$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer File: 4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer (raw, json) Hash identifier: LfVPngLmTR5l2qbr/LmZQlTea9UoD2NNzMGCsFRfBeE= Subject key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A7613992F99531D25C250AD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Jul 2025 12:45:38 +0000 Certificate not after: Tue 12 Oct 2027 12:45:38 +0000 Subordinate resources: IP: 199.96.164.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:13:99:2f:99:53:1d:25:c2:50:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 9 12:45:38 2025 GMT Not After : Oct 12 12:45:38 2027 GMT Subject: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:06:cd:33:e5:66:05:48:20:94:75:cc:c1: 94:b8:42:c1:65:ea:89:27:bc:fa:48:db:bf:94:74: 92:5f:f7:fc:89:88:cc:d2:53:f9:1a:01:84:a5:94: 98:cc:da:49:e5:d7:1a:68:9f:ea:5d:85:a2:7f:d6: d5:2d:f1:b9:e0:26:14:67:c3:fc:d6:b6:b8:7b:ce: 89:cd:ec:25:d6:a6:ef:81:8b:ce:f3:91:e4:36:06: 5b:2c:8c:4f:b9:52:d3:34:8d:ef:66:c3:8c:05:40: fc:97:ae:4b:09:e1:39:af:3d:06:0d:c1:2e:d5:31: f4:ed:c1:08:d2:ff:86:ff:77:88:48:65:6e:dc:29: 9d:3d:bf:f5:17:2f:2b:49:7a:58:89:4b:22:89:6a: 38:1e:6f:23:76:7a:a5:9a:5d:c7:95:6f:41:e1:b7: e2:89:d9:55:e2:82:b0:2e:d4:44:6b:f4:d3:94:ee: 18:88:ef:48:da:93:42:0b:6b:46:04:a8:fc:7d:eb: f1:05:42:39:12:c0:92:a4:47:e9:6b:b3:e0:31:f8: ce:54:2a:10:92:a6:57:94:af:77:47:94:cf:cd:48: 0c:97:47:2a:ca:28:24:ea:14:c0:ba:70:26:cc:c9: 4a:cd:42:c1:fc:0b:b9:09:90:2f:ab:0a:ac:84:eb: f1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.96.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a8:6f:c4:ea:3d:c2:b3:98:58:98:60:2a:40:e2:94:2a:97: 77:08:f9:66:28:d6:74:e3:5a:07:5a:60:28:c7:08:2e:27:e4: ea:58:45:aa:99:bb:4e:83:8f:ea:f5:ec:b0:64:16:a2:db:43: e1:52:c5:39:58:c5:b0:16:ab:73:7e:66:be:e2:98:af:b9:59: 98:e3:1b:67:a5:f5:84:14:6a:0d:4d:1c:05:e6:7d:e8:d5:c5: 13:21:aa:16:e7:5c:e5:c0:58:44:65:2c:29:ca:af:6b:59:0f: 7d:73:d5:9d:52:88:34:49:b2:e4:07:8f:e6:46:51:69:ba:df: ff:c2:a6:3c:8c:0f:c0:bb:33:80:73:f3:e9:32:05:35:2b:c9: 54:c3:66:54:a8:38:88:be:63:a1:b9:1f:a6:f7:79:23:54:4e: 5f:8b:93:2c:6b:cc:cf:c6:29:e2:d8:89:ed:cd:d0:74:47:2e: 9e:e6:9e:e5:27:b5:f0:0d:fe:4d:10:cd:d5:ad:a4:35:cd:b2: 85:3d:71:0f:35:c5:f1:9c:7f:91:5d:04:ca:f4:3f:75:45:1a: a7:e7:31:be:35:3a:cd:76:1e:4f:78:a6:f9:92:a6:30:3a:dd: 72:42:82:66:b3:1c:86:7c:1a:8d:6d:cf:8c:17:b5:3d:41:4a: 96:d0:0c:33 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEp2E5kvmVMdJcJQrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwOTEyNDUzOFoXDTI3MTAxMjEyNDUzOFowLzEtMCsGA1UEAxMk NDQxOGI3YmItN2YxYy00MzMzLTliOGUtYmFiZjhiOGZhMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2kGzTPlZgVIIJR1zMGUuELBZeqJJ7z6SNu/ lHSSX/f8iYjM0lP5GgGEpZSYzNpJ5dcaaJ/qXYWif9bVLfG54CYUZ8P81ra4e86J zewl1qbvgYvO85HkNgZbLIxPuVLTNI3vZsOMBUD8l65LCeE5rz0GDcEu1TH07cEI 0v+G/3eISGVu3CmdPb/1Fy8rSXpYiUsiiWo4Hm8jdnqlml3HlW9B4bfiidlV4oKw LtREa/TTlO4YiO9I2pNCC2tGBKj8fevxBUI5EsCSpEfpa7PgMfjOVCoQkqZXlK93 R5TPzUgMl0cqyigk6hTAunAmzMlKzULB/Au5CZAvqwqshOvxiwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBfp5LxrmySdczAKmolu83uc5UORMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 NDE4YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJmOGI4ZmEzOTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQ0MThiN2JiLTdmMWMtNDMzMy05 YjhlLWJhYmY4YjhmYTM5MS80NDE4YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJmOGI4 ZmEzOTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHYKQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAY6hvxOo9wrOYWJhgKkDi lCqXdwj5ZijWdONaB1pgKMcILifk6lhFqpm7ToOP6vXssGQWottD4VLFOVjFsBar c35mvuKYr7lZmOMbZ6X1hBRqDU0cBeZ96NXFEyGqFudc5cBYRGUsKcqva1kPfXPV nVKINEmy5AeP5kZRabrf/8KmPIwPwLszgHPz6TIFNSvJVMNmVKg4iL5jobkfpvd5 I1ROX4uTLGvMz8Yp4tiJ7c3QdEcunuae5Se18A3+TRDN1a2kNc2yhT1xDzXF8Zx/ kV0EyvQ/dUUap+cxvjU6zXYeT3im+ZKmMDrdckKCZrMchnwajW3PjBe1PUFKltAM Mw== -----END CERTIFICATE-----Generated at Wed Nov 5 06:31:22 2025 by rpki-client