:4b:1a:08:aa:f2:87:c6:8a:7f: 0c:45:9a:90:34:60:e1:c3:a4:29:e8:2b:66:c3:17:23:84:8a: 00:ca:6e:1d:ee:03:ba:d4:92:f7:2c:5b:a9:cf:da:7b:10:d1: 57:d7:9c:c4:af:9d:88:e4:99:ec:0b:57:74:a5:96:cd:d3:3e: 96:83:76:40:9f:31:ea:08:07:66:99:55:ce:74:ea:77:2d:f3: 81:ab:80:32:04:8f:bb:15:59:79:fd:4b:af:f6:8e:95:38:47: 46:c5:23:26:19:73:73:d6:b3:8d:25:75:1e:ca:68:b5:5c:2b: 6c:c7:af:5b:19:e2:a7:80:d3:5a:3d:da:fa:2d:96:d5:46:23: 27:f1:c0:38:0f:09:3d:24:6c:5b:55:91:91:d3:bd:c5:60:16: b6:4c:f8:69:10:ba:d3:74:69:f8:9c:53:2a:15:24:a9:89:62: c8:8d:7c:5e:12:6d:1d:65:0f:b5:fa:51:36:1c:66:68:05:fd: f6:d1:45:bd:8a:3f:6a:4b:1c:59:3f:62:74:0c:f1:77:a9:3f: fb:59:5e:a5:b3:bd:20:e0:6f:cf:c8:88:9a:99:db:9e:e5:ec: d5:c8:a0:e7:c7:0a:79:70:fa:f2:35:9f:aa:70:34:d5:db:3d: 1c:0a:fe:f8 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEtUBN/F2MAKQ5/dIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDkyNzAwNDUyNVoXDTI3MTIzMTAxNDUyNVowLzEtMCsGA1UEAxMk NzhmZjhhNGEtNWVlMi00NzVhLWI3Y2MtYjk3MWE2Mjg4ODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggNjnfO9wZ34ZaxA0jzkBG/BvOnUP0XjDWAh ybwIaltp+tqF7PH7DtdQOse9qcx1nfd1c1z/10a/gL6wo0+CNO4se6QsPfAqd/le idpc8y+nRUwd0t2JVFhZYPA8nJnRs3Yrbj0yg+a+yY5+UG077cGKd+uQybFz5yLe k3heZh1yrHL1Sm1JJKz837S+xA9sRdmpKK36E/gIGRWBEg3HLv2D1Tu8+rvksVE2 GaG8LzU7QskEeCGR8pO9cOLYLgS5P4x3419MzDiD51/R4UiYgIkadA6uI4Eb+xDy tZ/UBN8PZT1XwBx+MS7Nv4pYjJ2mEaDCThEkqJf8TbaUVIk60wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLDr8B5n5dVSdHY0Qu5gPrFJY+pIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83 OGZmOGE0YS01ZWUyLTQ3NWEtYjdjYy1iOTcxYTYyODg4ODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzc4ZmY4YTRhLTVlZTItNDc1YS1i N2NjLWI5NzFhNjI4ODg4NS83OGZmOGE0YS01ZWUyLTQ3NWEtYjdjYy1iOTcxYTYy ODg4ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBARABhAwDgQCAAIwCAMGACYgAR6AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlrqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIq53+0B+HbKFUsaCKryh8aKfwxF mpA0YOHDpCnoK2bDFyOEigDKbh3uA7rUkvcsW6nP2nsQ0VfXnMSvnYjkmewLV3Sl ls3TPpaDdkCfMeoIB2aZVc506nct84GrgDIEj7sVWXn9S6/2jpU4R0bFIyYZc3PW s40ldR7KaLVcK2zHr1sZ4qeA01o92votltVGIyfxwDgPCT0kbFtVkZHTvcVgFrZM +GkQutN0aficUyoVJKmJYsiNfF4SbR1lD7X6UTYcZmgF/fbRRb2KP2pLHFk/YnQM 8XepP/tZXqWzvSDgb8/IiJqZ257l7NXIoOfHCnlw+vI1n6pwNNXbPRwK/vg= -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:50 2025 by rpki-client