$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer File: 8741ed4f-28ba-4cbf-a4a6-384057567d05.cer (raw, json) Hash identifier: 7ftm5Je985l4DoGgnd2zTIqajLTafBlmL4ktWBJIxB8= Subject key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849FCA2D4C13C7AF65D679BEB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 May 2025 00:45:36 +0000 Certificate not after: Mon 30 Aug 2027 00:45:36 +0000 Subordinate resources: AS: 33264 AS: 33292 -- 33293 IP: 66.51.198.0 -- 66.51.207.255 IP: 66.245.240.0/20 IP: 192.81.116.0/22 IP: 206.15.129.0 -- 206.15.191.255 IP: 216.126.204.0/23 IP: 2001:19c8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:a2:d4:c1:3c:7a:f6:5d:67:9b:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 27 00:45:36 2025 GMT Not After : Aug 30 00:45:36 2027 GMT Subject: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:54:46:33:cb:da:38:a9:9b:b6:b4:20:bd: d0:1d:d6:be:94:ab:47:52:6b:b2:30:81:aa:ed:bf: cf:89:6a:cb:4b:b7:1a:0a:36:9c:bd:33:e5:ca:a1: 16:d1:4e:5b:05:f5:0f:9f:fb:25:5c:d0:3a:f3:12: e1:42:5d:56:18:9a:73:07:84:ec:e6:a7:7b:5d:60: 08:c1:41:34:49:5a:f4:dd:4d:54:d5:65:d6:8f:64: f9:d7:56:64:dc:78:60:6c:6c:78:7e:8a:21:80:7a: 7b:69:33:e6:a8:ca:db:17:90:bf:ec:09:b6:a5:b3: a8:d5:f3:85:89:86:f9:81:05:ad:eb:2d:d5:1a:bf: 15:45:7b:fc:9f:e9:98:af:66:dd:2f:ed:68:8c:e7: 55:ab:42:85:2c:28:1d:7a:7f:50:6b:88:8a:08:0e: 5e:7c:f6:e3:86:18:31:51:b8:f6:2b:9d:d1:2b:20: d0:21:ab:19:24:16:2a:aa:42:bb:90:b2:a0:0b:5b: a3:9c:b9:2e:11:e6:87:94:0b:c1:b9:32:70:6d:39: c9:18:92:2e:c4:c6:27:82:25:c2:b6:a3:8c:6e:2a: d3:06:ed:f6:83:9f:83:c7:b1:ac:61:5a:a4:e4:88: 30:d0:a2:86:94:d0:eb:5e:ea:c7:7e:bd:a9:21:a8: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.51.198.0-66.51.207.255 66.245.240.0/20 192.81.116.0/22 206.15.129.0-206.15.191.255 216.126.204.0/23 IPv6: 2001:19c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33264 33292-33293 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0b:1e:1d:09:be:b2:ba:7b:c1:88:84:2a:e4:2b:a1:70:56: 47:3c:1c:ba:d1:6b:10:b2:0e:2a:b0:ae:83:06:0e:50:b4:90: 09:45:0d:c6:23:e2:ee:3a:12:c6:4b:fd:c6:e5:ff:d9:1e:c1: 47:04:88:26:ac:ac:88:27:30:dd:2c:b0:33:94:16:31:66:73: 3c:09:df:b3:aa:5c:02:40:5a:b2:1f:ef:28:58:76:f2:4a:11: 55:eb:19:1f:aa:01:a3:b8:85:ae:1a:f6:f5:00:32:88:eb:5e: c6:2c:3d:dc:da:b7:7a:90:b0:69:31:31:ae:03:a9:0e:ef:ee: 72:4b:88:2f:83:07:57:fe:c7:84:b5:04:00:8b:40:ed:7f:13: 35:e2:7b:bb:2e:6b:fa:f6:68:9e:5a:03:81:6e:8f:ff:0f:67: 95:81:4f:ea:6d:1e:7a:c2:a9:82:27:23:c8:9d:32:5c:a0:05: 6c:f2:1e:90:f9:fe:13:03:32:e1:68:5f:6b:ba:7b:07:3b:e7: d7:fe:f6:7e:39:a5:db:e8:a2:60:1b:ac:83:f0:fb:04:d0:df: a1:81:de:9f:55:bb:30:30:74:30:2a:51:86:b6:2e:da:72:24: a9:a3:d9:f2:e8:78:5d:82:3e:26:29:ff:98:a4:c6:e2:bc:a0: 09:84:61:07 -----BEGIN CERTIFICATE----- MIIHTDCCBjSgAwIBAgIUAQ0Mn0MoWEn8otTBPHr2XWeb64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyNzAwNDUzNloXDTI3MDgzMDAwNDUzNlowLzEtMCsGA1UEAxMk ODc0MWVkNGYtMjhiYS00Y2JmLWE0YTYtMzg0MDU3NTY3ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraJURjPL2jipm7a0IL3QHda+lKtHUmuyMIGq 7b/PiWrLS7caCjacvTPlyqEW0U5bBfUPn/slXNA68xLhQl1WGJpzB4Ts5qd7XWAI wUE0SVr03U1U1WXWj2T511Zk3HhgbGx4foohgHp7aTPmqMrbF5C/7Am2pbOo1fOF iYb5gQWt6y3VGr8VRXv8n+mYr2bdL+1ojOdVq0KFLCgden9Qa4iKCA5efPbjhhgx Ubj2K53RKyDQIasZJBYqqkK7kLKgC1ujnLkuEeaHlAvBuTJwbTnJGJIuxMYngiXC tqOMbirTBu32g5+Dx7GsYVqk5Igw0KKGlNDrXurHfr2pIajDuQIDAQABo4IEXjCC BFowHQYDVR0OBBYEFLBP0hxDOAbQJ469mBP1Q8OzSIkgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 NzQxZWQ0Zi0yOGJhLTRjYmYtYTRhNi0zODQwNTc1NjdkMDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzg3NDFlZDRmLTI4YmEtNGNiZi1h NGE2LTM4NDA1NzU2N2QwNS84NzQxZWQ0Zi0yOGJhLTRjYmYtYTRhNi0zODQwNTc1 NjdkMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwVgYIKwYBBQUH AQcBAf8ERzBFMDQEAgABMC4wDAMEAUIzxgMEBEIzwAMEBEL18AMEAsBRdDAMAwQA zg+BAwQGzg+AAwQB2H7MMA0EAgACMAcDBQAgARnIMCYGCCsGAQUFBwEIAQH/BBcw FaATMBECAwCB8DAKAgMAggwCAwCCDTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvCx4dCb6yunvBiIQq5Cuh cFZHPBy60WsQsg4qsK6DBg5QtJAJRQ3GI+LuOhLGS/3G5f/ZHsFHBIgmrKyIJzDd LLAzlBYxZnM8Cd+zqlwCQFqyH+8oWHbyShFV6xkfqgGjuIWuGvb1ADKI617GLD3c 2rd6kLBpMTGuA6kO7+5yS4gvgwdX/seEtQQAi0DtfxM14nu7Lmv69mieWgOBbo// D2eVgU/qbR56wqmCJyPInTJcoAVs8h6Q+f4TAzLhaF9runsHO+fX/vZ+OaXb6KJg G6yD8PsE0N+hgd6fVbswMHQwKlGGti7aciSpo9ny6Hhdgj4mKf+YpMbivKAJhGEH -----END CERTIFICATE-----Generated at Sun Nov 2 13:24:12 2025 by rpki-client