$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925.cer File: e56bf41b-dd67-437e-9f01-30ef0b12f925.cer (raw, json) Hash identifier: Yt65iBjvmhzAGamiyRpRKgHJrY8hORvM62FmodEz/wQ= Subject key identifier: AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A48034C7BDDC7CEC7AE858A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Jun 2025 00:45:36 +0000 Certificate not after: Sun 26 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 35988 IP: 160.79.128.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:03:4c:7b:dd:c7:ce:c7:ae:85:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 23 00:45:36 2025 GMT Not After : Sep 26 00:45:36 2027 GMT Subject: CN=e56bf41b-dd67-437e-9f01-30ef0b12f925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:86:fd:9f:67:97:ca:88:99:b6:cf:fb:84: 9c:0b:2d:8b:ac:c9:e0:07:33:e0:8f:85:b7:03:9e: 5d:b0:61:2f:7e:c6:a5:74:93:21:79:97:68:83:58: ec:d3:88:61:a4:70:1c:96:61:5c:4c:b8:4d:b2:57: 02:7f:b1:00:65:89:00:c4:d4:2c:90:2c:a8:f1:ce: 35:21:1a:25:89:ca:59:58:b1:8e:ae:6f:e2:a0:6e: b3:d7:36:32:9d:15:5b:df:00:ad:f3:3d:75:a5:fc: 0f:69:85:0c:60:70:e9:8f:56:fc:19:5d:92:fa:44: ad:6b:1c:a2:ce:45:91:80:01:6e:39:0a:9b:4a:9e: c9:36:b3:71:7c:61:22:d0:19:72:08:f8:85:f2:e3: c7:b0:e8:f7:1f:84:27:97:da:18:23:7a:79:93:10: a5:da:9c:99:fa:1d:67:82:c1:c7:74:b5:71:cf:0e: 12:9c:97:c3:1c:6f:0d:61:1c:5c:15:a3:0e:1a:83: fc:7a:ad:f4:63:49:81:50:bd:06:76:96:e0:12:46: c0:b9:f1:f1:35:ce:66:74:34:76:cb:0f:b1:16:2c: 52:4c:8c:85:87:66:8b:90:be:7a:f0:28:1a:bd:a9: cb:c2:f7:36:d9:07:f4:45:5a:b7:a6:4f:dc:5d:95: 51:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E7:46:C2:AD:C0:FC:19:54:11:53:A5:5B:AA:7F:75:80:E8:C2:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e56bf41b-dd67-437e-9f01-30ef0b12f925/e56bf41b-dd67-437e-9f01-30ef0b12f925.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 160.79.128.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35988 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6c:7d:ba:4a:59:d0:49:e1:29:a6:c7:18:db:a1:68:0e:24: 31:5c:5c:ee:78:88:70:29:22:ec:a7:89:f0:44:f2:45:ce:ac: 4e:03:3e:05:47:2a:2a:a2:67:d0:d0:00:a4:8c:7b:96:99:c1: 85:54:a0:eb:c4:88:2b:7b:d5:36:90:f7:11:cd:c7:f3:e3:80: 42:52:ab:a3:64:eb:6e:35:46:67:65:c6:88:99:2a:58:e8:ec: 54:27:ab:94:e9:a6:2e:4e:69:73:cb:f0:8c:82:ec:40:d0:6d: f5:bc:2a:6e:10:fd:20:58:e7:a7:a6:85:60:fa:af:d6:92:1e: 30:b8:db:96:a8:bc:8f:8b:13:f7:7d:16:9c:33:ec:75:09:77: ad:b1:c8:cb:dd:cc:7f:e3:2c:6a:df:c3:77:71:6f:f4:b5:08: 19:fd:49:0c:76:a4:9e:d4:98:e7:51:44:fb:8e:e8:9f:2b:c8: b6:33:09:4e:e0:35:7d:07:4b:b0:ab:89:5b:8f:b3:5a:30:27: 01:54:bd:e3:e7:1b:29:5e:42:d4:d8:e8:28:c5:5a:3d:57:52: cc:af:7f:aa:d0:27:4a:2a:2d:f2:c3:83:39:6d:59:3f:4d:aa: 7d:b8:18:48:f5:71:0e:f1:19:44:8d:f3:b3:29:fd:6f:50:0f: 9b:ad:68:6f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEpIA0x73cfOx66FioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyMzAwNDUzNloXDTI3MDkyNjAwNDUzNlowLzEtMCsGA1UEAxMk ZTU2YmY0MWItZGQ2Ny00MzdlLTlmMDEtMzBlZjBiMTJmOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL6G/Z9nl8qImbbP+4ScCy2LrMngBzPgj4W3 A55dsGEvfsaldJMheZdog1js04hhpHAclmFcTLhNslcCf7EAZYkAxNQskCyo8c41 IRolicpZWLGOrm/ioG6z1zYynRVb3wCt8z11pfwPaYUMYHDpj1b8GV2S+kStaxyi zkWRgAFuOQqbSp7JNrNxfGEi0BlyCPiF8uPHsOj3H4Qnl9oYI3p5kxCl2pyZ+h1n gsHHdLVxzw4SnJfDHG8NYRxcFaMOGoP8eq30Y0mBUL0GdpbgEkbAufHxNc5mdDR2 yw+xFixSTIyFh2aLkL568CgavanLwvc22Qf0RVq3pk/cXZVR8wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFK7nRsKtwPwZVBFTpVuqf3WA6MJrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l NTZiZjQxYi1kZDY3LTQzN2UtOWYwMS0zMGVmMGIxMmY5MjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U1NmJmNDFiLWRkNjctNDM3ZS05 ZjAxLTMwZWYwYjEyZjkyNS9lNTZiZjQxYi1kZDY3LTQzN2UtOWYwMS0zMGVmMGIx MmY5MjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAagT4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIyUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHlsfbpKWdBJ4SmmxxjboWgOJDFcXO54iHApIuynifBE8kXO rE4DPgVHKiqiZ9DQAKSMe5aZwYVUoOvEiCt71TaQ9xHNx/PjgEJSq6Nk6241Rmdl xoiZKljo7FQnq5Tppi5OaXPL8IyC7EDQbfW8Km4Q/SBY56emhWD6r9aSHjC425ao vI+LE/d9Fpwz7HUJd62xyMvdzH/jLGrfw3dxb/S1CBn9SQx2pJ7UmOdRRPuO6J8r yLYzCU7gNX0HS7CriVuPs1owJwFUvePnGyleQtTY6CjFWj1XUsyvf6rQJ0oqLfLD gzltWT9Nqn24GEj1cQ7xGUSN87Mp/W9QD5utaG8= -----END CERTIFICATE-----Generated at Sun Nov 2 13:26:02 2025 by rpki-client