$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae.cer File: 41d819be-21e8-4d68-8993-33ab237e51ae.cer (raw, json) Hash identifier: k7gKgZU/rVf/wQjfwz3pJ6GN4yxyW8hdml78LQx3FBc= Subject key identifier: BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A962E7503E439391EC60F5EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Jul 2025 00:45:37 +0000 Certificate not after: Sun 24 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 395324 IP: 104.219.88.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:2e:75:03:e4:39:39:1e:c6:0f:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 21 00:45:37 2025 GMT Not After : Oct 24 00:45:37 2027 GMT Subject: CN=41d819be-21e8-4d68-8993-33ab237e51ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:21:4e:53:5d:bb:50:f6:16:5f:ff:01:c7: a8:fd:3d:71:e1:39:f2:c7:87:02:c1:87:a1:00:ee: a8:e1:30:f3:6d:96:de:86:fb:9f:a1:70:19:8b:7b: d5:b3:03:c7:b2:dc:a0:42:1f:54:5e:db:be:de:8a: 02:bb:42:cb:1b:0c:27:3d:41:67:81:0c:bb:c2:7b: b0:8e:f6:33:ac:1b:59:7a:6c:a7:78:c9:7d:61:9e: ba:0a:a3:09:d0:7c:81:87:47:ad:75:7f:f3:cf:8f: 6c:f8:5d:40:a0:75:61:1f:d5:19:2a:85:6f:4b:ed: 7a:ba:90:9d:a9:2b:e9:fe:77:c8:6e:99:93:0b:23: 72:bd:2e:66:00:ae:37:69:83:c4:23:e0:73:7e:e3: 0c:7b:c3:6f:5c:b5:de:4d:11:61:22:dc:e4:5d:fd: 1a:32:f3:9c:61:03:cf:a6:e8:be:72:0a:20:da:f3: ff:12:37:8d:89:eb:d6:9f:8f:49:84:0f:0e:16:43: 1a:98:63:9d:e1:ba:b9:3e:4b:7c:ab:48:c0:59:2b: 64:58:33:5c:48:05:10:2e:ea:63:4e:11:63:c9:6e: 57:c8:f7:6f:4f:b9:5f:8d:98:6b:80:c3:61:ba:f4: 16:7f:aa:46:be:56:d5:e9:ae:93:9c:77:6c:7d:96: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F7:3C:D9:CA:4A:32:C7:FF:0B:FD:F3:E5:54:10:42:3C:C8:97:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/41d819be-21e8-4d68-8993-33ab237e51ae/41d819be-21e8-4d68-8993-33ab237e51ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.88.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395324 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:28:c3:34:53:a6:12:ca:b0:e9:2d:97:55:80:e9:88:b2:69: 50:38:51:64:71:dd:c4:a3:91:fe:09:54:06:8e:40:9b:ba:3c: db:b7:46:97:2e:bf:60:35:ff:5e:b1:bd:ef:8d:7b:6d:51:45: b9:88:b8:1b:82:14:84:5c:01:e1:d6:e8:3a:f4:6a:56:c9:cf: e8:ef:5f:26:99:99:92:d8:38:a1:51:cd:b9:f8:95:9a:d4:1d: 18:23:ef:49:f1:c0:db:d6:90:fe:a1:d9:3a:53:e4:b5:94:87: a8:32:58:43:ff:e9:7d:39:a4:d0:de:f9:db:00:cf:b3:bd:3d: 1b:01:8c:68:ac:03:00:b3:e1:02:58:2f:58:3a:cc:80:e7:b3: a3:ae:06:79:2c:63:67:de:43:35:d7:13:68:9d:34:fd:c3:cd: 2b:b5:03:28:6c:30:22:31:86:69:ab:9d:67:49:c2:d6:66:b1: da:63:fe:c1:8a:55:14:be:04:6c:ec:20:0c:09:da:85:1c:b0: cf:30:b9:16:b4:40:2f:f5:51:e0:5e:ad:90:83:50:8d:f4:68: 80:ad:24:40:1d:2f:4d:ed:ba:38:41:f3:bf:69:44:35:36:7c: 17:c6:0c:f3:54:97:50:87:ef:ca:14:1e:9e:cf:89:1f:a4:8d: 49:4f:92:92 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqWLnUD5Dk5HsYPXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMTAwNDUzN1oXDTI3MTAyNDAwNDUzN1owLzEtMCsGA1UEAxMk NDFkODE5YmUtMjFlOC00ZDY4LTg5OTMtMzNhYjIzN2U1MWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DohTlNdu1D2Fl//Aceo/T1x4Tnyx4cCwYeh AO6o4TDzbZbehvufoXAZi3vVswPHstygQh9UXtu+3ooCu0LLGwwnPUFngQy7wnuw jvYzrBtZemyneMl9YZ66CqMJ0HyBh0etdX/zz49s+F1AoHVhH9UZKoVvS+16upCd qSvp/nfIbpmTCyNyvS5mAK43aYPEI+BzfuMMe8NvXLXeTRFhItzkXf0aMvOcYQPP pui+cgog2vP/EjeNievWn49JhA8OFkMamGOd4bq5Pkt8q0jAWStkWDNcSAUQLupj ThFjyW5XyPdvT7lfjZhrgMNhuvQWf6pGvlbV6a6TnHdsfZbQwwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFL/3PNnKSjLH/wv98+VUEEI8yJdmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 MWQ4MTliZS0yMWU4LTRkNjgtODk5My0zM2FiMjM3ZTUxYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQxZDgxOWJlLTIxZTgtNGQ2OC04 OTkzLTMzYWIyMzdlNTFhZS80MWQ4MTliZS0yMWU4LTRkNjgtODk5My0zM2FiMjM3 ZTUxYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBANo21gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bgg8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADkowzRTphLKsOktl1WA6YiyaVA4UWRx3cSjkf4JVAaOQJu6 PNu3Rpcuv2A1/16xve+Ne21RRbmIuBuCFIRcAeHW6Dr0albJz+jvXyaZmZLYOKFR zbn4lZrUHRgj70nxwNvWkP6h2TpT5LWUh6gyWEP/6X05pNDe+dsAz7O9PRsBjGis AwCz4QJYL1g6zIDns6OuBnksY2feQzXXE2idNP3DzSu1AyhsMCIxhmmrnWdJwtZm sdpj/sGKVRS+BGzsIAwJ2oUcsM8wuRa0QC/1UeBerZCDUI30aICtJEAdL03tujhB 879pRDU2fBfGDPNUl1CH78oUHp7PiR+kjUlPkpI= -----END CERTIFICATE-----Generated at Wed Aug 6 10:16:47 2025 by rpki-client