$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer File: afa8b068-97b2-4c52-904f-d78c4e46fb8c.cer (raw, json) Hash identifier: 3MteK5UdKuGAPkHzDS0uR3cn8fpmlVXj2O6R926TKao= Subject key identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285849B1425958F7A6E83E30AE9500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Apr 2025 00:45:35 +0000 Certificate not after: Tue 03 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 985 AS: 1007 IP: 149.112.46.0/23 IP: 2602:fb4a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:42:59:58:f7:a6:e8:3e:30:ae:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 30 00:45:35 2025 GMT Not After : Aug 3 00:45:35 2027 GMT Subject: CN=afa8b068-97b2-4c52-904f-d78c4e46fb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:eb:8a:9e:fe:db:0d:3c:fa:4c:26:1e:43:e3: 0a:36:68:05:ba:01:a8:bb:75:07:2e:17:06:4c:92: 3c:4c:12:36:ec:d8:8e:47:9d:39:36:46:84:ed:80: b3:d8:59:0f:77:08:3d:ed:8c:cf:82:51:48:8b:7b: 7d:d4:9b:7d:e1:16:50:cb:7c:df:ea:88:fa:24:58: bd:f3:6c:a8:dc:3c:49:f3:60:39:aa:a1:ef:40:64: 3c:e2:3a:ff:af:95:a8:ed:68:3c:9e:b9:92:aa:75: 4c:79:50:b0:02:88:14:9b:7f:0d:4c:cc:40:dc:ca: b3:8a:38:05:9c:b4:c1:11:45:15:a4:a2:8e:c5:7d: 0c:7a:6f:ea:95:8c:ba:94:85:9d:5e:91:56:fa:33: d8:01:a1:8d:b1:69:7a:b4:37:1d:6d:18:e6:f9:bd: cc:78:ba:0c:11:15:ab:66:a7:fb:62:28:4f:b7:82: 82:81:9a:dc:64:0c:a9:d4:02:a5:8d:5b:df:53:c5: 26:5d:61:a7:3d:64:44:cc:db:55:b5:3a:2b:77:77: 9e:76:09:dc:1f:f0:6e:64:aa:ba:47:c8:11:5e:96: de:b0:a0:02:06:4f:64:41:df:1d:9c:73:63:80:46: 82:1d:ee:a1:e7:24:30:97:a6:0e:27:7a:7f:97:b3: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8A:44:11:76:8D:69:EA:42:55:0C:15:AD:78:BB:AD:A7:F1:62:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afa8b068-97b2-4c52-904f-d78c4e46fb8c/afa8b068-97b2-4c52-904f-d78c4e46fb8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 149.112.46.0/23 IPv6: 2602:fb4a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 985 1007 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b0:0a:43:3f:3d:e8:14:b3:35:ca:86:ed:a8:10:58:14:4e: 22:d5:2a:01:ac:ef:7a:9f:1e:9c:b1:17:a5:0e:4f:67:0a:4c: a4:43:98:36:1c:c9:7f:7d:0e:54:8a:f3:8f:cb:ce:4e:0b:c0: 7a:8d:8d:fa:76:78:c0:92:41:4f:0a:0e:c1:6e:70:bc:33:8b: 54:25:d9:8f:8a:7d:57:91:a3:f0:ca:c4:cb:6f:48:44:bd:1d: fa:c2:f1:d0:21:57:ae:bb:00:1b:b0:5a:42:91:ba:46:15:ad: cb:43:30:42:99:8e:0a:77:66:58:c4:74:f8:fc:72:90:2a:78: b9:ce:5e:b9:58:16:cb:a3:1d:68:6a:a7:ae:3d:e9:5a:ef:49: 47:9c:bd:bb:43:a5:44:c7:ce:a1:ca:6d:2d:4a:68:9b:a7:e4: 16:f8:06:fd:87:03:83:9e:27:19:53:fb:7c:ba:a3:04:b6:d0: af:64:d3:98:30:8d:b9:91:c5:20:36:b0:17:06:d3:70:2b:e5: 52:8a:ad:26:a0:7e:be:c7:c8:d2:a0:5c:7b:21:56:ad:49:15: 9b:5c:b1:72:20:20:b8:02:6f:73:bc:df:c7:c1:a2:d9:4f:94: 61:82:5d:8a:8f:cc:23:c3:60:f7:09:c5:4b:3e:3c:9c:fa:4d: 60:20:1e:d2 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEmxQllY96boPjCulQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDQzMDAwNDUzNVoXDTI3MDgwMzAwNDUzNVowLzEtMCsGA1UEAxMk YWZhOGIwNjgtOTdiMi00YzUyLTkwNGYtZDc4YzRlNDZmYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeuKnv7bDTz6TCYeQ+MKNmgFugGou3UHLhcG TJI8TBI27NiOR505NkaE7YCz2FkPdwg97YzPglFIi3t91Jt94RZQy3zf6oj6JFi9 82yo3DxJ82A5qqHvQGQ84jr/r5Wo7Wg8nrmSqnVMeVCwAogUm38NTMxA3MqzijgF nLTBEUUVpKKOxX0Mem/qlYy6lIWdXpFW+jPYAaGNsWl6tDcdbRjm+b3MeLoMERWr Zqf7YihPt4KCgZrcZAyp1AKljVvfU8UmXWGnPWREzNtVtTord3eedgncH/BuZKq6 R8gRXpbesKACBk9kQd8dnHNjgEaCHe6h5yQwl6YOJ3p/l7NvFQIDAQABo4IELjCC BCowHQYDVR0OBBYEFAaKRBF2jWnqQlUMFa14u62n8WJaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h ZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0NmZiOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2FmYThiMDY4LTk3YjItNGM1Mi05 MDRmLWQ3OGM0ZTQ2ZmI4Yy9hZmE4YjA2OC05N2IyLTRjNTItOTA0Zi1kNzhjNGU0 NmZiOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAGVcC4wDgQCAAIwCAMGACYC+0oAMB0GCCsGAQUF BwEIAQH/BA4wDKAKMAgCAgPZAgID7zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJsApDPz3oFLM1yobtqBBY FE4i1SoBrO96nx6csRelDk9nCkykQ5g2HMl/fQ5UivOPy85OC8B6jY36dnjAkkFP Cg7BbnC8M4tUJdmPin1XkaPwysTLb0hEvR36wvHQIVeuuwAbsFpCkbpGFa3LQzBC mY4Kd2ZYxHT4/HKQKni5zl65WBbLox1oaqeuPela70lHnL27Q6VEx86hym0tSmib p+QW+Ab9hwODnicZU/t8uqMEttCvZNOYMI25kcUgNrAXBtNwK+VSiq0moH6+x8jS oFx7IVatSRWbXLFyICC4Am9zvN/HwaLZT5Rhgl2Kj8wjw2D3CcVLPjyc+k1gIB7S -----END CERTIFICATE-----Generated at Wed Oct 29 11:54:53 2025 by rpki-client