$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer File: d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer (raw, json) Hash identifier: G69PsmyE7PxvJm5qQsA7G4wUY+1E6iBplz8BOIiGjB4= Subject key identifier: F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B5E32758371755613338F5F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Sep 2025 16:15:21 +0000 Certificate not after: Thu 04 Feb 2027 01:45:25 +0000 Subordinate resources: AS: 398415 IP: 23.142.136.0/24 IP: 148.163.180.0/22 IP: 2602:fafc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:32:75:83:71:75:56:13:33:8f:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 30 16:15:21 2025 GMT Not After : Feb 4 01:45:25 2027 GMT Subject: CN=d0ee24a2-eb87-4eba-aa78-bca70397cec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:36:c7:2e:bf:e4:12:8b:5f:97:c5:6b:eb: 1a:97:af:93:3a:72:5f:61:66:35:ba:6a:69:a4:2f: 0e:1c:4e:f7:78:9b:a9:f0:9c:af:9e:c9:c4:93:8f: 32:a6:c3:f0:ef:fd:68:d9:a0:af:1c:05:92:67:6b: 54:30:14:1d:5b:3e:04:87:bd:f3:9b:01:6d:46:b0: 8a:24:17:39:f1:0e:d0:a3:45:6b:03:f5:e3:4c:7d: 4f:b3:fb:45:d4:c7:82:e5:a4:d7:0c:27:75:90:bb: 85:50:d8:ec:f8:d9:28:68:1f:ce:f5:0b:e8:47:87: 54:77:6e:4f:34:ba:62:ed:fd:56:8d:85:c7:3a:3f: a5:7a:6b:14:80:3e:31:10:34:8f:aa:6c:7b:99:df: 0a:60:c5:a8:ff:d9:ac:94:5f:29:72:cb:73:7f:7f: b5:ce:af:b6:4c:2a:92:b2:dd:b1:63:6a:9a:34:38: 80:74:f4:9f:e4:63:ab:94:ff:08:7a:c9:88:ab:33: b1:1a:94:e3:43:50:67:1d:78:96:5c:25:10:bb:8e: 06:98:db:87:6f:c3:a5:b7:f3:be:3d:4e:33:d1:86: fe:5c:62:66:ed:fc:a0:39:53:ba:64:da:da:e6:0b: 10:a1:36:1c:9b:f6:9f:b6:f4:24:44:eb:2d:5e:a5: 51:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.142.136.0/24 148.163.180.0/22 IPv6: 2602:fafc::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398415 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c0:32:2f:82:aa:e0:d5:71:7d:64:ad:dd:d8:b4:a6:74:2e: 4c:a8:e8:21:ba:84:2e:e6:d9:8c:a0:b3:39:53:47:d8:1b:1f: 33:85:ba:33:1d:bd:19:c5:8b:6a:36:b4:db:87:eb:de:07:d2: aa:1b:fa:b1:1c:4d:1f:55:e1:c6:94:04:8c:d6:e9:f3:e1:5c: b9:a7:98:fc:86:fd:59:4f:23:e1:f0:3a:fb:47:9e:40:f4:bb: de:fe:5f:dc:52:06:1d:82:75:25:00:03:c5:f0:19:2e:5b:dc: e7:a7:4b:21:eb:29:96:e5:bc:aa:80:01:c3:53:7b:42:e8:97: 97:de:2b:d1:d4:92:19:9a:79:23:2d:95:2f:bb:f7:1f:df:87: dc:f8:2d:cd:b4:19:86:c6:62:8a:01:35:0b:2b:04:99:94:c8: 03:88:be:9b:d9:f5:87:55:14:f5:bf:41:a1:f5:ba:7f:ea:68: f8:e5:58:d1:da:b6:81:46:52:77:2d:43:cb:62:b9:91:f9:f2: 13:66:d3:60:7f:3e:a1:12:f2:7d:09:28:5a:49:a4:06:ce:6d: 21:6d:74:ac:ff:41:4f:af:3a:ed:e6:02:fe:c1:7c:1b:c2:54: c6:b2:4f:04:3f:d8:40:19:a8:e0:92:49:f1:30:1e:2e:87:3b: 8f:5e:c9:9c -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEteMnWDcXVWEzOPXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MDkzMDE2MTUyMVoXDTI3MDIwNDAxNDUyNVowLzEtMCsGA1UEAxMk ZDBlZTI0YTItZWI4Ny00ZWJhLWFhNzgtYmNhNzAzOTdjZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4Q2xy6/5BKLX5fFa+sal6+TOnJfYWY1umpp pC8OHE73eJup8JyvnsnEk48ypsPw7/1o2aCvHAWSZ2tUMBQdWz4Eh73zmwFtRrCK JBc58Q7Qo0VrA/XjTH1Ps/tF1MeC5aTXDCd1kLuFUNjs+NkoaB/O9QvoR4dUd25P NLpi7f1WjYXHOj+lemsUgD4xEDSPqmx7md8KYMWo/9mslF8pcstzf3+1zq+2TCqS st2xY2qaNDiAdPSf5GOrlP8IesmIqzOxGpTjQ1BnHXiWXCUQu44GmNuHb8Olt/O+ PU4z0Yb+XGJm7fygOVO6ZNra5gsQoTYcm/aftvQkROstXqVRywIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFPIkvA66eR2D2aK0WYL3buOkTYjUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k MGVlMjRhMi1lYjg3LTRlYmEtYWE3OC1iY2E3MDM5N2NlYzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2QwZWUyNGEyLWViODctNGViYS1h YTc4LWJjYTcwMzk3Y2VjNi9kMGVlMjRhMi1lYjg3LTRlYmEtYWE3OC1iY2E3MDM5 N2NlYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjogDBAKUo7QwDgQCAAIwCAMGBCYC+vwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYUTzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSwDIvgqrg1XF9ZK3d 2LSmdC5MqOghuoQu5tmMoLM5U0fYGx8zhbozHb0ZxYtqNrTbh+veB9KqG/qxHE0f VeHGlASM1unz4Vy5p5j8hv1ZTyPh8Dr7R55A9Lve/l/cUgYdgnUlAAPF8BkuW9zn p0sh6ymW5byqgAHDU3tC6JeX3ivR1JIZmnkjLZUvu/cf34fc+C3NtBmGxmKKATUL KwSZlMgDiL6b2fWHVRT1v0Gh9bp/6mj45VjR2raBRlJ3LUPLYrmR+fITZtNgfz6h EvJ9CShaSaQGzm0hbXSs/0FPrzrt5gL+wXwbwlTGsk8EP9hAGajgkknxMB4uhzuP Xsmc -----END CERTIFICATE-----Generated at Thu Oct 30 14:58:38 2025 by rpki-client