$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587.cer File: 7e2cde89-a04e-4423-9844-bcbd0aa96587.cer (raw, json) Hash identifier: COaDZrKZKTNtVInzn4NFZ9KCqi2cK4/itFBtsGkFKjM= Subject key identifier: DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849EBE2BB196587748420203B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 May 2025 00:45:37 +0000 Certificate not after: Tue 24 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 20432 IP: 50.20.208.0/20 IP: 72.46.0.0/20 IP: 206.83.156.0/22 IP: 207.231.0.0/19 IP: 2605:ad40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:e2:bb:19:65:87:74:84:20:20:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 21 00:45:37 2025 GMT Not After : Aug 24 00:45:37 2027 GMT Subject: CN=7e2cde89-a04e-4423-9844-bcbd0aa96587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:a0:12:f2:15:de:fa:e7:f6:69:06:cc:34: 92:e2:c2:e7:0d:7d:b6:6b:2a:0b:55:94:26:77:d9: 55:78:48:59:20:d8:58:43:a8:5a:09:e8:96:4d:a0: b7:3e:a0:3d:8f:94:16:76:7b:0e:c2:61:7f:08:10: c9:77:10:d1:8c:c4:e1:1d:bc:83:d8:92:5b:8a:0c: 38:31:f4:ba:5b:21:b1:d9:96:af:66:cf:76:bd:d4: 61:af:7a:d1:bb:63:7a:1f:cd:4c:ce:df:2b:a7:3f: f2:38:f7:08:7b:5f:66:60:e9:cb:05:57:8a:95:55: db:9a:26:82:fe:9e:84:4d:f0:34:97:bc:0f:04:b1: 0d:9f:9f:33:37:66:66:2d:bb:20:2c:8c:98:fb:49: 8f:ba:d5:a5:51:d2:56:d5:28:81:d1:be:d9:1e:5a: 9d:eb:a9:00:d5:39:9d:81:0f:6c:21:23:78:4d:8a: 0c:f3:95:d8:d7:04:91:67:b6:e9:98:89:65:ac:e1: e2:b9:31:1c:43:53:3c:3f:1d:01:b0:7b:c7:5c:c0: b4:5a:7c:36:6a:8e:da:7c:d1:8a:18:69:8d:93:6a: df:50:55:02:da:5d:8e:ea:17:28:e5:ec:d9:2b:45: 25:3a:64:4d:88:be:6f:44:46:05:b8:04:02:21:fb: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 50.20.208.0/20 72.46.0.0/20 206.83.156.0/22 207.231.0.0/19 IPv6: 2605:ad40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20432 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:98:dc:e4:e1:52:38:c6:f8:30:71:93:30:c7:a1:26:24:eb: b3:aa:50:02:b6:51:8b:4b:61:71:3f:29:fd:76:18:bc:c2:43: 6e:07:79:78:e5:3f:f2:e0:79:9e:bc:c3:fe:4e:e1:a4:58:77: fa:e5:f4:c8:de:84:e2:f2:c5:3a:ce:63:27:5b:18:d0:cb:51: 1d:e1:73:e1:15:26:ad:ab:87:a6:da:74:c4:28:7c:d1:03:a4: 15:4c:fe:0f:2c:ad:01:fa:96:f0:03:77:83:63:d5:c6:9c:99: b0:71:22:8d:7e:db:1a:5f:a3:e8:d9:25:b9:02:ed:44:4f:21: 52:22:93:cb:b7:e2:81:d9:84:f9:f5:ac:43:52:2a:ec:2a:44: a7:a3:8c:cd:ae:50:5f:98:9b:06:14:81:8e:5d:31:b4:e4:c5: 6e:ac:4e:2a:00:c8:80:86:f5:36:fb:99:fb:c3:36:d7:e2:a5: 7e:b7:f3:34:04:43:85:cb:ba:ee:ac:8f:29:c7:2f:7d:21:07: 3d:00:e6:80:fd:ef:df:34:60:4b:82:f9:66:f8:4e:e0:d2:d1: fe:5f:c8:e0:79:53:c3:2f:ef:b9:c9:d2:64:fb:f7:17:96:a5: 4d:8e:e1:b5:64:bd:25:52:57:8e:1b:94:f1:b9:80:3b:2b:21: f6:e5:8d:46 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEnr4rsZZYd0hCAgO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyMTAwNDUzN1oXDTI3MDgyNDAwNDUzN1owLzEtMCsGA1UEAxMk N2UyY2RlODktYTA0ZS00NDIzLTk4NDQtYmNiZDBhYTk2NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorCgEvIV3vrn9mkGzDSS4sLnDX22ayoLVZQm d9lVeEhZINhYQ6haCeiWTaC3PqA9j5QWdnsOwmF/CBDJdxDRjMThHbyD2JJbigw4 MfS6WyGx2ZavZs92vdRhr3rRu2N6H81Mzt8rpz/yOPcIe19mYOnLBVeKlVXbmiaC /p6ETfA0l7wPBLENn58zN2ZmLbsgLIyY+0mPutWlUdJW1SiB0b7ZHlqd66kA1Tmd gQ9sISN4TYoM85XY1wSRZ7bpmIllrOHiuTEcQ1M8Px0BsHvHXMC0Wnw2ao7afNGK GGmNk2rfUFUC2l2O6hco5ezZK0UlOmRNiL5vREYFuAQCIfvYlwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFN4fWSPVEDfnxu6AZLnFPNl9ZfLOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 ZTJjZGU4OS1hMDRlLTQ0MjMtOTg0NC1iY2JkMGFhOTY1ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzdlMmNkZTg5LWEwNGUtNDQyMy05 ODQ0LWJjYmQwYWE5NjU4Ny83ZTJjZGU4OS1hMDRlLTQ0MjMtOTg0NC1iY2JkMGFh OTY1ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAQyFNADBARILgADBALOU5wDBAXP5wAwDQQCAAIw BwMFACYFrUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICT9AwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg5jc 5OFSOMb4MHGTMMehJiTrs6pQArZRi0thcT8p/XYYvMJDbgd5eOU/8uB5nrzD/k7h pFh3+uX0yN6E4vLFOs5jJ1sY0MtRHeFz4RUmrauHptp0xCh80QOkFUz+DyytAfqW 8AN3g2PVxpyZsHEijX7bGl+j6NkluQLtRE8hUiKTy7figdmE+fWsQ1Iq7CpEp6OM za5QX5ibBhSBjl0xtOTFbqxOKgDIgIb1NvuZ+8M21+KlfrfzNARDhcu67qyPKccv fSEHPQDmgP3v3zRgS4L5ZvhO4NLR/l/I4HlTwy/vucnSZPv3F5alTY7htWS9JVJX jhuU8bmAOysh9uWNRg== -----END CERTIFICATE-----Generated at Tue Oct 28 09:26:26 2025 by rpki-client