$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer File: ae6238c6-9389-4fbe-a6aa-24095966ea40.cer (raw, json) Hash identifier: wnujv72PydSJya6kytA3uaM8BWcADVzvf1r46D4Aai8= Subject key identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584987621452672CF40D2AF6E800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Apr 2025 00:45:34 +0000 Certificate not after: Mon 19 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 6340 AS: 10271 AS: 31868 IP: 69.7.0.0/20 IP: 204.107.252.0/24 IP: 209.213.64.0/19 IP: 216.129.128.0/20 IP: 216.237.96.0/20 IP: 2607:d980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:62:14:52:67:2c:f4:0d:2a:f6:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 15 00:45:34 2025 GMT Not After : Jul 19 00:45:34 2027 GMT Subject: CN=ae6238c6-9389-4fbe-a6aa-24095966ea40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:51:bf:67:40:ae:ac:88:f2:cc:b6:09:49: d6:97:db:3b:6f:6b:3f:91:c4:38:b2:6c:a8:08:41: 9e:1a:d0:4b:09:d2:2e:35:28:b7:2c:b8:9a:8f:d5: 65:bd:24:bf:f9:7d:5d:d1:c3:0d:b9:4f:d1:69:d2: 26:67:3b:47:25:ac:b9:5f:a9:a3:40:2d:6e:60:40: 22:41:59:8a:2d:63:8c:51:43:64:38:c1:4f:4c:98: 3c:47:d9:1b:00:2d:12:26:ec:f0:d2:00:9f:22:54: 33:44:2e:a3:b8:08:30:b0:43:86:88:49:2b:95:d7: 61:c5:34:14:2f:b8:4c:f6:d7:47:ff:9d:96:e1:99: c8:38:b4:6a:8d:88:92:95:24:15:b9:45:aa:1b:3c: 9a:ed:48:63:7e:92:1d:64:25:b0:e6:82:a4:32:ea: 7a:6a:28:fa:8d:ac:bf:67:0b:ef:f3:ee:85:ce:48: 37:ec:a7:e0:38:f5:12:a0:74:ba:4e:b6:40:7d:63: b5:29:f0:2b:17:00:2c:c8:b5:74:52:73:56:54:8d: 7e:b3:80:fa:9f:45:ba:9b:96:5d:09:d4:0a:ef:4e: 34:35:45:68:c3:2c:49:68:29:40:90:ef:50:95:fe: af:ca:ab:d2:66:23:0c:e7:9c:c3:c3:b1:f0:9c:a6: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 69.7.0.0/20 204.107.252.0/24 209.213.64.0/19 216.129.128.0/20 216.237.96.0/20 IPv6: 2607:d980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6340 10271 31868 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0a:b7:9d:66:99:f3:c8:26:a8:df:ec:90:df:12:fb:f7:12: b7:45:a8:99:e2:01:c4:1b:be:cb:0a:72:16:f4:19:53:49:95: 76:88:7a:15:a4:6b:14:6e:99:cc:1a:62:21:b2:c3:15:7f:b9: 0d:d0:5c:06:68:7d:62:9c:fb:ee:c5:00:9e:76:aa:9f:7b:d0: cb:fe:18:da:2a:ec:14:71:8d:9d:08:12:fe:10:37:38:c9:0d: dd:94:95:66:a2:03:1a:77:41:fd:e7:05:45:50:e1:45:0f:0a: 52:ac:b5:d0:22:9d:72:8d:b6:2a:09:5b:25:a9:86:15:9a:ed: 07:47:10:a3:1d:10:37:63:ed:19:59:13:97:5b:07:91:b0:68: dc:11:e6:15:cc:b5:f3:d8:4c:a5:30:1a:8f:cf:82:8a:25:99: 61:b1:9b:7a:25:4c:ac:79:5e:56:30:e4:70:bc:f3:0a:da:c2: 0f:d9:3b:85:d4:d7:b9:fa:3b:97:89:fe:6f:95:10:a0:eb:b8: 63:92:91:3f:cd:51:f3:08:be:f0:74:d8:9e:74:69:e0:a4:ba: 05:be:f0:9c:ba:8f:17:90:6d:cd:58:0f:8d:d5:a1:1b:77:f4: 0e:8f:2b:df:9b:04:9a:32:d3:d8:65:2b:f3:80:b5:1a:93:b5: d1:5d:2f:16 -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWEmHYhRSZyz0DSr26AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQxNTAwNDUzNFoXDTI3MDcxOTAwNDUzNFowLzEtMCsGA1UEAxMk YWU2MjM4YzYtOTM4OS00ZmJlLWE2YWEtMjQwOTU5NjZlYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqpRv2dArqyI8sy2CUnWl9s7b2s/kcQ4smyo CEGeGtBLCdIuNSi3LLiaj9VlvSS/+X1d0cMNuU/RadImZztHJay5X6mjQC1uYEAi QVmKLWOMUUNkOMFPTJg8R9kbAC0SJuzw0gCfIlQzRC6juAgwsEOGiEkrlddhxTQU L7hM9tdH/52W4ZnIOLRqjYiSlSQVuUWqGzya7UhjfpIdZCWw5oKkMup6aij6jay/ Zwvv8+6Fzkg37KfgOPUSoHS6TrZAfWO1KfArFwAsyLV0UnNWVI1+s4D6n0W6m5Zd CdQK7040NUVowyxJaClAkO9Qlf6vyqvSZiMM55zDw7HwnKaSGwIDAQABo4IESTCC BEUwHQYDVR0OBBYEFCL9Qm7Aq3dtPulzOgkufd5cgLdsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h ZTYyMzhjNi05Mzg5LTRmYmUtYTZhYS0yNDA5NTk2NmVhNDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2FlNjIzOGM2LTkzODktNGZiZS1h NmFhLTI0MDk1OTY2ZWE0MC9hZTYyMzhjNi05Mzg5LTRmYmUtYTZhYS0yNDA5NTk2 NmVhNDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBARFBwADBADMa/wDBAXR1UADBATYgYADBATY7WAw DQQCAAIwBwMFACYH2YAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICGMQCAigfAgJ8 fDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA1CredZpnzyCao3+yQ3xL79xK3RaiZ4gHEG77LCnIW9BlTSZV2 iHoVpGsUbpnMGmIhssMVf7kN0FwGaH1inPvuxQCedqqfe9DL/hjaKuwUcY2dCBL+ EDc4yQ3dlJVmogMad0H95wVFUOFFDwpSrLXQIp1yjbYqCVslqYYVmu0HRxCjHRA3 Y+0ZWROXWweRsGjcEeYVzLXz2EylMBqPz4KKJZlhsZt6JUyseV5WMORwvPMK2sIP 2TuF1Ne5+juXif5vlRCg67hjkpE/zVHzCL7wdNiedGngpLoFvvCcuo8XkG3NWA+N 1aEbd/QOjyvfmwSaMtPYZSvzgLUak7XRXS8W -----END CERTIFICATE-----Generated at Sun Nov 2 13:24:13 2025 by rpki-client