$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284.cer File: 615e3014-2b5e-4140-99a9-b29fdbb13284.cer (raw, json) Hash identifier: ZZd+qqFDF9LJ4+1BioDS747FsJ2eiou/bVl63KPUAZQ= Subject key identifier: 37:B6:C5:AA:C1:03:27:2F:B9:4F:03:F7:7D:F9:97:4A:CD:87:53:1A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A856E5774EF7FE5BC6DA0FD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/615e3014-2b5e-4140-99a9-b29fdbb13284.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Jul 2025 00:45:35 +0000 Certificate not after: Mon 18 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 395657 IP: 23.183.0.0/24 IP: 192.160.184.0/24 IP: 2607:c580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:6e:57:74:ef:7f:e5:bc:6d:a0:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 15 00:45:35 2025 GMT Not After : Oct 18 00:45:35 2027 GMT Subject: CN=615e3014-2b5e-4140-99a9-b29fdbb13284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9f:0e:f3:60:22:6d:56:50:75:46:64:66:01: cb:cf:56:07:7b:12:10:e3:0e:c2:49:09:de:dc:91: 4f:98:f8:21:2b:f6:ac:2a:df:89:3e:10:84:10:a3: b9:ac:2d:7c:4f:3a:9d:3a:06:6f:a5:c5:40:7e:22: aa:53:8a:d7:2a:6b:a1:5b:f2:6f:05:7d:cc:55:6e: e8:f9:5b:60:89:fe:8a:06:37:79:ef:db:69:d6:c5: 03:6f:ec:0e:e0:02:9f:a8:f7:11:a5:c9:7b:ac:75: 8e:a3:6b:9b:50:3b:fe:ba:52:46:b8:09:89:50:1c: 6a:bf:ef:ed:cd:13:9c:cd:f3:e6:d9:08:59:67:f4: a4:2d:8d:e9:24:c2:c9:d5:ef:93:f9:d7:82:05:e7: 35:a2:16:a1:d9:e9:77:f0:43:2d:b6:7d:b8:30:c7: c3:37:67:c5:90:11:63:e0:b0:d5:e9:f5:df:3d:59: 49:01:3e:4a:9b:b9:40:af:dc:33:1a:a5:6d:c0:51: c0:d9:6d:c1:b5:95:eb:18:92:10:9a:41:d6:6d:c5: 32:34:dd:32:15:49:c7:b3:d8:b3:08:43:97:d4:1d: 10:d1:ec:3d:b9:f5:d4:fd:98:dd:1e:4c:a3:c0:93: 50:ea:da:dc:16:ad:c6:03:74:a7:88:cb:dd:e2:28: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B6:C5:AA:C1:03:27:2F:B9:4F:03:F7:7D:F9:97:4A:CD:87:53:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/615e3014-2b5e-4140-99a9-b29fdbb13284/615e3014-2b5e-4140-99a9-b29fdbb13284.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.183.0.0/24 192.160.184.0/24 IPv6: 2607:c580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395657 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:22:cc:85:ed:62:4f:fa:ad:08:71:e5:b4:91:74:2b:91:07: 9d:d7:52:ae:69:cd:94:51:6c:77:88:ab:68:4a:93:d5:dd:ab: ed:c1:97:8a:df:8e:bf:fa:9b:d3:4d:95:32:05:4d:68:e1:23: 05:eb:f7:bc:9a:f3:66:eb:31:42:84:24:a5:ac:ee:91:e7:99: f9:9b:14:f9:d6:ad:2b:dc:f5:3d:4a:b1:32:06:bc:de:cf:71: cf:4d:14:1f:35:a5:59:73:46:d6:1d:7b:ff:f7:93:6f:00:96: f1:a0:fe:72:e4:8a:de:17:50:08:91:4c:03:88:04:e3:e1:cb: 84:63:10:a3:3c:87:9e:1a:cd:7e:8f:85:91:9f:12:dc:da:da: fa:19:98:4d:bd:62:1c:90:89:80:f0:ee:fb:81:e5:1f:fd:6f: 89:c8:e1:18:db:27:7f:fb:88:9b:94:e2:29:3f:d0:cb:43:51: 5c:ae:20:6e:ff:b6:d5:37:00:e8:4c:0d:eb:0b:20:0d:c8:29: 19:85:16:1c:c2:e7:5a:32:e0:d2:64:8b:9f:ea:b8:d1:cb:9a: 55:06:15:31:00:12:8b:be:69:ca:91:c8:8d:97:3b:58:11:c7: d9:35:93:99:fd:18:46:79:73:76:19:00:fc:ce:54:03:6b:c6: 15:5f:1c:36 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEqFbld073/lvG2g/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxNTAwNDUzNVoXDTI3MTAxODAwNDUzNVowLzEtMCsGA1UEAxMk NjE1ZTMwMTQtMmI1ZS00MTQwLTk5YTktYjI5ZmRiYjEzMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp8O82AibVZQdUZkZgHLz1YHexIQ4w7CSQne 3JFPmPghK/asKt+JPhCEEKO5rC18TzqdOgZvpcVAfiKqU4rXKmuhW/JvBX3MVW7o +Vtgif6KBjd579tp1sUDb+wO4AKfqPcRpcl7rHWOo2ubUDv+ulJGuAmJUBxqv+/t zROczfPm2QhZZ/SkLY3pJMLJ1e+T+deCBec1ohah2el38EMttn24MMfDN2fFkBFj 4LDV6fXfPVlJAT5Km7lAr9wzGqVtwFHA2W3BtZXrGJIQmkHWbcUyNN0yFUnHs9iz CEOX1B0Q0ew9ufXU/ZjdHkyjwJNQ6trcFq3GA3SniMvd4iiLTQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFDe2xarBAycvuU8D9335l0rNh1MaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 MTVlMzAxNC0yYjVlLTQxNDAtOTlhOS1iMjlmZGJiMTMyODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzYxNWUzMDE0LTJiNWUtNDE0MC05 OWE5LWIyOWZkYmIxMzI4NC82MTVlMzAxNC0yYjVlLTQxNDAtOTlhOS1iMjlmZGJi MTMyODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXtwADBADAoLgwDQQCAAIwBwMFACYHxYAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgmJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACkizIXtYk/6rQhx5bSR dCuRB53XUq5pzZRRbHeIq2hKk9Xdq+3Bl4rfjr/6m9NNlTIFTWjhIwXr97ya82br MUKEJKWs7pHnmfmbFPnWrSvc9T1KsTIGvN7Pcc9NFB81pVlzRtYde//3k28AlvGg /nLkit4XUAiRTAOIBOPhy4RjEKM8h54azX6PhZGfEtza2voZmE29YhyQiYDw7vuB 5R/9b4nI4RjbJ3/7iJuU4ik/0MtDUVyuIG7/ttU3AOhMDesLIA3IKRmFFhzC51oy 4NJki5/quNHLmlUGFTEAEou+acqRyI2XO1gRx9k1k5n9GEZ5c3YZAPzOVANrxhVf HDY= -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:30 2025 by rpki-client