$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer File: 14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer (raw, json) Hash identifier: JdccdgvnbN/giNldD2/mKNrMPELEmMUKM2SPv91cHcQ= Subject key identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849C797D0F4EFA75482CD14C700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 May 2025 00:45:34 +0000 Certificate not after: Wed 11 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 31876 IP: 199.124.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:97:d0:f4:ef:a7:54:82:cd:14:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 8 00:45:34 2025 GMT Not After : Aug 11 00:45:34 2027 GMT Subject: CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ae:bd:de:86:18:1d:19:cb:d0:92:89:fa:33: 91:4e:e5:e6:37:04:98:f5:6c:94:e9:f1:04:98:47: d5:fe:1f:e0:f0:ed:51:75:b0:d8:67:bb:98:fb:71: dc:d6:da:2e:25:f9:d5:7d:71:59:d4:82:d5:a3:25: dd:01:cf:f6:a7:ff:09:82:ce:50:6c:a5:62:09:da: 35:3b:65:e9:70:24:9c:35:62:b1:b0:c6:8e:73:c2: 47:f7:1e:52:39:5f:c4:4a:8d:37:60:0c:2a:39:fb: 5c:5a:03:dc:44:0f:e5:b8:06:70:c2:56:a7:6a:1d: 65:f4:92:ec:36:0d:a7:51:55:73:78:cc:02:b9:e4: ea:ba:70:f9:15:47:2a:ad:0c:40:db:ea:c7:d6:d7: 40:23:51:6d:55:11:80:8c:c8:b9:c1:00:4d:39:9a: 91:4c:d2:a1:c7:fc:b4:49:d1:db:03:21:46:21:eb: 26:61:a1:37:19:6d:e8:62:68:08:01:f7:44:17:63: b7:11:7b:b3:ad:ef:aa:d4:92:d7:d5:4c:db:94:7b: 6f:5c:57:36:8b:b1:04:d0:66:8d:05:d7:58:da:60: 61:60:b4:16:e2:b6:99:c2:36:8d:73:62:bb:f2:70: 3c:18:07:8b:34:92:18:79:a5:14:3a:9b:0c:74:9b: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.124.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31876 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f5:b4:00:a5:4f:29:5f:82:52:d3:12:1c:fa:90:88:19:f5: f5:7b:d0:48:9d:eb:d1:46:32:36:56:3a:42:15:ea:44:08:13: 04:5d:b2:c1:0b:24:17:ec:96:a9:7f:a6:fe:ad:30:25:f4:6d: 9a:d7:5a:f0:c6:a7:b0:b1:01:20:79:42:d7:74:b2:6d:c9:28: b6:3e:1e:bc:96:a4:37:1e:40:32:c1:4c:58:aa:14:7a:30:93: 21:7f:48:9a:fd:64:fa:34:fd:38:43:f3:b3:61:4c:cb:2f:a7: e9:26:45:ee:1d:fa:0a:2f:b5:30:df:26:82:ef:b0:d4:bb:6c: 5d:66:9c:11:43:e1:41:0c:27:01:d2:10:d8:e8:81:39:31:d2: 07:f7:a1:15:9e:ff:79:cb:18:10:c7:6a:38:d3:2b:17:0c:b3: ac:df:c2:66:2e:14:df:d6:8f:0c:c7:1f:41:0d:4b:d2:e4:39: da:ca:d4:38:53:40:e9:59:f4:b7:b9:bf:95:75:e4:61:21:b1: 29:88:a6:83:71:b3:60:16:8a:0b:30:c6:9d:9c:be:12:d2:e1: f8:1f:c4:a5:63:a2:66:2f:b5:19:d6:06:fe:04:24:04:95:d1: 41:da:61:d2:a0:fc:5c:3c:91:61:75:d8:f6:ca:9e:29:23:6e: 50:75:c0:7e -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEnHl9D076dUgs0UxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwODAwNDUzNFoXDTI3MDgxMTAwNDUzNFowLzEtMCsGA1UEAxMk MTRmMTk0OTQtZTZlYy00MmU3LWJjZTQtODkwM2RmMWY2ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK693oYYHRnL0JKJ+jORTuXmNwSY9WyU6fEE mEfV/h/g8O1RdbDYZ7uY+3Hc1touJfnVfXFZ1ILVoyXdAc/2p/8Jgs5QbKViCdo1 O2XpcCScNWKxsMaOc8JH9x5SOV/ESo03YAwqOftcWgPcRA/luAZwwlanah1l9JLs Ng2nUVVzeMwCueTqunD5FUcqrQxA2+rH1tdAI1FtVRGAjMi5wQBNOZqRTNKhx/y0 SdHbAyFGIesmYaE3GW3oYmgIAfdEF2O3EXuzre+q1JLX1UzblHtvXFc2i7EE0GaN BddY2mBhYLQW4raZwjaNc2K78nA8GAeLNJIYeaUUOpsMdJtdFQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFNSMJHE/nWBvQQEsjupFg10tXXL7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x NGYxOTQ5NC1lNmVjLTQyZTctYmNlNC04OTAzZGYxZjZmOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzE0ZjE5NDk0LWU2ZWMtNDJlNy1i Y2U0LTg5MDNkZjFmNmY5ZC8xNGYxOTQ5NC1lNmVjLTQyZTctYmNlNC04OTAzZGYx ZjZmOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHfBwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fIQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEADPW0AKVPKV+CUtMSHPqQiBn19XvQSJ3r0UYyNlY6QhXqRAgT BF2ywQskF+yWqX+m/q0wJfRtmtda8MansLEBIHlC13Sybckotj4evJakNx5AMsFM WKoUejCTIX9Imv1k+jT9OEPzs2FMyy+n6SZF7h36Ci+1MN8mgu+w1LtsXWacEUPh QQwnAdIQ2OiBOTHSB/ehFZ7/ecsYEMdqONMrFwyzrN/CZi4U39aPDMcfQQ1L0uQ5 2srUOFNA6Vn0t7m/lXXkYSGxKYimg3GzYBaKCzDGnZy+EtLh+B/EpWOiZi+1GdYG /gQkBJXRQdph0qD8XDyRYXXY9sqeKSNuUHXAfg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:59 2025 by rpki-client