$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer File: 2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer (raw, json) Hash identifier: +rQKmieKhp/mSvMpIhYCH1j/fq9bljo0b3+Xoqg3PrU= Subject key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849ABACFAB643B599ECC828FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 00:45:35 +0000 Certificate not after: Sun 01 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 26461 IP: 208.91.232.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:ac:fa:b6:43:b5:99:ec:c8:28:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 28 00:45:35 2025 GMT Not After : Aug 1 00:45:35 2027 GMT Subject: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:39:e6:f4:ff:a9:62:0c:d6:7c:d9:b8:b2: eb:69:ca:2f:77:c3:a9:b9:9b:94:20:a2:f8:1a:f8: 0b:74:99:f8:50:87:30:d2:a1:7c:d1:c0:a3:e5:a5: 58:67:0b:cd:7b:fa:08:41:ed:08:bd:97:2a:3c:ae: 20:e6:b6:11:54:3b:82:c9:13:0e:d9:4b:25:a5:40: 08:cd:89:7b:4a:0b:1f:41:cd:ae:dc:81:b4:40:7a: bd:66:77:bc:7e:99:cf:d5:4d:4b:97:6b:39:da:23: 29:91:66:5d:2e:fc:41:61:bf:22:97:1d:46:62:29: 75:78:b6:70:79:7e:d2:ff:a1:18:14:4a:ec:2d:4d: e9:39:45:ae:3f:f6:c5:8c:62:4f:bf:be:46:ff:dc: af:f7:a5:db:6a:52:53:20:af:ad:8b:42:f5:a4:28: e2:ed:60:c5:ff:4b:d3:dd:b7:55:ec:46:47:b0:8f: 43:ea:c6:b1:fe:3b:66:34:80:7c:e5:32:b6:d1:82: 16:d5:d9:bb:62:58:b4:0d:fd:5c:0b:e7:8e:10:f4: b9:de:69:bd:66:d5:71:07:86:ac:1c:06:dd:c6:7a: 0c:db:85:26:89:ab:93:c0:31:62:1e:13:3e:12:e1: 84:0f:b8:56:1c:70:ef:28:58:03:a0:93:4f:09:e6: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 208.91.232.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26461 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f8:40:72:00:c9:fb:ad:99:99:38:32:4a:32:67:f9:d0:8a: e5:6b:22:6c:9b:33:86:db:5a:a8:6c:72:c3:17:8e:e8:f4:a5: 80:64:6e:68:fd:b4:28:60:06:67:34:a6:3a:0f:3c:31:37:89: 75:43:8a:17:36:4e:4f:5f:c6:0f:be:12:26:d1:ac:ac:06:2e: 6e:79:90:a9:43:57:7c:fa:85:1a:f5:83:9c:de:3d:32:ef:87: 72:20:82:41:e6:d8:30:d6:a2:60:ad:e0:c9:a6:d7:7c:91:4a: 9c:5f:87:9d:4a:10:4c:88:72:ec:7d:a8:dc:cb:1c:58:db:85: 13:3d:ab:e0:58:3e:70:18:38:ad:91:9b:62:79:db:a5:bb:33: c3:67:a0:e4:94:c1:eb:5f:af:eb:2c:7d:86:74:66:07:1a:12: 0e:18:32:1e:96:01:3e:e4:36:b3:ae:12:a1:f8:5b:20:92:68: f6:ea:cb:f9:a2:4c:df:e3:75:79:8d:0b:8c:52:2a:34:f3:21: e7:8b:86:f5:ae:a7:3f:36:b7:d2:f2:4b:be:bb:4a:c6:b5:19: 07:0b:29:13:f2:cd:f8:f2:ec:ac:11:0b:be:11:1f:33:f3:6f: 25:d2:79:73:b5:ed:83:79:4a:04:59:7f:ce:d9:ad:88:e2:dc: 97:8a:6c:dd -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEmrrPq2Q7WZ7Mgo/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyODAwNDUzNVoXDTI3MDgwMTAwNDUzNVowLzEtMCsGA1UEAxMk MmRlZTliMDAtN2Y5ZS00ZDJjLThlMTctNDk0ZGZmYTY2OTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4455vT/qWIM1nzZuLLracovd8OpuZuUIKL4 GvgLdJn4UIcw0qF80cCj5aVYZwvNe/oIQe0IvZcqPK4g5rYRVDuCyRMO2UslpUAI zYl7SgsfQc2u3IG0QHq9Zne8fpnP1U1Ll2s52iMpkWZdLvxBYb8ilx1GYil1eLZw eX7S/6EYFErsLU3pOUWuP/bFjGJPv75G/9yv96XbalJTIK+ti0L1pCji7WDF/0vT 3bdV7EZHsI9D6sax/jtmNIB85TK20YIW1dm7Yli0Df1cC+eOEPS53mm9ZtVxB4as HAbdxnoM24UmiauTwDFiHhM+EuGED7hWHHDvKFgDoJNPCeZJ+wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFFvZ3+NV8B6f9TvyDrP8jFT7xphMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y ZGVlOWIwMC03ZjllLTRkMmMtOGUxNy00OTRkZmZhNjY5MDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzJkZWU5YjAwLTdmOWUtNGQyYy04 ZTE3LTQ5NGRmZmE2NjkwMi8yZGVlOWIwMC03ZjllLTRkMmMtOGUxNy00OTRkZmZh NjY5MDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQW+gwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Z10wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJPhAcgDJ+62ZmTgySjJn+dCK5WsibJszhttaqGxywxeO6PSl gGRuaP20KGAGZzSmOg88MTeJdUOKFzZOT1/GD74SJtGsrAYubnmQqUNXfPqFGvWD nN49Mu+HciCCQebYMNaiYK3gyabXfJFKnF+HnUoQTIhy7H2o3MscWNuFEz2r4Fg+ cBg4rZGbYnnbpbszw2eg5JTB61+v6yx9hnRmBxoSDhgyHpYBPuQ2s64SofhbIJJo 9urL+aJM3+N1eY0LjFIqNPMh54uG9a6nPza30vJLvrtKxrUZBwspE/LN+PLsrBEL vhEfM/NvJdJ5c7Xtg3lKBFl/ztmtiOLcl4ps3Q== -----END CERTIFICATE-----Generated at Sat Nov 1 00:46:55 2025 by rpki-client