$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer File: 903f8e05-f3a5-4300-8c04-39c3103ddccb.cer (raw, json) Hash identifier: jSSfLJsvqQoNhSDTBJVJKOnisCXNoImyzsvu1wcs0zQ= Subject key identifier: 5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584A9A16F14BD2705EDD5383D5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 10:21:28 +0000 Certificate not after: Fri 01 Jan 2027 01:45:26 +0000 Subordinate resources: IP: 69.40.192.0/22 IP: 136.175.228.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:16:f1:4b:d2:70:5e:dd:53:83:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jul 22 10:21:28 2025 GMT Not After : Jan 1 01:45:26 2027 GMT Subject: CN=903f8e05-f3a5-4300-8c04-39c3103ddccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:d5:f5:c0:33:9a:2b:d1:9c:5f:8c:5e:8f: 0c:5a:aa:31:29:3d:03:d3:80:a4:30:62:12:b2:61: 43:17:d5:14:91:b1:53:55:32:da:17:f4:45:b5:0d: 30:24:5c:7f:b9:d6:06:4d:fc:60:0d:2a:ee:58:1f: b2:9d:7a:21:aa:57:08:09:fc:d5:88:35:25:5a:21: 61:2a:92:49:de:78:9f:05:04:06:6e:a4:7a:d8:6e: 4b:c6:c3:09:b4:c3:28:fd:fd:de:2f:90:26:33:5c: c0:40:4d:37:c1:a5:56:a0:1d:e6:62:44:74:a7:b6: 49:d3:ca:f5:0e:45:46:51:7a:72:47:0b:1c:f2:0f: 3a:1b:4a:23:36:3c:e0:e8:38:ba:74:a5:e0:90:f4: f8:9e:5c:d2:1a:a2:e0:f3:90:b9:0a:00:8b:87:0a: 64:27:26:f5:d4:d4:c4:d8:c0:f7:d1:27:4a:8d:e0: b3:b2:fb:c4:c4:0f:ec:81:a6:6e:b9:dd:7a:5f:dc: db:2f:d3:ae:4f:c7:e8:22:ff:46:a0:a3:12:58:ad: 7b:49:cc:e0:f7:54:20:e8:e3:d9:92:cc:92:42:4b: 83:fb:8e:74:ef:bb:6d:0f:36:0b:d1:91:ec:0e:11: f3:0b:f3:c4:7f:84:08:71:5c:a2:08:df:d2:41:05: 89:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 69.40.192.0/22 136.175.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:fe:68:4c:38:bf:fc:ba:8c:0d:16:c3:47:ab:f1:f5:67:58: 93:06:9c:34:1f:a9:5f:2d:04:be:e5:5f:a3:43:8b:c6:16:68: 84:7d:83:86:80:66:48:b9:29:69:0a:64:1b:c5:61:59:45:c8: d5:14:c2:f8:24:50:0c:d8:d2:a5:57:ea:56:8e:ca:3a:a0:d7: 0e:af:95:7b:8d:e1:55:2c:17:9e:b3:13:33:71:21:07:74:73: 3a:d4:4a:95:42:f3:96:ca:c4:f9:47:c4:f8:d4:c7:3c:3b:12: 83:e2:bd:e9:1a:50:65:3a:3f:af:d9:1d:23:9c:3e:5f:80:3f: 99:81:22:a7:d4:d8:0f:51:e3:8d:42:6e:c6:d3:33:9e:16:02: 0c:ac:4f:e3:8a:dd:d0:7c:c1:98:86:c0:7c:46:d3:dc:b8:03: da:ce:a5:f5:b7:b2:77:c2:f9:d4:b5:0a:74:3c:d5:58:ab:7f: 30:13:dd:55:53:9a:60:7c:0c:c8:3e:80:88:2a:72:08:a9:d3: b0:d7:6e:4d:0d:30:aa:bc:27:bc:b7:30:1f:77:0e:b1:56:52: 6a:e4:29:6d:6d:9f:81:8f:e5:2d:16:5d:dc:bc:e9:0c:61:de: 8b:fb:29:3f:f4:84:f5:2a:04:97:5f:16:35:6b:82:fe:0f:8b: af:ec:c6:54 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEqaFvFL0nBe3VOD1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDcyMjEwMjEyOFoXDTI3MDEwMTAxNDUyNlowLzEtMCsGA1UEAxMk OTAzZjhlMDUtZjNhNS00MzAwLThjMDQtMzljMzEwM2RkY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBHV9cAzmivRnF+MXo8MWqoxKT0D04CkMGIS smFDF9UUkbFTVTLaF/RFtQ0wJFx/udYGTfxgDSruWB+ynXohqlcICfzViDUlWiFh KpJJ3nifBQQGbqR62G5LxsMJtMMo/f3eL5AmM1zAQE03waVWoB3mYkR0p7ZJ08r1 DkVGUXpyRwsc8g86G0ojNjzg6Di6dKXgkPT4nlzSGqLg85C5CgCLhwpkJyb11NTE 2MD30SdKjeCzsvvExA/sgaZuud16X9zbL9OuT8foIv9GoKMSWK17Sczg91Qg6OPZ ksySQkuD+45077ttDzYL0ZHsDhHzC/PEf4QIcVyiCN/SQQWJ5wIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFF7YvFrRco2bgK4XGvECPF4N4XFpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85 MDNmOGUwNS1mM2E1LTQzMDAtOGMwNC0zOWMzMTAzZGRjY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzkwM2Y4ZTA1LWYzYTUtNDMwMC04 YzA0LTM5YzMxMDNkZGNjYi85MDNmOGUwNS1mM2E1LTQzMDAtOGMwNC0zOWMzMTAz ZGRjY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJFKMADBAKIr+QwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG/5oTDi//LqM DRbDR6vx9WdYkwacNB+pXy0EvuVfo0OLxhZohH2DhoBmSLkpaQpkG8VhWUXI1RTC +CRQDNjSpVfqVo7KOqDXDq+Ve43hVSwXnrMTM3EhB3RzOtRKlULzlsrE+UfE+NTH PDsSg+K96RpQZTo/r9kdI5w+X4A/mYEip9TYD1HjjUJuxtMznhYCDKxP44rd0HzB mIbAfEbT3LgD2s6l9beyd8L51LUKdDzVWKt/MBPdVVOaYHwMyD6AiCpyCKnTsNdu TQ0wqrwnvLcwH3cOsVZSauQpbW2fgY/lLRZd3LzpDGHei/spP/SE9SoEl18WNWuC /g+Lr+zGVA== -----END CERTIFICATE-----Generated at Tue Oct 28 02:41:12 2025 by rpki-client