$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer File: 6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.cer (raw, json) Hash identifier: RXbbMtgsLcXE8bsRtxnZzPvU3vqXldvcBex8BCP0rag= Subject key identifier: B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849B5979FAE9DD38F13DB043780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 May 2025 14:00:38 +0000 Certificate not after: Fri 30 Jul 2027 12:45:34 +0000 Subordinate resources: AS: 18649 AS: 22242 AS: 36371 AS: 54508 AS: 54563 AS: 395279 IP: 66.11.192.0/19 IP: 192.190.8.0/24 IP: 199.101.104.0/22 IP: 208.86.72.0/21 IP: 208.95.192.0/21 IP: 208.103.80.0/20 IP: 2620:10f:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:97:9f:ae:9d:d3:8f:13:db:04:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 1 14:00:38 2025 GMT Not After : Jul 30 12:45:34 2027 GMT Subject: CN=6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:f5:1b:22:5a:2d:3a:e1:ab:62:c1:62:d7: f4:12:52:de:cf:03:d8:13:11:fa:f3:44:0b:a3:c6: 14:bd:a5:94:83:a3:18:1f:8e:9d:94:0d:8b:92:b8: d5:34:7c:8c:e3:f4:dd:08:f6:2c:dc:ec:65:1a:73: 62:6a:ff:a2:a1:1a:29:c4:2e:b6:54:fe:75:56:71: 90:4a:9d:9c:8a:b6:2f:71:48:c1:e1:b1:16:87:d5: 1d:61:ce:19:9a:af:7a:f7:de:fc:0b:a9:56:7a:bd: 92:d2:dd:8b:c3:8e:98:40:46:9b:f6:07:89:d3:83: b0:ab:f3:32:da:09:78:4d:bb:11:0e:c2:47:39:76: 01:6c:73:77:1d:41:f4:94:b6:00:bc:9e:f7:17:99: 6d:98:d4:02:db:d9:7e:62:5e:25:45:4b:71:74:e8: 33:20:19:81:77:ed:77:74:24:28:dc:48:ff:bd:a9: 3a:0e:c1:7a:f4:11:5b:51:e9:44:9a:99:a0:21:af: ae:25:be:7e:12:30:1c:a5:4d:9e:2c:7b:97:5c:1e: 69:7b:b6:5d:f1:4d:f7:7a:8d:1f:90:b8:61:64:01: 64:87:1b:35:cf:3d:09:d0:4b:85:3b:0b:c0:8b:6d: 99:05:40:df:d9:13:27:dd:15:fd:b7:82:f1:f5:f7: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1F:DC:17:A2:A1:17:56:56:E7:50:27:96:16:9F:3F:BA:DA:1B:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca/6f4d8e6b-e66e-46f9-8ef2-f2da1981cbca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.11.192.0/19 192.190.8.0/24 199.101.104.0/22 208.86.72.0/21 208.95.192.0/21 208.103.80.0/20 IPv6: 2620:10f:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18649 22242 36371 54508 54563 395279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:91:d8:db:f7:ab:f5:95:85:3c:5f:76:77:6a:f7:87:52:2d: 72:f4:76:83:f0:23:40:e5:99:ea:c1:dc:c8:af:31:9c:37:49: aa:12:a8:78:a1:93:cf:d7:c4:75:0e:f0:4c:36:6e:8f:07:fd: 43:f3:67:d3:ec:ac:2b:1f:af:f4:ce:aa:69:41:20:08:21:9d: 42:e3:e8:ee:1f:8b:75:f6:ae:67:11:10:ec:e0:b4:61:96:2f: ed:b4:61:ed:47:19:86:4b:8e:a6:9b:7c:f0:6e:66:18:ff:b9: 07:ae:43:49:c8:d1:9d:6a:ce:9d:1d:a1:54:9b:d5:4a:97:7a: 35:10:47:00:33:8f:99:46:51:b2:fa:0a:4b:f2:95:02:ab:a9: a9:0a:20:7c:ae:30:d0:c9:8e:46:0d:1a:c9:0b:78:c8:d3:28: 80:7b:3e:89:bb:cb:e1:9d:1c:d4:67:08:5d:2b:0a:b5:1d:2b: ca:76:84:7f:ab:29:51:db:95:b4:99:31:60:e8:eb:bc:24:3d: ed:87:15:17:16:ae:17:2e:af:86:91:c6:b2:85:b0:15:70:75: b6:e1:36:75:7a:b8:27:75:e3:0c:70:fe:62:f3:df:02:4e:ed: 55:9d:73:29:1d:9c:49:93:49:2c:ba:f8:3c:9b:6f:23:45:7e: 6f:1a:29:0a -----BEGIN CERTIFICATE----- MIIHTjCCBjagAwIBAgIUAQ0Mn0MoWEm1l5+undOPE9sEN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwMTE0MDAzOFoXDTI3MDczMDEyNDUzNFowLzEtMCsGA1UEAxMk NmY0ZDhlNmItZTY2ZS00NmY5LThlZjItZjJkYTE5ODFjYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyT1GyJaLTrhq2LBYtf0ElLezwPYExH680QL o8YUvaWUg6MYH46dlA2LkrjVNHyM4/TdCPYs3OxlGnNiav+ioRopxC62VP51VnGQ Sp2cirYvcUjB4bEWh9UdYc4Zmq969978C6lWer2S0t2Lw46YQEab9geJ04Owq/My 2gl4TbsRDsJHOXYBbHN3HUH0lLYAvJ73F5ltmNQC29l+Yl4lRUtxdOgzIBmBd+13 dCQo3Ej/vak6DsF69BFbUelEmpmgIa+uJb5+EjAcpU2eLHuXXB5pe7Zd8U33eo0f kLhhZAFkhxs1zz0J0EuFOwvAi22ZBUDf2RMn3RX9t4Lx9fdw2QIDAQABo4IEYDCC BFwwHQYDVR0OBBYEFLkf3BeioRdWVudQJ5YWnz+62hsoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 ZjRkOGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRhMTk4MWNiY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzZmNGQ4ZTZiLWU2NmUtNDZmOS04 ZWYyLWYyZGExOTgxY2JjYS82ZjRkOGU2Yi1lNjZlLTQ2ZjktOGVmMi1mMmRhMTk4 MWNiY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAVCC8ADBADAvggDBALHZWgDBAPQVkgDBAPQX8AD BATQZ1AwDgQCAAIwCAMGACYgAQ/gMDEGCCsGAQUFBwEIAQH/BCIwIKAeMBwCAkjZ AgJW4gIDAI4TAgMA1OwCAwDVIwIDBggPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADqR2Nv3q/WVhTxfdndq 94dSLXL0doPwI0DlmerB3MivMZw3SaoSqHihk8/XxHUO8Ew2bo8H/UPzZ9PsrCsf r/TOqmlBIAghnULj6O4fi3X2rmcREOzgtGGWL+20Ye1HGYZLjqabfPBuZhj/uQeu Q0nI0Z1qzp0doVSb1UqXejUQRwAzj5lGUbL6CkvylQKrqakKIHyuMNDJjkYNGskL eMjTKIB7Pom7y+GdHNRnCF0rCrUdK8p2hH+rKVHblbSZMWDo67wkPe2HFRcWrhcu r4aRxrKFsBVwdbbhNnV6uCd14wxw/mLz3wJO7VWdcykdnEmTSSy6+DybbyNFfm8a KQo= -----END CERTIFICATE-----Generated at Sun Nov 2 13:24:28 2025 by rpki-client