$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer File: 28aae7db-2f51-4656-bba0-64f1d3ee3256.cer (raw, json) Hash identifier: N6mQUyP9MKuddiLsiNdjrTMqHHtiGdetz4me5JPIVZY= Subject key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849BF37C3B5F1D772377E53B2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 May 2025 00:45:34 +0000 Certificate not after: Sun 08 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 32435 IP: 199.189.200.0/22 IP: 2602:fac3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:37:c3:b5:f1:d7:72:37:7e:53:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 5 00:45:34 2025 GMT Not After : Aug 8 00:45:34 2027 GMT Subject: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:6b:c9:a9:4e:59:fa:28:eb:39:b4:d2:04: d2:07:f7:7e:30:6c:42:a9:eb:24:79:88:8d:93:7d: f1:27:13:e9:f8:0c:71:d7:3f:1a:29:df:34:27:6a: 4d:31:60:67:35:85:7e:f1:6f:a9:9b:e5:32:41:52: b7:e0:11:dc:0a:19:02:93:24:48:58:8b:e6:1c:33: af:71:a9:f8:ac:e4:71:f8:b2:a0:17:9b:81:68:6e: b3:3a:f9:bd:9a:4c:0e:ee:ca:c4:04:ad:54:dd:8d: ae:2d:ae:09:d7:f9:b5:d3:52:24:49:64:58:08:95: bc:f9:66:af:f1:b7:fa:5e:d8:6d:87:c9:6b:86:3d: 14:1e:00:ec:49:fe:3c:66:73:81:d8:82:62:73:a7: a0:07:1e:ab:44:a2:f7:ed:5f:d6:6b:87:ac:54:49: 52:8f:eb:8a:cb:00:18:2c:d0:e9:e8:5f:d1:cd:cc: e7:70:1e:4c:c6:9c:fa:a9:85:6a:16:b4:5e:e9:e7: 7a:32:13:f8:c5:f5:a4:cc:d7:ff:4c:a6:bb:25:1e: df:7a:cb:e6:00:54:0c:3a:9f:91:73:f7:de:72:ba: 5d:ea:2a:0f:79:e9:64:80:8e:ab:26:df:0d:c6:5a: c3:4a:ae:d6:bd:5a:7f:dd:bd:92:06:f7:4f:e1:e8: c0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.189.200.0/22 IPv6: 2602:fac3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32435 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9b:75:ef:60:4b:66:a5:ef:58:8f:10:e5:c7:e7:1e:17:74: f1:64:33:d5:95:81:f9:86:51:27:ff:6f:0e:33:74:91:ce:7a: 6f:af:fe:83:80:de:fb:c6:41:b6:f0:97:c0:b5:1f:dd:0d:bc: c2:d3:28:41:42:61:7f:9b:c0:0e:74:e1:2b:60:f9:9b:ea:ce: df:fc:5d:91:51:d6:14:3a:f6:e6:02:d8:a9:c4:49:01:f9:d5: 17:47:c7:48:1a:05:dc:4d:12:89:17:ac:c0:1e:4e:fe:49:b8: d2:62:15:90:6b:54:10:27:e9:89:65:72:e3:31:cb:ed:78:31: e8:61:02:3d:06:93:37:c8:03:b1:34:00:5a:7c:6f:cd:75:5a: a1:7d:e8:82:68:87:2a:a3:4e:8b:b1:35:f7:bd:1f:b8:b7:c7: d4:d6:8b:79:22:38:b4:b6:4f:8a:bb:81:d0:27:c5:eb:c2:4d: 05:49:d2:3c:d1:6c:a8:d7:3e:29:ed:45:1c:6d:20:09:b4:c9: 21:52:fa:d4:e2:24:1c:d5:21:42:c2:ee:23:71:30:7c:a0:78: dd:f4:97:be:ac:31:12:5f:1c:3e:6b:84:89:4b:8e:0a:1a:38: c2:fc:7a:62:be:2c:d8:6c:c2:6c:2f:9c:50:ab:aa:b2:67:2b: a5:b9:1e:3b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEm/N8O18ddyN35TssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNTAwNDUzNFoXDTI3MDgwODAwNDUzNFowLzEtMCsGA1UEAxMk MjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUzMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrVryalOWfoo6zm00gTSB/d+MGxCqeskeYiN k33xJxPp+Axx1z8aKd80J2pNMWBnNYV+8W+pm+UyQVK34BHcChkCkyRIWIvmHDOv can4rORx+LKgF5uBaG6zOvm9mkwO7srEBK1U3Y2uLa4J1/m101IkSWRYCJW8+Wav 8bf6Xthth8lrhj0UHgDsSf48ZnOB2IJic6egBx6rRKL37V/Wa4esVElSj+uKywAY LNDp6F/RzczncB5Mxpz6qYVqFrRe6ed6MhP4xfWkzNf/TKa7JR7fesvmAFQMOp+R c/fecrpd6ioPeelkgI6rJt8NxlrDSq7WvVp/3b2SBvdP4ejACQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIzgzxasj2/M5GMn7d/fofnnb5OPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y OGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI4YWFlN2RiLTJmNTEtNDY1Ni1i YmEwLTY0ZjFkM2VlMzI1Ni8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNl ZTMyNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHvcgwDgQCAAIwCAMGACYC+sMAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn6zMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFybde9gS2al71iPEOXH5x4XdPFk M9WVgfmGUSf/bw4zdJHOem+v/oOA3vvGQbbwl8C1H90NvMLTKEFCYX+bwA504Stg +Zvqzt/8XZFR1hQ69uYC2KnESQH51RdHx0gaBdxNEokXrMAeTv5JuNJiFZBrVBAn 6YllcuMxy+14MehhAj0GkzfIA7E0AFp8b811WqF96IJohyqjTouxNfe9H7i3x9TW i3kiOLS2T4q7gdAnxevCTQVJ0jzRbKjXPintRRxtIAm0ySFS+tTiJBzVIULC7iNx MHygeN30l76sMRJfHD5rhIlLjgoaOML8emK+LNhswmwvnFCrqrJnK6W5Hjs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:01 2025 by rpki-client