$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer File: 4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer (raw, json) Hash identifier: vJ+NnVmdayCDJo3BONFaHB4JSo01yxxzhlwNbb96Z3M= Subject key identifier: 91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A3A0DDF3D95B2063B1DC856E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Jun 2025 00:45:35 +0000 Certificate not after: Tue 21 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 12241 IP: 66.196.48.0/20 IP: 96.31.176.0/20 IP: 207.68.208.0/20 IP: 2606:4900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:0d:df:3d:95:b2:06:3b:1d:c8:56:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 18 00:45:35 2025 GMT Not After : Sep 21 00:45:35 2027 GMT Subject: CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6d:30:1c:9f:4b:b0:05:c2:00:25:63:c3:1c: 9d:c6:27:7c:bb:f4:12:cf:da:54:e2:01:a7:ed:17: 90:44:67:02:a2:05:99:fd:cf:b2:a9:9d:c2:ae:e1: 6a:d4:7d:d9:ce:fc:d8:bc:28:b1:9f:1d:af:5a:5a: 8a:3f:cc:2c:8e:ef:a6:09:fd:91:e0:b8:7a:a3:67: 83:06:98:7e:5e:ff:51:63:43:f9:26:65:90:1e:bb: fb:b8:c2:69:ed:ad:14:33:8b:80:a1:32:c9:30:29: 6a:1b:89:6a:81:01:a6:d4:91:f9:82:60:47:18:d0: c3:13:dd:68:f5:f1:38:65:a8:e2:1f:b0:d3:fe:cc: de:de:d2:f6:2e:6d:54:12:43:01:68:f1:c9:6d:29: b8:4c:a4:46:d1:52:01:dc:27:3f:f7:93:78:da:d5: 27:ba:72:ed:9f:b5:66:45:27:9c:ef:a8:39:af:07: 2a:e8:92:b5:71:c8:c4:12:ab:71:91:a9:54:64:62: 48:b4:26:de:1f:a4:3e:1e:b8:12:ef:3c:91:e0:5d: fc:8a:4b:21:f4:9f:e6:ff:d4:18:a7:19:47:94:ca: 36:5e:2c:83:7f:5e:67:01:34:b4:20:f8:fe:c5:88: 33:cc:ee:56:a8:28:ba:02:28:92:c0:c6:8e:6e:71: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.196.48.0/20 96.31.176.0/20 207.68.208.0/20 IPv6: 2606:4900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12241 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bd:c3:6a:29:58:30:d8:52:42:52:7e:63:d5:31:72:fc:34: bb:f7:73:90:9b:69:b8:e2:6e:50:e7:5d:16:75:49:1b:e0:b5: e4:ef:e1:d5:4e:a4:56:ea:fd:58:09:87:ee:48:ed:f9:ad:21: 0c:cd:dd:07:41:60:bd:c3:81:91:cc:26:3a:c4:f9:80:50:79: 23:f5:59:a4:12:55:97:32:bc:ff:ac:81:cf:7b:2b:f8:d2:1e: 05:00:26:11:4b:43:0d:25:2c:ce:77:95:39:d7:28:6b:32:09: e1:00:b7:c3:9b:f3:a7:f8:25:09:ad:13:cb:d2:86:fc:2c:07: 6e:0f:9b:18:c4:f5:2c:ed:67:d6:b2:87:3e:8a:bf:c7:bd:b7: 65:31:ef:0a:7e:65:f0:9d:05:7e:de:3f:db:33:be:aa:a7:93: 79:a8:3e:84:58:a9:11:fa:dc:15:b1:f6:fa:d9:8b:01:50:f5: 63:97:8b:af:fd:75:6b:aa:6c:69:37:f1:96:97:49:3a:81:ee: dc:ed:72:61:b0:88:df:62:5a:d6:eb:32:86:2b:38:8d:4f:45: d0:97:4f:a6:c5:d8:aa:82:d0:85:46:b9:1e:82:0a:34:f8:87: eb:a5:02:77:63:2d:94:b9:d6:ee:a3:bf:f1:bf:5d:0d:ac:9a: bc:da:95:c8 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEo6Dd89lbIGOx3IVuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxODAwNDUzNVoXDTI3MDkyMTAwNDUzNVowLzEtMCsGA1UEAxMk NGVlYTBjYmYtZWM5NC00OTE5LWI5OWYtNjM2NWU2OWFlNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW0wHJ9LsAXCACVjwxydxid8u/QSz9pU4gGn 7ReQRGcCogWZ/c+yqZ3CruFq1H3ZzvzYvCixnx2vWlqKP8wsju+mCf2R4Lh6o2eD Bph+Xv9RY0P5JmWQHrv7uMJp7a0UM4uAoTLJMClqG4lqgQGm1JH5gmBHGNDDE91o 9fE4ZajiH7DT/sze3tL2Lm1UEkMBaPHJbSm4TKRG0VIB3Cc/95N42tUnunLtn7Vm RSec76g5rwcq6JK1ccjEEqtxkalUZGJItCbeH6Q+HrgS7zyR4F38iksh9J/m/9QY pxlHlMo2XiyDf15nATS0IPj+xYgzzO5WqCi6AiiSwMaObnFGCQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFJG4upJs9/UKB3nR+Y783I0+rA43MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 ZWVhMGNiZi1lYzk0LTQ5MTktYjk5Zi02MzY1ZTY5YWU1MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRlZWEwY2JmLWVjOTQtNDkxOS1i OTlmLTYzNjVlNjlhZTUyZS80ZWVhMGNiZi1lYzk0LTQ5MTktYjk5Zi02MzY1ZTY5 YWU1MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARCxDADBARgH7ADBATPRNAwDQQCAAIwBwMFACYG SQAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICL9EwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS73DailYMNhS QlJ+Y9Uxcvw0u/dzkJtpuOJuUOddFnVJG+C15O/h1U6kVur9WAmH7kjt+a0hDM3d B0FgvcOBkcwmOsT5gFB5I/VZpBJVlzK8/6yBz3sr+NIeBQAmEUtDDSUszneVOdco azIJ4QC3w5vzp/glCa0Ty9KG/CwHbg+bGMT1LO1n1rKHPoq/x723ZTHvCn5l8J0F ft4/2zO+qqeTeag+hFipEfrcFbH2+tmLAVD1Y5eLr/11a6psaTfxlpdJOoHu3O1y YbCI32Ja1usyhis4jU9F0JdPpsXYqoLQhUa5HoIKNPiH66UCd2MtlLnW7qO/8b9d DayavNqVyA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:01 2025 by rpki-client