$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer File: 52f53adc-637c-4f98-858f-551878f8a6bb.cer (raw, json) Hash identifier: ZGgOb3ATK2SsS4WxZ4gdIPZNGOq4dV44ZA8KkLRdL8k= Subject key identifier: 45:48:18:4F:40:F8:19:A4:17:C0:63:00:6A:9C:F6:B7:8F:4B:6D:9E Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A0A98408634237FA1489B4C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Jun 2025 00:45:37 +0000 Certificate not after: Sat 04 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 54458 IP: 64.72.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0a:98:40:86:34:23:7f:a1:48:9b:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 1 00:45:37 2025 GMT Not After : Sep 4 00:45:37 2027 GMT Subject: CN=52f53adc-637c-4f98-858f-551878f8a6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:61:81:22:2a:a9:97:bf:ae:05:7d:f2:2c: 76:5b:6d:bf:76:da:20:58:f3:25:29:e0:85:01:e9: 2b:ed:fb:66:81:ab:5b:9d:33:51:99:7c:d0:e8:5c: c6:59:ae:d3:86:96:62:44:7c:13:d3:f9:a2:41:eb: df:d1:71:fd:98:91:c7:86:a2:42:e5:f2:65:cb:0a: 3f:32:19:bd:53:63:03:31:34:aa:3c:4b:51:a6:72: 73:9b:8a:69:63:61:e0:f2:eb:90:ad:f6:80:4d:09: 75:36:c6:5b:e5:4b:bc:8c:a3:a4:66:05:61:7e:51: b2:51:5b:9c:c8:83:39:15:0d:9e:42:65:cf:16:9e: b9:03:7c:4b:dd:12:09:9c:26:8a:12:52:3a:51:ed: 1c:db:49:df:c8:32:c4:ff:9d:2d:ae:91:e0:42:0a: 18:93:1e:b8:c9:28:a2:96:7c:aa:e8:85:b9:01:8a: ae:6a:d1:f0:2a:8c:16:10:82:21:a4:8e:e5:b9:78: 62:6c:a6:ca:8c:10:62:06:61:2e:63:28:be:90:8f: 67:e4:58:59:9c:36:50:ce:4f:8d:e4:0d:76:61:64: c4:3b:ed:0e:3b:55:17:82:62:28:67:99:f6:c8:64: 2b:62:2c:05:76:ac:84:4d:7b:6a:19:56:6f:3d:fb: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:48:18:4F:40:F8:19:A4:17:C0:63:00:6A:9C:F6:B7:8F:4B:6D:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.72.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54458 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:96:b0:4e:42:19:c9:f2:a4:97:64:2b:05:8a:0f:1d:fd:c2: 5a:71:09:62:10:12:44:b3:9e:47:d9:6d:05:fd:de:be:57:09: 02:57:54:8c:c2:1d:e8:aa:91:75:c8:73:76:fc:67:33:5a:b7: 9a:ed:4c:bb:6d:9f:e9:3b:37:5d:c8:ad:41:28:e7:3a:68:7e: 40:bf:bd:51:76:3a:c8:16:64:f8:09:be:a4:8b:5f:9b:c3:30: c5:d4:7a:d6:91:4d:5f:f9:9a:3f:6f:af:5a:2a:6e:40:b4:65: ed:a9:45:5f:be:ab:3f:da:08:df:72:6a:09:a3:0e:54:a7:25: f2:a2:cb:be:d8:d7:ee:bd:c1:35:2e:72:1e:70:22:71:29:1e: e6:15:64:1c:96:3b:98:c1:96:03:b9:15:e3:98:6b:b5:9d:ac: ab:94:23:b1:7d:c7:f4:a4:0c:b6:f4:18:89:9c:91:7e:99:f2: 1f:2b:6b:91:5b:9c:74:07:68:a4:81:1f:6e:48:f6:f0:a1:c7: db:9c:77:3a:28:1c:45:86:9c:27:39:d1:1d:5e:c4:70:f2:96: ad:e0:03:dd:a9:1e:f7:0f:43:ed:e8:e4:42:1d:14:ba:1f:79: 1e:0e:34:58:c7:e2:eb:f7:17:ac:95:9c:e0:1d:8e:de:28:0d: 22:25:ff:3a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEoKmECGNCN/oUibTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwMTAwNDUzN1oXDTI3MDkwNDAwNDUzN1owLzEtMCsGA1UEAxMk NTJmNTNhZGMtNjM3Yy00Zjk4LTg1OGYtNTUxODc4ZjhhNmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB5hgSIqqZe/rgV98ix2W22/dtogWPMlKeCF Aekr7ftmgatbnTNRmXzQ6FzGWa7ThpZiRHwT0/miQevf0XH9mJHHhqJC5fJlywo/ Mhm9U2MDMTSqPEtRpnJzm4ppY2Hg8uuQrfaATQl1NsZb5Uu8jKOkZgVhflGyUVuc yIM5FQ2eQmXPFp65A3xL3RIJnCaKElI6Ue0c20nfyDLE/50trpHgQgoYkx64ySii lnyq6IW5AYquatHwKowWEIIhpI7luXhibKbKjBBiBmEuYyi+kI9n5FhZnDZQzk+N 5A12YWTEO+0OO1UXgmIoZ5n2yGQrYiwFdqyETXtqGVZvPfvNmQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEVIGE9A+BmkF8BjAGqc9rePS22eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 MmY1M2FkYy02MzdjLTRmOTgtODU4Zi01NTE4NzhmOGE2YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzUyZjUzYWRjLTYzN2MtNGY5OC04 NThmLTU1MTg3OGY4YTZiYi81MmY1M2FkYy02MzdjLTRmOTgtODU4Zi01NTE4Nzhm OGE2YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARASNAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANS6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE+WsE5CGcnypJdkKwWKDx39wlpxCWIQEkSznkfZbQX93r5X CQJXVIzCHeiqkXXIc3b8ZzNat5rtTLttn+k7N13IrUEo5zpofkC/vVF2OsgWZPgJ vqSLX5vDMMXUetaRTV/5mj9vr1oqbkC0Ze2pRV++qz/aCN9yagmjDlSnJfKiy77Y 1+69wTUuch5wInEpHuYVZByWO5jBlgO5FeOYa7WdrKuUI7F9x/SkDLb0GImckX6Z 8h8ra5FbnHQHaKSBH25I9vChx9ucdzooHEWGnCc50R1exHDylq3gA92pHvcPQ+3o 5EIdFLofeR4ONFjH4uv3F6yVnOAdjt4oDSIl/zo= -----END CERTIFICATE-----Generated at Wed Nov 5 03:40:50 2025 by rpki-client