$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer File: 30040710-7ccf-4c85-98c7-8d6246d146f5.cer (raw, json) Hash identifier: UsvzxhKjS7wPi0nsLth4BcIuJo+QGUg5sAXy/H+alRw= Subject key identifier: 88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A98F9230EE1D8B782230E14A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 00:45:36 +0000 Certificate not after: Mon 25 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 399478 IP: 23.176.240.0/24 IP: 2620:95:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:f9:23:0e:e1:d8:b7:82:23:0e:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 22 00:45:36 2025 GMT Not After : Oct 25 00:45:36 2027 GMT Subject: CN=30040710-7ccf-4c85-98c7-8d6246d146f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:18:98:54:e0:fc:a2:0b:4a:bf:fc:15:ae: ce:be:9a:96:ab:66:f8:d3:b9:7c:d3:85:75:e6:b9: 37:d6:8a:20:07:9d:e6:d8:31:18:1f:a0:59:5f:ab: 13:5f:80:b1:bf:06:4f:e3:29:09:fd:d4:4e:1c:ed: 95:f3:e1:54:cc:c3:c0:f9:32:13:84:bf:b1:a4:03: cd:5f:6f:c7:45:41:2b:f6:76:56:e2:60:9b:8a:28: f6:ec:5f:d8:28:e6:56:98:72:f3:50:8e:7c:10:04: d7:2c:6d:08:21:91:9e:dc:ec:66:84:d5:70:31:1b: 0d:c7:e2:39:22:ac:ec:fd:b4:ff:a8:9e:3c:d2:10: 37:bb:fe:53:83:3e:cd:bf:28:90:89:2e:7a:58:44: e0:e6:17:c3:ec:75:a6:2c:69:17:25:4a:63:4b:16: dc:68:48:d2:df:58:3d:99:97:e2:61:11:5d:81:0f: 32:72:79:ee:93:ef:82:d7:91:56:82:a3:47:9a:fc: e7:c0:bc:13:40:20:12:21:81:98:c5:b8:ec:07:d5: 7e:b8:2f:14:d1:6d:a5:3e:b6:7f:42:3b:0a:27:ff: f4:9b:a2:6f:e3:69:56:b1:7d:65:3d:76:93:2e:68: 86:51:5a:85:86:57:1e:ab:28:5c:76:62:77:c7:95: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.176.240.0/24 IPv6: 2620:95:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399478 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:28:d6:27:d9:86:1d:21:51:3a:84:87:fd:24:05:27:3d:c7: c5:1e:b2:27:a6:58:e6:e2:76:c7:8d:01:de:09:1c:b0:d2:85: 0e:ff:06:e8:b3:18:8b:8d:a0:4f:8d:e8:00:07:61:ce:9e:30: 90:c5:86:af:9d:00:78:39:49:90:9a:3d:74:70:d6:22:be:84: 9f:59:cc:2f:ad:b8:59:49:54:b9:da:5a:73:79:ab:e5:a3:b1: 02:77:b4:f3:a0:3f:9e:ad:ef:4a:06:a2:71:0f:a7:63:42:3d: 6e:e3:c2:f0:a6:7f:8e:56:87:a3:55:ce:28:31:b1:bc:01:36: 3c:d1:8d:11:24:73:f9:b3:27:f5:17:c6:b9:db:5c:01:d9:bd: ff:a2:a7:ec:b0:06:3d:9a:51:39:e4:a4:31:5b:0b:27:a0:d9: 47:86:7f:2a:a6:4e:3b:47:a4:6e:f8:09:d9:5b:70:e5:ef:a8: 01:e8:b2:cc:0e:d3:34:62:ff:65:19:e3:5f:d2:0b:89:ad:f5: d2:89:43:2c:6a:1e:3e:d9:9e:e0:5c:96:52:86:6d:78:fe:62: ae:c5:b5:88:d2:94:0d:15:f7:ba:ff:9f:99:43:d4:75:f9:95: 8d:c8:09:4c:4f:94:59:4d:95:f5:fb:43:66:56:ec:26:59:c7: 20:55:72:c4 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEqY+SMO4di3giMOFKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMjAwNDUzNloXDTI3MTAyNTAwNDUzNlowLzEtMCsGA1UEAxMk MzAwNDA3MTAtN2NjZi00Yzg1LTk4YzctOGQ2MjQ2ZDE0NmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n8YmFTg/KILSr/8Fa7OvpqWq2b407l804V1 5rk31oogB53m2DEYH6BZX6sTX4CxvwZP4ykJ/dROHO2V8+FUzMPA+TIThL+xpAPN X2/HRUEr9nZW4mCbiij27F/YKOZWmHLzUI58EATXLG0IIZGe3OxmhNVwMRsNx+I5 Iqzs/bT/qJ480hA3u/5Tgz7NvyiQiS56WETg5hfD7HWmLGkXJUpjSxbcaEjS31g9 mZfiYRFdgQ8ycnnuk++C15FWgqNHmvznwLwTQCASIYGYxbjsB9V+uC8U0W2lPrZ/ QjsKJ//0m6Jv42lWsX1lPXaTLmiGUVqFhlceqyhcdmJ3x5VryQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFIhJbJoGQdeyLm3/7LbNJFu3uwoxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z MDA0MDcxMC03Y2NmLTRjODUtOThjNy04ZDYyNDZkMTQ2ZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzMwMDQwNzEwLTdjY2YtNGM4NS05 OGM3LThkNjI0NmQxNDZmNS8zMDA0MDcxMC03Y2NmLTRjODUtOThjNy04ZDYyNDZk MTQ2ZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXsPAwDwQCAAIwCQMHACYgAJWgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGGHYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOijWJ9mGHSFROoSH/SQFJz3H xR6yJ6ZY5uJ2x40B3gkcsNKFDv8G6LMYi42gT43oAAdhzp4wkMWGr50AeDlJkJo9 dHDWIr6En1nML624WUlUudpac3mr5aOxAne086A/nq3vSgaicQ+nY0I9buPC8KZ/ jlaHo1XOKDGxvAE2PNGNESRz+bMn9RfGudtcAdm9/6Kn7LAGPZpROeSkMVsLJ6DZ R4Z/KqZOO0ekbvgJ2Vtw5e+oAeiyzA7TNGL/ZRnjX9ILia310olDLGoePtme4FyW UoZteP5irsW1iNKUDRX3uv+fmUPUdfmVjcgJTE+UWU2V9ftDZlbsJlnHIFVyxA== -----END CERTIFICATE-----Generated at Thu Jul 31 08:09:57 2025 by rpki-client