$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer File: 0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer (raw, json) Hash identifier: f0qHmtK2tsJefJk8mZunhli8wOPwWjOt7Th+ts9Oop8= Subject key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A3743316C9C042BEA45382CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Jun 2025 00:45:36 +0000 Certificate not after: Mon 20 Sep 2027 00:45:36 +0000 Subordinate resources: IP: 23.173.152.0/24 IP: 2602:f94c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:43:31:6c:9c:04:2b:ea:45:38:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 17 00:45:36 2025 GMT Not After : Sep 20 00:45:36 2027 GMT Subject: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f6:04:fe:9c:7e:e9:90:1c:d0:99:50:ff:2a: 59:64:17:7f:2a:1b:63:89:56:e9:e3:cb:3b:57:36: a0:8c:e4:7c:ba:58:1f:5d:f3:96:a8:64:db:78:63: ee:bd:ea:4c:33:80:a9:88:1e:78:f1:51:d5:2a:25: d0:42:60:cb:7b:0b:1e:4e:e4:d7:bc:df:1c:75:a0: 68:dd:82:57:77:2d:26:d9:f8:ff:eb:54:61:c4:de: 00:7e:25:c7:22:63:6b:12:00:14:f0:15:e2:09:f1: 94:0b:81:2b:e2:40:6e:3e:e5:49:b8:b0:75:fe:ae: e9:56:34:3c:1b:c2:3a:f5:ea:ad:5f:25:e8:17:59: 36:4d:4b:15:6e:1a:fc:24:75:3e:a2:15:66:44:53: 2e:b1:c9:42:d7:be:9f:d4:35:e5:19:2a:86:24:44: e3:59:41:eb:45:4e:0e:9b:8e:dc:e1:14:97:c5:88: 40:41:5d:bb:2e:3c:0e:2d:f3:7a:eb:14:da:9e:b8: 65:75:7b:cb:4a:77:57:f4:9b:2a:90:ee:2c:87:f9: 9f:d5:56:55:cf:bc:65:68:c8:87:98:5f:4c:82:94: 26:de:27:62:f8:fb:0c:f6:a8:6f:41:b7:d3:65:c1: c4:57:a6:fa:4d:47:06:57:7b:1f:be:2d:3d:99:46: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.152.0/24 IPv6: 2602:f94c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4e:96:3f:da:97:75:07:02:f1:1e:2a:11:78:14:7a:d8:a0: fb:8b:f4:1d:43:03:d4:9a:97:14:0e:ca:60:e8:72:36:74:eb: 10:29:9c:b8:87:e2:95:73:16:20:4a:0d:f1:bb:f3:cf:ee:56: a3:a6:7e:18:a4:0d:4a:31:f2:aa:a4:97:81:bc:b4:21:91:97: 9b:a7:f8:93:f6:f7:fc:66:d4:73:94:b1:07:47:1c:30:a1:b1: e2:15:2b:44:79:46:7d:30:f3:0e:62:b5:bf:f3:63:87:07:67: bf:82:73:07:c4:e0:2d:66:46:eb:f8:3d:bd:12:c2:26:3b:48: c7:71:ec:ac:8c:6d:b0:dd:dc:1a:e6:0a:45:15:75:fa:50:38: ac:07:7a:1a:80:38:88:3c:34:97:45:94:97:41:19:3e:66:1e: ae:27:31:2b:dd:9a:77:45:05:09:56:6b:9e:58:a8:9b:5f:3e: b1:44:11:30:a0:b9:9b:a6:d0:e4:6f:76:33:5b:13:a2:fa:3d: dc:15:2d:af:44:48:0d:b0:e4:d3:e8:88:95:d6:21:ee:b8:2c: 14:1e:da:55:97:a1:81:6c:d0:fe:16:13:67:2f:95:bc:d4:d1: 51:17:bd:af:d3:5c:1a:e4:aa:b2:16:1d:09:b2:45:52:1d:9f: aa:25:e0:ce -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEo3QzFsnAQr6kU4LMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxNzAwNDUzNloXDTI3MDkyMDAwNDUzNlowLzEtMCsGA1UEAxMk MDg0NWJhM2ItOWZjMi00MGZiLWI3NGMtNDQ1YWNlOGI0MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fYE/px+6ZAc0JlQ/ypZZBd/KhtjiVbp48s7 VzagjOR8ulgfXfOWqGTbeGPuvepMM4CpiB548VHVKiXQQmDLewseTuTXvN8cdaBo 3YJXdy0m2fj/61RhxN4AfiXHImNrEgAU8BXiCfGUC4Er4kBuPuVJuLB1/q7pVjQ8 G8I69eqtXyXoF1k2TUsVbhr8JHU+ohVmRFMusclC176f1DXlGSqGJETjWUHrRU4O m47c4RSXxYhAQV27LjwOLfN66xTanrhldXvLSndX9JsqkO4sh/mf1VZVz7xlaMiH mF9MgpQm3idi+PsM9qhvQbfTZcHEV6b6TUcGV3sfvi09mUbtFwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFGuEQmnXcN0mivezUxb0rhYcY/C9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w ODQ1YmEzYi05ZmMyLTQwZmItYjc0Yy00NDVhY2U4YjQxODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzA4NDViYTNiLTlmYzItNDBmYi1i NzRjLTQ0NWFjZThiNDE4Mi8wODQ1YmEzYi05ZmMyLTQwZmItYjc0Yy00NDVhY2U4 YjQxODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrZgwDgQCAAIwCAMGACYC+UwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AC9Olj/al3UHAvEeKhF4FHrYoPuL9B1DA9SalxQOymDocjZ06xApnLiH4pVzFiBK DfG788/uVqOmfhikDUox8qqkl4G8tCGRl5un+JP29/xm1HOUsQdHHDChseIVK0R5 Rn0w8w5itb/zY4cHZ7+CcwfE4C1mRuv4Pb0SwiY7SMdx7KyMbbDd3BrmCkUVdfpQ OKwHehqAOIg8NJdFlJdBGT5mHq4nMSvdmndFBQlWa55YqJtfPrFEETCguZum0ORv djNbE6L6PdwVLa9ESA2w5NPoiJXWIe64LBQe2lWXoYFs0P4WE2cvlbzU0VEXva/T XBrkqrIWHQmyRVIdn6ol4M4= -----END CERTIFICATE-----Generated at Sun Nov 2 13:26:01 2025 by rpki-client