$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da.cer File: 55b99675-96ed-4747-a93e-2c02e6c365da.cer (raw, json) Hash identifier: PNcDHRjXskxATOuAO7ZnZ+ooY8putlRNmJR09tojsLQ= Subject key identifier: 87:6D:C8:57:26:48:90:8E:07:74:3C:AB:3A:95:1A:6F:F0:CF:73:55 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A8B03B6500B2F27D011F0C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Jul 2025 00:45:36 +0000 Certificate not after: Wed 20 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 46980 IP: 23.163.16.0/24 IP: 2602:fd20::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:03:b6:50:0b:2f:27:d0:11:f0:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 17 00:45:36 2025 GMT Not After : Oct 20 00:45:36 2027 GMT Subject: CN=55b99675-96ed-4747-a93e-2c02e6c365da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:98:f0:d8:39:5e:e5:d0:ad:1a:38:0b:e8: 3e:d6:98:e6:d7:99:e9:45:91:0a:4a:8a:88:7d:85: cc:10:dc:79:8d:b3:23:06:25:9b:68:e3:35:90:b4: 83:8a:5b:24:01:f8:df:5b:aa:62:83:fd:41:a3:8b: a3:d0:49:33:62:0d:15:d4:19:5a:fb:71:e1:b9:8b: 4a:22:7e:56:89:17:18:aa:d0:2b:ed:0e:95:61:a4: d4:b5:4f:dd:6f:c2:35:a3:87:76:8b:b3:1b:13:63: b4:e9:30:fe:6b:73:aa:db:8b:de:6f:de:e5:1e:0e: 9d:cb:f7:d0:1a:23:12:c5:46:02:c2:48:05:8b:31: 9d:96:1e:20:ac:7e:f3:11:9c:ce:ad:b3:c9:9c:55: 0e:bd:b9:3c:f7:cc:e3:66:67:fb:4e:df:e9:a6:17: 0e:18:5b:4e:9a:f0:a0:f4:d4:35:ac:b4:39:5a:ec: 81:fa:5d:56:f2:4d:6f:7d:ab:91:f0:f3:0a:fa:06: c8:d8:e2:10:6f:6f:d8:0a:fa:30:98:6f:a9:99:0f: 4e:19:a3:d8:30:b0:48:ef:a8:97:32:98:24:c4:48: c5:ae:83:74:12:13:c6:0e:98:3f:55:31:33:31:0a: 9d:09:48:19:9a:39:51:4b:cf:1a:d3:57:13:d6:2a: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6D:C8:57:26:48:90:8E:07:74:3C:AB:3A:95:1A:6F:F0:CF:73:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/55b99675-96ed-4747-a93e-2c02e6c365da/55b99675-96ed-4747-a93e-2c02e6c365da.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.163.16.0/24 IPv6: 2602:fd20::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46980 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b1:6d:b1:17:7c:6d:fc:e7:e5:ec:c1:fb:7f:46:3b:57:84: 77:91:b1:6f:5b:0f:b0:f0:03:83:9a:f0:73:8f:fe:2e:f3:14: 53:35:59:e5:73:d4:b9:86:a8:fd:45:5b:de:f6:6b:f2:be:72: 73:7c:8c:f9:6d:90:fa:dd:b2:44:c0:c3:af:f2:0b:91:63:57: 6f:d5:27:64:27:fd:e0:c9:b6:e0:ec:d7:ee:a4:41:6c:7b:03: 03:d1:1f:36:75:b8:a5:ac:5f:bf:e2:cd:93:69:7e:e7:b6:a3: b4:2a:2d:4d:cf:37:a0:b4:94:7c:ce:80:25:30:0b:63:7d:7a: 6d:de:7f:c5:cd:d6:f6:d1:33:af:bd:9a:dc:9d:bd:e7:64:98: 6f:e4:a2:c4:42:aa:e9:45:0e:5b:18:c2:d4:c3:11:fc:41:4d: 5b:c4:10:ee:dc:0d:29:60:24:59:be:0e:dc:86:8b:5f:81:3b: 23:06:6d:2e:51:83:5e:bc:0e:e4:e5:6a:68:8f:d1:99:31:68: ee:12:84:64:32:2a:3c:c6:c7:33:e3:6a:2f:4e:80:68:1c:54: bc:9f:a9:26:56:d2:35:02:db:cc:63:a0:4d:cc:20:fa:01:40: 51:7f:6d:3a:8a:65:22:cf:bb:ed:53:ad:c7:16:49:3e:7f:0e: 43:f9:45:a5 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEqLA7ZQCy8n0BHwyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxNzAwNDUzNloXDTI3MTAyMDAwNDUzNlowLzEtMCsGA1UEAxMk NTViOTk2NzUtOTZlZC00NzQ3LWE5M2UtMmMwMmU2YzM2NWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWqY8Ng5XuXQrRo4C+g+1pjm15npRZEKSoqI fYXMENx5jbMjBiWbaOM1kLSDilskAfjfW6pig/1Bo4uj0EkzYg0V1Bla+3HhuYtK In5WiRcYqtAr7Q6VYaTUtU/db8I1o4d2i7MbE2O06TD+a3Oq24veb97lHg6dy/fQ GiMSxUYCwkgFizGdlh4grH7zEZzOrbPJnFUOvbk898zjZmf7Tt/pphcOGFtOmvCg 9NQ1rLQ5WuyB+l1W8k1vfauR8PMK+gbI2OIQb2/YCvowmG+pmQ9OGaPYMLBI76iX MpgkxEjFroN0EhPGDpg/VTEzMQqdCUgZmjlRS88a01cT1iqsEQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIdtyFcmSJCOB3Q8qzqVGm/wz3NVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 NWI5OTY3NS05NmVkLTQ3NDctYTkzZS0yYzAyZTZjMzY1ZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzU1Yjk5Njc1LTk2ZWQtNDc0Ny1h OTNlLTJjMDJlNmMzNjVkYS81NWI5OTY3NS05NmVkLTQ3NDctYTkzZS0yYzAyZTZj MzY1ZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoxAwDgQCAAIwCAMGBCYC/SAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC3hDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtsW2xF3xt/Ofl7MH7f0Y7V4R3 kbFvWw+w8AODmvBzj/4u8xRTNVnlc9S5hqj9RVve9mvyvnJzfIz5bZD63bJEwMOv 8guRY1dv1SdkJ/3gybbg7NfupEFsewMD0R82dbilrF+/4s2TaX7ntqO0Ki1Nzzeg tJR8zoAlMAtjfXpt3n/Fzdb20TOvvZrcnb3nZJhv5KLEQqrpRQ5bGMLUwxH8QU1b xBDu3A0pYCRZvg7chotfgTsjBm0uUYNevA7k5Wpoj9GZMWjuEoRkMio8xscz42ov ToBoHFS8n6kmVtI1AtvMY6BNzCD6AUBRf206imUiz7vtU63HFkk+fw5D+UWl -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:12 2025 by rpki-client