$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer File: 6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer (raw, json) Hash identifier: fTL2jvm1hwR3LelAcHz6JQd1084p73+4JD3SLu+ZMr8= Subject key identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849A0823BF21BBDF7955DF0FEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Apr 2025 00:45:34 +0000 Certificate not after: Wed 28 Jul 2027 00:45:34 +0000 Subordinate resources: IP: 64.239.63.0/24 IP: 162.252.36.0/22 IP: 170.117.164.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:82:3b:f2:1b:bd:f7:95:5d:f0:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 24 00:45:34 2025 GMT Not After : Jul 28 00:45:34 2027 GMT Subject: CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:e8:d2:4e:de:dd:65:e3:0a:da:91:e2:85: 4a:aa:00:05:18:31:fe:8a:b2:77:aa:67:f4:ba:08: 0c:d4:45:ef:b6:55:ec:98:99:bd:37:8a:1a:72:e8: da:5b:b6:65:b3:94:45:42:22:aa:8b:8a:cf:19:49: 0f:d4:4c:f8:87:ee:a4:15:38:5a:45:62:c4:e7:63: 3d:b3:be:ee:3c:0a:d3:ce:a8:0e:02:5d:23:3d:8b: ed:f8:17:f2:04:74:3e:3b:32:b3:16:8f:bf:4a:a3: 88:f0:fe:e9:d5:7c:65:25:b5:5e:a5:07:79:4c:04: ce:65:6c:34:82:9b:7c:1a:9a:b7:58:61:99:69:5a: 10:d0:98:3e:1c:8e:6b:56:1c:29:f2:95:67:58:ce: 12:08:95:01:a2:03:a8:6d:ee:b3:18:85:b7:ec:0f: 2c:fc:d1:d2:b1:57:e7:cf:15:e3:e4:9a:12:89:d9: b8:80:5e:1f:c0:f4:e3:8e:df:ad:a2:7e:41:4d:55: 35:ca:44:bf:8a:66:9a:28:78:27:27:4f:47:01:9b: e7:0d:9e:e6:1e:57:9f:e1:88:ba:8e:52:28:8f:a8: 8b:ca:83:2a:8e:65:52:0c:46:90:d4:12:8e:85:fc: 7f:1c:f0:79:a4:c1:19:8f:d8:cd:a1:19:d1:76:7f: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.239.63.0/24 162.252.36.0/22 170.117.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:65:ee:6f:b7:02:61:9e:fe:6c:35:16:67:38:87:05:97:c8: 76:c4:40:7a:44:fc:c6:3d:b8:e4:5d:98:1d:42:58:a1:7c:3d: 32:d6:2e:a5:a2:dc:c9:de:d9:7d:7d:9f:f2:49:b8:8d:2f:a1: 0a:b5:d0:4a:09:f1:87:f5:f3:6f:50:81:cb:b2:59:15:d7:fd: 0c:6f:5b:04:fc:a4:1d:b1:48:c9:3f:27:ee:9e:6b:6e:2e:8b: a8:db:60:cd:b0:fb:10:f1:4b:43:4a:96:35:5e:2b:e4:14:3c: 6d:de:55:7f:f5:95:8a:e1:e1:33:49:61:f8:0c:38:30:1e:84: 37:dd:e1:c3:16:7a:4d:af:11:f1:1f:cd:1f:fe:6c:a0:66:9f: 26:04:d7:ce:43:5b:c1:32:47:48:e4:c5:a2:c9:2f:28:81:e1: b8:60:08:98:cc:6a:17:85:e5:87:75:99:b2:f0:12:3a:2e:65: e7:36:3c:10:e3:12:0c:6a:c8:33:2e:8c:28:62:3d:94:32:5f: 53:ad:53:02:9b:b8:85:cb:5e:8c:de:9e:e4:02:fb:4c:99:58: 84:25:b2:ea:68:10:5d:7b:1c:bb:dc:7b:a1:62:06:e0:ff:b3: f5:d0:50:7c:0b:d0:c0:fb:87:ce:ec:e4:d8:6f:da:cc:5d:ad: a4:e8:30:a6 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEmggjvyG733lV3w/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyNDAwNDUzNFoXDTI3MDcyODAwNDUzNFowLzEtMCsGA1UEAxMk Njk1MmNjMGItYTM2NS00MGI4LWE4YjMtNDM0MDhjNGM2ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeLo0k7e3WXjCtqR4oVKqgAFGDH+irJ3qmf0 uggM1EXvtlXsmJm9N4oacujaW7Zls5RFQiKqi4rPGUkP1Ez4h+6kFThaRWLE52M9 s77uPArTzqgOAl0jPYvt+BfyBHQ+OzKzFo+/SqOI8P7p1XxlJbVepQd5TATOZWw0 gpt8Gpq3WGGZaVoQ0Jg+HI5rVhwp8pVnWM4SCJUBogOobe6zGIW37A8s/NHSsVfn zxXj5JoSidm4gF4fwPTjjt+ton5BTVU1ykS/imaaKHgnJ09HAZvnDZ7mHlef4Yi6 jlIoj6iLyoMqjmVSDEaQ1BKOhfx/HPB5pMEZj9jNoRnRdn+QwwIDAQABo4IECzCC BAcwHQYDVR0OBBYEFNQJW061/jcu84R2FwYeIvUXnAqEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0YzZmZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzY5NTJjYzBiLWEzNjUtNDBiOC1h OGIzLTQzNDA4YzRjNmZlMS82OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0 YzZmZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABA7z8DBAKi/CQDBAKqdaQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAimXu b7cCYZ7+bDUWZziHBZfIdsRAekT8xj245F2YHUJYoXw9MtYupaLcyd7ZfX2f8km4 jS+hCrXQSgnxh/Xzb1CBy7JZFdf9DG9bBPykHbFIyT8n7p5rbi6LqNtgzbD7EPFL Q0qWNV4r5BQ8bd5Vf/WViuHhM0lh+Aw4MB6EN93hwxZ6Ta8R8R/NH/5soGafJgTX zkNbwTJHSOTFoskvKIHhuGAImMxqF4Xlh3WZsvASOi5l5zY8EOMSDGrIMy6MKGI9 lDJfU61TApu4hctejN6e5AL7TJlYhCWy6mgQXXscu9x7oWIG4P+z9dBQfAvQwPuH zuzk2G/azF2tpOgwpg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:40 2025 by rpki-client