$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874.cer File: 5144f613-8a75-4802-bb71-45eaf8220874.cer (raw, json) Hash identifier: cmd3zjFbKK6q0f8pZw0cBiVmvQpAxNEZqbavsylcM5s= Subject key identifier: 16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849A77CF2CAB97D545F7591E780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Apr 2025 12:45:34 +0000 Certificate not after: Fri 30 Jul 2027 12:45:34 +0000 Subordinate resources: IP: 23.169.184.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:7c:f2:ca:b9:7d:54:5f:75:91:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 26 12:45:34 2025 GMT Not After : Jul 30 12:45:34 2027 GMT Subject: CN=5144f613-8a75-4802-bb71-45eaf8220874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:62:19:90:cc:74:ec:b5:8f:2a:91:e6:9d: 73:0e:2f:f9:f1:e2:e3:3c:44:8a:98:af:4d:5d:75: cc:94:24:83:28:b5:fb:f4:2c:aa:83:49:80:b9:2c: 51:5e:fc:2d:36:29:74:d2:9e:8c:d9:15:23:62:a4: 8c:b5:25:40:c6:b3:1e:e0:e4:24:ee:e6:12:c1:5b: 28:2d:3e:3c:f2:53:03:b3:d0:ec:e2:f2:68:17:50: ba:98:df:c3:99:80:e5:08:9d:1f:72:04:1e:da:f2: c4:9a:b0:f9:9d:5c:0b:2b:24:35:ef:53:69:85:c2: 87:1e:73:96:cb:6b:2e:5c:ff:1a:4c:34:ea:c6:e3: 9c:9c:14:de:07:d4:6b:c3:ab:de:57:fe:4e:8a:3d: 78:f4:90:23:eb:ed:bf:3b:0f:3c:c6:21:88:04:cf: 5e:a3:3a:61:db:f4:6b:fc:f3:a4:18:d2:40:04:15: 6f:22:6d:2f:af:02:50:b2:4c:53:e1:e7:07:a9:24: 3c:8a:de:79:8e:7f:13:d4:e7:29:e5:8d:20:87:b5: ad:9c:80:89:51:29:1b:6c:e8:05:d7:c7:ac:0c:0c: 21:7e:ae:f2:35:34:e8:1d:0f:7c:66:45:04:94:6f: fb:90:1f:ac:94:86:d5:0f:8e:48:57:c7:ee:c7:c1: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:91:34:03:FE:9B:AF:66:4A:F1:B8:F0:CA:38:03:A4:B9:C4:C2:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5144f613-8a75-4802-bb71-45eaf8220874/5144f613-8a75-4802-bb71-45eaf8220874.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.169.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1a:01:7e:f1:84:24:bb:dc:9e:8f:42:76:6e:f2:44:1f:38: c1:37:21:1b:22:0e:70:ba:d8:96:2f:0a:a3:35:e6:b1:43:8d: 4c:6c:74:c3:51:34:2f:06:ee:14:51:93:d9:a5:01:37:ef:5c: 7e:3a:b3:2e:bd:97:c8:17:ee:56:6b:42:d2:b1:f0:ea:cf:16: 71:0c:24:45:cc:aa:21:ca:fb:74:6f:1e:27:23:08:ab:05:c4: c3:2e:dd:21:0c:8f:41:46:03:77:0a:17:63:cf:b3:70:a4:fe: 8c:99:24:78:8c:f5:60:4d:61:06:16:04:75:d6:01:b5:3a:69: a1:d5:e4:d3:51:25:fd:74:00:b3:99:ce:97:5a:3e:94:0f:99: 5e:8b:7b:71:62:5b:05:1f:73:8b:d3:28:61:aa:04:da:36:e1: 3e:85:24:e2:a1:43:af:e2:ae:0a:ba:46:fd:94:3c:5b:05:41: 43:36:b5:f9:a3:2d:86:a4:ae:63:b2:4a:95:e9:98:28:73:64: 26:af:48:7c:8a:b5:27:b6:4b:4e:d9:64:a6:ac:00:93:85:19: 9b:80:d6:7f:65:e1:27:6b:b2:2f:f3:5b:02:ac:e5:69:10:cc: 89:ac:17:dd:ec:16:ff:e5:b2:06:37:2b:6f:f8:8b:a6:e8:38: fe:7a:30:a5 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEmnfPLKuX1UX3WR54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyNjEyNDUzNFoXDTI3MDczMDEyNDUzNFowLzEtMCsGA1UEAxMk NTE0NGY2MTMtOGE3NS00ODAyLWJiNzEtNDVlYWY4MjIwODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2shiGZDMdOy1jyqR5p1zDi/58eLjPESKmK9N XXXMlCSDKLX79Cyqg0mAuSxRXvwtNil00p6M2RUjYqSMtSVAxrMe4OQk7uYSwVso LT488lMDs9Ds4vJoF1C6mN/DmYDlCJ0fcgQe2vLEmrD5nVwLKyQ171NphcKHHnOW y2suXP8aTDTqxuOcnBTeB9Rrw6veV/5Oij149JAj6+2/Ow88xiGIBM9eozph2/Rr /POkGNJABBVvIm0vrwJQskxT4ecHqSQ8it55jn8T1Ocp5Y0gh7WtnICJUSkbbOgF 18esDAwhfq7yNTToHQ98ZkUElG/7kB+slIbVD45IV8fux8E4SQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBaRNAP+m69mSvG48Mo4A6S5xMKtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 MTQ0ZjYxMy04YTc1LTQ4MDItYmI3MS00NWVhZjgyMjA4NzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzUxNDRmNjEzLThhNzUtNDgwMi1i YjcxLTQ1ZWFmODIyMDg3NC81MTQ0ZjYxMy04YTc1LTQ4MDItYmI3MS00NWVhZjgy MjA4NzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXqbgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEhoBfvGEJLvcno9Cdm7y RB84wTchGyIOcLrYli8KozXmsUONTGx0w1E0LwbuFFGT2aUBN+9cfjqzLr2XyBfu VmtC0rHw6s8WcQwkRcyqIcr7dG8eJyMIqwXEwy7dIQyPQUYDdwoXY8+zcKT+jJkk eIz1YE1hBhYEddYBtTppodXk01El/XQAs5nOl1o+lA+ZXot7cWJbBR9zi9MoYaoE 2jbhPoUk4qFDr+KuCrpG/ZQ8WwVBQza1+aMthqSuY7JKlemYKHNkJq9IfIq1J7ZL TtlkpqwAk4UZm4DWf2XhJ2uyL/NbAqzlaRDMiawX3ewW/+WyBjcrb/iLpug4/now pQ== -----END CERTIFICATE-----Generated at Sun Nov 2 13:24:11 2025 by rpki-client