$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer File: 34b1000a-ddde-44a7-ad9c-12d049acde17.cer (raw, json) Hash identifier: sJO5Qs1ZHfvWvHLnPHV2VvsKSAXXBDFJXPNj2sbBfNI= Subject key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849ABACFABF783BA30992FF9C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Apr 2025 00:45:35 +0000 Certificate not after: Sun 01 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 17103 IP: 208.90.144.0/22 IP: 2620:1b::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:ac:fa:bf:78:3b:a3:09:92:ff:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 28 00:45:35 2025 GMT Not After : Aug 1 00:45:35 2027 GMT Subject: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0d:77:df:e4:29:c5:f0:92:dc:87:6b:6a:60: d1:0e:e2:c3:1a:7c:c2:b1:27:78:25:c7:5d:d0:25: 2a:24:30:29:83:25:e2:04:e0:4d:b6:69:8e:83:f2: 2d:98:d6:18:eb:bd:de:6d:35:a6:a5:7d:3c:f9:16: eb:e6:3d:00:33:3f:12:5b:82:16:c2:b3:8c:2d:dd: 85:7a:27:07:cd:a8:db:36:71:18:0c:46:e1:86:c1: d6:30:d0:cf:a2:66:9b:d7:8e:b4:dc:fa:f6:22:9b: 46:b1:63:c6:af:a4:29:ac:be:8a:e8:6e:4c:67:38: 3f:90:3b:49:47:25:7a:e5:3f:bf:c2:59:7d:83:26: 34:02:44:41:14:fe:ab:9f:16:24:2b:bc:9a:be:d9: 9a:df:d8:50:fd:ac:6c:33:8f:8a:78:08:96:fc:24: 8f:9c:49:0f:17:4f:ce:c5:f5:28:9e:e7:cb:8a:20: f4:86:e3:f6:94:07:50:51:39:99:69:de:fb:78:25: c9:0d:9b:72:5c:a1:78:d8:fb:a8:b6:26:c1:94:2c: 50:ca:90:de:76:f2:55:50:2f:d5:d1:58:28:5c:44: 3e:a6:37:46:5f:fd:20:7a:78:58:0b:0d:4d:62:a6: 29:30:18:c8:72:eb:ea:cb:84:88:b4:cf:fb:0e:8c: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.144.0/22 IPv6: 2620:1b::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17103 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e2:90:02:07:04:ba:ff:7f:74:41:85:0a:6d:c7:f6:6f:bf: 95:b1:d9:bb:b4:38:6f:06:31:08:de:7e:31:b6:11:30:b4:4a: 96:b3:3b:e3:8f:d2:30:45:a4:2e:1b:84:6d:9b:a5:76:d8:6c: 22:04:59:25:3b:af:7b:34:83:bb:8f:31:04:93:01:06:ae:87: dd:b8:9e:43:1c:f6:1c:15:c1:f2:a3:bf:1f:e9:76:59:76:fb: 61:28:1a:63:70:7c:7e:01:3f:ef:ba:30:9b:47:07:26:66:94: bd:e7:fa:b7:4d:ad:05:02:dc:ec:24:de:17:aa:18:71:a2:d5: 5e:3f:f3:05:23:24:cb:2c:e9:4a:ff:b1:43:8b:91:ef:f9:29: aa:59:a3:b2:44:bf:c2:d6:32:e5:1b:3b:96:5c:30:35:2f:67: e8:5a:3b:ef:77:63:83:72:07:4c:2a:30:2a:53:cb:ef:43:77: 89:82:69:c4:43:6f:00:a4:cf:ea:26:5e:df:95:7a:57:e3:41: 06:01:0b:66:0d:f2:32:52:f9:dd:60:b5:9f:7e:b9:98:da:16: 40:2b:8f:ec:ef:d4:5f:18:35:ff:e6:0c:6e:6d:63:5e:b8:c5: 2c:66:6c:63:bf:1d:63:08:1b:56:82:22:2d:d4:4f:4e:c5:4d: b0:47:4b:a6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmrrPq/eDujCZL/nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyODAwNDUzNVoXDTI3MDgwMTAwNDUzNVowLzEtMCsGA1UEAxMk MzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNkZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w133+QpxfCS3IdramDRDuLDGnzCsSd4Jcdd 0CUqJDApgyXiBOBNtmmOg/ItmNYY673ebTWmpX08+Rbr5j0AMz8SW4IWwrOMLd2F eicHzajbNnEYDEbhhsHWMNDPomab14603Pr2IptGsWPGr6QprL6K6G5MZzg/kDtJ RyV65T+/wll9gyY0AkRBFP6rnxYkK7yavtma39hQ/axsM4+KeAiW/CSPnEkPF0/O xfUonufLiiD0huP2lAdQUTmZad77eCXJDZtyXKF42PuotibBlCxQypDedvJVUC/V 0VgoXEQ+pjdGX/0genhYCw1NYqYpMBjIcuvqy4SItM/7DoyWRQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFB7sD/bxHYemE/Oh2yiTtYc+x7eJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM0YjEwMDBhLWRkZGUtNDRhNy1h ZDljLTEyZDA0OWFjZGUxNy8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlh Y2RlMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBALQWpAwDwQCAAIwCQMHBCYgABsAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJCzzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBX4pACBwS6/390QYUKbcf2b7+V sdm7tDhvBjEI3n4xthEwtEqWszvjj9IwRaQuG4Rtm6V22GwiBFklO697NIO7jzEE kwEGrofduJ5DHPYcFcHyo78f6XZZdvthKBpjcHx+AT/vujCbRwcmZpS95/q3Ta0F AtzsJN4XqhhxotVeP/MFIyTLLOlK/7FDi5Hv+SmqWaOyRL/C1jLlGzuWXDA1L2fo Wjvvd2ODcgdMKjAqU8vvQ3eJgmnEQ28ApM/qJl7flXpX40EGAQtmDfIyUvndYLWf frmY2hZAK4/s79RfGDX/5gxubWNeuMUsZmxjvx1jCBtWgiIt1E9OxU2wR0um -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:14 2025 by rpki-client