$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer File: 4f9daf15-de63-453b-a389-ff5afab0a952.cer (raw, json) Hash identifier: Ge0+NlvRMLWgDipNWUZ+n5SOgvu5qW3QE3mfMHEIuCw= Subject key identifier: C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A98F922F3445BF53FF5E81100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 00:45:36 +0000 Certificate not after: Mon 25 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 401005 IP: 23.156.88.0/24 IP: 2602:fa79::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:f9:22:f3:44:5b:f5:3f:f5:e8:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 22 00:45:36 2025 GMT Not After : Oct 25 00:45:36 2027 GMT Subject: CN=4f9daf15-de63-453b-a389-ff5afab0a952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:bf:be:27:16:13:8c:58:c6:da:ce:0c:1f: 45:c0:04:bb:c9:4e:1b:b6:8a:99:00:e2:e9:79:59: 39:6e:4b:14:bc:86:81:81:a6:e8:2c:d7:8f:66:cf: 43:35:35:bc:1e:a7:51:f1:6c:56:a0:34:44:02:ed: aa:95:14:86:ec:10:4c:8d:75:06:a3:ee:60:6a:0e: cd:6d:7c:84:33:cb:2c:16:10:86:48:23:09:c2:26: d9:bc:eb:92:ba:c5:ce:8d:2f:be:4c:b7:e9:dd:62: 99:b9:8b:58:cb:36:f6:b7:5c:3b:a5:bb:8c:98:2f: 82:e4:4f:f5:d2:2d:89:62:06:c6:0b:86:85:db:1d: 65:d8:3a:03:26:67:d8:d1:1a:a6:f8:bc:a9:fb:6e: 26:c6:6a:87:ab:bb:ef:97:cb:26:24:85:32:a2:14: e8:c9:71:85:07:50:b5:14:6a:a9:86:e3:19:20:3f: aa:c0:7a:15:2e:4f:b3:34:46:da:8c:6e:35:01:b1: f5:3d:31:f5:43:cc:d5:b6:15:cc:a0:f5:32:2b:d0: c4:a1:a7:1d:b0:53:5b:2d:6b:a0:6e:9c:f9:ec:1f: 2a:bc:5d:97:e4:06:c5:38:a9:57:55:5e:b5:a8:f6: 2a:ac:21:a0:b3:42:42:4e:d9:da:23:86:1c:ec:49: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.156.88.0/24 IPv6: 2602:fa79::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401005 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:48:b0:8d:0b:de:38:f7:58:b0:40:17:df:31:1a:ab:8c:b0: 63:ce:61:4e:c0:40:a3:a8:0c:de:ef:6e:a7:91:c5:e9:1a:fe: 7c:19:07:80:0e:29:c8:87:da:c3:ff:4e:7a:a4:e7:5c:75:6b: d4:66:f5:e4:7b:7e:50:a6:93:d7:91:a1:8f:50:09:f2:d9:e1: 51:4f:41:51:9c:9b:df:4c:6b:34:5a:4b:00:af:e5:86:a8:42: 53:ca:b1:6b:d2:d7:2b:e9:60:a7:4d:88:a8:de:ae:db:c6:77: 66:bd:3e:86:b2:33:b6:af:16:b5:4e:36:92:ef:f9:e7:ff:83: ad:85:e4:75:ae:86:33:b1:00:bc:b7:c8:49:ee:72:d1:5a:7c: 0e:b7:41:62:cb:c4:5f:a2:68:76:ee:46:ee:eb:91:87:51:3e: 35:25:63:a3:57:b6:5c:10:8c:3d:43:a2:fa:36:92:f3:2f:7d: 1d:bc:17:59:5a:9f:ba:ee:cc:e6:33:9a:3e:de:5c:bc:24:c6: c6:cc:7e:23:2a:38:c0:d6:94:7b:5d:f1:a2:37:c3:a6:d8:d5: f1:23:1e:5c:9a:f5:77:e2:14:1d:11:9d:d9:4c:3b:19:1f:c5: 13:e4:17:c4:00:48:45:f1:78:00:6b:84:87:be:ce:c9:c2:8a: 61:fd:33:49 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEqY+SLzRFv1P/XoEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMjAwNDUzNloXDTI3MTAyNTAwNDUzNlowLzEtMCsGA1UEAxMk NGY5ZGFmMTUtZGU2My00NTNiLWEzODktZmY1YWZhYjBhOTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqma/vicWE4xYxtrODB9FwAS7yU4btoqZAOLp eVk5bksUvIaBgaboLNePZs9DNTW8HqdR8WxWoDREAu2qlRSG7BBMjXUGo+5gag7N bXyEM8ssFhCGSCMJwibZvOuSusXOjS++TLfp3WKZuYtYyzb2t1w7pbuMmC+C5E/1 0i2JYgbGC4aF2x1l2DoDJmfY0Rqm+Lyp+24mxmqHq7vvl8smJIUyohToyXGFB1C1 FGqphuMZID+qwHoVLk+zNEbajG41AbH1PTH1Q8zVthXMoPUyK9DEoacdsFNbLWug bpz57B8qvF2X5AbFOKlXVV61qPYqrCGgs0JCTtnaI4Yc7Ekd5wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMcbBenchCeidbz5dBLIBmtYu7IaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 ZjlkYWYxNS1kZTYzLTQ1M2ItYTM4OS1mZjVhZmFiMGE5NTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRmOWRhZjE1LWRlNjMtNDUzYi1h Mzg5LWZmNWFmYWIwYTk1Mi80ZjlkYWYxNS1kZTYzLTQ1M2ItYTM4OS1mZjVhZmFi MGE5NTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnFgwDgQCAAIwCAMGBCYC+nkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYebTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgSLCNC94491iwQBffMRqrjLBj zmFOwECjqAze726nkcXpGv58GQeADinIh9rD/056pOdcdWvUZvXke35QppPXkaGP UAny2eFRT0FRnJvfTGs0WksAr+WGqEJTyrFr0tcr6WCnTYio3q7bxndmvT6GsjO2 rxa1TjaS7/nn/4OtheR1roYzsQC8t8hJ7nLRWnwOt0Fiy8Rfomh27kbu65GHUT41 JWOjV7ZcEIw9Q6L6NpLzL30dvBdZWp+67szmM5o+3ly8JMbGzH4jKjjA1pR7XfGi N8Om2NXxIx5cmvV34hQdEZ3ZTDsZH8UT5BfEAEhF8XgAa4SHvs7Jwoph/TNJ -----END CERTIFICATE-----Generated at Sat Nov 1 04:44:59 2025 by rpki-client