$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer File: 7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer (raw, json) Hash identifier: 2HZBYAoDRi40UFsvkciYsWmSCX/QmJnomu+twKodXZw= Subject key identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A6F18E0F2D3D7ABFD1F836460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 00:45:37 +0000 Certificate not after: Sun 10 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 46886 IP: 104.36.252.0/22 IP: 104.193.128.0/22 IP: 158.51.192.0/22 IP: 165.140.16.0/22 IP: 170.178.140.0/22 IP: 2602:ffa4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:18:e0:f2:d3:d7:ab:fd:1f:83:64:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 7 00:45:37 2025 GMT Not After : Oct 10 00:45:37 2027 GMT Subject: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:86:d7:16:09:b6:9c:19:a2:ee:47:da:24: 0b:a8:f5:92:18:b9:28:6d:74:4d:1c:ad:93:30:1f: 0f:4f:b6:b0:70:c0:64:4e:fd:b3:4a:b6:fb:a8:a4: 13:d3:98:c3:c8:7d:67:e2:db:08:e7:7d:52:fe:93: 84:e4:55:b0:b3:3d:0c:6b:d8:4a:c7:9f:ff:34:df: 6f:50:e0:ec:60:95:e8:96:91:dd:8a:17:f2:87:0f: f7:e2:68:ac:ca:3e:3f:fa:81:12:c0:4d:f5:41:f7: 3e:94:89:51:c4:f6:bf:6e:82:b9:c4:a5:da:fd:87: 31:41:71:d0:d2:be:ff:5e:08:59:bf:43:3d:e6:2e: 5e:d8:de:42:2c:49:3a:09:3b:34:08:4c:d9:87:cf: 46:3a:35:94:2a:97:88:9a:0b:26:c2:99:33:df:29: 64:47:1a:33:47:56:88:73:11:b1:c4:fe:e0:be:48: c5:73:91:ef:e9:7b:e7:48:71:b3:e6:92:b1:7b:99: 21:54:fc:34:72:81:91:b7:e5:47:f0:58:b2:2a:8f: 7f:a4:13:b8:d1:d2:3f:ac:57:4d:02:3c:8d:bf:d2: 72:63:00:da:b5:c6:7f:11:dc:6d:be:37:27:33:de: b4:3a:3e:06:b1:f7:ca:b1:f8:b2:ef:7a:10:d4:2f: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 104.36.252.0/22 104.193.128.0/22 158.51.192.0/22 165.140.16.0/22 170.178.140.0/22 IPv6: 2602:ffa4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46886 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:0e:d1:96:34:4d:48:f4:25:be:ad:79:63:86:b6:53:1b:54: 47:50:87:86:8c:16:ac:a9:dc:e8:54:50:f8:8e:81:c0:b2:7c: cb:aa:28:6f:ba:5d:b1:1c:0f:5c:7f:4d:85:59:04:f5:be:ec: 33:47:33:9a:3d:64:e0:aa:c6:a3:76:a3:94:dc:6c:3b:b4:4e: 72:70:7a:2b:c6:25:7e:56:1b:82:ae:2f:b2:b7:48:4b:06:60: dc:a1:f6:af:d8:7a:de:fe:1d:a6:eb:d3:27:97:6d:a3:55:67: 2c:ba:bf:25:be:11:45:da:cc:8c:12:6e:f2:c3:49:b3:a8:6d: 69:4b:72:25:ef:41:82:c1:2f:58:4e:e7:c5:91:9b:ac:88:c2: ba:0a:c0:ba:42:bd:2d:04:21:cf:56:39:8e:96:62:7a:41:9d: f5:0f:f9:c7:7d:cc:03:13:1a:05:67:41:b6:e5:a0:e2:be:35: 57:d3:a6:47:ba:19:00:92:a1:84:53:d4:c3:86:59:b3:91:fb: 81:48:0a:c6:f9:77:25:d5:56:19:a7:c1:d0:82:b5:64:d9:39: f0:41:9a:b1:ad:1a:b8:66:77:c8:14:a7:e9:df:11:35:6c:74: 8f:77:a9:75:15:dd:06:d2:98:dd:52:7e:36:38:ab:29:fa:0d: 20:ef:3d:9c -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEpvGODy09er/R+DZGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwNzAwNDUzN1oXDTI3MTAxMDAwNDUzN1owLzEtMCsGA1UEAxMk N2MxM2FhNWMtZDRhMy00MjViLWI4OTgtMWM0NTZjNjQyNmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMuG1xYJtpwZou5H2iQLqPWSGLkobXRNHK2T MB8PT7awcMBkTv2zSrb7qKQT05jDyH1n4tsI531S/pOE5FWwsz0Ma9hKx5//NN9v UODsYJXolpHdihfyhw/34misyj4/+oESwE31Qfc+lIlRxPa/boK5xKXa/YcxQXHQ 0r7/XghZv0M95i5e2N5CLEk6CTs0CEzZh89GOjWUKpeImgsmwpkz3ylkRxozR1aI cxGxxP7gvkjFc5Hv6XvnSHGz5pKxe5khVPw0coGRt+VH8FiyKo9/pBO40dI/rFdN AjyNv9JyYwDatcZ/EdxtvjcnM960Oj4GsffKsfiy73oQ1C+GYwIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFKsD5y4/L7hDetwTsdyqtGRFRv++MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 YzEzYWE1Yy1kNGEzLTQyNWItYjg5OC0xYzQ1NmM2NDI2ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzdjMTNhYTVjLWQ0YTMtNDI1Yi1i ODk4LTFjNDU2YzY0MjZkNy83YzEzYWE1Yy1kNGEzLTQyNWItYjg5OC0xYzQ1NmM2 NDI2ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAJoJPwDBAJowYADBAKeM8ADBAKljBADBAKqsoww DgQCAAIwCAMGBCYC/6QAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC3JjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQB9DtGWNE1I9CW+rXljhrZTG1RHUIeGjBasqdzoVFD4joHAsnzLqihvul2x HA9cf02FWQT1vuwzRzOaPWTgqsajdqOU3Gw7tE5ycHorxiV+VhuCri+yt0hLBmDc ofav2Hre/h2m69Mnl22jVWcsur8lvhFF2syMEm7yw0mzqG1pS3Il70GCwS9YTufF kZusiMK6CsC6Qr0tBCHPVjmOlmJ6QZ31D/nHfcwDExoFZ0G25aDivjVX06ZHuhkA kqGEU9TDhlmzkfuBSArG+Xcl1VYZp8HQgrVk2TnwQZqxrRq4ZnfIFKfp3xE1bHSP d6l1Fd0G0pjdUn42OKsp+g0g7z2c -----END CERTIFICATE-----Generated at Wed Jul 9 06:08:45 2025 by rpki-client