$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer File: 5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer (raw, json) Hash identifier: i00cnsnAQxXob/2oCHlORrTHPSTFPxNKcMGcNu7QDUY= Subject key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849BF37C40F5EEE983BD220E5A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 May 2025 00:45:34 +0000 Certificate not after: Sun 08 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 22135 IP: 173.242.0.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:37:c4:0f:5e:ee:98:3b:d2:20:e5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 5 00:45:34 2025 GMT Not After : Aug 8 00:45:34 2027 GMT Subject: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:a3:9c:54:7a:e5:55:91:84:5d:0b:1a:08: ba:11:c8:ee:db:26:25:be:de:5e:c8:7b:5d:67:2a: f8:82:5d:d3:fa:0e:05:c8:d8:b2:9f:11:83:59:08: ef:73:cf:a7:2f:1f:47:3a:1e:94:5c:20:a0:98:94: 8b:81:54:2c:1b:21:3c:63:ac:2f:f1:e4:36:4b:b7: e3:63:2c:e4:e0:61:e0:83:84:67:01:1a:23:4f:4d: d7:6a:e7:9c:d9:0a:3c:73:f7:75:e9:da:af:46:61: 5f:11:7f:38:61:8e:ea:ca:9d:e6:15:e2:40:db:12: 8e:3f:f7:cb:88:e7:cb:12:d8:63:18:62:65:22:68: 67:d2:4a:14:bd:59:d2:7b:c0:31:bd:e9:26:29:1d: 07:d1:56:4c:90:d0:be:14:b6:a0:cf:8d:01:01:e0: 0f:96:ad:99:bb:af:6f:68:6c:b1:d9:66:70:b3:33: 82:a5:69:93:89:e7:d9:28:4f:fa:e3:69:f6:d9:94: 0f:69:d1:31:4c:e4:64:24:da:68:fc:09:35:89:64: 71:28:48:a6:f2:3a:e0:0d:37:80:41:94:a6:e8:9e: 91:bc:40:26:cf:18:68:cf:ee:06:9f:e7:94:1d:1b: a0:78:38:f1:f7:0a:eb:3d:19:10:4b:55:a2:ca:eb: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 173.242.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22135 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:63:fe:61:53:ac:e2:ae:53:16:9d:93:04:1d:54:92:0a:f7: 9b:45:af:13:bb:a7:60:36:42:77:34:4e:7c:cf:e8:8f:5e:3b: 35:a1:e2:d5:09:73:d9:52:b9:ed:e5:12:5b:cb:29:36:75:22: 82:98:3b:45:72:c7:6c:fc:23:17:05:48:a9:06:e9:8d:dd:c1: e3:d6:32:62:fc:8d:4f:11:be:a6:8a:16:a0:e3:b1:11:6e:37: f0:4c:3e:fc:0a:f5:3a:b5:2b:6c:03:cc:1e:d0:ad:6e:ad:f1: 2d:7e:84:bb:c0:0a:7f:8c:eb:e8:26:9d:8e:92:ab:5e:42:29: 69:f0:cd:a0:9a:11:b6:b1:8b:5c:e1:ff:85:c4:1b:dd:b9:f7: 00:c0:49:56:3e:c4:e2:a4:19:0f:8c:10:eb:9e:6a:16:69:17: 47:5f:ee:6a:85:b0:57:29:ba:10:7d:bb:63:01:3d:53:66:46: 33:b6:ec:16:99:36:98:01:5a:b1:ad:8e:a5:47:b3:de:f0:68: 1a:dc:f1:9f:b1:24:ea:35:e8:6a:e1:f5:e7:32:8b:8b:b6:9a: 94:72:cd:d2:a5:38:97:12:1a:ca:87:b1:82:1f:08:c0:b4:4f: ae:4e:d5:67:06:b8:f6:6b:58:61:45:80:2a:06:be:23:4e:ce: 81:c9:d0:a4 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEm/N8QPXu6YO9Ig5aIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNTAwNDUzNFoXDTI3MDgwODAwNDUzNFowLzEtMCsGA1UEAxMk NWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIxYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvijnFR65VWRhF0LGgi6Ecju2yYlvt5eyHtd Zyr4gl3T+g4FyNiynxGDWQjvc8+nLx9HOh6UXCCgmJSLgVQsGyE8Y6wv8eQ2S7fj Yyzk4GHgg4RnARojT03Xauec2Qo8c/d16dqvRmFfEX84YY7qyp3mFeJA2xKOP/fL iOfLEthjGGJlImhn0koUvVnSe8AxvekmKR0H0VZMkNC+FLagz40BAeAPlq2Zu69v aGyx2WZwszOCpWmTiefZKE/642n22ZQPadExTORkJNpo/Ak1iWRxKEim8jrgDTeA QZSm6J6RvEAmzxhoz+4Gn+eUHRugeDjx9wrrPRkQS1WiyuusWwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAbrQUDVECzbfA2M4nsHFlrbMJKpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzVkOTQ5OWE3LWRkNzMtNGQyOC1i M2FkLTI4MTNlMTQyMWM2NC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0 MjFjNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASt8gAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC VncwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAQGP+YVOs4q5TFp2TBB1Ukgr3m0WvE7unYDZCdzROfM/oj147 NaHi1Qlz2VK57eUSW8spNnUigpg7RXLHbPwjFwVIqQbpjd3B49YyYvyNTxG+pooW oOOxEW438Ew+/Ar1OrUrbAPMHtCtbq3xLX6Eu8AKf4zr6CadjpKrXkIpafDNoJoR trGLXOH/hcQb3bn3AMBJVj7E4qQZD4wQ655qFmkXR1/uaoWwVym6EH27YwE9U2ZG M7bsFpk2mAFasa2OpUez3vBoGtzxn7Ek6jXoauH15zKLi7aalHLN0qU4lxIayoex gh8IwLRPrk7VZwa49mtYYUWAKga+I07OgcnQpA== -----END CERTIFICATE-----Generated at Sun Nov 2 13:24:26 2025 by rpki-client