$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer File: 33c78d60-34eb-4fed-8e25-925b95a30c8e.cer (raw, json) Hash identifier: aWoGctQMty16SQ0nxz3mejKbnAVX25PlLH86k2+pDH0= Subject key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584B80AFCD4EDC008C4A6019E880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 00:45:23 +0000 Certificate not after: Sun 16 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 33039 IP: 23.173.104.0/23 IP: 142.248.216.0/22 IP: 2602:f95c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:af:cd:4e:dc:00:8c:4a:60:19:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 13 00:45:23 2025 GMT Not After : Jan 16 01:45:23 2028 GMT Subject: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:15:32:c6:da:3c:5c:0e:2c:38:69:19:99: 46:61:34:2a:b4:e3:4c:c5:50:70:db:3f:55:a5:26: 60:23:0d:de:28:43:5c:6f:33:9f:9e:ef:b7:99:ac: 43:f2:7a:d9:87:2a:7f:96:1b:5e:ed:be:eb:cc:40: 57:a5:f9:97:a7:da:a4:8a:07:57:4f:23:f6:c2:56: bc:43:a1:7a:50:32:99:d3:0f:16:83:6e:86:de:b9: a9:69:8f:02:67:ee:aa:1e:a9:fb:26:0b:62:a0:a2: 2a:2d:c7:9f:d9:61:ef:e5:13:da:2e:67:03:59:4d: 50:36:96:76:08:7b:3e:91:1d:4b:9e:14:8d:5d:b4: bd:01:30:47:a8:8e:a3:d9:35:66:c6:dc:d9:67:ac: 18:98:91:a1:5a:b8:59:75:e8:0a:95:a6:19:ef:75: bd:db:a9:bb:17:c3:ab:54:90:00:d9:36:e0:49:f5: 25:62:97:4d:7f:fb:56:f3:44:fa:40:aa:89:22:1d: 71:ed:ad:5b:2f:fd:a3:f8:37:0e:23:19:4e:9b:0d: 0e:35:8a:fd:86:bd:03:62:a0:2b:3f:7e:8b:8b:a5: 05:1e:f1:26:2c:0c:fc:30:cd:5f:4b:cf:07:ac:ca: 93:cf:a6:62:f3:53:b2:c7:07:dd:9b:55:53:e1:22: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.104.0/23 142.248.216.0/22 IPv6: 2602:f95c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33039 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c6:0a:89:10:f7:6d:9a:ec:ec:67:ef:f1:fb:a7:53:1a:ad: 21:7a:59:44:34:94:be:ae:2c:76:34:32:5b:c1:0f:ca:fe:31: 4b:6f:e2:8d:ef:9c:bf:77:bb:ec:a3:40:12:5c:98:e4:00:66: b0:0b:be:f0:2e:3a:ec:ec:bb:d0:47:3d:01:0d:90:56:bc:8d: b8:5e:60:b0:3f:06:20:5f:6c:9d:a5:b2:0b:cd:27:77:09:0e: 9f:05:68:6d:1b:28:e9:4f:08:cd:aa:42:8a:b2:22:a2:79:cf: b5:3d:bb:fc:1c:5b:44:b4:a4:4e:35:93:6d:3a:e6:00:30:1f: 5e:a6:b2:d0:cc:e2:3d:e8:64:90:c2:d4:e7:d8:07:c9:30:7c: f5:c0:5a:60:3b:a6:54:57:76:fa:d4:b0:0b:46:b8:2b:dd:db: 18:25:14:ad:1e:f1:c9:10:68:e9:84:da:c9:3e:c2:32:35:79: 8d:c6:32:88:50:79:f0:5f:f5:5a:34:b9:d6:6b:f8:de:84:0c: 40:e7:94:73:a9:84:93:b1:69:4c:82:e1:fe:ac:6d:9b:5e:de: 7f:34:68:c8:e4:f1:ec:21:f1:cc:86:f7:53:ff:6c:df:d9:d3: 7d:7e:63:5b:18:b3:35:f8:69:95:84:7d:28:67:26:a2:48:6b: 07:da:24:48 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEuAr81O3ACMSmAZ6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MTAxMzAwNDUyM1oXDTI4MDExNjAxNDUyM1owLzEtMCsGA1UEAxMk MzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMwYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ4VMsbaPFwOLDhpGZlGYTQqtONMxVBw2z9V pSZgIw3eKENcbzOfnu+3maxD8nrZhyp/lhte7b7rzEBXpfmXp9qkigdXTyP2wla8 Q6F6UDKZ0w8Wg26G3rmpaY8CZ+6qHqn7JgtioKIqLcef2WHv5RPaLmcDWU1QNpZ2 CHs+kR1LnhSNXbS9ATBHqI6j2TVmxtzZZ6wYmJGhWrhZdegKlaYZ73W926m7F8Or VJAA2TbgSfUlYpdNf/tW80T6QKqJIh1x7a1bL/2j+DcOIxlOmw0ONYr9hr0DYqAr P36Li6UFHvEmLAz8MM1fS88HrMqTz6Zi81Oyxwfdm1VT4SKSqQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFF9lJbBplyGC5uLTkUZ3ulwz0+BBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z M2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzMzYzc4ZDYwLTM0ZWItNGZlZC04 ZTI1LTkyNWI5NWEzMGM4ZS8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVh MzBjOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXrWgDBAKO+NgwDgQCAAIwCAMGBCYC+VwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCBDzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8xgqJEPdtmuzsZ+/x +6dTGq0hellENJS+rix2NDJbwQ/K/jFLb+KN75y/d7vso0ASXJjkAGawC77wLjrs 7LvQRz0BDZBWvI24XmCwPwYgX2ydpbILzSd3CQ6fBWhtGyjpTwjNqkKKsiKiec+1 Pbv8HFtEtKRONZNtOuYAMB9eprLQzOI96GSQwtTn2AfJMHz1wFpgO6ZUV3b61LAL Rrgr3dsYJRStHvHJEGjphNrJPsIyNXmNxjKIUHnwX/VaNLnWa/jehAxA55RzqYST sWlMguH+rG2bXt5/NGjI5PHsIfHMhvdT/2zf2dN9fmNbGLM1+GmVhH0oZyaiSGsH 2iRI -----END CERTIFICATE-----Generated at Sun Nov 2 13:21:55 2025 by rpki-client