$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55.cer File: d602ac0a-db45-4d15-8b0c-b3a0f533db55.cer (raw, json) Hash identifier: Y+2cV/g/CSmC8A385vBOxMI7RQ0AgaTQ4LCk+B9Y2pg= Subject key identifier: 17:A4:5E:B4:95:2B:C3:7C:B2:FA:D4:3B:3C:A4:03:00:7C:EC:A0:E2 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A7348E48C7E0E0FD38135C000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55/d602ac0a-db45-4d15-8b0c-b3a0f533db55.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Jul 2025 12:45:35 +0000 Certificate not after: Mon 11 Oct 2027 12:45:35 +0000 Subordinate resources: AS: 14468 IP: 192.107.45.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:48:e4:8c:7e:0e:0f:d3:81:35:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 8 12:45:35 2025 GMT Not After : Oct 11 12:45:35 2027 GMT Subject: CN=d602ac0a-db45-4d15-8b0c-b3a0f533db55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:99:5d:72:7c:40:f6:27:18:a3:11:10:9d: e5:26:61:84:59:20:9f:7b:3e:36:da:cd:69:05:b6: 67:11:aa:f4:10:c4:2c:22:9a:d4:06:a2:cd:b5:63: 1c:b0:f0:60:b6:6e:ff:b5:0f:5f:3d:28:ab:43:44: 61:ce:57:18:cc:ba:00:e8:1d:69:75:28:8d:cd:07: 59:8f:7a:34:1b:0f:14:a7:b5:15:f6:a0:e1:89:70: 89:08:81:e6:4c:fc:b1:3f:bd:e7:e8:33:4d:63:16: c2:81:dc:8c:15:3f:37:b2:fa:3b:aa:4e:be:d7:71: 7d:b9:77:c7:0b:9f:5b:30:b3:3b:4f:91:cd:b4:9a: 5e:96:14:f7:97:15:6c:56:52:0f:d2:43:fd:85:a6: 20:33:aa:97:bd:d7:fd:84:a1:b2:68:64:13:58:c1: 05:77:48:86:aa:0c:71:a1:3e:9a:df:19:e2:bd:dd: b1:38:23:c8:29:01:26:7a:2b:42:0e:ba:0c:65:c2: b6:a8:3b:46:e0:8c:c4:8d:4f:7f:7d:6e:f1:ea:b7: f0:35:63:8a:5a:80:47:be:ea:2b:2c:d3:97:9b:a2: 51:f9:e2:fc:c8:d2:63:98:95:4c:b4:d7:1c:3b:11: 02:4a:1d:a8:00:19:4a:f9:49:67:a2:56:29:e6:7a: 63:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A4:5E:B4:95:2B:C3:7C:B2:FA:D4:3B:3C:A4:03:00:7C:EC:A0:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55/d602ac0a-db45-4d15-8b0c-b3a0f533db55.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 192.107.45.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14468 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:95:bc:a3:ae:f3:42:a8:a2:63:e3:2a:b9:25:15:74:bc:d2: ae:5a:27:aa:2b:33:cb:f4:a7:13:b3:43:3e:90:99:70:2a:81: 0e:b5:ab:9c:05:65:b7:52:4e:17:44:f2:d7:2f:47:22:cc:20: 51:ac:23:8f:7a:4d:bf:64:d2:aa:ca:03:90:1a:7b:e9:b0:b7: 6b:11:d9:ea:45:d3:83:86:82:02:d9:1c:36:7c:73:8e:a6:52: 25:c6:8d:85:24:ec:0b:fd:66:5a:05:c9:7d:23:8e:00:56:b7: e2:f9:b6:46:7b:ff:a3:93:54:a9:7e:05:5e:87:10:c2:ab:09: 7a:bc:dc:98:96:8b:62:32:ad:ef:a7:ec:ed:57:d3:59:35:ad: 1b:23:b7:2d:b7:2c:42:aa:49:c5:95:dd:ef:cb:b2:26:11:21: 0a:dd:30:d6:82:d2:06:90:d7:87:a7:7e:af:ce:ee:b3:3c:44: 63:48:c7:d4:73:21:ba:72:23:9c:0c:7b:84:9d:05:79:d4:e0: df:2c:d2:90:99:71:f2:b4:19:b1:71:78:b3:6e:ca:d5:88:ac: 80:a9:f5:af:11:df:23:69:1a:e4:ff:f4:14:e9:3b:bc:c4:ec: 3d:02:4b:8e:9f:59:01:ad:28:f5:5d:4c:9d:59:25:e8:52:0f: b5:6a:54:f8 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEpzSOSMfg4P04E1wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwODEyNDUzNVoXDTI3MTAxMTEyNDUzNVowLzEtMCsGA1UEAxMk ZDYwMmFjMGEtZGI0NS00ZDE1LThiMGMtYjNhMGY1MzNkYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7WZXXJ8QPYnGKMREJ3lJmGEWSCfez422s1p BbZnEar0EMQsIprUBqLNtWMcsPBgtm7/tQ9fPSirQ0RhzlcYzLoA6B1pdSiNzQdZ j3o0Gw8Up7UV9qDhiXCJCIHmTPyxP73n6DNNYxbCgdyMFT83svo7qk6+13F9uXfH C59bMLM7T5HNtJpelhT3lxVsVlIP0kP9haYgM6qXvdf9hKGyaGQTWMEFd0iGqgxx oT6a3xnivd2xOCPIKQEmeitCDroMZcK2qDtG4IzEjU9/fW7x6rfwNWOKWoBHvuor LNOXm6JR+eL8yNJjmJVMtNccOxECSh2oABlK+UlnolYp5npj/QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFBekXrSVK8N8svrUOzykAwB87KDiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k NjAyYWMwYS1kYjQ1LTRkMTUtOGIwYy1iM2EwZjUzM2RiNTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Q2MDJhYzBhLWRiNDUtNGQxNS04 YjBjLWIzYTBmNTMzZGI1NS9kNjAyYWMwYS1kYjQ1LTRkMTUtOGIwYy1iM2EwZjUz M2RiNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAay0wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OIQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAWpW8o67zQqiiY+MquSUVdLzSrlonqiszy/SnE7NDPpCZcCqB DrWrnAVlt1JOF0Ty1y9HIswgUawjj3pNv2TSqsoDkBp76bC3axHZ6kXTg4aCAtkc NnxzjqZSJcaNhSTsC/1mWgXJfSOOAFa34vm2Rnv/o5NUqX4FXocQwqsJerzcmJaL YjKt76fs7VfTWTWtGyO3LbcsQqpJxZXd78uyJhEhCt0w1oLSBpDXh6d+r87uszxE Y0jH1HMhunIjnAx7hJ0FedTg3yzSkJlx8rQZsXF4s27K1YisgKn1rxHfI2ka5P/0 FOk7vMTsPQJLjp9ZAa0o9V1MnVkl6FIPtWpU+A== -----END CERTIFICATE-----Generated at Tue Jul 8 23:23:58 2025 by rpki-client