$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer File: 4963bfd3-9105-4443-98df-fbdc0a641c60.cer (raw, json) Hash identifier: 2XovjxQBmcdmyBTR+liWd9G4OreZdnn05Lz84Tefg/c= Subject key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A962E74AC0B9EC673545CAC50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Jul 2025 00:45:37 +0000 Certificate not after: Sun 24 Oct 2027 00:45:37 +0000 Subordinate resources: IP: 209.135.184.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:2e:74:ac:0b:9e:c6:73:54:5c:ac:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 21 00:45:37 2025 GMT Not After : Oct 24 00:45:37 2027 GMT Subject: CN=4963bfd3-9105-4443-98df-fbdc0a641c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c6:ae:fd:87:9b:c1:54:03:46:74:f1:8b:68: 76:c0:74:ee:29:5c:43:79:75:06:82:e4:6a:34:fa: 33:74:5a:e9:e7:75:46:d7:55:35:81:37:c6:e0:3b: e8:09:aa:b3:f6:a6:1f:b7:30:b9:68:e6:18:08:b1: 01:15:b7:4a:61:3f:ff:74:12:6c:0d:3e:79:53:87: 93:73:b4:90:bc:e0:ac:b3:b4:55:d6:cd:02:cb:6c: 9d:0b:7b:42:e8:d3:51:58:7d:77:a9:1e:77:76:ec: b1:88:d5:fa:ef:9c:e7:ea:35:36:92:8e:bb:57:29: 86:e5:22:15:38:cf:37:f6:ac:bb:4d:a3:be:3e:a6: 6e:a2:53:c6:ca:d2:e5:93:f4:da:2a:85:32:ac:48: 16:fe:27:66:ee:3f:20:26:f1:a5:ad:52:fe:24:5c: 82:9b:94:97:60:95:ce:4d:b8:d2:5f:18:ad:df:56: ad:2c:95:10:2e:ec:1c:51:a5:44:7b:32:ba:4b:33: df:48:7d:18:03:87:ba:08:0f:05:55:63:bf:13:f6: 42:d9:d9:25:fb:07:4a:46:1a:6a:46:e2:6c:dd:6d: 85:d9:6a:60:fc:55:b3:c5:6d:83:b1:47:d4:dc:93: a1:3c:74:54:9a:ec:46:b8:d2:ee:90:4c:70:25:b9: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 209.135.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:cd:a0:30:5d:ec:41:15:f0:df:89:6a:2d:a5:3d:cc:2d:1a: e8:29:a7:bb:f3:a3:af:f3:aa:4a:eb:f3:2c:24:ce:81:a8:8f: ea:23:90:11:4c:10:1d:65:b9:1a:c2:59:7a:f6:bc:b9:01:51: 93:51:cf:74:95:b8:39:09:f9:b5:69:42:22:8a:41:96:31:2b: a4:89:65:96:7b:8f:64:ce:48:a8:07:7e:3c:7c:7a:ee:fe:77: f7:ac:bf:78:2f:35:e7:81:3b:6d:bb:1b:5c:9d:97:37:85:b4: 0c:dc:dc:5b:81:b5:e4:f9:da:19:e8:49:49:b0:09:43:33:0e: 53:56:11:47:bf:2d:5c:49:46:1c:4f:64:7d:6d:92:0d:21:f8: 49:ae:a8:7c:25:12:c8:de:56:3e:5e:9f:28:b4:d8:63:65:3f: 24:ca:da:7d:4c:2a:7e:bb:16:d3:4e:af:eb:1b:6a:aa:de:9b: 97:5b:5d:63:36:cc:2a:df:f2:b2:a0:81:22:ed:55:f5:fe:f1: 39:3a:b9:d1:9b:86:f9:37:ea:01:c1:ed:19:fe:30:2b:da:fd: 7f:d3:b0:a9:be:78:3f:f9:c0:42:15:6a:7c:8c:d4:30:07:ee: 91:8b:bf:de:ae:b5:bc:a4:5a:57:02:19:90:cd:4e:67:09:a5: 94:e2:4d:0c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEqWLnSsC57Gc1RcrFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMTAwNDUzN1oXDTI3MTAyNDAwNDUzN1owLzEtMCsGA1UEAxMk NDk2M2JmZDMtOTEwNS00NDQzLTk4ZGYtZmJkYzBhNjQxYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcau/YebwVQDRnTxi2h2wHTuKVxDeXUGguRq NPozdFrp53VG11U1gTfG4DvoCaqz9qYftzC5aOYYCLEBFbdKYT//dBJsDT55U4eT c7SQvOCss7RV1s0Cy2ydC3tC6NNRWH13qR53duyxiNX675zn6jU2ko67VymG5SIV OM839qy7TaO+PqZuolPGytLlk/TaKoUyrEgW/idm7j8gJvGlrVL+JFyCm5SXYJXO TbjSXxit31atLJUQLuwcUaVEezK6SzPfSH0YA4e6CA8FVWO/E/ZC2dkl+wdKRhpq RuJs3W2F2Wpg/FWzxW2DsUfU3JOhPHRUmuxGuNLukExwJbly5wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLAJ619fXuDmCM49yyifOyj/wpWgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 OTYzYmZkMy05MTA1LTQ0NDMtOThkZi1mYmRjMGE2NDFjNjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQ5NjNiZmQzLTkxMDUtNDQ0My05 OGRmLWZiZGMwYTY0MWM2MC80OTYzYmZkMy05MTA1LTQ0NDMtOThkZi1mYmRjMGE2 NDFjNjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALRh7gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPs2gMF3sQRXw34lqLaU9 zC0a6Cmnu/Ojr/OqSuvzLCTOgaiP6iOQEUwQHWW5GsJZeva8uQFRk1HPdJW4OQn5 tWlCIopBljErpIlllnuPZM5IqAd+PHx67v5396y/eC8154E7bbsbXJ2XN4W0DNzc W4G15PnaGehJSbAJQzMOU1YRR78tXElGHE9kfW2SDSH4Sa6ofCUSyN5WPl6fKLTY Y2U/JMrafUwqfrsW006v6xtqqt6bl1tdYzbMKt/ysqCBIu1V9f7xOTq50ZuG+Tfq AcHtGf4wK9r9f9Owqb54P/nAQhVqfIzUMAfukYu/3q61vKRaVwIZkM1OZwmllOJN DA== -----END CERTIFICATE-----Generated at Sun Nov 2 13:22:40 2025 by rpki-client