$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.cer File: 40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.cer (raw, json) Hash identifier: 0IHIS/S7VZzd9Fwkd5Cxw2U1n5VVvDS1VlN/xoj4HDU= Subject key identifier: 7F:D3:9B:6F:A3:A8:01:69:70:33:DE:39:D2:34:D9:F5:37:DC:D5:81 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A9BC3CF812B515C54AAF54680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Jul 2025 00:45:35 +0000 Certificate not after: Tue 26 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 399675 IP: 23.183.144.0/24 IP: 45.41.0.0/22 IP: 2606:5a40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:c3:cf:81:2b:51:5c:54:aa:f5:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 23 00:45:35 2025 GMT Not After : Oct 26 00:45:35 2027 GMT Subject: CN=40f0d7cc-64f4-4c77-bfcb-4e33d93d8733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:a6:34:62:5c:17:3e:d9:76:36:cf:c7:95: 86:40:fc:f9:76:fc:76:4b:70:3e:18:40:9b:cd:2e: dd:c3:5f:e8:e3:fe:b7:05:56:e2:3c:5f:cb:ca:c3: 18:67:dc:e0:b1:36:99:e2:2b:bf:84:33:f4:61:be: b5:34:c4:65:04:be:30:2d:60:95:3e:0e:0e:18:81: 28:d3:32:2d:5d:e7:c6:d3:ef:3e:cc:7f:1a:a8:ae: 2b:ab:14:5b:c0:05:73:8d:9a:67:34:d6:50:27:43: 80:19:5c:fe:6d:e4:e9:fd:17:4c:e5:e2:35:da:90: 94:8b:0b:1b:25:2d:8a:d2:54:9d:76:f9:2b:08:75: cd:5b:4c:a7:18:90:64:00:71:d0:91:ef:ff:9b:5d: ad:a3:d9:b6:76:17:3f:e6:87:41:42:82:6f:20:22: 85:98:8c:21:cb:d7:93:60:1f:3b:fc:c3:67:f8:3a: cf:3b:13:36:d7:fc:d4:21:00:30:e6:fa:9c:4a:c0: 94:0c:40:0c:20:5c:10:32:fc:62:cb:e3:ff:80:26: 30:d9:fc:28:4e:8c:2e:76:bd:7b:db:9f:85:a0:d0: f6:89:d8:72:15:6a:04:01:cb:9d:a1:13:cd:20:6d: 0d:e1:3f:3f:ca:8a:70:1b:bb:16:e4:ae:9a:72:b1: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D3:9B:6F:A3:A8:01:69:70:33:DE:39:D2:34:D9:F5:37:DC:D5:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.183.144.0/24 45.41.0.0/22 IPv6: 2606:5a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399675 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:02:61:c9:ae:70:0e:ba:5a:2e:2e:f2:2d:b7:4a:95:06:4f: ff:b2:e1:aa:7b:69:ca:dd:9c:0b:27:8c:c8:66:cd:d7:de:86: 4c:1b:c1:48:8e:75:58:c0:e4:ea:cd:80:b5:aa:af:13:9b:2d: 97:7e:66:98:10:7d:24:4a:88:88:71:7a:bf:a9:83:14:1f:74: 25:ca:b0:74:4a:a0:10:08:3c:d5:3b:ab:a9:31:70:e9:ee:83: 46:10:d1:b4:29:ec:75:04:46:54:f4:36:ab:c1:ff:44:80:a3: bf:ac:cc:8d:05:51:0b:1b:e5:18:3e:ef:c6:b4:ca:81:a4:09: c7:37:2e:55:6b:90:39:4f:8f:b3:fe:5d:d4:47:1b:bd:dd:01: 8b:40:a1:a7:98:88:57:63:4e:21:c1:38:70:bd:64:be:18:b5: df:3d:af:8c:6b:d9:af:60:c1:14:c7:25:4f:17:d4:be:34:c5: 28:f7:2b:ca:1d:d4:c4:ad:0c:a1:14:1f:7a:81:34:d1:80:7f: a0:0a:8f:7f:2a:6b:53:47:d0:cb:97:72:5e:31:43:9b:49:0a: c5:ec:33:47:90:3e:95:a9:ff:cd:7c:62:e3:08:ce:d9:41:ca: 02:97:85:cf:5f:a1:75:6e:ac:09:05:91:15:34:e4:f2:e7:6b: 35:a9:91:8c -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEqbw8+BK1FcVKr1RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMzAwNDUzNVoXDTI3MTAyNjAwNDUzNVowLzEtMCsGA1UEAxMk NDBmMGQ3Y2MtNjRmNC00Yzc3LWJmY2ItNGUzM2Q5M2Q4NzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYimNGJcFz7ZdjbPx5WGQPz5dvx2S3A+GECb zS7dw1/o4/63BVbiPF/LysMYZ9zgsTaZ4iu/hDP0Yb61NMRlBL4wLWCVPg4OGIEo 0zItXefG0+8+zH8aqK4rqxRbwAVzjZpnNNZQJ0OAGVz+beTp/RdM5eI12pCUiwsb JS2K0lSddvkrCHXNW0ynGJBkAHHQke//m12to9m2dhc/5odBQoJvICKFmIwhy9eT YB87/MNn+DrPOxM21/zUIQAw5vqcSsCUDEAMIFwQMvxiy+P/gCYw2fwoTowudr17 25+FoND2idhyFWoEAcudoRPNIG0N4T8/yopwG7sW5K6acrFkowIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFH/Tm2+jqAFpcDPeOdI02fU33NWBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 MGYwZDdjYy02NGY0LTRjNzctYmZjYi00ZTMzZDkzZDg3MzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQwZjBkN2NjLTY0ZjQtNGM3Ny1i ZmNiLTRlMzNkOTNkODczMy80MGYwZDdjYy02NGY0LTRjNzctYmZjYi00ZTMzZDkz ZDg3MzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXt5ADBAItKQAwDQQCAAIwBwMFACYGWkAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhk7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACMCYcmucA66Wi4u8i23 SpUGT/+y4ap7acrdnAsnjMhmzdfehkwbwUiOdVjA5OrNgLWqrxObLZd+ZpgQfSRK iIhxer+pgxQfdCXKsHRKoBAIPNU7q6kxcOnug0YQ0bQp7HUERlT0NqvB/0SAo7+s zI0FUQsb5Rg+78a0yoGkCcc3LlVrkDlPj7P+XdRHG73dAYtAoaeYiFdjTiHBOHC9 ZL4Ytd89r4xr2a9gwRTHJU8X1L40xSj3K8od1MStDKEUH3qBNNGAf6AKj38qa1NH 0MuXcl4xQ5tJCsXsM0eQPpWp/818YuMIztlBygKXhc9foXVurAkFkRU05PLnazWp kYw= -----END CERTIFICATE-----Generated at Sun Nov 2 13:21:57 2025 by rpki-client