$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer File: d1f886df-6c58-4ea7-9d1f-0659e2324460.cer (raw, json) Hash identifier: 4simBIP+kR+KiA0Z1wkliLnLpBsm2AjePZduolcngdU= Subject key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584B87E19300A4C9F90E1F6525A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Oct 2025 14:36:20 +0000 Certificate not after: Mon 30 Nov 2026 01:45:26 +0000 Subordinate resources: AS: 1358 AS: 6621 AS: 63062 IP: 66.82.0.0/16 IP: 67.44.0.0/14 IP: 67.142.0.0/15 IP: 69.19.0.0/17 IP: 69.35.0.0/16 IP: 72.168.0.0/14 IP: 97.72.0.0/15 IP: 139.85.0.0/16 IP: 174.32.0.0/15 IP: 184.52.0.0/15 IP: 192.16.171.0/24 IP: 192.31.73.0/24 IP: 192.190.65.0/24 IP: 206.71.96.0/19 IP: 2001:5b0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:e1:93:00:a4:c9:f9:0e:1f:65:25:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 15 14:36:20 2025 GMT Not After : Nov 30 01:45:26 2026 GMT Subject: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:22:da:1b:b6:54:3b:f8:68:5d:0a:05:8a: 4b:88:fe:d8:6d:fc:e6:e3:8f:85:85:4b:5f:3d:56: 21:98:83:ce:cb:cf:d6:a1:54:d1:71:36:4c:06:74: a3:49:02:ba:c8:68:c9:2a:93:f0:ec:24:21:37:7f: a1:db:f4:61:8f:cb:6e:a1:9c:23:a7:78:c1:a4:73: 4e:37:b3:42:02:8c:5c:60:09:51:dc:ee:39:e7:c5: bb:2d:e0:ce:d1:80:e6:68:7b:52:b6:de:6e:27:34: 0c:48:33:19:ed:69:72:9d:63:d2:a3:df:74:50:f4: 71:f7:90:49:a2:91:24:1e:32:c9:6b:45:eb:18:4d: a5:10:40:9a:88:f3:6b:d9:ab:64:21:f0:14:9c:4b: ad:37:d9:59:e4:ec:9d:c3:1e:15:65:da:1a:b7:af: 5b:f3:d5:39:94:c4:83:9b:df:52:41:94:88:0d:74: a4:4f:c1:03:b2:c0:4c:b1:0e:28:6a:f2:52:dc:1b: bb:2b:2f:a7:3f:43:e5:b7:b9:bc:82:b3:eb:9f:16: ad:ac:da:a0:78:da:a1:52:fc:df:c9:81:e0:25:67: 4c:33:63:0f:e0:36:52:8b:16:94:77:58:ef:d6:39: f4:0e:fe:bf:f0:b5:6e:62:dd:d7:8d:d9:b5:8e:9e: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 66.82.0.0/16 67.44.0.0/14 67.142.0.0/15 69.19.0.0/17 69.35.0.0/16 72.168.0.0/14 97.72.0.0/15 139.85.0.0/16 174.32.0.0/15 184.52.0.0/15 192.16.171.0/24 192.31.73.0/24 192.190.65.0/24 206.71.96.0/19 IPv6: 2001:5b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1358 6621 63062 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5d:9e:ca:ee:ee:08:82:84:f5:bb:9b:eb:78:47:ac:82:81: 4f:f0:f7:97:d1:88:ca:0a:d2:92:df:de:45:d8:a3:73:4a:a9: 40:5a:6a:6b:28:61:9f:1f:64:26:41:77:7d:48:cc:22:be:de: 1f:3e:85:df:71:01:3e:80:28:08:0c:a2:3a:37:40:ba:fd:01: d6:2f:a9:7a:7a:26:b6:20:7d:7b:48:eb:8a:fa:95:f6:c9:40: 68:57:fa:64:41:7d:10:6b:3e:60:ec:0a:dd:aa:7f:56:61:38: 18:3a:c5:33:10:4a:eb:47:56:1d:8f:3b:f1:e6:27:9f:a8:b2: b3:ec:8b:7f:0f:24:35:3e:a4:9e:ff:57:fe:af:e7:d1:73:a7: eb:3a:80:95:18:d1:57:7a:b3:12:28:ab:cd:f1:87:89:f8:f6: 8e:f7:75:50:74:00:3d:4b:8f:a1:49:4c:98:ff:1e:14:b2:95: 0e:b5:01:c2:08:1b:e3:a5:d4:d6:78:e6:d1:5f:2a:18:b6:7c: d3:f0:49:b1:5a:d7:27:fc:29:3f:7c:29:0b:f4:10:f5:e5:f0: 7e:13:06:18:87:b2:ef:7b:07:90:05:b8:34:65:be:cf:0b:3f: 07:4b:2d:f7:8a:94:dc:45:6c:fb:97:cf:af:70:5e:bb:ab:3f: 38:40:18:4c -----BEGIN CERTIFICATE----- MIIHZTCCBk2gAwIBAgIUAQ0Mn0MoWEuH4ZMApMn5Dh9lJaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI1MTAxNTE0MzYyMFoXDTI2MTEzMDAxNDUyNlowLzEtMCsGA1UEAxMk ZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0NDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprEi2hu2VDv4aF0KBYpLiP7Ybfzm44+FhUtf PVYhmIPOy8/WoVTRcTZMBnSjSQK6yGjJKpPw7CQhN3+h2/Rhj8tuoZwjp3jBpHNO N7NCAoxcYAlR3O4558W7LeDO0YDmaHtStt5uJzQMSDMZ7WlynWPSo990UPRx95BJ opEkHjLJa0XrGE2lEECaiPNr2atkIfAUnEutN9lZ5Oydwx4VZdoat69b89U5lMSD m99SQZSIDXSkT8EDssBMsQ4oavJS3Bu7Ky+nP0Plt7m8grPrnxatrNqgeNqhUvzf yYHgJWdMM2MP4DZSixaUd1jv1jn0Dv6/8LVuYt3Xjdm1jp5rqwIDAQABo4IEdzCC BHMwHQYDVR0OBBYEFN4WUSBWg9YIE+ZCRY79FnDuh2+7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k MWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2QxZjg4NmRmLTZjNTgtNGVhNy05 ZDFmLTA2NTllMjMyNDQ2MC9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIz MjQ0NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwcwYIKwYBBQUH AQcBAf8EZDBiMFEEAgABMEsDAwBCUgMDAkMsAwMBQ44DBAdFEwADAwBFIwMDAkio AwMBYUgDAwCLVQMDAa4gAwMBuDQDBADAEKsDBADAH0kDBADAvkEDBAXOR2AwDQQC AAIwBwMFACABBbAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICBU4CAhndAgMA9lYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZF2eyu7uCIKE9bub63hHrIKBT/D3l9GIygrSkt/eRdijc0qpQFpq ayhhnx9kJkF3fUjMIr7eHz6F33EBPoAoCAyiOjdAuv0B1i+penomtiB9e0jrivqV 9slAaFf6ZEF9EGs+YOwK3ap/VmE4GDrFMxBK60dWHY878eYnn6iys+yLfw8kNT6k nv9X/q/n0XOn6zqAlRjRV3qzEiirzfGHifj2jvd1UHQAPUuPoUlMmP8eFLKVDrUB wggb46XU1njm0V8qGLZ80/BJsVrXJ/wpP3wpC/QQ9eXwfhMGGIey73sHkAW4NGW+ zws/B0st94qU3EVs+5fPr3Beu6s/OEAYTA== -----END CERTIFICATE-----Generated at Sun Oct 26 22:27:55 2025 by rpki-client