$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer File: 8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer (raw, json) Hash identifier: M5KTbjXlWbCdR2LIZWtYbn2NwI43bTsOSvOHub/66vU= Subject key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858498B921A1E36454DDC2CF8A280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Apr 2025 12:45:34 +0000 Certificate not after: Tue 20 Jul 2027 12:45:34 +0000 Subordinate resources: AS: 33410 AS: 54125 IP: 198.200.141.0/24 IP: 205.233.0.0/24 IP: 216.71.112.0/22 IP: 2602:807:f000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:92:1a:1e:36:45:4d:dc:2c:f8:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 16 12:45:34 2025 GMT Not After : Jul 20 12:45:34 2027 GMT Subject: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:79:8f:ba:ff:39:e5:3b:bd:32:89:2c:13:d5: eb:38:c4:a5:71:25:15:f0:cb:62:f6:56:c1:e5:86: 60:4d:37:66:ed:d5:21:1f:69:fe:f2:a9:9e:3d:2e: 58:98:cd:bd:16:70:3d:94:bf:d8:35:fa:50:62:4c: 98:cc:64:88:73:39:28:a2:9a:a8:ee:e4:dc:32:be: 47:7a:0a:05:c3:92:88:c5:59:42:5e:98:c9:21:a5: 37:78:3a:34:6b:cb:f7:94:d6:19:2a:35:8e:41:45: 99:f1:dc:96:77:7e:d2:69:b0:7e:26:8a:98:f2:ee: bd:f9:7b:fc:b4:58:8e:9c:70:74:a3:1d:30:5f:9a: 03:02:18:6b:dd:37:7f:82:98:e2:36:40:7f:e8:6d: 41:93:d8:55:38:47:1a:75:03:e1:2f:b9:03:e0:e4: f3:dc:d7:09:b2:49:c1:20:b6:7a:0f:3d:f0:35:a9: 60:e6:d1:97:be:c3:fc:ba:ba:73:59:1a:22:ec:a8: 06:b9:98:64:3b:66:7d:ac:62:dd:c9:40:d6:4c:80: eb:66:77:5e:65:0c:8d:3a:c2:58:a8:3b:be:8d:e7: 69:57:48:bf:7c:e4:8e:02:85:98:dd:d0:96:6a:ff: 1b:8b:0a:c6:5b:7e:36:3f:8c:76:95:20:e5:86:20: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.200.141.0/24 205.233.0.0/24 216.71.112.0/22 IPv6: 2602:807:f000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33410 54125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:66:2c:28:cb:50:27:50:93:8f:9a:92:25:bf:6d:cc:b4:27: 50:27:7f:54:25:33:c9:00:c4:11:ad:3f:7d:4d:d6:97:99:e2: 59:a2:27:15:da:dc:2d:ca:a0:8d:9b:07:f9:30:b7:11:54:fb: 7c:a5:a3:17:3b:f4:b1:13:66:c9:50:96:52:54:86:ed:2e:4a: 2f:92:6a:50:5c:11:12:77:7d:5b:71:a2:df:f2:70:92:9a:87: 55:93:73:ad:ea:b9:57:f2:b8:33:dc:b2:d5:7f:9e:69:2a:59: 6c:72:5c:ea:6e:36:e5:38:f9:b8:19:d3:0c:22:43:dc:3e:f6: 2d:ae:b0:9c:84:43:f2:dc:b1:1e:f9:ae:59:ec:1b:16:e5:88: e9:c1:46:fd:bb:c1:90:66:c7:ff:f1:12:31:89:20:cd:dd:08: 6a:59:63:32:41:56:99:a9:a8:d2:40:ae:17:41:71:c0:8a:dd: 28:f0:fd:8f:98:9e:e7:51:1c:99:79:a3:29:e2:db:5b:45:2b: 2b:6e:fc:9e:5f:e9:17:94:f8:e1:8c:0a:ef:0f:9a:cb:8d:8f: 74:e9:95:71:85:8e:b4:9c:44:32:24:12:7d:b6:1b:37:fb:46: dc:c5:fc:79:53:46:b2:6e:f5:8d:94:12:d2:88:c8:98:71:1e: 2b:42:c4:a9 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEmLkhoeNkVN3Cz4ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQxNjEyNDUzNFoXDTI3MDcyMDEyNDUzNFowLzEtMCsGA1UEAxMk OGIzNTVhYTMtY2YyOC00YTUzLTk2YzUtZGRmM2JiODAwNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nmPuv855Tu9MoksE9XrOMSlcSUV8Mti9lbB 5YZgTTdm7dUhH2n+8qmePS5YmM29FnA9lL/YNfpQYkyYzGSIczkoopqo7uTcMr5H egoFw5KIxVlCXpjJIaU3eDo0a8v3lNYZKjWOQUWZ8dyWd37SabB+JoqY8u69+Xv8 tFiOnHB0ox0wX5oDAhhr3Td/gpjiNkB/6G1Bk9hVOEcadQPhL7kD4OTz3NcJsknB ILZ6Dz3wNalg5tGXvsP8urpzWRoi7KgGuZhkO2Z9rGLdyUDWTIDrZndeZQyNOsJY qDu+jedpV0i/fOSOAoWY3dCWav8biwrGW342P4x2lSDlhiBzUQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFMtSqJHMdI+OMqVz7Q8ag89B9SR4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4MDA0MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzhiMzU1YWEzLWNmMjgtNGE1My05 NmM1LWRkZjNiYjgwMDQxOC84YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4 MDA0MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBADGyI0DBADN6QADBALYR3AwDgQCAAIwCAMGACYC CAfwMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCCggIDANNtMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJJm LCjLUCdQk4+akiW/bcy0J1Anf1QlM8kAxBGtP31N1peZ4lmiJxXa3C3KoI2bB/kw txFU+3yloxc79LETZslQllJUhu0uSi+SalBcERJ3fVtxot/ycJKah1WTc63quVfy uDPcstV/nmkqWWxyXOpuNuU4+bgZ0wwiQ9w+9i2usJyEQ/LcsR75rlnsGxbliOnB Rv27wZBmx//xEjGJIM3dCGpZYzJBVpmpqNJArhdBccCK3Sjw/Y+YnudRHJl5oyni 21tFKytu/J5f6ReU+OGMCu8PmsuNj3TplXGFjrScRDIkEn22Gzf7RtzF/HlTRrJu 9Y2UEtKIyJhxHitCxKk= -----END CERTIFICATE-----Generated at Sun Nov 2 13:24:28 2025 by rpki-client