$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683.cer File: 0283679c-8839-42d6-90a3-4215f8491683.cer (raw, json) Hash identifier: Gn2zQOD7QKmtB8yNMdsIQ+mXHLJkU57JvtW4YJQBsU8= Subject key identifier: 8E:5C:00:A8:45:BF:21:F2:91:4C:77:1E:8C:F2:46:CF:B8:23:6D:A6 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584998222F09E0B47C28146D3280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Apr 2025 00:45:34 +0000 Certificate not after: Sun 25 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 33494 IP: 67.222.96.0/20 IP: 72.34.32.0/19 IP: 162.219.248.0/22 IP: 192.40.112.0/22 IP: 192.69.235.0/24 IP: 2606:5600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:22:2f:09:e0:b4:7c:28:14:6d:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 21 00:45:34 2025 GMT Not After : Jul 25 00:45:34 2027 GMT Subject: CN=0283679c-8839-42d6-90a3-4215f8491683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ea:2b:01:07:92:eb:02:b0:00:1b:fc:b1:50: 4d:09:e6:00:27:74:27:af:26:c4:52:77:4a:97:53: e5:f2:f7:62:28:fd:a6:a1:18:a8:39:c9:e5:40:1f: f2:da:6e:fc:47:61:57:79:54:15:66:46:29:1e:76: 9c:98:ad:f6:74:ed:75:50:03:04:96:04:a1:68:8e: f3:38:98:ec:45:e2:48:88:ea:73:3e:ae:76:5f:4e: 66:76:a3:04:1c:bd:f2:ce:ff:26:7e:62:a5:da:e9: 21:21:2b:cc:39:57:71:08:8d:d0:f0:b8:1d:78:2a: 4e:48:fd:71:ba:eb:d3:3d:50:6c:61:dd:67:d0:f5: 1f:8e:55:0d:54:b5:95:02:ea:64:4c:cf:86:c1:61: 2f:20:b7:01:73:9d:2d:7f:84:88:54:cf:5e:05:1b: a6:67:ca:35:97:83:4a:3a:e3:1c:73:17:b5:5b:af: 5d:b6:f3:43:2a:88:9c:05:90:4e:c6:b8:bd:01:06: 86:a7:38:d6:12:2f:15:d2:78:52:7c:64:06:a0:83: cf:b9:da:ae:ff:71:83:76:c0:7f:85:a2:24:b3:26: a0:a0:32:6f:63:31:ab:18:76:c0:90:31:27:b2:45: 38:0b:a2:67:2f:ca:22:c2:c0:f8:55:b9:67:13:63: 9d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5C:00:A8:45:BF:21:F2:91:4C:77:1E:8C:F2:46:CF:B8:23:6D:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 67.222.96.0/20 72.34.32.0/19 162.219.248.0/22 192.40.112.0/22 192.69.235.0/24 IPv6: 2606:5600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33494 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2a:7e:fc:ce:74:17:f4:62:86:3b:90:47:f8:49:eb:25:ec: ed:61:ae:b4:ec:94:62:22:37:6d:6e:91:6e:c1:63:f4:b1:db: 95:2c:42:7d:b9:f4:03:6c:24:c3:95:bc:cb:56:74:f8:57:e0: 51:6d:e1:20:07:0f:e7:0e:8f:3b:f5:93:d0:b3:d2:ae:d0:30: 72:23:13:d8:6d:a9:6a:e3:58:91:64:b0:1e:8c:07:d5:88:96: d1:5e:38:57:aa:06:79:06:b9:19:c4:1b:5e:31:c5:b2:5f:f2: 6d:5b:cf:49:59:5a:57:c0:ff:e2:ea:d3:39:ae:a2:fe:ea:48: 23:64:14:72:15:e5:c7:f4:5b:84:76:d1:b2:bd:6a:20:df:34: 11:cb:a5:7f:d6:d2:d6:1f:34:7e:06:0f:3a:4d:b3:da:13:44: 3f:89:f8:e1:96:7d:04:06:cf:c0:31:5a:79:0d:43:52:c8:0e: f2:ed:cc:1a:08:fb:3b:be:41:d9:40:3d:ea:aa:24:4d:d5:66: d1:0a:4c:00:1f:36:b6:2c:dc:36:a4:1d:e1:9b:c4:37:38:82: cc:82:86:5d:fc:d6:33:24:59:60:1c:af:22:5f:dd:97:30:de: 10:ca:ff:85:35:cc:c9:21:d8:48:b4:c5:60:03:43:41:97:52: b1:2c:fa:25 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEmYIi8J4LR8KBRtMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyMTAwNDUzNFoXDTI3MDcyNTAwNDUzNFowLzEtMCsGA1UEAxMk MDI4MzY3OWMtODgzOS00MmQ2LTkwYTMtNDIxNWY4NDkxNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+orAQeS6wKwABv8sVBNCeYAJ3QnrybEUndK l1Pl8vdiKP2moRioOcnlQB/y2m78R2FXeVQVZkYpHnacmK32dO11UAMElgShaI7z OJjsReJIiOpzPq52X05mdqMEHL3yzv8mfmKl2ukhISvMOVdxCI3Q8LgdeCpOSP1x uuvTPVBsYd1n0PUfjlUNVLWVAupkTM+GwWEvILcBc50tf4SIVM9eBRumZ8o1l4NK OuMccxe1W69dtvNDKoicBZBOxri9AQaGpzjWEi8V0nhSfGQGoIPPudqu/3GDdsB/ haIksyagoDJvYzGrGHbAkDEnskU4C6JnL8oiwsD4VblnE2OdYwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFI5cAKhFvyHykUx3HozyRs+4I22mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w MjgzNjc5Yy04ODM5LTQyZDYtOTBhMy00MjE1Zjg0OTE2ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzAyODM2NzljLTg4MzktNDJkNi05 MGEzLTQyMTVmODQ5MTY4My8wMjgzNjc5Yy04ODM5LTQyZDYtOTBhMy00MjE1Zjg0 OTE2ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBARD3mADBAVIIiADBAKi2/gDBALAKHADBADAResw DQQCAAIwBwMFACYGVgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAILWMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBACQqfvzOdBf0YoY7kEf4Sesl7O1hrrTslGIiN21ukW7BY/Sx25UsQn259ANs JMOVvMtWdPhX4FFt4SAHD+cOjzv1k9Cz0q7QMHIjE9htqWrjWJFksB6MB9WIltFe OFeqBnkGuRnEG14xxbJf8m1bz0lZWlfA/+Lq0zmuov7qSCNkFHIV5cf0W4R20bK9 aiDfNBHLpX/W0tYfNH4GDzpNs9oTRD+J+OGWfQQGz8AxWnkNQ1LIDvLtzBoI+zu+ QdlAPeqqJE3VZtEKTAAfNrYs3DakHeGbxDc4gsyChl381jMkWWAcryJf3Zcw3hDK /4U1zMkh2Ei0xWADQ0GXUrEs+iU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:54:43 2025 by rpki-client