$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer File: 10cf0e64-be53-4add-9414-d9b9f7f83aab.cer (raw, json) Hash identifier: WnDscPBW0pvKNXgiPFBYcmuK7ibIlPruKi7/Jxw8Xqo= Subject key identifier: 19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849FE082AED971F36334160F320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 May 2025 12:45:36 +0000 Certificate not after: Mon 30 Aug 2027 12:45:36 +0000 Subordinate resources: AS: 398906 IP: 203.217.148.0/23 IP: 2602:f967::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:08:2a:ed:97:1f:36:33:41:60:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 27 12:45:36 2025 GMT Not After : Aug 30 12:45:36 2027 GMT Subject: CN=10cf0e64-be53-4add-9414-d9b9f7f83aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cd:75:ff:19:f5:ec:b3:0a:22:fa:80:51:91: 91:02:58:20:b8:29:d7:0c:cf:75:0e:ce:13:04:72: 8f:6e:c8:a6:90:d4:5c:36:ac:5e:71:6d:ae:81:23: 9c:eb:e0:59:2d:22:75:2d:a7:5e:e5:2a:01:88:d8: ec:49:f1:a9:bf:1e:17:9f:f8:72:fa:62:f7:c0:b7: 35:52:b6:0d:b2:ba:33:b6:f0:93:2c:80:07:a9:36: c4:9e:8d:dd:f1:b7:98:39:c6:da:c6:bc:23:49:f8: 08:1b:e9:07:30:47:48:26:a7:a1:48:9e:49:2c:de: 52:b1:80:34:25:3d:67:ba:94:8c:f2:e5:bb:06:cb: 0a:a2:3c:a3:41:be:4a:9e:7a:84:54:6d:52:e3:8e: 48:3c:02:f3:2b:9a:55:a8:da:5e:8f:01:ff:40:e7: 53:85:bd:f1:39:21:e3:19:89:a6:51:aa:70:28:bb: 7a:75:4d:b4:f8:e6:1a:71:0e:0f:c5:51:99:98:49: 9c:1f:48:d2:e0:86:e6:18:49:28:7c:d5:58:83:18: cd:d5:f2:12:d1:e9:3f:47:a2:f7:3f:ec:05:f3:06: d0:99:5d:aa:aa:3c:89:14:66:3f:8b:62:d9:78:8a: 47:54:bb:5a:b1:c7:d9:dd:3a:04:38:0b:34:ff:30: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 203.217.148.0/23 IPv6: 2602:f967::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398906 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:8c:32:d5:98:9b:d7:37:c5:25:7d:70:4d:56:b8:54:fd:2a: 85:b2:12:5f:13:59:34:c8:02:7f:74:82:93:95:af:f2:cb:eb: aa:86:65:c4:98:71:02:ee:db:e7:fd:cf:7c:b7:54:ae:a8:f6: b4:66:0e:49:16:f4:43:14:64:c3:bb:8e:69:e2:09:69:b5:38: 7c:90:d8:04:a1:29:9e:d4:2e:64:44:77:00:b9:77:33:11:35: 95:71:85:9a:d9:44:a9:3a:4d:8e:0f:89:0f:38:68:e3:b6:5c: 0e:ee:7f:75:10:02:45:5b:be:9a:16:eb:8c:66:bb:b8:b5:40: f4:9c:84:35:99:6d:c9:e5:1d:32:f4:45:54:29:28:2e:9a:8f: c0:f1:f2:5c:a9:e3:3f:9f:7a:85:e6:77:1c:76:b9:48:7a:7e: 88:54:0e:5b:17:e1:c1:37:ee:0a:c0:a9:15:b4:d2:61:fe:6c: b9:b8:20:b7:61:2d:54:9f:af:f2:5c:48:cd:00:b9:0b:81:27: d5:e7:58:f7:e5:f9:04:b9:af:f6:d7:87:0b:5a:6e:b5:cf:46: 16:7f:52:e9:85:d3:7b:0e:fd:ce:d1:9c:00:9e:f3:7f:ad:c6: 14:49:00:f5:e3:1c:83:54:77:57:ab:15:2b:52:1e:8f:b4:2b: de:82:00:1d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEn+CCrtlx82M0Fg8yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyNzEyNDUzNloXDTI3MDgzMDEyNDUzNlowLzEtMCsGA1UEAxMk MTBjZjBlNjQtYmU1My00YWRkLTk0MTQtZDliOWY3ZjgzYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic11/xn17LMKIvqAUZGRAlgguCnXDM91Ds4T BHKPbsimkNRcNqxecW2ugSOc6+BZLSJ1Lade5SoBiNjsSfGpvx4Xn/hy+mL3wLc1 UrYNsroztvCTLIAHqTbEno3d8beYOcbaxrwjSfgIG+kHMEdIJqehSJ5JLN5SsYA0 JT1nupSM8uW7BssKojyjQb5KnnqEVG1S445IPALzK5pVqNpejwH/QOdThb3xOSHj GYmmUapwKLt6dU20+OYacQ4PxVGZmEmcH0jS4IbmGEkofNVYgxjN1fIS0ek/R6L3 P+wF8wbQmV2qqjyJFGY/i2LZeIpHVLtascfZ3ToEOAs0/zDpLQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBkKIrLimp6p4awQeA41vRKuClg/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x MGNmMGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5ZjdmODNhYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzEwY2YwZTY0LWJlNTMtNGFkZC05 NDE0LWQ5YjlmN2Y4M2FhYi8xMGNmMGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5Zjdm ODNhYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHL2ZQwDgQCAAIwCAMGACYC+WcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYWOjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1jDLVmJvXN8UlfXBNVrhU/SqF shJfE1k0yAJ/dIKTla/yy+uqhmXEmHEC7tvn/c98t1SuqPa0Zg5JFvRDFGTDu45p 4glptTh8kNgEoSme1C5kRHcAuXczETWVcYWa2USpOk2OD4kPOGjjtlwO7n91EAJF W76aFuuMZru4tUD0nIQ1mW3J5R0y9EVUKSgumo/A8fJcqeM/n3qF5nccdrlIen6I VA5bF+HBN+4KwKkVtNJh/my5uCC3YS1Un6/yXEjNALkLgSfV51j35fkEua/214cL Wm61z0YWf1LphdN7Dv3O0ZwAnvN/rcYUSQD14xyDVHdXqxUrUh6PtCveggAd -----END CERTIFICATE-----Generated at Wed Oct 29 09:10:31 2025 by rpki-client