$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae.cer File: c9667db5-eac0-4052-ad03-bf44d03f3bae.cer (raw, json) Hash identifier: W05wBrhwHjACBYL5e6vjogS6vjpLmxDG6Utny+2ZFVM= Subject key identifier: 78:5C:60:5A:29:70:1E:45:2D:CC:46:DF:61:9C:52:F7:FA:8C:71:A3 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584AB33FF6DEECBB31B665CF8BD9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae/c9667db5-eac0-4052-ad03-bf44d03f3bae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Jul 2025 10:39:20 +0000 Certificate not after: Mon 25 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 400996 AS: 401891 IP: 192.190.255.0/24 IP: 2606:b2c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:3f:f6:de:ec:bb:31:b6:65:cf:8b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 31 10:39:20 2025 GMT Not After : Oct 25 00:45:36 2027 GMT Subject: CN=c9667db5-eac0-4052-ad03-bf44d03f3bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:9e:49:2e:49:0d:d8:c3:3c:ea:b4:aa:05: b7:42:2a:91:c5:85:d3:45:fa:65:7d:f9:97:2b:42: 9f:02:c1:6e:4c:2a:06:b0:34:44:4a:06:ba:18:85: 86:08:85:4c:43:30:bf:9d:22:0c:79:0f:0e:ff:9a: a4:f4:4b:43:5f:3e:8b:c3:ee:00:1a:d2:e6:72:17: d1:e4:ac:80:04:54:a0:47:d9:8b:92:2b:bc:45:45: 8c:74:67:81:93:c7:b9:8d:a3:d7:90:ed:7b:7a:cc: 70:c8:59:4c:29:1e:2f:59:5e:71:e5:d1:70:87:9b: 04:b0:85:73:69:eb:9a:37:eb:a0:6c:1b:fb:4c:af: 7e:bd:5f:da:f9:8b:db:f6:88:2e:73:e1:46:73:63: ef:84:4f:b0:d6:7d:d4:d6:54:b2:62:bc:6d:c0:68: 9f:c4:61:75:66:df:df:21:0d:57:c9:4c:df:dc:97: 3b:ba:c5:8b:dd:d0:5a:ba:ea:64:07:a9:be:69:bb: 61:6a:45:cb:19:b2:42:10:12:bf:ed:c0:9c:f8:22: 1f:a2:15:ef:da:cb:22:49:c0:d1:ed:8b:b6:a4:a1: 3d:e9:73:e8:94:4c:2a:55:1c:6e:88:d0:de:f1:eb: 02:77:e1:dd:51:8a:6f:ab:87:f2:0b:6b:d8:b3:64: 72:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5C:60:5A:29:70:1E:45:2D:CC:46:DF:61:9C:52:F7:FA:8C:71:A3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9667db5-eac0-4052-ad03-bf44d03f3bae/c9667db5-eac0-4052-ad03-bf44d03f3bae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 192.190.255.0/24 IPv6: 2606:b2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400996 401891 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a0:42:22:41:1c:ad:a6:ec:30:31:6d:d0:f6:0b:7c:39:07: 19:03:8c:4c:b8:15:eb:6d:ed:da:a2:4b:2f:4d:5c:20:15:d3: 72:93:47:7f:15:fd:39:eb:32:5f:1a:2d:94:ca:8a:a9:a9:ca: be:a7:f0:bb:d6:9d:af:3f:7f:68:df:b3:8e:32:dd:58:d1:78: c6:a7:8b:96:4d:37:69:54:2e:d8:b2:4c:66:00:0f:5d:85:bd: 90:2e:eb:14:b8:29:9a:52:f1:59:27:b6:c1:b5:74:f8:38:4c: ff:f7:79:ea:99:1d:fe:5b:1c:46:79:bd:8d:9d:e5:c2:be:ca: 10:1f:19:9d:29:4a:cb:9f:15:3c:9c:57:aa:34:3a:03:9b:c5: e2:13:8a:ae:3b:39:2f:18:13:be:8a:71:0b:76:05:5b:43:45: 5d:03:3d:dd:fe:55:6f:d6:71:06:59:aa:e8:a7:7b:fa:98:75: c6:3e:52:c9:d3:59:f5:ac:88:a5:89:1a:27:2d:2a:c7:c2:85: af:55:8a:28:d5:30:63:59:bf:50:23:93:0e:6e:72:2a:ef:cf: 04:6e:97:29:b0:30:88:a5:fe:4a:3d:94:f1:b3:45:99:91:98: d5:37:7d:3e:7f:6b:71:99:fd:e2:c6:27:bb:43:ab:77:92:45: e8:fe:6c:5b -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEqzP/be7LsxtmXPi9kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDczMTEwMzkyMFoXDTI3MTAyNTAwNDUzNlowLzEtMCsGA1UEAxMk Yzk2NjdkYjUtZWFjMC00MDUyLWFkMDMtYmY0NGQwM2YzYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ+eSS5JDdjDPOq0qgW3QiqRxYXTRfplffmX K0KfAsFuTCoGsDRESga6GIWGCIVMQzC/nSIMeQ8O/5qk9EtDXz6Lw+4AGtLmchfR 5KyABFSgR9mLkiu8RUWMdGeBk8e5jaPXkO17esxwyFlMKR4vWV5x5dFwh5sEsIVz aeuaN+ugbBv7TK9+vV/a+Yvb9oguc+FGc2PvhE+w1n3U1lSyYrxtwGifxGF1Zt/f IQ1XyUzf3Jc7usWL3dBauupkB6m+abthakXLGbJCEBK/7cCc+CIfohXv2ssiScDR 7Yu2pKE96XPolEwqVRxuiNDe8esCd+HdUYpvq4fyC2vYs2RyQwIDAQABo4IELzCC BCswHQYDVR0OBBYEFHhcYFopcB5FLcxG32GcUvf6jHGjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j OTY2N2RiNS1lYWMwLTQwNTItYWQwMy1iZjQ0ZDAzZjNiYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2M5NjY3ZGI1LWVhYzAtNDA1Mi1h ZDAzLWJmNDRkMDNmM2JhZS9jOTY2N2RiNS1lYWMwLTQwNTItYWQwMy1iZjQ0ZDAz ZjNiYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADAvv8wDQQCAAIwBwMFACYGssAwHwYIKwYBBQUH AQgBAf8EEDAOoAwwCgIDBh5kAgMGIeMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb6BCIkEcrabsMDFt0PYL fDkHGQOMTLgV623t2qJLL01cIBXTcpNHfxX9OesyXxotlMqKqanKvqfwu9adrz9/ aN+zjjLdWNF4xqeLlk03aVQu2LJMZgAPXYW9kC7rFLgpmlLxWSe2wbV0+DhM//d5 6pkd/lscRnm9jZ3lwr7KEB8ZnSlKy58VPJxXqjQ6A5vF4hOKrjs5LxgTvopxC3YF W0NFXQM93f5Vb9ZxBlmq6Kd7+ph1xj5SydNZ9ayIpYkaJy0qx8KFr1WKKNUwY1m/ UCOTDm5yKu/PBG6XKbAwiKX+Sj2U8bNFmZGY1Td9Pn9rcZn94sYnu0Ord5JF6P5s Ww== -----END CERTIFICATE-----Generated at Sun Nov 2 21:42:58 2025 by rpki-client