$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer File: 31671c23-3278-409b-837d-7dfe69606940.cer (raw, json) Hash identifier: D9I1TT2p4EC5ReVSODvLPtUuP0N+kcyoSwh8ucYVGdw= Subject key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A856E56BCA2A30AE182BC8E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Jul 2025 00:45:35 +0000 Certificate not after: Mon 18 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 19787 IP: 45.33.202.0/23 IP: 170.62.42.0/23 IP: 2620:13c:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:6e:56:bc:a2:a3:0a:e1:82:bc:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 15 00:45:35 2025 GMT Not After : Oct 18 00:45:35 2027 GMT Subject: CN=31671c23-3278-409b-837d-7dfe69606940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:75:24:ad:6d:94:09:4d:0a:2f:e7:a3:b2: 5c:c7:a4:ee:3d:15:23:a6:19:3e:05:1e:5d:ef:e7: 12:c4:7b:4d:59:72:ca:f8:9f:33:e3:15:2c:1b:ee: cf:89:de:5a:96:b0:25:93:98:8f:4a:72:5a:67:96: 96:44:01:6d:f1:d4:62:28:b7:47:70:fd:0d:8e:74: d5:4f:c4:1c:26:ec:1a:f6:0d:a3:68:25:48:3b:a2: 9e:24:9f:5f:47:b3:ce:0a:54:1b:9e:b4:02:44:54: 8a:93:ca:5a:8c:ca:93:7d:e1:84:e7:17:0f:61:39: de:e5:2d:b9:ca:d9:d8:3b:32:5c:e1:94:c1:3c:c6: ec:37:51:c6:1f:17:8d:ec:9e:86:84:7a:d4:85:81: ca:03:a8:71:f0:b4:8a:a5:47:51:69:ce:1a:58:b3: 74:95:56:8a:2d:ed:fc:9b:30:7d:4a:14:77:27:b5: 08:33:9e:74:39:93:69:e4:a3:61:6b:07:56:18:3f: 5e:13:07:f4:c4:51:96:59:08:6e:58:60:f1:1f:d1: 00:7d:05:4d:52:30:b2:5f:85:dc:f1:87:e9:66:76: 5d:45:c4:be:f5:f0:ad:df:ca:df:c3:6f:6f:6a:5e: 0a:da:21:01:13:89:d3:54:55:90:56:4f:d7:6a:0f: b7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 45.33.202.0/23 170.62.42.0/23 IPv6: 2620:13c:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19787 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:87:e1:d9:91:65:9b:4c:27:d2:b7:87:a2:97:6a:82:c1:70: ee:fd:a4:6c:1f:df:ab:80:50:71:e5:7d:7a:6f:da:6c:50:d5: 3d:28:9c:96:ac:62:b4:af:44:5b:31:a2:ea:6c:15:ec:56:19: d2:af:db:e2:a5:12:91:f1:57:91:41:7c:b1:01:b9:97:df:48: ce:87:da:2b:cf:b2:86:f5:c5:76:28:a9:ff:2d:6f:86:6d:ac: c8:68:0a:b8:f5:de:5b:0d:3e:f9:b0:4d:91:20:67:45:cb:0e: 22:37:a1:e3:d0:16:51:73:af:dd:9d:d1:b1:ad:8c:b2:f7:2e: 4a:29:7b:4f:94:d6:46:63:b7:3e:55:d0:d6:f6:4a:56:b7:62: dc:cc:51:89:ba:e2:ee:d4:cc:48:4c:b1:f5:ef:33:50:c3:d9: 5b:e1:4f:c4:b6:66:e3:41:a5:95:3a:d5:13:3b:ca:d0:0d:da: c1:83:68:c4:c4:21:67:60:7b:09:c3:c6:97:a3:0a:24:68:82: 0c:e4:2f:07:8c:c6:8a:bc:06:8a:eb:c3:0b:d3:9b:8d:45:af: 21:ed:37:96:f2:eb:d0:73:c0:7e:8e:35:c7:12:29:dd:c1:60: 0e:21:b6:4b:f6:74:14:d0:37:0d:22:de:c1:52:bc:14:63:de: 03:47:73:02 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEqFbla8oqMK4YK8jkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxNTAwNDUzNVoXDTI3MTAxODAwNDUzNVowLzEtMCsGA1UEAxMk MzE2NzFjMjMtMzI3OC00MDliLTgzN2QtN2RmZTY5NjA2OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5t1JK1tlAlNCi/no7Jcx6TuPRUjphk+BR5d 7+cSxHtNWXLK+J8z4xUsG+7Pid5alrAlk5iPSnJaZ5aWRAFt8dRiKLdHcP0NjnTV T8QcJuwa9g2jaCVIO6KeJJ9fR7POClQbnrQCRFSKk8pajMqTfeGE5xcPYTne5S25 ytnYOzJc4ZTBPMbsN1HGHxeN7J6GhHrUhYHKA6hx8LSKpUdRac4aWLN0lVaKLe38 mzB9ShR3J7UIM550OZNp5KNhawdWGD9eEwf0xFGWWQhuWGDxH9EAfQVNUjCyX4Xc 8YfpZnZdRcS+9fCt38rfw29val4K2iEBE4nTVFWQVk/Xag+3PwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFGcWI+BnWjAfUVKvP0cv/CfOjT8aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z MTY3MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZlNjk2MDY5NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzMxNjcxYzIzLTMyNzgtNDA5Yi04 MzdkLTdkZmU2OTYwNjk0MC8zMTY3MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZlNjk2 MDY5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAEtIcoDBAGqPiowDwQCAAIwCQMHBCYgATzAADAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJNSzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHh+HZkWWbTCfSt4ei l2qCwXDu/aRsH9+rgFBx5X16b9psUNU9KJyWrGK0r0RbMaLqbBXsVhnSr9vipRKR 8VeRQXyxAbmX30jOh9orz7KG9cV2KKn/LW+GbazIaAq49d5bDT75sE2RIGdFyw4i N6Hj0BZRc6/dndGxrYyy9y5KKXtPlNZGY7c+VdDW9kpWt2LczFGJuuLu1MxITLH1 7zNQw9lb4U/EtmbjQaWVOtUTO8rQDdrBg2jExCFnYHsJw8aXowokaIIM5C8HjMaK vAaK68ML05uNRa8h7TeW8uvQc8B+jjXHEindwWAOIbZL9nQU0DcNIt7BUrwUY94D R3MC -----END CERTIFICATE-----Generated at Thu Jul 31 08:10:52 2025 by rpki-client