$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer File: 5028ee72-1629-4552-a11f-947b5a925519.cer (raw, json) Hash identifier: IDNNP4maURBLMXaVpaIafsbat0rrUeyi9/EeBjl8NM8= Subject key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A6C4E31536D4D720C8C9F18C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Jul 2025 00:45:36 +0000 Certificate not after: Sat 09 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 45.42.214.0/23 IP: 161.129.180.0/22 IP: 204.136.10.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:4e:31:53:6d:4d:72:0c:8c:9f:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 6 00:45:36 2025 GMT Not After : Oct 9 00:45:36 2027 GMT Subject: CN=5028ee72-1629-4552-a11f-947b5a925519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:db:ee:ca:8c:0f:e0:b7:87:d5:9f:e0:fa: f2:b0:52:73:15:65:fa:a3:7c:c3:e5:d0:05:e0:c8: 35:5b:55:be:c4:21:c9:93:2d:bf:c3:81:e6:3b:b5: dc:f4:2d:59:f3:a4:ad:1e:c7:ab:70:2a:46:25:72: 71:7b:6b:70:b2:6d:48:64:eb:2f:16:f3:54:2c:a3: 43:a0:d4:71:97:93:3a:3a:2e:04:42:0e:53:91:66: ad:9b:e5:bf:a9:83:52:35:10:c0:0e:36:91:67:6b: 87:3f:ea:52:45:8a:75:ad:f0:a5:f6:84:81:21:e7: 60:3f:67:18:54:83:07:02:1f:6a:6c:17:2f:12:ea: f3:8e:a7:63:82:bc:e2:1e:b0:dc:84:8a:eb:0b:59: f6:b4:ff:e0:8f:ed:b4:70:52:66:13:56:a2:ef:5d: cb:ea:59:b2:7f:5c:3b:c8:bf:96:ce:f9:54:6c:6d: f6:9c:68:82:6a:83:e9:e4:b2:2a:de:b6:cc:85:84: dd:ec:34:3a:43:65:8d:b5:39:5d:c5:6d:2e:fb:4a: d7:67:a6:8a:43:8f:65:b7:1d:b3:2d:49:e3:52:d9: 72:fa:b4:3c:27:30:5e:d9:f9:94:08:db:a2:0e:14: 0a:4b:dd:21:78:f7:b3:7c:a0:0c:b7:e0:e9:73:07: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 45.42.214.0/23 161.129.180.0/22 204.136.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f2:30:65:55:d0:c5:4f:45:89:ed:d8:a1:41:b3:92:57:33: 08:3d:3a:06:48:ae:d7:e3:99:c2:9e:5d:9b:9a:86:cd:77:9f: 2b:df:ad:2b:3e:c4:ad:16:1b:cf:8b:28:4d:4e:dd:6b:59:1e: 8e:bb:9d:66:91:7d:a7:3a:72:89:a3:00:ce:97:c6:e3:94:98: 32:e9:0e:01:2c:c1:c7:49:a4:d6:b5:d1:a7:54:73:89:4d:4e: 97:b6:b2:14:55:e9:5d:4d:13:08:27:77:41:09:f3:32:a7:fe: 1f:7e:f0:72:63:c4:c5:73:3a:fe:9e:87:8b:c5:7f:32:49:16: 2a:b0:4a:ad:69:f3:07:11:b3:cc:d7:8c:79:47:d1:6c:d4:a6: 71:60:ea:2c:45:38:20:b3:13:c4:bd:68:21:1a:ab:23:26:86: fe:b9:f5:81:33:ba:82:2b:70:67:d6:22:7e:83:58:70:ba:be: b9:d2:43:a3:57:70:25:bc:e5:ec:94:27:87:2f:88:e7:e6:45: 5d:5f:9c:c2:b4:eb:b7:6f:74:58:c7:a0:8e:6e:78:c4:a6:27: c3:fc:b8:eb:20:62:58:22:bf:67:f4:b7:92:87:d9:69:ec:55: 60:56:72:d5:b5:82:e8:29:a8:b3:55:6d:29:f6:3c:e5:ec:2f: 46:17:cb:8c -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEpsTjFTbU1yDIyfGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwNjAwNDUzNloXDTI3MTAwOTAwNDUzNlowLzEtMCsGA1UEAxMk NTAyOGVlNzItMTYyOS00NTUyLWExMWYtOTQ3YjVhOTI1NTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDvb7sqMD+C3h9Wf4PrysFJzFWX6o3zD5dAF 4Mg1W1W+xCHJky2/w4HmO7Xc9C1Z86StHsercCpGJXJxe2twsm1IZOsvFvNULKND oNRxl5M6Oi4EQg5TkWatm+W/qYNSNRDADjaRZ2uHP+pSRYp1rfCl9oSBIedgP2cY VIMHAh9qbBcvEurzjqdjgrziHrDchIrrC1n2tP/gj+20cFJmE1ai713L6lmyf1w7 yL+WzvlUbG32nGiCaoPp5LIq3rbMhYTd7DQ6Q2WNtTldxW0u+0rXZ6aKQ49ltx2z LUnjUtly+rQ8JzBe2fmUCNuiDhQKS90hePezfKAMt+Dpcwe6HQIDAQABo4IECzCC BAcwHQYDVR0OBBYEFLVAiDxdXPtmRYSsc1S01vkIHXjiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 MDI4ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdiNWE5MjU1MTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzUwMjhlZTcyLTE2MjktNDU1Mi1h MTFmLTk0N2I1YTkyNTUxOS81MDI4ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdiNWE5 MjU1MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAEtKtYDBAKhgbQDBAHMiAowVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjPIw ZVXQxU9Fie3YoUGzklczCD06Bkiu1+OZwp5dm5qGzXefK9+tKz7ErRYbz4soTU7d a1kejrudZpF9pzpyiaMAzpfG45SYMukOASzBx0mk1rXRp1RziU1Ol7ayFFXpXU0T CCd3QQnzMqf+H37wcmPExXM6/p6Hi8V/MkkWKrBKrWnzBxGzzNeMeUfRbNSmcWDq LEU4ILMTxL1oIRqrIyaG/rn1gTO6gitwZ9YifoNYcLq+udJDo1dwJbzl7JQnhy+I 5+ZFXV+cwrTrt290WMegjm54xKYnw/y46yBiWCK/Z/S3kofZaexVYFZy1bWC6Cmo s1VtKfY85ewvRhfLjA== -----END CERTIFICATE-----Generated at Mon Aug 4 08:33:31 2025 by rpki-client