$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer File: 4e3b6f0c-03ba-4619-b32b-5c978718dfe7.cer (raw, json) Hash identifier: 2GaHCmZ0WPUqRlqT1VfAX0NhOI7y47ha52yuzQNdCS8= Subject key identifier: F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A374331577282A28B4B2A66A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Jun 2025 00:45:36 +0000 Certificate not after: Mon 20 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 112 AS: 64238 IP: 64.191.0.0/23 IP: 192.31.196.0/24 IP: 192.175.48.0/24 IP: 2001:4:112::/48 IP: 2620:4f:8000::/48 IP: 2620:ff:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:43:31:57:72:82:a2:8b:4b:2a:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 17 00:45:36 2025 GMT Not After : Sep 20 00:45:36 2027 GMT Subject: CN=4e3b6f0c-03ba-4619-b32b-5c978718dfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:9f:97:4b:5b:a5:13:6f:2c:32:0c:1f:05: 1c:6a:5d:0d:7c:88:d2:9b:d5:d2:6a:f6:24:e1:85: a2:01:77:19:9c:b2:c7:cf:d3:f0:3b:5d:92:99:72: b8:80:3b:69:34:48:30:01:ce:52:07:b6:f2:3c:61: cb:7b:e2:4c:74:97:4b:de:eb:bd:e3:eb:3d:17:1e: 78:5b:19:5d:34:4f:f3:e2:13:78:13:50:cc:a7:ff: db:e1:14:37:c0:e0:54:ad:c6:23:cd:58:82:39:56: de:66:72:07:0f:cb:20:49:e9:d8:3a:b1:a9:e7:92: 06:3d:8f:82:9d:da:86:ea:03:9c:2d:28:14:90:45: b4:5d:0d:c6:49:c4:cb:8d:b4:27:1f:8b:69:24:43: cf:a1:8a:64:43:29:41:b0:05:18:23:12:a2:52:4e: f8:9c:0c:44:61:53:14:aa:6f:90:ca:9c:5f:a2:59: 5c:3b:a0:57:dd:e3:ef:97:fd:21:7e:5f:ff:60:c3: 3c:14:8b:01:9b:75:e2:40:46:88:eb:2f:f2:9e:2c: 87:a1:ed:b4:01:44:0c:51:cb:cb:4d:93:be:b4:ca: 8a:30:46:3e:b6:f6:f7:27:5f:3e:b6:2d:c5:ef:03: f4:17:4b:b3:4e:fa:7c:e5:46:9c:bf:ce:17:6b:62: af:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:6F:6F:1F:4C:F8:FD:F1:65:A9:22:C0:B4:7E:AB:2A:30:E1:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e3b6f0c-03ba-4619-b32b-5c978718dfe7/4e3b6f0c-03ba-4619-b32b-5c978718dfe7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.191.0.0/23 192.31.196.0/24 192.175.48.0/24 IPv6: 2001:4:112::/48 2620:4f:8000::/48 2620:ff:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 112 64238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2e:42:95:f3:31:0c:b5:94:76:b1:d7:52:60:92:72:02:1d: b7:55:e6:e6:0f:39:7b:3a:15:bd:ed:99:9d:90:a5:e2:5e:c4: 92:25:4f:52:8a:4a:85:4a:ed:b7:c2:8b:06:25:39:76:00:88: c5:3e:7a:54:63:e1:12:42:29:0b:e7:e8:05:a6:da:73:c1:5c: 28:16:6b:03:e0:be:0f:8b:e8:15:38:0d:cd:a3:aa:c9:5b:30: 90:3d:00:ce:4d:e2:ed:09:e3:35:dd:4f:40:d9:9a:17:cf:e8: 98:f7:3d:29:fb:1d:03:fc:82:21:c6:2b:6c:88:a4:09:50:fa: 22:a3:03:d2:d0:96:b9:c0:6a:1e:fa:b3:c9:cd:7f:42:09:c8: 5d:b2:fd:e8:6a:26:d4:36:f7:e1:7d:90:a4:52:07:9a:29:00: b9:cd:1d:2b:a4:a4:39:ce:a4:1a:ab:ef:8a:7e:29:b3:ed:98: a9:b6:2d:39:39:59:75:59:0b:e8:d1:ab:af:aa:95:85:3e:b9: 83:1d:40:fb:85:38:4a:fc:64:e7:00:31:15:71:e4:07:82:6c: 2b:bc:4e:ed:fb:37:7d:31:e7:23:94:08:6f:78:29:d3:20:89: c9:72:12:90:fd:d0:ab:c1:95:4a:6c:5d:d0:f5:b9:23:e6:ad: fa:76:9b:2c -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEo3QzFXcoKii0sqZqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxNzAwNDUzNloXDTI3MDkyMDAwNDUzNlowLzEtMCsGA1UEAxMk NGUzYjZmMGMtMDNiYS00NjE5LWIzMmItNWM5Nzg3MThkZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/Kfl0tbpRNvLDIMHwUcal0NfIjSm9XSavYk 4YWiAXcZnLLHz9PwO12SmXK4gDtpNEgwAc5SB7byPGHLe+JMdJdL3uu94+s9Fx54 WxldNE/z4hN4E1DMp//b4RQ3wOBUrcYjzViCOVbeZnIHD8sgSenYOrGp55IGPY+C ndqG6gOcLSgUkEW0XQ3GScTLjbQnH4tpJEPPoYpkQylBsAUYIxKiUk74nAxEYVMU qm+QypxfollcO6BX3ePvl/0hfl//YMM8FIsBm3XiQEaI6y/yniyHoe20AUQMUcvL TZO+tMqKMEY+tvb3J18+ti3F7wP0F0uzTvp85Uacv84Xa2Kv4wIDAQABo4IETTCC BEkwHQYDVR0OBBYEFPnPb28fTPj98WWpIsC0fqsqMOE5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 ZTNiNmYwYy0wM2JhLTQ2MTktYjMyYi01Yzk3ODcxOGRmZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRlM2I2ZjBjLTAzYmEtNDYxOS1i MzJiLTVjOTc4NzE4ZGZlNy80ZTNiNmYwYy0wM2JhLTQ2MTktYjMyYi01Yzk3ODcx OGRmZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MBgEAgABMBIDBAFAvwADBADAH8QDBADArzAwIQQCAAIwGwMHACAB AAQBEgMHACYgAE+AAAMHACYgAP/AADAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgFw AgMA+u4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAEC5ClfMxDLWUdrHXUmCScgIdt1Xm5g85ezoVve2ZnZCl 4l7EkiVPUopKhUrtt8KLBiU5dgCIxT56VGPhEkIpC+foBabac8FcKBZrA+C+D4vo FTgNzaOqyVswkD0Azk3i7QnjNd1PQNmaF8/omPc9KfsdA/yCIcYrbIikCVD6IqMD 0tCWucBqHvqzyc1/QgnIXbL96Gom1Db34X2QpFIHmikAuc0dK6SkOc6kGqvvin4p s+2YqbYtOTlZdVkL6NGrr6qVhT65gx1A+4U4Svxk5wAxFXHkB4JsK7xO7fs3fTHn I5QIb3gp0yCJyXISkP3Qq8GVSmxd0PW5I+at+nabLA== -----END CERTIFICATE-----Generated at Tue Oct 28 04:41:59 2025 by rpki-client