$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer File: 0858b07f-775e-4c05-ae48-d43b5d938b9b.cer (raw, json) Hash identifier: yckBBbO0plPghW9zMPP4on5+QU8jY7v36AA7u/wZzmE= Subject key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849AD125069302E07B1709B7520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 12:45:34 +0000 Certificate not after: Sun 01 Aug 2027 12:45:34 +0000 Subordinate resources: IP: 165.125.0.0/16 IP: 199.79.232.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:12:50:69:30:2e:07:b1:70:9b:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 28 12:45:34 2025 GMT Not After : Aug 1 12:45:34 2027 GMT Subject: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:9f:6c:8c:b7:23:76:e7:ad:b6:a3:45:9e: a7:f1:16:ea:25:d2:19:03:94:a8:b9:0f:f1:32:23: 9a:34:a5:62:ee:07:ea:63:82:03:98:ee:d5:fe:31: 37:84:33:13:7e:fb:d4:48:51:f7:1d:99:e0:c6:f2: 41:72:46:20:40:c4:c9:e1:30:d4:a7:bf:0d:f8:71: fd:f9:f4:69:55:e6:50:65:e7:0b:b0:e9:f5:2c:b0: 83:0d:8f:e0:dc:0d:c4:eb:b4:89:1c:9e:6f:08:0b: 19:26:fd:f9:ee:c8:56:34:b9:0b:a0:b7:e7:25:79: 09:f0:2d:ee:61:a2:1b:e7:ef:f9:f6:e4:1e:11:02: 60:96:0b:33:19:9b:1e:39:5e:3f:0c:fe:d9:90:1c: 72:56:03:a5:32:85:77:43:46:d1:87:7d:44:27:f3: b0:f0:04:47:3c:0d:98:d7:83:ce:09:15:5e:59:a9: 05:59:e7:95:77:ea:7d:ab:2e:2a:03:bc:f5:9f:d6: 2b:52:df:a9:04:1d:fd:1e:46:23:a4:fb:b7:b5:db: 37:32:9d:82:e5:08:50:b0:8d:24:b2:ca:f6:54:7f: d0:92:ea:27:5b:d2:6d:fc:40:78:48:3b:01:88:04: b0:65:b4:5d:7a:26:e0:be:5b:ce:78:f8:e9:1f:f5: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 165.125.0.0/16 199.79.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e1:a1:4c:75:8c:b2:96:ad:7c:0a:f3:3f:09:3b:4a:c8:be: 72:4a:d1:81:0f:5e:74:07:82:fb:db:5d:2f:96:c7:34:77:3c: 67:d8:ca:1e:6c:6b:0b:99:cc:0d:e9:91:b8:91:72:82:5a:03: 58:35:7f:01:43:a2:27:4b:2c:cb:f1:af:34:95:00:df:c4:aa: d0:bb:8b:e0:9c:a8:b2:75:b2:f1:c2:d1:77:3f:b3:84:dd:1c: cd:27:f3:cf:d3:a1:c3:cc:c5:2a:b5:c1:69:03:a0:6d:c8:59: 7f:33:b1:59:21:59:91:b5:b3:1c:ed:57:8a:0f:a8:ce:3b:9c: 2c:cd:3c:8f:d6:af:92:4c:9a:6f:5a:ce:9c:b1:43:04:c4:aa: 91:8d:e8:bd:55:cc:1f:55:c3:2a:e9:e1:1c:68:1f:fb:cc:0c: cc:84:05:a7:f6:3f:ea:c2:df:2b:94:c9:5d:e0:57:b6:60:78: bd:82:2f:05:87:75:96:f5:22:11:86:11:39:ce:a0:ac:4f:a7: 07:15:f6:d2:53:f9:40:96:9c:c6:1a:15:6c:fc:ef:c7:36:73: 48:0f:17:7a:66:d6:e4:3a:e6:43:c8:a0:e1:06:e0:e9:f8:a5: 54:7f:23:be:98:09:cc:d6:9a:3b:8b:59:3b:6a:2d:86:0d:f5: cc:db:7c:a7 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEmtElBpMC4HsXCbdSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyODEyNDUzNFoXDTI3MDgwMTEyNDUzNFowLzEtMCsGA1UEAxMk MDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloefbIy3I3bnrbajRZ6n8RbqJdIZA5SouQ/x MiOaNKVi7gfqY4IDmO7V/jE3hDMTfvvUSFH3HZngxvJBckYgQMTJ4TDUp78N+HH9 +fRpVeZQZecLsOn1LLCDDY/g3A3E67SJHJ5vCAsZJv357shWNLkLoLfnJXkJ8C3u YaIb5+/59uQeEQJglgszGZseOV4/DP7ZkBxyVgOlMoV3Q0bRh31EJ/Ow8ARHPA2Y 14POCRVeWakFWeeVd+p9qy4qA7z1n9YrUt+pBB39HkYjpPu3tds3Mp2C5QhQsI0k ssr2VH/QkuonW9Jt/EB4SDsBiASwZbRdeibgvlvOePjpH/VJ/wIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFM5vpPS4ASzWxu/GMkotjXi8HQ2LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w ODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzA4NThiMDdmLTc3NWUtNGMwNS1h ZTQ4LWQ0M2I1ZDkzOGI5Yi8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5 MzhiOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwClfQMEAsdP6DBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf4aFMdYyylq18 CvM/CTtKyL5yStGBD150B4L7210vlsc0dzxn2MoebGsLmcwN6ZG4kXKCWgNYNX8B Q6InSyzL8a80lQDfxKrQu4vgnKiydbLxwtF3P7OE3RzNJ/PP06HDzMUqtcFpA6Bt yFl/M7FZIVmRtbMc7VeKD6jOO5wszTyP1q+STJpvWs6csUMExKqRjei9VcwfVcMq 6eEcaB/7zAzMhAWn9j/qwt8rlMld4Fe2YHi9gi8Fh3WW9SIRhhE5zqCsT6cHFfbS U/lAlpzGGhVs/O/HNnNIDxd6ZtbkOuZDyKDhBuDp+KVUfyO+mAnM1po7i1k7ai2G DfXM23yn -----END CERTIFICATE-----Generated at Mon Oct 20 20:31:44 2025 by rpki-client