$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer File: 0abec8f8-ce42-427b-82b4-7accd51f9db8.cer (raw, json) Hash identifier: K24QL7qf3WzmtB+XvyKvuMMIXT89wzkYGJq2OsYZBQQ= Subject key identifier: B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B6A5A56D7088A18120C545120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Oct 2025 00:45:24 +0000 Certificate not after: Sat 08 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 20182 IP: 142.202.20.0/24 IP: 168.203.5.0 -- 168.203.7.255 IP: 204.27.210.0/24 IP: 2620:132:5000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:5a:56:d7:08:8a:18:12:0c:54:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 5 00:45:24 2025 GMT Not After : Jan 8 01:45:24 2028 GMT Subject: CN=0abec8f8-ce42-427b-82b4-7accd51f9db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:6a:0e:4b:7e:12:63:1e:2e:ae:f1:bc:b7: ae:fc:bd:69:8a:78:75:07:0b:02:cf:c4:0c:c3:27: 75:70:ca:1e:1a:ef:76:40:f7:04:91:ca:13:cc:c0: 2b:55:49:54:81:c4:8b:e5:78:81:4d:73:ed:43:b7: fb:b4:ac:59:7e:ed:cc:86:f9:57:af:db:19:48:ec: af:b7:34:3a:cb:c7:41:c3:de:65:88:6d:c0:2a:b1: 34:3c:08:39:b0:22:b7:41:96:61:bc:ee:53:5c:9e: 60:bb:7f:ac:ff:f7:4a:63:f3:30:55:c7:c3:de:3f: f6:45:a3:0b:98:10:c9:80:5b:40:7f:5f:d9:35:cf: 7a:1b:92:94:c4:81:4e:41:21:50:cb:4f:db:ec:d7: fb:95:73:44:51:12:15:25:a9:1c:3e:70:8e:7f:7b: b6:23:7b:08:6b:65:e0:a9:d8:76:cf:4e:d4:62:11: 57:42:3c:18:cd:32:f9:a5:a9:24:70:68:35:8d:56: 4b:e2:17:82:69:ee:38:e7:1f:0d:ef:cc:12:c1:2b: a4:2d:62:83:d2:26:2d:6f:4e:43:f3:57:9c:2d:51: 03:29:c9:5e:55:a1:30:87:76:9e:7b:7a:ba:87:4d: ba:38:ff:2d:fd:64:87:b9:bd:88:30:69:df:d8:7f: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 142.202.20.0/24 168.203.5.0-168.203.7.255 204.27.210.0/24 IPv6: 2620:132:5000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20182 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:56:cf:5d:a5:a6:ec:cb:09:f1:44:f4:8b:22:f5:85:d7:e7: 10:c6:ff:b7:56:25:64:fe:a2:ce:78:50:40:89:9e:63:56:51: 70:d1:db:85:55:b4:36:70:01:ed:e9:b4:a8:25:53:6e:d4:e3: fe:f2:8b:40:cf:ae:07:80:b0:89:99:9f:44:9c:36:c7:4a:ac: 9a:ef:cc:90:6a:a9:84:82:5f:74:be:d6:6e:2b:b1:55:87:8d: c2:6d:98:0a:82:5e:70:0c:9f:82:9c:1a:87:86:eb:d3:c2:b3: a9:07:d2:99:4d:97:0d:83:ef:a4:4c:8e:a4:06:0e:8e:a0:4f: 4e:ee:31:9b:be:d5:0f:42:17:fb:cd:c7:0e:c1:13:cf:24:92: 3e:b2:96:f7:75:5d:2e:db:00:31:f3:06:25:a0:9f:2e:05:03: 89:7b:a9:8a:e0:e3:c5:4a:03:19:78:af:76:be:76:14:1a:6b: 5d:47:24:e1:97:28:f3:f6:6d:89:13:df:22:c1:bd:91:9e:f2: d1:39:9b:20:ea:78:19:5e:4f:7f:01:b2:47:05:ee:e8:68:97: d7:7e:86:ae:18:a0:4c:7e:cd:9f:4c:ae:96:b0:04:17:44:4e: 76:dc:8e:dd:8a:0f:96:27:1d:c8:8e:74:fc:5b:35:7c:18:dd: 69:8b:70:0f -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEtqWlbXCIoYEgxUUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAwNTAwNDUyNFoXDTI4MDEwODAxNDUyNFowLzEtMCsGA1UEAxMk MGFiZWM4ZjgtY2U0Mi00MjdiLTgyYjQtN2FjY2Q1MWY5ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtBqDkt+EmMeLq7xvLeu/L1pinh1BwsCz8QM wyd1cMoeGu92QPcEkcoTzMArVUlUgcSL5XiBTXPtQ7f7tKxZfu3MhvlXr9sZSOyv tzQ6y8dBw95liG3AKrE0PAg5sCK3QZZhvO5TXJ5gu3+s//dKY/MwVcfD3j/2RaML mBDJgFtAf1/ZNc96G5KUxIFOQSFQy0/b7Nf7lXNEURIVJakcPnCOf3u2I3sIa2Xg qdh2z07UYhFXQjwYzTL5pakkcGg1jVZL4heCae445x8N78wSwSukLWKD0iYtb05D 81ecLVEDKcleVaEwh3aee3q6h026OP8t/WSHub2IMGnf2H/5GQIDAQABo4IEPzCC BDswHQYDVR0OBBYEFLShPK7xJwSEAy4T1fFTbzdemOb3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w YWJlYzhmOC1jZTQyLTQyN2ItODJiNC03YWNjZDUxZjlkYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzBhYmVjOGY4LWNlNDItNDI3Yi04 MmI0LTdhY2NkNTFmOWRiOC8wYWJlYzhmOC1jZTQyLTQyN2ItODJiNC03YWNjZDUx ZjlkYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwRAYIKwYBBQUH AQcBAf8ENTAzMCAEAgABMBoDBACOyhQwDAMEAKjLBQMEA6jLAAMEAMwb0jAPBAIA AjAJAwcEJiABMlAAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAk7WMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AG5Wz12lpuzLCfFE9Isi9YXX5xDG/7dWJWT+os54UECJnmNWUXDR24VVtDZwAe3p tKglU27U4/7yi0DPrgeAsImZn0ScNsdKrJrvzJBqqYSCX3S+1m4rsVWHjcJtmAqC XnAMn4KcGoeG69PCs6kH0plNlw2D76RMjqQGDo6gT07uMZu+1Q9CF/vNxw7BE88k kj6ylvd1XS7bADHzBiWgny4FA4l7qYrg48VKAxl4r3a+dhQaa11HJOGXKPP2bYkT 3yLBvZGe8tE5myDqeBleT38BskcF7uhol9d+hq4YoEx+zZ9MrpawBBdETnbcjt2K D5YnHciOdPxbNXwY3WmLcA8= -----END CERTIFICATE-----Generated at Mon Nov 3 05:08:07 2025 by rpki-client