$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010.cer File: 4281be58-d566-431e-b0b8-c563e631a010.cer (raw, json) Hash identifier: u49vKRAfv3dK+nmJtTWnqTpDkL7u3L99f1F3/KhRD4w= Subject key identifier: EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A71E38EB765D60C5C9D969D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Jul 2025 00:45:36 +0000 Certificate not after: Mon 11 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 104.192.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:e3:8e:b7:65:d6:0c:5c:9d:96:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 8 00:45:36 2025 GMT Not After : Oct 11 00:45:36 2027 GMT Subject: CN=4281be58-d566-431e-b0b8-c563e631a010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:18:8c:32:75:9e:48:e7:70:1a:39:78:f3:16: 1f:75:0b:29:4e:fa:15:03:33:f6:8c:1f:b3:eb:a8: d2:e7:8a:c3:ea:ee:2c:73:3e:a0:5d:44:44:fc:28: 04:b5:d3:3e:52:93:8a:d5:55:dc:fd:93:13:82:81: 5f:c8:c9:38:f4:57:2d:bd:9b:c2:34:be:dd:73:3e: 12:64:08:80:87:c3:05:14:49:60:68:69:79:75:f7: 0f:1b:c3:76:a8:69:76:71:87:9a:63:44:03:ff:9e: b2:27:85:30:36:b1:1c:d5:d5:52:ef:dc:da:44:c4: f3:5a:f1:c9:61:c7:48:47:a1:f5:1e:42:53:05:a6: 7a:a5:46:0d:77:02:bb:38:1b:43:fb:8e:cf:43:eb: 70:6c:17:1f:fd:7c:46:22:43:21:41:68:d3:25:9d: cd:41:5a:82:07:10:56:b2:75:bc:82:95:0d:4d:88: 0c:23:5d:ea:66:b2:8a:fb:82:79:22:04:7f:cd:e4: fe:46:6b:0b:f2:55:5e:30:1b:71:82:3a:cd:e9:07: ee:bd:6f:49:53:bb:04:8b:11:73:27:1b:be:7b:b5: 51:98:c5:4a:84:af:47:bd:c1:a7:19:4f:82:33:a1: f5:7a:fc:ea:2c:98:b0:61:13:a6:df:77:34:7e:d1: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9A:80:5E:7D:F8:8C:E2:07:CD:39:FD:E5:BD:ED:33:F8:B3:FE:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4281be58-d566-431e-b0b8-c563e631a010/4281be58-d566-431e-b0b8-c563e631a010.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 104.192.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:bf:39:81:ac:28:c1:59:18:64:77:79:a4:04:31:61:10:e4: c5:7e:75:ce:3b:ad:56:fa:b0:e0:c9:85:3d:b9:11:49:ff:61: 28:95:7f:d2:22:13:68:83:93:64:7b:b0:68:b8:54:4c:8a:a0: eb:5e:16:f1:38:5a:82:f9:fd:b8:29:f8:30:a7:b4:d0:20:7b: 84:0a:f2:dc:c6:f5:3e:ff:fc:01:2b:fd:d5:c9:49:c6:0b:24: 63:bf:50:f3:90:81:e8:55:e6:8c:64:00:a2:ca:22:87:f1:fb: e0:b2:2b:05:f7:ef:22:87:09:6c:65:54:d3:9e:6a:de:c5:64: 2e:90:b6:c1:b4:f8:70:40:01:c4:ce:d1:38:99:61:2f:7d:0e: c1:81:52:6b:c2:68:b5:9e:93:a4:ae:fa:4b:be:93:90:a3:1d: eb:8c:15:2e:f3:dd:8a:1c:b8:86:f9:2a:79:c8:cc:eb:16:be: 96:0b:a8:9b:2e:43:20:2f:84:e8:9b:84:a3:84:d8:07:44:8c: 0e:d8:25:2d:ff:ab:d6:2f:a9:87:e0:52:5f:f6:86:d0:ac:e4: ae:bc:0c:eb:44:2e:ab:64:16:aa:79:2a:2d:1f:87:53:8e:0c: c5:91:64:56:f0:99:87:87:28:90:b7:79:2e:b6:5b:e6:45:6a: 76:89:bd:39 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEpx4463ZdYMXJ2WnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwODAwNDUzNloXDTI3MTAxMTAwNDUzNlowLzEtMCsGA1UEAxMk NDI4MWJlNTgtZDU2Ni00MzFlLWIwYjgtYzU2M2U2MzFhMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRiMMnWeSOdwGjl48xYfdQspTvoVAzP2jB+z 66jS54rD6u4scz6gXURE/CgEtdM+UpOK1VXc/ZMTgoFfyMk49FctvZvCNL7dcz4S ZAiAh8MFFElgaGl5dfcPG8N2qGl2cYeaY0QD/56yJ4UwNrEc1dVS79zaRMTzWvHJ YcdIR6H1HkJTBaZ6pUYNdwK7OBtD+47PQ+twbBcf/XxGIkMhQWjTJZ3NQVqCBxBW snW8gpUNTYgMI13qZrKK+4J5IgR/zeT+RmsL8lVeMBtxgjrN6QfuvW9JU7sEixFz Jxu+e7VRmMVKhK9HvcGnGU+CM6H1evzqLJiwYROm33c0ftFaSQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOqagF59+IziB805/eW97TP4s/7qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 MjgxYmU1OC1kNTY2LTQzMWUtYjBiOC1jNTYzZTYzMWEwMTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQyODFiZTU4LWQ1NjYtNDMxZS1i MGI4LWM1NjNlNjMxYTAxMC80MjgxYmU1OC1kNTY2LTQzMWUtYjBiOC1jNTYzZTYz MWEwMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJowFwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALr85gawowVkYZHd5pAQx YRDkxX51zjutVvqw4MmFPbkRSf9hKJV/0iITaIOTZHuwaLhUTIqg614W8Thagvn9 uCn4MKe00CB7hAry3Mb1Pv/8ASv91clJxgskY79Q85CB6FXmjGQAosoih/H74LIr BffvIocJbGVU055q3sVkLpC2wbT4cEABxM7ROJlhL30OwYFSa8JotZ6TpK76S76T kKMd64wVLvPdihy4hvkqecjM6xa+lguomy5DIC+E6JuEo4TYB0SMDtglLf+r1i+p h+BSX/aG0KzkrrwM60Quq2QWqnkqLR+HU44MxZFkVvCZh4cokLd5LrZb5kVqdom9 OQ== -----END CERTIFICATE-----Generated at Sun Nov 2 13:21:58 2025 by rpki-client