$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer File: ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer (raw, json) Hash identifier: RzfMicxXKf6rQ+yoxFpuAuryfl5sy44qFHQbJRnrgZM= Subject key identifier: 3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B0E39C525EF96E34C6538A940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Sep 2025 00:45:25 +0000 Certificate not after: Mon 06 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 395101 IP: 199.175.98.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:39:c5:25:ef:96:e3:4c:65:38:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 2 00:45:25 2025 GMT Not After : Dec 6 01:45:25 2027 GMT Subject: CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:2c:ba:40:a2:d7:18:70:66:e7:83:7f:fe: 83:6f:46:3f:1a:f6:91:7c:28:e9:5f:c5:11:77:16: 04:52:0a:a4:22:28:43:6d:e4:70:1b:60:2e:c7:42: c7:55:f1:8a:49:ca:57:30:a7:dc:fb:c5:d1:f9:ad: 65:ea:0f:95:28:66:0b:4a:b9:af:ce:b3:77:e5:47: ba:b0:31:ca:54:71:35:f7:d0:54:e4:9f:27:40:e3: 9d:2b:b0:1a:fb:a2:c7:32:b1:e6:0f:cf:be:96:54: 56:0c:dc:e6:1c:55:06:9b:c6:d4:b5:ec:93:5e:90: 99:65:10:a6:a5:a9:7c:63:f0:ef:f6:3a:09:1f:13: 94:1a:4f:19:c2:55:d6:a0:c5:f0:e7:3a:14:ef:75: d7:c4:1e:39:70:f2:4d:2c:a7:97:b7:72:de:e4:bd: db:ae:93:5d:e8:54:ff:22:b3:86:13:d3:4d:fb:83: c4:6b:f7:eb:7a:03:fd:7c:13:69:21:94:d9:95:2e: c1:f9:ae:cc:9d:96:b7:9f:6d:2e:e1:86:05:68:32: 3d:3b:f2:98:d2:90:97:0b:e2:32:3e:61:44:aa:e7: a5:94:6b:2f:14:c2:f4:b7:85:c7:32:20:92:08:89: 8c:d8:6d:fd:9e:eb:c6:da:12:e4:7e:07:c2:c3:c0: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 199.175.98.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395101 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:16:51:61:27:58:90:cb:3d:a0:1c:1f:4c:4f:27:03:0c:82: a1:f5:4a:46:a4:cc:21:e8:16:bb:81:54:58:a5:c3:99:c6:56: bc:34:0e:9d:88:40:d1:22:6d:f4:1e:0a:5d:ef:b7:31:9f:68: 06:29:c8:5b:81:62:aa:6f:3a:f3:e7:c3:7c:93:24:09:e0:fe: 21:d5:93:ff:8d:4f:9f:b6:10:bf:24:01:d1:3f:13:c0:40:85: 33:f0:4f:bd:f7:36:53:9b:c9:4d:9b:dd:c8:a4:1e:85:08:81: 69:46:2b:4a:8d:0d:ad:87:87:80:f3:60:b4:60:4c:0a:cd:2e: b0:b6:ea:80:7c:ab:04:a6:25:01:d6:fd:d6:02:0f:25:c9:4d: 8c:fd:fa:71:59:69:6e:26:3d:43:48:c5:3d:ee:53:61:a1:d1: a2:34:26:7c:79:f1:11:c2:57:19:40:5b:12:65:d2:bc:eb:15: 22:70:ab:d3:5e:c2:c0:c8:52:66:c7:4f:0d:46:87:74:ad:14: cc:0f:bd:cf:48:94:d2:42:42:69:f0:8e:d1:80:af:a5:47:a7: e7:82:89:97:e7:80:94:a2:a3:c6:de:02:59:d0:51:42:ba:1b: d6:05:b9:48:4d:ba:c4:ce:ac:45:00:a8:67:09:4d:9c:9f:19: f3:f6:64:3e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEsOOcUl75bjTGU4qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDkwMjAwNDUyNVoXDTI3MTIwNjAxNDUyNVowLzEtMCsGA1UEAxMk YWI5NmRlNDMtMTllZS00OGFjLThhMmYtYWNkOWVkMWNhZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRUsukCi1xhwZueDf/6Db0Y/GvaRfCjpX8UR dxYEUgqkIihDbeRwG2Aux0LHVfGKScpXMKfc+8XR+a1l6g+VKGYLSrmvzrN35Ue6 sDHKVHE199BU5J8nQOOdK7Aa+6LHMrHmD8++llRWDNzmHFUGm8bUteyTXpCZZRCm pal8Y/Dv9joJHxOUGk8ZwlXWoMXw5zoU73XXxB45cPJNLKeXt3Le5L3brpNd6FT/ IrOGE9NN+4PEa/fregP9fBNpIZTZlS7B+a7MnZa3n20u4YYFaDI9O/KY0pCXC+Iy PmFEquellGsvFML0t4XHMiCSCImM2G39nuvG2hLkfgfCw8CEMQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDvPg3UZLgGDs6D9JCGQIfFix2iWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h Yjk2ZGU0My0xOWVlLTQ4YWMtOGEyZi1hY2Q5ZWQxY2FmZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2FiOTZkZTQzLTE5ZWUtNDhhYy04 YTJmLWFjZDllZDFjYWZmYy9hYjk2ZGU0My0xOWVlLTQ4YWMtOGEyZi1hY2Q5ZWQx Y2FmZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHHr2IwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgddMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJkWUWEnWJDLPaAcH0xPJwMMgqH1SkakzCHoFruBVFilw5nG Vrw0Dp2IQNEibfQeCl3vtzGfaAYpyFuBYqpvOvPnw3yTJAng/iHVk/+NT5+2EL8k AdE/E8BAhTPwT733NlObyU2b3cikHoUIgWlGK0qNDa2Hh4DzYLRgTArNLrC26oB8 qwSmJQHW/dYCDyXJTYz9+nFZaW4mPUNIxT3uU2Gh0aI0Jnx58RHCVxlAWxJl0rzr FSJwq9NewsDIUmbHTw1Gh3StFMwPvc9IlNJCQmnwjtGAr6VHp+eCiZfngJSio8be AlnQUUK6G9YFuUhNusTOrEUAqGcJTZyfGfP2ZD4= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:30 2025 by rpki-client