$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer File: 3a000633-c1ee-492c-b730-12e113ab8bd2.cer (raw, json) Hash identifier: vYJQS5IMsvI9+GOrKH5LSZtdT+c+hOV3GWHx8NOygM4= Subject key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A8B03B708DFB1792EC3E6E880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 00:45:36 +0000 Certificate not after: Wed 20 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 11635 AS: 394710 IP: 23.128.224.0/24 IP: 85.131.160.0/19 IP: 134.195.48.0/22 IP: 161.199.18.0/24 IP: 209.216.96.0/19 IP: 2604:7a40::/32 IP: 2604:c4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:03:b7:08:df:b1:79:2e:c3:e6:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 17 00:45:36 2025 GMT Not After : Oct 20 00:45:36 2027 GMT Subject: CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:34:48:0b:1b:69:9b:dc:7f:b9:b1:a6:d1: 72:7c:58:d6:76:a0:2f:17:63:c6:a0:e8:a6:84:9f: da:06:a8:2e:98:a4:76:93:d3:8e:b1:4b:cc:74:c6: f3:f2:d2:78:e0:90:6f:e9:68:e3:f3:bd:e0:89:e2: 9b:24:2b:59:4b:8b:0b:74:ed:a9:a5:0d:d8:d4:f7: fa:d0:21:4c:a1:01:64:dc:64:58:04:f7:77:0e:b5: a9:d2:d7:51:05:21:b1:5c:02:a0:a0:66:1b:53:4e: 58:74:25:c3:60:90:de:1b:93:fe:89:b4:37:b3:46: 29:80:2d:7c:a7:86:ec:80:bd:90:34:46:a9:21:8d: 65:8f:26:29:77:66:b3:73:78:74:15:92:0f:47:58: 13:1a:53:8d:1c:4e:58:c1:29:cd:12:8f:cf:1b:f6: 5f:45:4c:e1:fb:0e:52:e0:4d:d2:9a:ca:db:32:06: 98:7a:9a:9c:79:0c:c4:79:fb:ba:d2:31:ec:d2:5e: 2b:a4:36:55:c4:55:ad:74:43:98:68:d4:9e:bc:91: ab:54:30:70:25:20:50:b0:89:49:42:86:3d:5b:78: 35:bc:73:11:4f:bb:00:2a:f6:ee:de:49:66:ee:79: 63:25:1f:d0:93:65:94:96:26:bb:f3:50:74:ff:ac: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.128.224.0/24 85.131.160.0/19 134.195.48.0/22 161.199.18.0/24 209.216.96.0/19 IPv6: 2604:7a40::/32 2604:c4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11635 394710 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:dd:52:21:b4:ee:8c:11:7a:60:7d:d3:e6:42:c6:c3:cb:03: a4:14:21:17:bf:11:5e:e7:cf:39:6a:d4:c8:3e:d5:07:a3:4c: 9a:0a:f4:7d:d8:46:90:6d:6f:a2:96:e5:f7:99:16:f8:59:81: a4:3f:71:10:be:fb:94:aa:30:98:2a:a7:56:ea:00:cc:de:c8: d4:66:6a:48:a5:76:ab:f9:c8:0a:87:69:5b:09:ad:5f:11:39: 98:8b:59:5b:fd:07:14:19:6a:85:4e:aa:b9:b7:d7:3e:4d:28: d6:3b:58:c6:3e:ca:46:5e:a8:14:c2:58:41:36:6a:f1:f8:65: 63:fb:c2:16:22:90:44:5a:f5:ee:38:e1:eb:13:99:20:85:9a: e3:06:6b:49:74:7d:d7:93:84:37:de:0e:43:09:5c:2b:a0:dc: 4d:86:9c:8a:55:d5:10:ff:56:ab:b3:78:bd:e8:92:db:05:46: 25:f7:20:7d:ee:6d:67:74:c1:6a:b6:8e:be:c3:d3:11:38:a1: d6:10:6b:cc:2a:c4:5c:d9:ec:8b:bc:d6:da:57:9f:4e:06:5d: 4b:0d:31:6d:05:57:de:3f:57:0b:a5:99:dd:de:d7:77:0b:25: 88:51:d7:f2:ce:f2:34:8c:d7:a4:cc:d8:33:e9:7e:39:b6:2a: 1c:1a:ca:29 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEqLA7cI37F5LsPm6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxNzAwNDUzNloXDTI3MTAyMDAwNDUzNlowLzEtMCsGA1UEAxMk M2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkw0SAsbaZvcf7mxptFyfFjWdqAvF2PGoOim hJ/aBqgumKR2k9OOsUvMdMbz8tJ44JBv6Wjj873gieKbJCtZS4sLdO2ppQ3Y1Pf6 0CFMoQFk3GRYBPd3DrWp0tdRBSGxXAKgoGYbU05YdCXDYJDeG5P+ibQ3s0YpgC18 p4bsgL2QNEapIY1ljyYpd2azc3h0FZIPR1gTGlONHE5YwSnNEo/PG/ZfRUzh+w5S 4E3SmsrbMgaYepqceQzEefu60jHs0l4rpDZVxFWtdEOYaNSevJGrVDBwJSBQsIlJ QoY9W3g1vHMRT7sAKvbu3klm7nljJR/Qk2WUlia781B0/6zFDQIDAQABo4IETTCC BEkwHQYDVR0OBBYEFBRlcQjFvjTuo8Yn9PZtBFLPzyMgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z YTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNhMDAwNjMzLWMxZWUtNDkyYy1i NzMwLTEyZTExM2FiOGJkMi8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNh YjhiZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCQEAgABMB4DBAAXgOADBAVVg6ADBAKGwzADBAChxxIDBAXR2GAw FAQCAAIwDgMFACYEekADBQAmBMTAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAi1z AgMGBdYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAH91SIbTujBF6YH3T5kLGw8sDpBQhF78RXufPOWrUyD7V B6NMmgr0fdhGkG1vopbl95kW+FmBpD9xEL77lKowmCqnVuoAzN7I1GZqSKV2q/nI CodpWwmtXxE5mItZW/0HFBlqhU6qubfXPk0o1jtYxj7KRl6oFMJYQTZq8fhlY/vC FiKQRFr17jjh6xOZIIWa4wZrSXR915OEN94OQwlcK6DcTYacilXVEP9Wq7N4veiS 2wVGJfcgfe5tZ3TBaraOvsPTETih1hBrzCrEXNnsi7zW2lefTgZdSw0xbQVX3j9X C6WZ3d7XdwsliFHX8s7yNIzXpMzYM+l+ObYqHBrKKQ== -----END CERTIFICATE-----Generated at Thu Jul 31 08:06:44 2025 by rpki-client