$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer File: eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer (raw, json) Hash identifier: anC7X/j6qxE7P78eJp3tdvhLdrVPcV+sJTdz/qVdNIk= Subject key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584987621437D71A63CA0A038F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Apr 2025 00:45:34 +0000 Certificate not after: Mon 19 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 22857 IP: 104.36.208.0/21 IP: 2620:12f:7000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:62:14:37:d7:1a:63:ca:0a:03:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 15 00:45:34 2025 GMT Not After : Jul 19 00:45:34 2027 GMT Subject: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:7c:e5:cb:df:17:43:7d:c9:96:99:a9:0d: 57:77:b5:b3:59:3d:7d:c5:52:c8:23:26:64:fd:43: 5e:cc:3f:d4:e7:a4:5c:8a:60:87:91:1d:1f:5a:9a: 10:b4:11:a6:74:51:ea:f7:b3:24:a5:e6:c4:63:ed: 16:1f:69:73:19:a6:59:81:f9:90:00:5f:cc:0b:bc: 3e:c7:0e:d1:72:aa:7f:27:6d:35:b6:50:95:ca:ce: 60:22:43:b1:9b:d5:f7:45:b2:66:d2:2b:8c:50:db: 81:6b:50:d7:c2:fe:4c:af:62:c7:d5:a2:c7:c7:6f: 9a:7c:e4:91:b5:62:17:31:31:e5:0c:ad:e5:54:03: e3:39:f6:c9:49:17:c7:0c:93:1d:56:e3:22:8f:37: ae:b0:6c:78:4a:8d:20:e4:cc:20:28:67:a8:4d:46: 95:87:19:66:5d:f3:53:bd:b5:a7:e9:67:7b:72:84: c6:a4:43:e6:17:b5:e4:c1:ba:1c:1a:5d:7f:bd:35: ae:a7:4e:47:73:c9:51:83:98:65:23:3a:b7:b9:15: 49:52:bf:fc:e7:bd:c6:75:92:91:60:4d:2a:b7:af: a6:cf:b9:b8:ab:02:ad:8d:a6:52:6f:24:c7:19:d9: 7b:39:57:eb:4b:31:46:fd:8d:a6:36:1d:7e:29:f2: af:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 104.36.208.0/21 IPv6: 2620:12f:7000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22857 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8e:c7:32:ed:11:f6:8a:63:ec:db:c6:c7:96:5a:55:8f:aa: bc:80:ff:03:20:12:be:21:4a:b5:cd:e6:dd:6f:df:80:bb:92: 73:ad:61:a2:7f:5d:d9:9b:67:55:a4:29:9b:1a:91:eb:a1:ef: 5c:f4:c0:b0:b2:e4:c7:f3:d6:0b:9b:84:80:73:dd:a3:63:28: fc:44:dc:af:7a:c3:c9:97:21:29:63:9f:97:aa:37:74:40:b2: ba:93:07:c9:54:d2:9c:e5:bd:85:5d:24:86:ec:0e:c4:43:e4: f2:09:40:f0:fb:34:a5:c3:b4:ae:38:e6:67:48:81:d3:be:4c: 78:04:dc:9b:96:f0:4b:cd:60:12:9b:19:6b:3e:46:b4:4d:85: 8e:a8:84:be:4a:55:d0:95:26:4a:fa:2a:43:6f:a1:b0:c4:80: 71:81:29:5e:48:e6:95:5f:5d:90:ca:cb:f2:9d:1f:0d:6c:9e: 9d:f3:54:cc:b8:b3:1f:e1:49:c8:0f:cb:46:9d:0d:20:82:82: c7:f0:e6:9b:ca:65:94:c9:10:f0:63:e7:b8:63:86:2a:f5:f2: a6:12:b0:6e:f6:f8:13:65:8f:f9:c0:af:a3:60:2b:c5:25:a5: dd:42:69:b8:76:ca:3e:ee:3c:29:d6:a0:b3:90:0e:b2:e7:b3: fa:fe:3c:0e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEmHYhQ31xpjygoDj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQxNTAwNDUzNFoXDTI3MDcxOTAwNDUzNFowLzEtMCsGA1UEAxMk ZWI4MjA0ZWItOGNlNS00ZDlhLWIzODMtYjQ0MzNlODA3NWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoB85cvfF0N9yZaZqQ1Xd7WzWT19xVLIIyZk /UNezD/U56RcimCHkR0fWpoQtBGmdFHq97MkpebEY+0WH2lzGaZZgfmQAF/MC7w+ xw7Rcqp/J201tlCVys5gIkOxm9X3RbJm0iuMUNuBa1DXwv5Mr2LH1aLHx2+afOSR tWIXMTHlDK3lVAPjOfbJSRfHDJMdVuMijzeusGx4So0g5MwgKGeoTUaVhxlmXfNT vbWn6Wd7coTGpEPmF7XkwbocGl1/vTWup05Hc8lRg5hlIzq3uRVJUr/8573GdZKR YE0qt6+mz7m4qwKtjaZSbyTHGdl7OVfrSzFG/Y2mNh1+KfKvaQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCxhYLI+CeiXnzws9bE5q7wRpThPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YjgyMDRlYi04Y2U1LTRkOWEtYjM4My1iNDQzM2U4MDc1YTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ViODIwNGViLThjZTUtNGQ5YS1i MzgzLWI0NDMzZTgwNzVhMC9lYjgyMDRlYi04Y2U1LTRkOWEtYjM4My1iNDQzM2U4 MDc1YTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBANoJNAwDgQCAAIwCAMGACYgAS9wMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAllJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACSOxzLtEfaKY+zbxseWWlWPqryA /wMgEr4hSrXN5t1v34C7knOtYaJ/XdmbZ1WkKZsakeuh71z0wLCy5Mfz1gubhIBz 3aNjKPxE3K96w8mXISljn5eqN3RAsrqTB8lU0pzlvYVdJIbsDsRD5PIJQPD7NKXD tK445mdIgdO+THgE3JuW8EvNYBKbGWs+RrRNhY6ohL5KVdCVJkr6KkNvobDEgHGB KV5I5pVfXZDKy/KdHw1snp3zVMy4sx/hScgPy0adDSCCgsfw5pvKZZTJEPBj57hj hir18qYSsG72+BNlj/nAr6NgK8Ulpd1Cabh2yj7uPCnWoLOQDrLns/r+PA4= -----END CERTIFICATE-----Generated at Wed Oct 29 08:50:18 2025 by rpki-client