$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer File: afac962a-1647-4571-99e5-a23db5fd79d7.cer (raw, json) Hash identifier: WPZLItMU0lz6+BoeN0t0INJhtj0JSua/f7BnPjvl2+w= Subject key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B678FA766C6A5D97789C52280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Oct 2025 00:45:24 +0000 Certificate not after: Fri 07 Jan 2028 01:45:24 +0000 Subordinate resources: IP: 165.119.0.0/16 IP: 198.137.240.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:8f:a7:66:c6:a5:d9:77:89:c5:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 4 00:45:24 2025 GMT Not After : Jan 7 01:45:24 2028 GMT Subject: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:ed:3f:18:ac:e7:89:85:ce:66:1b:b4:b1: d0:be:74:06:cc:b5:f4:6f:6c:66:af:48:85:e3:88: 60:c1:e2:32:2b:9a:60:c6:f3:cc:21:3e:96:fe:78: 8f:41:83:a4:e0:5a:e4:4d:a9:73:98:96:28:d7:71: 7d:6b:93:67:66:3c:6a:07:d6:f9:8a:a2:a6:23:8b: e1:a7:4c:5b:4a:7e:db:f4:af:84:d1:0b:ed:1d:24: 57:67:b5:3a:9b:cb:48:da:f5:6a:09:18:ed:b5:53: df:0f:ca:c8:84:58:cb:7b:f4:a4:d0:c6:d5:e4:37: e8:8b:96:43:9d:15:6c:92:73:24:b2:e6:4d:a0:98: d0:a7:25:21:72:55:27:94:68:7d:24:8a:e5:14:7a: e8:de:5d:81:af:d0:77:87:65:6b:f8:eb:84:77:55: df:6c:d4:68:62:45:ef:c0:4c:34:08:0a:44:11:87: ab:a7:ea:61:e2:bd:4f:d6:03:fc:16:0d:d6:80:b0: 6b:ec:8d:1c:63:a0:6f:ec:2f:49:60:db:d4:06:eb: fe:74:59:c9:67:cf:c5:e6:1a:9c:5b:17:7c:46:0f: d1:0b:db:83:57:06:01:c5:15:57:fe:4c:4f:9c:79: d7:a5:eb:95:aa:a4:5e:6d:07:9d:6e:88:c6:2e:0d: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 165.119.0.0/16 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a0:30:37:9d:3e:3c:f8:44:d9:0c:ea:01:1c:cf:65:ad:fb: 4e:ea:01:d2:4e:d9:08:e3:ad:b9:5b:aa:75:c7:7e:45:46:5c: a0:10:d5:fb:51:9d:78:70:81:d2:78:ee:65:48:97:49:51:4d: f4:71:13:d9:fe:97:3c:f8:08:8c:28:49:0f:bc:28:19:f7:10: ef:29:58:76:0b:2e:80:ff:75:f1:1e:25:0b:f5:99:4d:3e:d5: 3e:e4:77:b4:f6:c8:c1:75:d9:a4:12:16:4b:54:56:02:f5:e8: 3b:ed:10:c4:84:89:5c:28:53:0a:82:49:d1:4e:99:19:c1:29: 48:c5:b3:a0:13:d4:f5:cc:0e:e2:9f:a3:d7:46:f8:9c:d9:17: 29:4a:03:68:90:1b:25:41:b9:de:4e:d1:45:b7:7b:24:7a:8a: 00:e1:ca:14:7c:0a:4f:93:50:32:40:19:1d:3f:9c:20:aa:ba: 84:10:3a:e2:fb:80:ba:77:90:e4:08:4a:56:3b:89:dd:dc:53: 97:1e:19:17:3e:06:f1:a9:00:aa:de:39:f1:52:ee:37:75:7f: 13:8e:9f:ba:72:73:e1:f6:a2:2e:9f:3e:f0:7b:d8:2e:b9:e8: a5:c0:e1:57:26:82:f6:d7:f0:e4:04:37:6f:a9:28:f9:cb:cc: 2d:72:4b:c1 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEtnj6dmxqXZd4nFIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAwNDAwNDUyNFoXDTI4MDEwNzAxNDUyNFowLzEtMCsGA1UEAxMk YWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HztPxis54mFzmYbtLHQvnQGzLX0b2xmr0iF 44hgweIyK5pgxvPMIT6W/niPQYOk4FrkTalzmJYo13F9a5NnZjxqB9b5iqKmI4vh p0xbSn7b9K+E0QvtHSRXZ7U6m8tI2vVqCRjttVPfD8rIhFjLe/Sk0MbV5Dfoi5ZD nRVsknMksuZNoJjQpyUhclUnlGh9JIrlFHro3l2Br9B3h2Vr+OuEd1XfbNRoYkXv wEw0CApEEYerp+ph4r1P1gP8Fg3WgLBr7I0cY6Bv7C9JYNvUBuv+dFnJZ8/F5hqc Wxd8Rg/RC9uDVwYBxRVX/kxPnHnXpeuVqqRebQedbojGLg17gwIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFNfHPVmUinWZ9VhILm2zzXy5G/IvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h ZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2FmYWM5NjJhLTE2NDctNDU3MS05 OWU1LWEyM2RiNWZkNzlkNy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVm ZDc5ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCldwMEAcaJ8DBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHoDA3nT48+ETZ DOoBHM9lrftO6gHSTtkI4625W6p1x35FRlygENX7UZ14cIHSeO5lSJdJUU30cRPZ /pc8+AiMKEkPvCgZ9xDvKVh2Cy6A/3XxHiUL9ZlNPtU+5He09sjBddmkEhZLVFYC 9eg77RDEhIlcKFMKgknRTpkZwSlIxbOgE9T1zA7in6PXRvic2RcpSgNokBslQbne TtFFt3skeooA4coUfApPk1AyQBkdP5wgqrqEEDri+4C6d5DkCEpWO4nd3FOXHhkX PgbxqQCq3jnxUu43dX8Tjp+6cnPh9qIunz7we9guueilwOFXJoL21/DkBDdvqSj5 y8wtckvB -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:48 2025 by rpki-client