$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer File: 69233f52-8a17-4eb0-ae6a-62c861686718.cer (raw, json) Hash identifier: nsi3QjIkWCptQ/FCkOj4hVJs9EyfFoIva6vso9ZK0JE= Subject key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A78DE44B8C76CAAE39D116C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Jul 2025 12:45:36 +0000 Certificate not after: Wed 13 Oct 2027 12:45:36 +0000 Subordinate resources: IP: 167.253.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:de:44:b8:c7:6c:aa:e3:9d:11:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 10 12:45:36 2025 GMT Not After : Oct 13 12:45:36 2027 GMT Subject: CN=69233f52-8a17-4eb0-ae6a-62c861686718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:2a:22:c4:3c:32:e5:50:50:1f:2d:23:01: 0d:fd:e3:03:60:f7:dc:8d:12:77:ad:a2:08:dc:ae: 26:9c:46:8d:3a:79:74:e7:d1:af:93:10:8c:53:b9: 27:b3:2c:3f:62:e1:7c:89:7f:09:f9:0f:6b:5b:b4: 3c:49:76:11:32:94:a1:a5:3f:93:20:4f:4b:ae:44: 5c:8b:0b:88:d3:25:a3:f9:9d:03:79:1c:c9:62:64: 56:2f:e6:95:1f:96:b5:4b:97:17:5f:b9:1a:de:1a: ce:42:b6:9b:89:f3:07:8c:bb:dd:6e:ef:8f:ff:0d: 76:44:0f:14:ad:86:bb:3e:77:60:65:04:82:1e:68: ec:56:b8:c5:3b:6a:2f:2e:c8:10:b2:da:20:9e:ba: 85:4f:bc:3a:2a:0d:e4:74:e4:94:3a:a1:13:27:89: a9:c0:51:46:d9:fd:fe:fb:69:28:fd:d7:ab:ff:00: 52:e2:ac:46:75:7f:e0:64:a8:ab:84:b6:17:3a:24: 8f:4c:f6:7c:fb:1e:11:4f:40:29:31:db:c1:04:27: 03:26:16:e7:b3:b4:72:2a:66:8f:f1:26:82:6d:37: 3b:99:e4:f8:d6:87:23:cb:9b:f1:90:34:07:df:05: ab:b3:5a:70:12:4b:50:02:92:1b:2a:5e:05:8e:0d: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 167.253.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:41:14:2d:9d:a5:ee:c7:7e:39:4a:3a:e9:46:f2:06:a3:c1: 3b:8d:11:dc:97:2d:43:55:8f:5b:80:15:3e:30:0a:26:28:85: ed:8a:0b:ae:1b:7d:bc:db:b9:2d:2d:e9:2a:05:ce:9d:5c:50: 9a:84:84:ae:1d:a9:14:92:4c:31:30:61:72:2a:cb:ae:1f:2d: bd:0c:9b:34:03:a2:f0:4a:1a:70:73:a2:db:ca:dd:c0:3b:2a: d7:1a:2c:ee:67:24:c1:ff:b8:56:5c:0b:03:40:8e:22:3f:01: fd:1a:71:6d:5e:9d:c3:3c:c3:07:06:fb:12:06:6e:04:23:e6: de:21:bb:1f:3f:73:c6:e7:16:be:e6:db:a3:38:e1:c4:af:9e: 89:92:de:db:54:60:84:93:97:ee:bb:9c:44:e3:70:e3:6a:3e: a2:66:cd:8a:fd:33:f2:da:50:25:f4:11:8b:9c:c7:33:49:f3: a1:4c:f0:5e:04:80:5d:02:70:06:44:23:4c:01:7d:bc:43:a5: 70:cb:64:3a:cc:06:71:1f:c9:32:2b:a0:f7:2c:7f:ad:c0:25: c3:63:04:8c:f9:9f:87:08:3c:76:01:aa:48:4d:a7:0e:df:b8: 87:ff:31:7f:c2:42:b7:b0:76:72:44:1b:4e:8a:bd:32:03:7c: 34:d6:32:bf -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEp43kS4x2yq450RbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxMDEyNDUzNloXDTI3MTAxMzEyNDUzNlowLzEtMCsGA1UEAxMk NjkyMzNmNTItOGExNy00ZWIwLWFlNmEtNjJjODYxNjg2NzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptkqIsQ8MuVQUB8tIwEN/eMDYPfcjRJ3raII 3K4mnEaNOnl059GvkxCMU7knsyw/YuF8iX8J+Q9rW7Q8SXYRMpShpT+TIE9LrkRc iwuI0yWj+Z0DeRzJYmRWL+aVH5a1S5cXX7ka3hrOQrabifMHjLvdbu+P/w12RA8U rYa7PndgZQSCHmjsVrjFO2ovLsgQstognrqFT7w6Kg3kdOSUOqETJ4mpwFFG2f3+ +2ko/der/wBS4qxGdX/gZKirhLYXOiSPTPZ8+x4RT0ApMdvBBCcDJhbns7RyKmaP 8SaCbTc7meT41ocjy5vxkDQH3wWrs1pwEktQApIbKl4Fjg2h7wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHkAunUNqXzHUi8mP6vv847zhIFZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 OTIzM2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4NjE2ODY3MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzY5MjMzZjUyLThhMTctNGViMC1h ZTZhLTYyYzg2MTY4NjcxOC82OTIzM2Y1Mi04YTE3LTRlYjAtYWU2YS02MmM4NjE2 ODY3MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn/RQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj0EULZ2l7sd+OUo66Uby BqPBO40R3JctQ1WPW4AVPjAKJiiF7YoLrht9vNu5LS3pKgXOnVxQmoSErh2pFJJM MTBhcirLrh8tvQybNAOi8EoacHOi28rdwDsq1xos7mckwf+4VlwLA0COIj8B/Rpx bV6dwzzDBwb7EgZuBCPm3iG7Hz9zxucWvubbozjhxK+eiZLe21RghJOX7rucRONw 42o+ombNiv0z8tpQJfQRi5zHM0nzoUzwXgSAXQJwBkQjTAF9vEOlcMtkOswGcR/J Miug9yx/rcAlw2MEjPmfhwg8dgGqSE2nDt+4h/8xf8JCt7B2ckQbToq9MgN8NNYy vw== -----END CERTIFICATE-----Generated at Wed Nov 5 00:14:28 2025 by rpki-client