$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb.cer File: 361a16d3-f3cf-464c-8fba-a435adeb72cb.cer (raw, json) Hash identifier: OiZsFieYlWV6JYVody3mR/AlxEzIhZuW7I1Jg3/EqOQ= Subject key identifier: 90:87:F8:2E:3D:D9:DD:17:A2:09:70:EA:A9:D9:08:41:DC:E1:89:9E Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A5FBE1ACB3EFCDF4030F6C200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/361a16d3-f3cf-464c-8fba-a435adeb72cb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Jul 2025 12:45:35 +0000 Certificate not after: Mon 04 Oct 2027 12:45:35 +0000 Subordinate resources: AS: 394222 IP: 168.151.40.0/23 IP: 2620:47:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:be:1a:cb:3e:fc:df:40:30:f6:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 1 12:45:35 2025 GMT Not After : Oct 4 12:45:35 2027 GMT Subject: CN=361a16d3-f3cf-464c-8fba-a435adeb72cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7a:53:2c:de:50:ca:05:c3:ef:e6:a0:fd:d4: 96:a5:fd:56:3d:b8:80:62:92:fe:00:43:19:f8:a6: 5a:2e:fa:33:38:e7:d2:0f:73:29:5a:58:0f:23:9a: f9:7f:a0:d6:5d:19:e1:fc:7f:78:d9:c9:ec:2c:8c: 97:4c:7f:37:73:69:3c:76:c6:e7:e8:78:b0:3e:ee: e4:fe:d0:d0:7d:a9:ca:24:82:77:34:b5:13:53:19: 8e:e7:69:ed:0a:62:65:67:73:6a:37:87:86:59:be: e4:96:45:44:1c:fa:07:1f:bb:af:65:b6:d1:d4:7a: 5b:bf:c7:5c:15:3c:4c:35:c5:60:1d:65:f3:5f:4a: 7b:30:2f:81:9e:61:78:f3:9b:6c:2c:77:0d:4e:fa: ee:0f:48:00:a7:76:13:47:80:12:d9:2f:2f:8b:76: d3:e8:0b:b1:e7:a0:af:fd:f9:d9:aa:cc:8f:06:ba: 29:19:91:c4:28:ca:66:06:ea:fd:61:0c:53:8e:72: 17:7d:e2:4e:45:44:5a:e4:32:c0:c1:34:91:3f:9d: 63:cc:d5:9d:ea:24:c7:b0:28:0e:97:ac:9f:eb:f5: 9d:80:06:b2:0b:d1:35:b3:36:2b:35:cf:5a:7b:98: a7:8e:df:49:1b:49:38:c6:69:47:d1:9e:5b:a0:7e: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:87:F8:2E:3D:D9:DD:17:A2:09:70:EA:A9:D9:08:41:DC:E1:89:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/361a16d3-f3cf-464c-8fba-a435adeb72cb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 168.151.40.0/23 IPv6: 2620:47:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394222 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:38:ef:27:28:e0:8e:3a:d6:32:2e:3a:a3:9c:57:65:01:bb: 42:7f:d4:0c:91:db:fd:e0:ed:ab:fa:02:79:66:86:42:b0:89: 40:99:1e:93:ae:fa:d4:91:18:0a:20:52:e4:37:3c:25:24:48: 10:fe:54:27:60:07:3a:3b:ea:41:bc:46:24:e5:b1:40:05:2e: 47:2c:89:2b:1d:20:ad:a9:64:43:f3:79:c0:4f:ff:de:89:db: 22:36:8c:f9:82:52:72:6c:7a:cc:ec:66:ba:06:58:3b:30:ae: 1e:15:19:1d:b1:19:1e:d1:a2:e2:87:5a:e7:ea:b5:ab:51:ec: bb:8e:de:01:9f:8b:91:87:7a:94:df:0e:e9:d9:78:45:02:7b: 79:97:b2:f2:6d:0d:a1:3d:de:e1:dd:65:00:a1:63:bb:39:38: 94:0f:68:7b:8e:e5:80:dc:ca:e7:a5:b2:fb:ec:a7:a9:e4:51: 90:e5:45:30:23:e1:ab:8a:ca:f2:f9:e5:e3:b3:db:b6:28:be: 20:0c:32:d7:89:db:f2:84:2f:ba:90:c8:97:95:9f:3e:1e:44: fc:de:d3:3c:d2:e7:6c:5f:49:6d:ba:b1:2f:bc:45:71:6f:3e: 4b:5b:b8:33:61:d6:6b:ec:49:fe:32:90:4a:e9:11:d0:98:28: 7f:f0:44:2a -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEpfvhrLPvzfQDD2wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwMTEyNDUzNVoXDTI3MTAwNDEyNDUzNVowLzEtMCsGA1UEAxMk MzYxYTE2ZDMtZjNjZi00NjRjLThmYmEtYTQzNWFkZWI3MmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnpTLN5QygXD7+ag/dSWpf1WPbiAYpL+AEMZ +KZaLvozOOfSD3MpWlgPI5r5f6DWXRnh/H942cnsLIyXTH83c2k8dsbn6HiwPu7k /tDQfanKJIJ3NLUTUxmO52ntCmJlZ3NqN4eGWb7klkVEHPoHH7uvZbbR1Hpbv8dc FTxMNcVgHWXzX0p7MC+BnmF485tsLHcNTvruD0gAp3YTR4AS2S8vi3bT6Aux56Cv /fnZqsyPBropGZHEKMpmBur9YQxTjnIXfeJORURa5DLAwTSRP51jzNWd6iTHsCgO l6yf6/WdgAayC9E1szYrNc9ae5injt9JG0k4xmlH0Z5boH6T2wIDAQABo4IELDCC BCgwHQYDVR0OBBYEFJCH+C492d0Xoglw6qnZCEHc4YmeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NjFhMTZkMy1mM2NmLTQ2NGMtOGZiYS1hNDM1YWRlYjcyY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM2MWExNmQzLWYzY2YtNDY0Yy04 ZmJhLWE0MzVhZGViNzJjYi8zNjFhMTZkMy1mM2NmLTQ2NGMtOGZiYS1hNDM1YWRl YjcyY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAGolygwDwQCAAIwCQMHACYgAEcgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGA+4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgDjvJyjgjjrWMi46o5xXZQG7 Qn/UDJHb/eDtq/oCeWaGQrCJQJkek6761JEYCiBS5Dc8JSRIEP5UJ2AHOjvqQbxG JOWxQAUuRyyJKx0gralkQ/N5wE//3onbIjaM+YJScmx6zOxmugZYOzCuHhUZHbEZ HtGi4oda5+q1q1Hsu47eAZ+LkYd6lN8O6dl4RQJ7eZey8m0NoT3e4d1lAKFjuzk4 lA9oe47lgNzK56Wy++ynqeRRkOVFMCPhq4rK8vnl47Pbtii+IAwy14nb8oQvupDI l5WfPh5E/N7TPNLnbF9JbbqxL7xFcW8+S1u4M2HWa+xJ/jKQSukR0Jgof/BEKg== -----END CERTIFICATE-----Generated at Mon Aug 4 07:50:41 2025 by rpki-client