$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer File: 418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer (raw, json) Hash identifier: rP7vFHPkk8IvKECJMTyrm0zHc4UwzGM9DJD/bcHGXWg= Subject key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A9BC3CF36526640CD96D9C52C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Jul 2025 00:45:35 +0000 Certificate not after: Tue 26 Oct 2027 00:45:35 +0000 Subordinate resources: IP: 212.32.32.0/21 IP: 2607:aa40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:c3:cf:36:52:66:40:cd:96:d9:c5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 23 00:45:35 2025 GMT Not After : Oct 26 00:45:35 2027 GMT Subject: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:44:5e:98:06:62:9a:12:b5:3d:94:44:fb: 77:9a:c6:88:74:3a:3a:06:74:74:39:2d:6d:c7:cf: 54:4a:f4:4a:bb:ea:de:6b:86:97:e6:01:03:dd:7b: 08:dd:c7:32:ce:00:c2:49:a2:35:b3:28:6f:23:da: 00:8e:9f:e3:36:75:6a:13:ee:bf:ae:1a:de:df:01: af:94:75:07:ae:be:a0:d5:9f:10:69:db:17:c3:b4: 1c:3a:fd:49:66:b3:9d:7a:b4:c0:30:01:51:6a:45: 1e:2d:34:8d:f8:0c:ff:49:19:9b:b8:2a:dc:66:11: 80:2b:f2:d5:28:0e:6b:63:74:9d:23:61:bc:01:00: d5:73:52:b8:da:2d:c5:9c:21:4c:bf:e3:5d:41:1b: df:8a:18:68:33:4e:59:d4:0d:40:8e:05:3e:85:b2: 60:8e:6f:e6:56:20:da:fd:62:7e:5a:99:66:66:61: c5:b0:50:ad:59:96:84:59:e5:3a:b3:44:19:83:1d: 72:c4:cf:e1:e5:9b:12:0b:61:bb:03:c1:53:ea:07: 48:02:82:f9:6e:ae:5e:fe:ea:86:2d:46:c9:91:ff: 7e:6c:a2:95:a4:2c:c6:8e:ad:40:eb:2a:24:96:03: 59:67:00:f5:87:49:3e:cb:7a:bc:b8:3b:90:4b:52: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 212.32.32.0/21 IPv6: 2607:aa40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:06:48:bf:59:2f:e5:1f:61:68:56:8a:62:3d:e4:62:4b:46: 5c:be:83:df:d3:56:a4:b0:31:0d:a2:f7:cd:87:20:ea:a9:77: 65:02:93:0d:5d:92:e1:eb:3d:ae:d4:3a:d8:78:74:ab:da:ad: df:9c:20:3b:29:d3:0a:78:f4:87:5a:df:db:e5:ca:0c:eb:11: 93:0c:d5:ef:28:dd:84:05:d2:b7:93:6c:9d:e0:d1:71:b9:37: fc:0a:5d:a6:93:65:3d:3c:ce:eb:8a:fd:1d:13:c4:6c:98:39: 17:8a:57:82:a9:a1:bd:98:95:51:0a:19:72:46:94:fb:ef:17: 71:53:87:2c:40:8a:83:50:65:9f:3b:e0:25:cf:b0:c3:76:f8: b1:83:f4:ff:55:ba:e5:35:bc:a7:2f:a6:df:66:09:7a:28:48: e7:1f:55:79:1c:9a:10:19:64:0f:eb:69:01:41:6e:d7:49:93: f0:66:fe:ce:c9:df:77:e5:3d:56:d8:12:45:2e:c0:8f:89:bd: b2:87:19:8d:b7:be:26:af:38:ff:f2:67:74:84:9f:77:a8:52: f5:ba:4d:20:fa:a0:88:3f:2c:56:e3:87:f8:e2:2a:22:66:08: 4e:76:be:72:bb:b4:62:23:e9:bf:0f:d7:86:4a:24:f8:ff:af: ee:e0:a9:58 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEqbw882UmZAzZbZxSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMzAwNDUzNVoXDTI3MTAyNjAwNDUzNVowLzEtMCsGA1UEAxMk NDE4NTI2ZDUtMmFhMi00ZDJmLThjYjEtNWM0MTc3MjhhOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe1EXpgGYpoStT2URPt3msaIdDo6BnR0OS1t x89USvRKu+rea4aX5gED3XsI3ccyzgDCSaI1syhvI9oAjp/jNnVqE+6/rhre3wGv lHUHrr6g1Z8QadsXw7QcOv1JZrOderTAMAFRakUeLTSN+Az/SRmbuCrcZhGAK/LV KA5rY3SdI2G8AQDVc1K42i3FnCFMv+NdQRvfihhoM05Z1A1AjgU+hbJgjm/mViDa /WJ+WplmZmHFsFCtWZaEWeU6s0QZgx1yxM/h5ZsSC2G7A8FT6gdIAoL5bq5e/uqG LUbJkf9+bKKVpCzGjq1A6yoklgNZZwD1h0k+y3q8uDuQS1Iz7QIDAQABo4IEDjCC BAowHQYDVR0OBBYEFIojf65+d8ACXfkw8fxG/F4ehAkSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 MTg1MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQxNzcyOGE5N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQxODUyNmQ1LTJhYTItNGQyZi04 Y2IxLTVjNDE3NzI4YTk3ZC80MTg1MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQxNzcy OGE5N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPUICAwDQQCAAIwBwMFACYHqkAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA XgZIv1kv5R9haFaKYj3kYktGXL6D39NWpLAxDaL3zYcg6ql3ZQKTDV2S4es9rtQ6 2Hh0q9qt35wgOynTCnj0h1rf2+XKDOsRkwzV7yjdhAXSt5NsneDRcbk3/ApdppNl PTzO64r9HRPEbJg5F4pXgqmhvZiVUQoZckaU++8XcVOHLECKg1BlnzvgJc+ww3b4 sYP0/1W65TW8py+m32YJeihI5x9VeRyaEBlkD+tpAUFu10mT8Gb+zsnfd+U9VtgS RS7Aj4m9socZjbe+Jq84//JndISfd6hS9bpNIPqgiD8sVuOH+OIqImYITna+cru0 YiPpvw/Xhkok+P+v7uCpWA== -----END CERTIFICATE-----Generated at Sun Nov 2 13:21:55 2025 by rpki-client