$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911.cer File: 37979819-9f1b-4b22-b17f-691002d8c911.cer (raw, json) Hash identifier: NN5DFCmTFzRzeBv21rwhjDvH1PXmamv9YvqisuleLK8= Subject key identifier: 7A:56:54:DD:2F:C3:04:17:D1:C0:F5:DF:64:44:03:4E:89:50:8E:CD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849FF6D85374E4DFF33CD831D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/37979819-9f1b-4b22-b17f-691002d8c911.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 May 2025 00:45:37 +0000 Certificate not after: Tue 31 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 12019 AS: 12089 AS: 14832 AS: 27166 AS: 32505 IP: 69.63.160.0/20 IP: 69.194.176.0/20 IP: 139.180.32.0/19 IP: 173.0.32.0/20 IP: 199.33.80.0/24 IP: 199.83.224.0/21 IP: 208.77.168.0/22 IP: 208.80.160.0/21 IP: 216.45.0.0/19 IP: 2604:8e80::/32 IP: 2606:8380::/32 IP: 2606:b980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:6d:85:37:4e:4d:ff:33:cd:83:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 28 00:45:37 2025 GMT Not After : Aug 31 00:45:37 2027 GMT Subject: CN=37979819-9f1b-4b22-b17f-691002d8c911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:73:a4:f1:45:ec:dc:f2:a7:2d:f6:92:9d: 04:d0:3b:2c:fd:3c:7c:e9:f7:f2:6b:9e:cc:cf:3d: d4:3d:3c:5f:b6:83:25:83:84:f4:b0:2f:93:29:e0: 0a:c8:e6:0d:ae:d2:e0:26:ee:d7:bb:d4:bc:62:7f: 89:a5:e4:c5:4b:c9:77:cf:58:87:79:8a:61:4f:de: de:9b:51:2d:44:97:bf:5b:ff:1b:16:d3:6d:5a:58: cd:03:e5:27:3c:04:4b:2e:4a:ae:92:68:19:33:d3: d7:79:48:44:c0:35:d7:13:9c:34:76:3b:3c:4e:ad: 71:ad:0f:71:dc:a1:68:2f:f4:00:01:6b:63:d1:1d: 35:8d:ba:6e:01:4e:db:d5:1a:51:9a:94:c8:6f:ad: b9:07:4c:32:68:7a:99:7a:f8:4f:78:bd:2a:2c:2f: c2:11:10:8e:d7:c4:72:6c:4f:0b:74:51:aa:a5:e2: 50:b4:de:86:08:07:9a:ea:0d:4a:8b:6f:79:a4:15: dc:00:1e:40:71:8f:21:bc:18:b9:e1:73:67:35:d7: 9c:30:6a:17:1f:df:0e:b5:b4:ff:ce:f0:74:85:d3: f8:8d:3c:53:e4:97:72:7c:88:0d:6e:45:44:47:b1: 0c:d7:52:16:81:97:6d:d6:96:6d:cd:6c:37:4f:e5: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:56:54:DD:2F:C3:04:17:D1:C0:F5:DF:64:44:03:4E:89:50:8E:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/37979819-9f1b-4b22-b17f-691002d8c911.