$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f.cer File: 62bab34c-4821-43e9-b275-c29729ce9c1f.cer (raw, json) Hash identifier: O0Oe5fERY20Q6t5A1QiSWWwpd/NhnX+wL9hVVqZp/Jg= Subject key identifier: A3:10:DD:04:2F:3A:3D:59:7F:76:23:79:FE:15:79:2B:77:45:EB:FC Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849F70D74ED4D8F925825825B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/62bab34c-4821-43e9-b275-c29729ce9c1f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 May 2025 00:45:36 +0000 Certificate not after: Sat 28 Aug 2027 00:45:36 +0000 Subordinate resources: AS: 16794 IP: 162.253.204.0/24 IP: 2602:809:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:0d:74:ed:4d:8f:92:58:25:82:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 25 00:45:36 2025 GMT Not After : Aug 28 00:45:36 2027 GMT Subject: CN=62bab34c-4821-43e9-b275-c29729ce9c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:51:b4:cc:3e:ce:4c:6f:78:6f:68:8e:85: 26:91:aa:61:e2:e8:ef:df:51:c1:4d:b8:7d:8c:a0: a2:33:27:fc:5e:f5:1c:5f:b9:85:d0:3f:e0:01:b9: 6b:1c:69:5d:0f:8d:a9:f0:58:42:4b:ad:67:ca:7c: 8c:1e:ca:64:10:16:d6:7f:4e:87:32:e6:07:dd:ae: 20:b4:8f:c5:4d:91:6b:ff:70:ca:7b:c3:bc:9d:74: b8:86:c2:20:d2:0c:d0:e7:7e:2e:64:73:a7:a0:02: 25:ac:4c:df:63:50:c1:a1:0a:42:d4:79:0d:93:46: ce:1f:a8:70:07:6d:fd:0a:e6:46:71:77:d1:87:cd: 50:62:5e:76:ae:74:c5:32:c0:f5:fe:1e:04:22:76: f4:2b:7e:2e:9d:e1:31:29:e6:f7:2d:c9:94:41:bb: e8:c3:cc:18:37:69:5e:da:ed:94:9c:2c:94:0b:18: b6:ef:02:af:45:f8:23:a5:fe:ce:ff:5f:9f:47:ee: 26:aa:c3:50:a5:5a:81:5f:cc:e8:78:09:eb:d2:8e: 79:45:d5:19:30:d1:c2:06:bd:5d:59:75:c6:06:18: 2b:73:31:cf:48:8b:06:a3:9f:10:a2:8b:de:34:2a: 6e:f7:c1:2c:73:e1:93:3f:f5:63:79:c5:70:f5:24: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:10:DD:04:2F:3A:3D:59:7F:76:23:79:FE:15:79:2B:77:45:EB:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/62bab34c-4821-43e9-b275-c29729ce9c1f/62bab34c-4821-43e9-b275-c29729ce9c1f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.253.204.0/24 IPv6: 2602:809:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16794 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:82:a1:2d:13:db:4a:bb:99:86:3c:23:b2:2f:4b:22:a8:05: 9b:06:66:a8:0f:d4:e2:b2:3d:e9:3c:ef:c1:2c:b0:cd:e4:c9: 43:11:4d:48:6b:96:4f:b0:e4:72:70:fb:1a:96:63:1a:81:38: be:3c:d0:a1:c6:17:bc:af:33:b3:84:9e:0c:00:06:7a:df:7a: 8a:90:06:0e:4f:61:81:f4:e1:ad:4a:79:2d:bc:e1:47:83:6c: b6:df:4c:77:3f:a5:7c:28:68:02:49:b4:fd:2e:f4:91:bc:2f: 62:d1:9c:48:78:46:80:45:f8:13:79:41:6b:25:c9:3e:65:a4: 17:10:c5:d9:7d:39:c1:1b:64:6d:55:9a:ef:5d:21:d1:87:ad: 3f:1a:a1:0a:30:5b:8c:56:2c:e7:e6:10:ff:09:12:2d:c3:8a: 63:dc:30:da:62:f3:5b:c9:5d:58:ec:c8:05:df:bd:71:b1:b7: eb:66:48:a7:6f:cc:eb:56:79:a7:91:85:e2:71:71:7f:0c:d4: 47:4f:87:dc:81:7a:ae:b4:d7:fd:4c:5a:09:37:4f:97:3d:ed: 64:29:16:7d:67:5f:5e:a6:c7:f7:82:f5:21:d5:df:b1:fe:6a: d3:71:47:a4:7a:15:0a:57:f4:7d:aa:6e:ee:07:ec:8e:20:d0: d8:51:13:a0 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEn3DXTtTY+SWCWCW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyNTAwNDUzNloXDTI3MDgyODAwNDUzNlowLzEtMCsGA1UEAxMk NjJiYWIzNGMtNDgyMS00M2U5LWIyNzUtYzI5NzI5Y2U5YzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgBRtMw+zkxveG9ojoUmkaph4ujv31HBTbh9 jKCiMyf8XvUcX7mF0D/gAblrHGldD42p8FhCS61nynyMHspkEBbWf06HMuYH3a4g tI/FTZFr/3DKe8O8nXS4hsIg0gzQ534uZHOnoAIlrEzfY1DBoQpC1HkNk0bOH6hw B239CuZGcXfRh81QYl52rnTFMsD1/h4EInb0K34uneExKeb3LcmUQbvow8wYN2le 2u2UnCyUCxi27wKvRfgjpf7O/1+fR+4mqsNQpVqBX8zoeAnr0o55RdUZMNHCBr1d WXXGBhgrczHPSIsGo58QooveNCpu98Esc+GTP/VjecVw9SSy+wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKMQ3QQvOj1Zf3Yjef4VeSt3Rev8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 MmJhYjM0Yy00ODIxLTQzZTktYjI3NS1jMjk3MjljZTljMWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzYyYmFiMzRjLTQ4MjEtNDNlOS1i Mjc1LWMyOTcyOWNlOWMxZi82MmJhYjM0Yy00ODIxLTQzZTktYjI3NS1jMjk3Mjlj ZTljMWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACi/cwwDwQCAAIwCQMHBCYCCAmgADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJBmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCagqEtE9tKu5mGPCOyL0siqAWb BmaoD9Tisj3pPO/BLLDN5MlDEU1Ia5ZPsORycPsalmMagTi+PNChxhe8rzOzhJ4M AAZ633qKkAYOT2GB9OGtSnktvOFHg2y230x3P6V8KGgCSbT9LvSRvC9i0ZxIeEaA RfgTeUFrJck+ZaQXEMXZfTnBG2RtVZrvXSHRh60/GqEKMFuMVizn5hD/CRItw4pj 3DDaYvNbyV1Y7MgF371xsbfrZkinb8zrVnmnkYXicXF/DNRHT4fcgXqutNf9TFoJ N0+XPe1kKRZ9Z19epsf3gvUh1d+x/mrTcUekehUKV/R9qm7uB+yOINDYUROg -----END CERTIFICATE-----Generated at Wed Nov 5 01:14:15 2025 by rpki-client