$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer File: 35fbc5b3-479b-405d-8578-f7c792a1f375.cer (raw, json) Hash identifier: YxAy4QhfKwnvUItQD5vsoWb0gFCfN3Le0FpwsOInfvs= Subject key identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A707E37DCFB298736FD085480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 12:45:36 +0000 Certificate not after: Sun 10 Oct 2027 12:45:36 +0000 Subordinate resources: AS: 397071 IP: 130.51.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:7e:37:dc:fb:29:87:36:fd:08:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 7 12:45:36 2025 GMT Not After : Oct 10 12:45:36 2027 GMT Subject: CN=35fbc5b3-479b-405d-8578-f7c792a1f375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:83:77:c0:54:20:6c:72:1a:b3:8c:a9:a2: de:f6:2a:db:2d:80:69:0b:12:7d:cf:cc:9e:41:b3: 9a:4e:94:04:75:f6:d5:73:e6:ab:59:92:2d:36:96: 50:43:fb:96:0b:e7:57:ac:f5:39:42:01:68:33:af: 51:a0:8a:76:75:4f:63:c2:fc:e5:a5:31:93:47:38: e3:ea:c5:0a:79:8b:7b:12:c8:b9:c1:b1:cd:38:51: 98:70:4a:5f:1c:54:b7:00:d6:08:b0:01:ce:7e:06: 47:3a:70:c8:b8:2c:91:48:52:01:de:09:b4:9f:6d: 48:6a:d2:b3:4c:43:e4:fd:95:90:ca:2c:25:4d:2a: 6a:86:1f:0c:08:02:91:c9:b0:44:a9:8b:80:3e:bb: 92:41:3c:49:c0:37:d9:84:56:41:54:c4:9e:f1:9b: 01:33:97:54:0a:41:be:18:d2:a2:e6:d0:3d:d2:b4: cf:df:26:0b:78:a3:c5:04:2b:78:f9:3e:ac:00:c2: 23:cc:64:2c:f8:96:29:fd:7b:02:fe:04:97:e1:95: ca:aa:09:7b:7f:8d:66:94:f3:5c:f4:aa:aa:6b:c3: 33:a8:6b:48:7a:d1:48:be:d0:65:13:c3:4f:5c:65: 4f:35:9f:5d:55:f0:9e:7f:2d:d7:aa:3c:ce:ca:fa: 18:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 130.51.100.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d3:64:e8:22:cc:55:b4:5b:20:f6:f9:f6:2c:6b:35:11:5e: 2e:0a:08:ea:36:ab:0e:75:5c:52:4c:a8:d4:1f:6a:9d:d7:7a: d6:1b:10:63:84:6c:86:fa:ee:e1:ee:c4:31:25:b6:c8:d0:78: 5a:1e:4f:78:79:83:53:9a:3d:e7:28:d3:8f:65:ae:59:95:8c: 55:ed:c8:15:7c:5b:37:71:ab:96:ca:c4:06:1d:8a:57:77:3f: 5c:cb:55:ca:c7:40:81:ba:06:b0:bf:66:bc:e8:36:b9:05:6e: c3:3e:09:38:ca:e9:87:91:46:c5:82:63:37:f9:f4:3f:8b:90: c8:b9:55:76:f2:94:ea:bb:bf:f9:d4:69:88:e9:c1:de:0f:e0: 2d:c5:aa:96:ce:01:e3:15:20:f6:0b:bc:57:79:30:17:32:30: 11:eb:0a:1e:e4:77:0b:ee:ce:38:35:9d:3e:99:fd:e1:75:0b: b1:7a:c4:a8:ec:6d:58:ef:e3:48:39:22:05:9c:d9:22:05:1a: 83:72:46:22:c1:15:15:14:36:69:28:a2:cb:9c:36:95:a6:82: 50:d1:f9:d0:dc:38:d1:00:d3:58:72:91:80:0b:fb:2c:5a:4f: 98:be:2a:09:97:db:c2:d6:5d:00:b7:0f:e9:02:0a:80:b7:83: e6:94:62:4a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEpwfjfc+ymHNv0IVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwNzEyNDUzNloXDTI3MTAxMDEyNDUzNlowLzEtMCsGA1UEAxMk MzVmYmM1YjMtNDc5Yi00MDVkLTg1NzgtZjdjNzkyYTFmMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFuDd8BUIGxyGrOMqaLe9irbLYBpCxJ9z8ye QbOaTpQEdfbVc+arWZItNpZQQ/uWC+dXrPU5QgFoM69RoIp2dU9jwvzlpTGTRzjj 6sUKeYt7Esi5wbHNOFGYcEpfHFS3ANYIsAHOfgZHOnDIuCyRSFIB3gm0n21IatKz TEPk/ZWQyiwlTSpqhh8MCAKRybBEqYuAPruSQTxJwDfZhFZBVMSe8ZsBM5dUCkG+ GNKi5tA90rTP3yYLeKPFBCt4+T6sAMIjzGQs+JYp/XsC/gSX4ZXKqgl7f41mlPNc 9Kqqa8MzqGtIetFIvtBlE8NPXGVPNZ9dVfCefy3XqjzOyvoYoQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAyWVjAHLhmyuUxcFvcifiyGxG+IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NWZiYzViMy00NzliLTQwNWQtODU3OC1mN2M3OTJhMWYzNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM1ZmJjNWIzLTQ3OWItNDA1ZC04 NTc4LWY3Yzc5MmExZjM3NS8zNWZiYzViMy00NzliLTQwNWQtODU3OC1mN2M3OTJh MWYzNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKCM2QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bg8PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAALTZOgizFW0WyD2+fYsazURXi4KCOo2qw51XFJMqNQfap3X etYbEGOEbIb67uHuxDEltsjQeFoeT3h5g1OaPeco049lrlmVjFXtyBV8Wzdxq5bK xAYdild3P1zLVcrHQIG6BrC/ZrzoNrkFbsM+CTjK6YeRRsWCYzf59D+LkMi5VXby lOq7v/nUaYjpwd4P4C3FqpbOAeMVIPYLvFd5MBcyMBHrCh7kdwvuzjg1nT6Z/eF1 C7F6xKjsbVjv40g5IgWc2SIFGoNyRiLBFRUUNmkoosucNpWmglDR+dDcONEA01hy kYAL+yxaT5i+KgmX28LWXQC3D+kCCoC3g+aUYko= -----END CERTIFICATE-----Generated at Thu Jul 31 08:10:54 2025 by rpki-client