$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04.cer File: 5db0cc17-c481-407d-9215-071377019c04.cer (raw, json) Hash identifier: tP6N4zBlf1JgyP0fp2ZSpOSPU3zRPW8tXW6FYl1BP/Q= Subject key identifier: C4:0D:B8:8E:8F:C2:2A:16:E2:19:1A:4A:F0:3C:84:CE:F6:78:5B:9A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A7778ECB7FB6FC2A0A8D2FA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04/5db0cc17-c481-407d-9215-071377019c04.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Jul 2025 00:45:36 +0000 Certificate not after: Wed 13 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 22252 AS: 398875 IP: 2001:19a0::/32 IP: 2602:fc85::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:78:ec:b7:fb:6f:c2:a0:a8:d2:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 10 00:45:36 2025 GMT Not After : Oct 13 00:45:36 2027 GMT Subject: CN=5db0cc17-c481-407d-9215-071377019c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:57:6d:35:3c:09:d1:ae:7c:e3:55:34:49:75: c8:41:80:8b:f1:3c:48:1a:e6:06:f5:19:3a:8b:b0: f2:08:d2:9e:43:f4:29:24:f2:d4:04:b5:ce:25:a2: 56:9b:ce:d2:60:e0:43:8e:c3:17:89:92:d7:b6:1e: 03:07:00:71:8f:01:17:8a:eb:cf:80:8c:d5:f2:a8: de:76:21:07:98:25:2c:eb:6f:d9:63:d5:70:88:10: 55:80:f1:f9:10:f3:f3:32:56:f2:cd:f8:46:68:ad: d8:b4:4f:21:60:27:26:e1:81:f8:98:f8:d8:40:cf: b0:52:ad:69:5b:52:0e:5e:5f:e4:eb:51:93:5e:c0: 16:58:8f:93:71:84:6b:36:b6:b0:6b:10:70:45:c2: 6d:06:c7:4f:8d:4b:86:39:17:c2:39:fc:26:c7:c0: cf:b4:1a:ef:55:57:32:80:3d:1d:2c:56:85:0d:5c: 9c:8c:59:ff:4e:0d:e9:c5:10:92:3e:83:5f:e4:b2: 20:10:f8:6c:12:8d:ec:10:99:29:e2:89:0f:fb:31: 81:0d:28:61:a5:82:02:92:dc:db:23:36:47:56:1c: 2f:cb:5e:99:4e:4f:7c:38:42:38:6f:ec:a2:e0:37: 42:79:70:e9:fb:23:64:44:67:0f:65:ac:22:aa:3f: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0D:B8:8E:8F:C2:2A:16:E2:19:1A:4A:F0:3C:84:CE:F6:78:5B:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5db0cc17-c481-407d-9215-071377019c04/5db0cc17-c481-407d-9215-071377019c04.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2001:19a0::/32 2602:fc85::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22252 398875 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ad:ab:20:34:dc:63:a0:bd:e1:62:0c:cd:2d:c9:9d:97:4d: ac:01:ed:d0:66:8e:17:06:15:8b:6b:42:a8:23:73:85:c4:2b: 8b:34:12:96:04:ec:40:b2:0f:14:64:4f:f6:f7:b7:11:79:aa: 9f:c8:71:e7:b1:a8:5e:bf:90:0e:e0:93:8d:db:33:a4:f8:dc: cd:e2:36:5a:9c:c7:5e:65:4e:08:3b:8b:ea:7c:0d:49:6e:2d: 54:78:80:cc:f5:8b:10:5a:44:37:a8:8c:09:6d:5c:cb:d8:8b: 88:d5:c0:5f:e9:ae:bc:2b:7f:16:d8:09:3e:db:17:c3:63:38: 8b:24:1c:d5:de:d8:ff:c5:04:76:db:62:2c:79:a2:83:6b:65: b0:0d:b7:90:9c:a1:24:b2:55:07:6a:e4:96:2f:1d:ca:56:d6: 38:85:85:a6:21:ab:2c:6d:aa:3e:c8:b5:a1:17:42:88:12:78: b2:1f:11:32:d7:81:1d:60:17:87:b2:72:a1:57:18:99:04:df: 69:a5:47:cc:22:f6:c4:6c:93:f2:c4:96:bf:9b:20:e4:77:b7: 7f:20:95:f3:3b:03:d4:f0:4e:e8:03:cd:c2:e9:90:f0:c4:84: 6e:78:97:d5:f3:88:61:59:b5:3c:99:fa:55:b6:f3:8c:69:30: de:38:e0:0b -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWEp3eOy3+2/CoKjS+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxMDAwNDUzNloXDTI3MTAxMzAwNDUzNlowLzEtMCsGA1UEAxMk NWRiMGNjMTctYzQ4MS00MDdkLTkyMTUtMDcxMzc3MDE5YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFdtNTwJ0a5841U0SXXIQYCL8TxIGuYG9Rk6 i7DyCNKeQ/QpJPLUBLXOJaJWm87SYOBDjsMXiZLXth4DBwBxjwEXiuvPgIzV8qje diEHmCUs62/ZY9VwiBBVgPH5EPPzMlbyzfhGaK3YtE8hYCcm4YH4mPjYQM+wUq1p W1IOXl/k61GTXsAWWI+TcYRrNrawaxBwRcJtBsdPjUuGORfCOfwmx8DPtBrvVVcy gD0dLFaFDVycjFn/Tg3pxRCSPoNf5LIgEPhsEo3sEJkp4okP+zGBDShhpYICktzb IzZHVhwvy16ZTk98OEI4b+yi4DdCeXDp+yNkRGcPZawiqj9QYQIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFMQNuI6PwioW4hkaSvA8hM72eFuaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 ZGIwY2MxNy1jNDgxLTQwN2QtOTIxNS0wNzEzNzcwMTljMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzVkYjBjYzE3LWM0ODEtNDA3ZC05 MjE1LTA3MTM3NzAxOWMwNC81ZGIwY2MxNy1jNDgxLTQwN2QtOTIxNS0wNzEzNzcw MTljMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwKAYIKwYBBQUH AQcBAf8EGTAXMBUEAgACMA8DBQAgARmgAwYEJgL8hQAwHgYIKwYBBQUHAQgBAf8E DzANoAswCQICVuwCAwYWGzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcrasgNNxjoL3hYgzNLcmdl02sAe3Q Zo4XBhWLa0KoI3OFxCuLNBKWBOxAsg8UZE/297cReaqfyHHnsahev5AO4JON2zOk +NzN4jZanMdeZU4IO4vqfA1Jbi1UeIDM9YsQWkQ3qIwJbVzL2IuI1cBf6a68K38W 2Ak+2xfDYziLJBzV3tj/xQR222IseaKDa2WwDbeQnKEkslUHauSWLx3KVtY4hYWm Iassbao+yLWhF0KIEniyHxEy14EdYBeHsnKhVxiZBN9ppUfMIvbEbJPyxJa/myDk d7d/IJXzOwPU8E7oA83C6ZDwxIRueJfV84hhWbU8mfpVtvOMaTDeOOAL -----END CERTIFICATE-----Generated at Tue Nov 4 23:19:12 2025 by rpki-client