$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer File: 1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer (raw, json) Hash identifier: z2FM7qsA7r87DbC8hXnV1poPuNISPfHKNqiM94/+08I= Subject key identifier: 9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A883907AFF41B453DFCFF4000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 00:45:36 +0000 Certificate not after: Tue 19 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 55082 IP: 162.249.44.0/24 IP: 162.252.236.0/24 IP: 198.135.249.0/24 IP: 2620:e3:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:39:07:af:f4:1b:45:3d:fc:ff:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 16 00:45:36 2025 GMT Not After : Oct 19 00:45:36 2027 GMT Subject: CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:72:7f:fb:c6:42:90:da:05:1a:c2:23:cd: 9e:1d:51:b9:fe:dd:20:73:91:39:4d:eb:69:b4:8a: 9a:50:85:1e:e4:a3:3f:cf:2c:91:4b:76:ee:06:e2: 8d:77:af:bc:58:b8:28:02:72:03:40:e4:5d:67:76: fa:58:79:48:60:11:a2:6b:c1:8e:da:75:8e:19:f1: 34:8d:94:b8:ef:a7:ac:b5:f1:2e:5f:ee:5d:48:78: b9:64:d6:28:7a:19:da:0d:ba:b5:7c:c8:a8:a8:fb: 02:d7:ac:5c:09:69:c7:88:f3:d2:43:c4:f1:eb:b1: e3:71:cf:94:3c:8d:92:bf:ef:7c:d7:32:39:ef:45: 77:fe:70:fd:9b:90:2c:b2:45:29:82:92:4e:af:b1: be:7c:ea:81:c1:13:3f:02:7d:b7:48:95:69:50:ba: 2a:51:f1:93:98:52:5d:49:be:0d:e4:77:29:e5:f9: fc:6c:ac:49:63:30:28:a2:cf:44:73:05:57:8f:58: fd:6d:4b:96:86:0c:24:d2:80:cf:ac:51:0f:60:5e: 7d:fc:c9:91:b3:4b:e3:2e:97:5a:6f:c1:0e:44:d4: dd:95:1d:6f:5b:d5:99:52:ec:45:cf:bb:3a:71:f6: 12:2f:c0:c4:bc:11:2f:b8:c2:64:c4:13:d2:e3:a8: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.249.44.0/24 162.252.236.0/24 198.135.249.0/24 IPv6: 2620:e3:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55082 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:64:03:9b:da:df:a4:fd:02:e4:27:a7:66:9e:66:0e:e8:fd: 15:55:78:f4:92:74:a3:0f:ac:16:1c:51:91:ee:fa:e9:18:9a: 74:33:35:e7:73:1a:a2:2e:65:ea:a1:95:de:49:78:94:2b:da: 08:bd:b7:41:66:4c:32:02:0e:8b:e7:81:73:0b:e0:53:3b:3f: 01:8a:9a:c8:2b:30:0a:2c:03:b1:ba:b8:22:b2:19:62:07:c0: 05:51:e0:7d:7e:ee:31:e2:ac:99:a2:c7:a5:a2:6d:d4:58:e3: 75:af:05:f3:1e:db:f8:a7:8d:9d:ef:4a:d6:6f:f3:96:eb:46: 27:dd:7f:00:76:05:c1:a1:1c:37:61:53:a0:b9:25:14:b5:d3: b6:6e:2b:64:a5:2c:f9:87:23:92:c5:a2:9b:5d:cd:67:85:1e: 03:07:75:b0:82:e3:90:4e:5c:41:66:e8:bb:38:49:c6:c3:f1: 66:13:40:1e:a8:f2:72:6a:d4:bf:e7:f4:72:84:8d:80:d9:28: 8f:4b:ac:93:96:3c:cb:8d:11:69:d0:fd:cd:8d:32:6f:86:22: 55:98:45:3e:72:56:f2:2a:f2:01:61:05:04:0a:9c:90:71:d8: 66:cc:05:1e:66:59:c8:0b:0b:4b:77:2c:24:2d:cd:d6:66:b1: e2:5b:0e:0e -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWEqIOQev9BtFPfz/QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxNjAwNDUzNloXDTI3MTAxOTAwNDUzNlowLzEtMCsGA1UEAxMk MWYzYWUyMTEtMWM2Yy00ZTk4LTljYWEtOWU0YTlhMzg2YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Jyf/vGQpDaBRrCI82eHVG5/t0gc5E5Tetp tIqaUIUe5KM/zyyRS3buBuKNd6+8WLgoAnIDQORdZ3b6WHlIYBGia8GO2nWOGfE0 jZS476estfEuX+5dSHi5ZNYoehnaDbq1fMioqPsC16xcCWnHiPPSQ8Tx67Hjcc+U PI2Sv+981zI570V3/nD9m5AsskUpgpJOr7G+fOqBwRM/An23SJVpULoqUfGTmFJd Sb4N5Hcp5fn8bKxJYzAoos9EcwVXj1j9bUuWhgwk0oDPrFEPYF59/MmRs0vjLpda b8EORNTdlR1vW9WZUuxFz7s6cfYSL8DEvBEvuMJkxBPS46iFUwIDAQABo4IEODCC BDQwHQYDVR0OBBYEFJ4CCwvDi6YM4Th7rMwwIzGc0I0hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x ZjNhZTIxMS0xYzZjLTRlOTgtOWNhYS05ZTRhOWEzODZiM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzFmM2FlMjExLTFjNmMtNGU5OC05 Y2FhLTllNGE5YTM4NmIzZi8xZjNhZTIxMS0xYzZjLTRlOTgtOWNhYS05ZTRhOWEz ODZiM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBACi+SwDBACi/OwDBADGh/kwDwQCAAIwCQMHACYg AONAADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA1yowVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZmQDm9rf pP0C5CenZp5mDuj9FVV49JJ0ow+sFhxRke766RiadDM153Maoi5l6qGV3kl4lCva CL23QWZMMgIOi+eBcwvgUzs/AYqayCswCiwDsbq4IrIZYgfABVHgfX7uMeKsmaLH paJt1Fjjda8F8x7b+KeNne9K1m/zlutGJ91/AHYFwaEcN2FToLklFLXTtm4rZKUs +YcjksWim13NZ4UeAwd1sILjkE5cQWbouzhJxsPxZhNAHqjycmrUv+f0coSNgNko j0usk5Y8y40RadD9zY0yb4YiVZhFPnJW8iryAWEFBAqckHHYZswFHmZZyAsLS3cs JC3N1max4lsODg== -----END CERTIFICATE-----Generated at Thu Jul 31 08:04:50 2025 by rpki-client