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 69.63.160.0/20 69.194.176.0/20 139.180.32.0/19 173.0.32.0/20 199.33.80.0/24 199.83.224.0/21 208.77.168.0/22 208.80.160.0/21 216.45.0.0/19 IPv6: 2604:8e80::/32 2606:8380::/32 2606:b980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12019 12089 14832 27166 32505 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:af:a1:58:12:cb:c3:be:a8:72:e3:86:ec:19:e6:d1:c1:41: b5:96:cb:98:17:53:61:56:35:1a:68:f2:7a:77:cd:81:af:85: 75:0a:d3:d4:d6:27:61:c5:b3:f5:98:f1:90:b7:35:c1:46:1c: eb:ee:c8:ba:ea:70:e7:d5:f1:c0:d0:d4:36:cf:85:34:72:fe: 63:46:2d:74:45:ed:3c:d6:06:48:07:ca:c3:67:09:6d:f3:29: 32:ec:8d:40:70:8b:95:01:4d:6b:cd:4d:5f:6f:4c:ef:6e:be: d4:7d:b6:7b:76:95:94:62:b0:2d:a7:32:cc:cd:b4:07:ec:14: 7a:93:2e:c0:0c:32:5d:25:7c:6a:4e:79:5c:ba:31:19:5e:c0: c5:72:8b:9b:34:8a:a6:97:7d:42:e9:95:ff:c5:cc:d2:16:06: bf:08:99:84:b1:a5:38:02:64:d7:14:34:3a:d8:45:7e:9b:bc: 05:4c:82:94:aa:0b:d8:b8:99:67:99:f4:ad:22:49:02:7f:30: 08:48:a0:46:38:5e:34:35:aa:8a:c9:df:92:3d:f0:6a:a6:22: a1:97:ee:e7:97:c8:9e:1f:97:6a:94:3f:62:00:56:e7:55:15: 4e:c0:51:09:ec:f6:d3:64:52:96:02:47:7c:27:70:f9:f8:34: d6:85:7f:be -----BEGIN CERTIFICATE----- MIIHZTCCBk2gAwIBAgIUAQ0Mn0MoWEn/bYU3Tk3/M82DHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyODAwNDUzN1oXDTI3MDgzMTAwNDUzN1owLzEtMCsGA1UEAxMk Mzc5Nzk4MTktOWYxYi00YjIyLWIxN2YtNjkxMDAyZDhjOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7xzpPFF7Nzypy32kp0E0Dss/Tx86ffya57M zz3UPTxftoMlg4T0sC+TKeAKyOYNrtLgJu7Xu9S8Yn+JpeTFS8l3z1iHeYphT97e m1EtRJe/W/8bFtNtWljNA+UnPARLLkqukmgZM9PXeUhEwDXXE5w0djs8Tq1xrQ9x 3KFoL/QAAWtj0R01jbpuAU7b1RpRmpTIb625B0wyaHqZevhPeL0qLC/CERCO18Ry bE8LdFGqpeJQtN6GCAea6g1Ki295pBXcAB5AcY8hvBi54XNnNdecMGoXH98OtbT/ zvB0hdP4jTxT5JdyfIgNbkVER7EM11IWgZdt1pZtzWw3T+Vj+wIDAQABo4IEdzCC BHMwHQYDVR0OBBYEFHpWVN0vwwQX0cD132REA06JUI7NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z Nzk3OTgxOS05ZjFiLTRiMjItYjE3Zi02OTEwMDJkOGM5MTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM3OTc5ODE5LTlmMWItNGIyMi1i MTdmLTY5MTAwMmQ4YzkxMS8zNzk3OTgxOS05ZjFiLTRiMjItYjE3Zi02OTEwMDJk OGM5MTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwbAYIKwYBBQUH AQcBAf8EXTBbMDwEAgABMDYDBARFP6ADBARFwrADBAWLtCADBAStACADBADHIVAD BAPHU+ADBALQTagDBAPQUKADBAXYLQAwGwQCAAIwFQMFACYEjoADBQAmBoOAAwUA Jga5gDApBggrBgEFBQcBCAEB/wQaMBigFjAUAgIu8wICLzkCAjnwAgJqHgICfvkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAlq+hWBLLw76ocuOG7Bnm0cFBtZbLmBdTYVY1GmjyenfNga+FdQrT 1NYnYcWz9ZjxkLc1wUYc6+7Iuupw59XxwNDUNs+FNHL+Y0YtdEXtPNYGSAfKw2cJ bfMpMuyNQHCLlQFNa81NX29M726+1H22e3aVlGKwLacyzM20B+wUepMuwAwyXSV8 ak55XLoxGV7AxXKLmzSKppd9QumV/8XM0hYGvwiZhLGlOAJk1xQ0OthFfpu8BUyC lKoL2LiZZ5n0rSJJAn8wCEigRjheNDWqisnfkj3waqYioZfu55fInh+XapQ/YgBW 51UVTsBRCez202RSlgJHfCdw+fg01oV/vg== -----END CERTIFICATE-----Generated at Sun Nov 2 13:22:41 2025 by rpki-client