$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer File: b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer (raw, json) Hash identifier: IiJy6+bv7GZjTJz4I/ZVE+3lNKzM84wXoFJlYIK2ufs= Subject key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A9363C24E1CE2CF04BAA57600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Jul 2025 00:45:35 +0000 Certificate not after: Sat 23 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 400928 IP: 23.173.24.0/24 IP: 76.164.204.0/24 IP: 104.128.68.0/23 IP: 204.89.181.0/24 IP: 2602:f961::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:63:c2:4e:1c:e2:cf:04:ba:a5:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 20 00:45:35 2025 GMT Not After : Oct 23 00:45:35 2027 GMT Subject: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:40:1c:70:48:51:18:36:d0:a2:81:f7:7c: 7c:74:22:63:62:19:a0:d4:a8:0c:3d:1f:a6:ae:2e: cc:3a:66:2d:bd:e5:1e:8b:f8:97:cf:be:ac:fc:47: 0b:82:a6:38:a5:45:da:49:ac:33:bb:a9:58:14:7c: 5e:5d:05:f4:b8:d1:a0:88:0a:16:01:c0:4e:c9:3d: 1d:9d:be:9a:02:e6:ed:ee:d7:cf:bf:cb:03:cb:61: f4:2d:73:3f:3b:25:dc:d6:2c:dc:28:d5:01:8a:23: 61:ed:04:bb:cb:47:71:ed:97:8f:f0:5e:36:16:fd: 6f:88:09:11:35:0e:bd:ee:d3:6d:a8:9e:23:a1:03: 2c:27:ae:e2:96:95:0e:c5:1f:31:c2:49:66:a4:f9: 6a:cc:3c:1a:83:dc:95:22:1d:26:aa:4b:89:33:61: 0b:13:dc:df:96:92:92:cb:6a:d3:56:4a:91:51:25: 76:7c:ec:5f:df:cf:ee:96:d7:8a:0b:57:73:79:b8: d6:af:29:39:d5:56:c1:d7:3d:3c:19:2e:5c:1e:75: 20:c2:fd:f4:6a:89:7d:41:f2:0a:41:88:a6:53:0a: 85:24:d3:48:3f:46:3d:23:cb:45:3f:2e:27:9a:d6: 57:fe:45:f8:11:28:1b:b7:44:c8:02:6c:4f:4f:eb: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.24.0/24 76.164.204.0/24 104.128.68.0/23 204.89.181.0/24 IPv6: 2602:f961::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400928 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ef:2e:36:67:6c:a6:6b:ed:8a:14:85:cc:c1:3e:9a:5d:bc: 21:c5:62:74:3c:7c:3b:69:ec:98:9f:fc:0b:0b:a5:f7:53:e7: 08:e7:7f:c0:2b:e1:bc:fc:2f:6b:96:71:38:63:76:8b:2d:45: 54:68:c6:a9:25:46:a8:d8:d2:bf:75:d5:68:b1:3e:ee:cb:63: 9f:81:cd:b3:08:41:0f:16:11:c3:b4:1d:20:90:8e:20:f3:fb: 6f:67:fc:ef:86:f4:b2:ac:c3:c0:ef:8d:9d:e5:07:10:99:86: 35:7b:dd:87:25:08:5c:9f:ce:20:8e:da:41:a4:10:c3:fe:ad: 95:da:6e:65:c3:40:02:47:5d:65:1a:d9:ad:dc:83:f0:bb:06: 3f:44:87:35:d5:20:c0:f1:4e:0c:b6:9b:dd:dc:01:7b:00:75: 4a:f3:22:b8:5e:93:a4:0d:64:fe:d5:e8:a4:7b:42:fd:b0:1a: 32:ab:3d:4f:54:59:31:26:5d:b5:21:43:bf:6a:6c:03:c7:ef: 83:7a:64:20:98:dc:c9:87:2b:71:87:35:8c:4b:40:37:5e:c8: 95:24:3c:66:b5:93:f2:23:8d:44:79:8d:ae:84:06:b8:44:59: bb:29:62:eb:a8:da:99:c8:dd:d5:16:9f:00:a2:ed:61:7d:ea: e7:40:99:e9 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEqTY8JOHOLPBLqldgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMDAwNDUzNVoXDTI3MTAyMzAwNDUzNVowLzEtMCsGA1UEAxMk YjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNiZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIpAHHBIURg20KKB93x8dCJjYhmg1KgMPR+m ri7MOmYtveUei/iXz76s/EcLgqY4pUXaSawzu6lYFHxeXQX0uNGgiAoWAcBOyT0d nb6aAubt7tfPv8sDy2H0LXM/OyXc1izcKNUBiiNh7QS7y0dx7ZeP8F42Fv1viAkR NQ697tNtqJ4joQMsJ67ilpUOxR8xwklmpPlqzDwag9yVIh0mqkuJM2ELE9zflpKS y2rTVkqRUSV2fOxf38/ulteKC1dzebjWryk51VbB1z08GS5cHnUgwv30aol9QfIK QYimUwqFJNNIP0Y9I8tFPy4nmtZX/kX4ESgbt0TIAmxPT+tz7QIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFJJ913AftPrufmZdZo8MCYuyk6RgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i NWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2I1ZGI0NWRiLThjOTItNGI2MS1h M2Q1LWY1YmJiOTkzYmRjMy9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5 M2JkYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAAXrRgDBABMpMwDBAFogEQDBADMWbUwDgQCAAIw CAMGACYC+WEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYeIDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCW 7y42Z2yma+2KFIXMwT6aXbwhxWJ0PHw7aeyYn/wLC6X3U+cI53/AK+G8/C9rlnE4 Y3aLLUVUaMapJUao2NK/ddVosT7uy2Ofgc2zCEEPFhHDtB0gkI4g8/tvZ/zvhvSy rMPA742d5QcQmYY1e92HJQhcn84gjtpBpBDD/q2V2m5lw0ACR11lGtmt3IPwuwY/ RIc11SDA8U4Mtpvd3AF7AHVK8yK4XpOkDWT+1eike0L9sBoyqz1PVFkxJl21IUO/ amwDx++DemQgmNzJhytxhzWMS0A3XsiVJDxmtZPyI41EeY2uhAa4RFm7KWLrqNqZ yN3VFp8Aou1hfernQJnp -----END CERTIFICATE-----Generated at Sun Nov 2 13:26:03 2025 by rpki-client