$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer File: b824dfb2-be33-4946-af95-2296acd823af.cer (raw, json) Hash identifier: N6kskVK+Zvn3ui97Bzdpo5Rp9RWcjzVyGdZRsXo5YrU= Subject key identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A8DCE6729546DD822F1ED7600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Jul 2025 00:45:37 +0000 Certificate not after: Thu 21 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 54402 IP: 2607:4940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:ce:67:29:54:6d:d8:22:f1:ed:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 18 00:45:37 2025 GMT Not After : Oct 21 00:45:37 2027 GMT Subject: CN=b824dfb2-be33-4946-af95-2296acd823af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:4b:2b:0f:4d:b3:85:78:d8:25:fd:59:60: e2:c1:24:00:7c:fd:6a:27:7c:71:30:16:b6:9a:15: 01:2f:96:2e:b9:01:d8:63:5e:42:97:53:8e:4e:ea: a1:a9:df:ee:74:58:c0:f8:aa:0f:1e:59:e6:4d:a2: 50:d3:49:02:40:a8:8d:c3:f2:2f:ff:e4:07:c1:2a: 79:b6:07:ee:18:52:b3:ad:13:87:e7:c3:6a:9d:10: 9c:37:4c:4f:2c:69:4c:60:23:79:f2:8f:44:ad:2e: 40:ed:ac:02:ef:d0:a2:93:ea:d1:37:02:2e:53:7a: 29:bd:9a:84:1a:26:ce:2b:cc:82:3c:8e:14:6c:40: 6c:5f:a1:45:ce:90:ad:ec:5c:78:81:e1:5a:6f:92: 5c:86:2b:3e:73:d5:bd:0f:53:14:b5:62:e3:a9:f4: 8d:c2:31:fb:b4:83:92:80:10:01:8c:d6:6d:50:c7: 2a:77:46:3a:2a:e8:59:f7:02:4b:34:31:25:8b:24: 3e:f2:53:c5:b0:2d:bb:c2:1b:e7:aa:b8:dc:fa:03: 90:23:2b:bf:f0:c9:5b:cb:85:f6:a5:24:10:e9:b8: f3:06:89:bd:8c:80:83:eb:93:fa:ed:9b:02:59:31: 56:44:0c:1b:cb:b6:d1:82:ef:81:21:4f:a3:2c:3f: b0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2607:4940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54402 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:bd:1d:a4:48:a0:92:55:a1:f1:52:c9:40:c0:8f:be:a7:e3: 7a:cb:8e:63:df:20:c3:20:5f:d7:a6:1e:71:1b:bb:3e:ff:3b: 87:5f:9b:27:0d:98:f9:39:fe:a0:41:60:cb:64:fb:df:5a:6a: 11:8f:12:9c:f5:f6:f3:b6:d4:af:f3:11:d4:8a:42:91:be:38: a5:62:1f:e2:8f:dc:73:73:d0:ef:43:34:c2:3f:98:e5:6d:4d: 92:06:fc:f6:42:cd:18:5e:d7:cc:97:66:2a:9b:63:d3:eb:77: 6c:ad:5d:2c:b9:97:f0:3d:32:3c:4a:a8:75:49:b9:10:98:a2: 9f:50:41:f7:10:21:ea:e2:6d:3d:8f:30:08:66:ff:75:db:45: 31:e0:e2:94:25:3b:95:d7:0b:26:1b:d4:b9:c2:d6:1d:fe:6e: 69:44:d5:89:4a:38:95:fd:f7:0a:6c:4f:57:2d:86:14:50:78: d1:4a:81:b0:cd:8b:21:f8:15:d8:00:f7:ae:52:25:9e:6c:39: 66:e9:66:df:ff:17:b4:c6:b5:b5:a9:98:75:63:d8:bf:a2:e3: b7:5b:7c:1f:e6:6b:5a:53:3f:40:d1:ed:81:01:71:14:87:06: f1:37:a6:8e:4c:af:48:ae:23:9f:30:24:92:0c:b2:f1:cf:36: 88:54:aa:82 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEqNzmcpVG3YIvHtdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxODAwNDUzN1oXDTI3MTAyMTAwNDUzN1owLzEtMCsGA1UEAxMk YjgyNGRmYjItYmUzMy00OTQ2LWFmOTUtMjI5NmFjZDgyM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyJLKw9Ns4V42CX9WWDiwSQAfP1qJ3xxMBa2 mhUBL5YuuQHYY15Cl1OOTuqhqd/udFjA+KoPHlnmTaJQ00kCQKiNw/Iv/+QHwSp5 tgfuGFKzrROH58NqnRCcN0xPLGlMYCN58o9ErS5A7awC79Cik+rRNwIuU3opvZqE GibOK8yCPI4UbEBsX6FFzpCt7Fx4geFab5Jchis+c9W9D1MUtWLjqfSNwjH7tIOS gBABjNZtUMcqd0Y6KuhZ9wJLNDEliyQ+8lPFsC27whvnqrjc+gOQIyu/8Mlby4X2 pSQQ6bjzBom9jICD65P67ZsCWTFWRAwby7bRgu+BIU+jLD+wPwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFDnQkS794Uz1UUYi8pCCTRegbIWuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i ODI0ZGZiMi1iZTMzLTQ5NDYtYWY5NS0yMjk2YWNkODIzYWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2I4MjRkZmIyLWJlMzMtNDk0Ni1h Zjk1LTIyOTZhY2Q4MjNhZi9iODI0ZGZiMi1iZTMzLTQ5NDYtYWY5NS0yMjk2YWNk ODIzYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB0lAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDUgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCQvR2kSKCSVaHxUslAwI++p+N6y45j3yDDIF/Xph5xG7s+ /zuHX5snDZj5Of6gQWDLZPvfWmoRjxKc9fbzttSv8xHUikKRvjilYh/ij9xzc9Dv QzTCP5jlbU2SBvz2Qs0YXtfMl2Yqm2PT63dsrV0suZfwPTI8Sqh1SbkQmKKfUEH3 ECHq4m09jzAIZv9120Ux4OKUJTuV1wsmG9S5wtYd/m5pRNWJSjiV/fcKbE9XLYYU UHjRSoGwzYsh+BXYAPeuUiWebDlm6Wbf/xe0xrW1qZh1Y9i/ouO3W3wf5mtaUz9A 0e2BAXEUhwbxN6aOTK9IriOfMCSSDLLxzzaIVKqC -----END CERTIFICATE-----Generated at Sun Nov 2 13:22:41 2025 by rpki-client