$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer File: 6f8414e5-add5-44f9-ada6-b8c907027195.cer (raw, json) Hash identifier: cgSLHD6yX9856f7fOzjTX4qATBqCDL1WHMFVzLjRfEk= Subject key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849BF37C3E6BA1F3C2C82EC7B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 May 2025 00:45:34 +0000 Certificate not after: Sun 08 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 10278 IP: 65.48.128.0/17 IP: 69.73.192.0/18 IP: 69.80.0.0/18 IP: 72.22.128.0/19 IP: 72.51.64.0/18 IP: 104.218.176.0/22 IP: 162.220.136.0/21 IP: 192.214.112.0/20 IP: 196.1.160.0/20 IP: 198.56.56.0/21 IP: 199.7.112.0/21 IP: 199.254.104.0/21 IP: 200.50.64.0/19 IP: 205.214.192.0/19 IP: 216.110.96.0/19 IP: 2604:a180::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:37:c3:e6:ba:1f:3c:2c:82:ec:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 5 00:45:34 2025 GMT Not After : Aug 8 00:45:34 2027 GMT Subject: CN=6f8414e5-add5-44f9-ada6-b8c907027195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:fc:5d:48:84:26:aa:86:93:77:40:3c:24: 02:c1:08:98:7d:c6:6e:e7:eb:68:cf:db:01:db:89: 33:57:27:fb:cb:db:fd:9f:2e:f6:16:73:86:ba:91: c2:d8:3d:79:dd:3f:27:cf:c7:f2:1a:b9:40:53:70: 74:3a:f5:fd:e0:45:1a:c2:72:71:6c:4a:5d:3f:66: c9:0f:db:0f:83:b4:d8:71:ba:27:c6:47:97:20:e6: f7:9c:88:49:92:49:07:48:9d:c0:b3:ac:1f:b1:75: 61:31:78:b2:79:69:35:13:57:de:ff:f2:34:ee:4a: 82:5b:7c:41:7e:e1:8f:f4:c9:30:ed:7e:2a:96:10: 11:67:15:49:59:c8:f4:48:08:28:8f:0f:a4:4c:df: 88:55:6f:4b:e9:ba:83:16:28:9c:1a:28:ec:f2:10: f6:26:87:10:14:87:6b:3a:0f:85:9c:81:8b:32:b7: fd:ad:ef:58:d3:0a:1d:16:a9:43:85:7b:1e:af:b1: cd:b1:42:32:69:01:a7:6f:24:8c:c2:76:76:a0:c3: d0:df:20:53:07:8b:92:a6:43:dc:ba:dc:c8:ab:bc: 3d:24:3e:f6:cf:c4:df:00:5d:5e:02:83:d3:7e:ac: e7:65:4e:8c:fb:6e:9a:3a:77:8f:5f:dd:02:28:17: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 65.48.128.0/17 69.73.192.0/18 69.80.0.0/18 72.22.128.0/19 72.51.64.0/18 104.218.176.0/22 162.220.136.0/21 192.214.112.0/20 196.1.160.0/20 198.56.56.0/21 199.7.112.0/21 199.254.104.0/21 200.50.64.0/19 205.214.192.0/19 216.110.96.0/19 IPv6: 2604:a180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10278 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7a:b1:fb:dd:28:a6:cf:67:9e:3b:cc:db:fa:73:ab:4d:0b: 29:af:3a:28:18:11:02:62:31:18:6c:e4:a8:52:49:4f:37:48: 8e:3a:3b:8f:c5:c3:00:49:c5:b2:85:4a:44:64:fc:2f:4e:d1: 13:6b:46:6b:12:29:7d:72:78:c6:af:53:21:b3:c2:df:95:48: da:7e:24:eb:32:e8:52:1a:96:cf:1d:22:69:1c:09:cb:99:9c: 95:f4:08:40:a3:81:26:5a:6a:b6:82:74:90:ca:40:ae:18:1e: c0:a3:5d:fb:22:31:01:19:7d:38:75:da:c9:95:08:ef:dd:6c: 46:5c:db:5a:17:1b:f2:26:d7:13:9b:e1:8a:37:13:ca:7e:e3: 40:d8:0e:68:92:09:43:89:2b:c2:d4:c3:2b:4a:8f:aa:d3:cb: 50:ae:5b:78:49:a5:8f:c7:bd:0b:11:5a:42:68:4a:ba:0d:1b: 73:7b:3e:57:c5:05:bb:fb:44:5c:bd:48:4e:5f:9e:33:0b:97: e1:66:14:bd:88:ff:c7:ab:25:ad:44:19:18:3c:07:cd:bc:bb: e6:bb:5b:b5:f5:5b:79:1b:a0:42:11:76:50:e8:7a:78:59:4c: 59:1e:ee:33:5a:0f:ea:8b:8f:fe:8b:b1:b8:8d:d6:a9:a9:4f: d3:7c:9e:bc -----BEGIN CERTIFICATE----- MIIHbDCCBlSgAwIBAgIUAQ0Mn0MoWEm/N8Pmuh88LILse4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNTAwNDUzNFoXDTI3MDgwODAwNDUzNFowLzEtMCsGA1UEAxMk NmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3MTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN78XUiEJqqGk3dAPCQCwQiYfcZu5+toz9sB 24kzVyf7y9v9ny72FnOGupHC2D153T8nz8fyGrlAU3B0OvX94EUawnJxbEpdP2bJ D9sPg7TYcbonxkeXIOb3nIhJkkkHSJ3As6wfsXVhMXiyeWk1E1fe//I07kqCW3xB fuGP9Mkw7X4qlhARZxVJWcj0SAgojw+kTN+IVW9L6bqDFiicGijs8hD2JocQFIdr Og+FnIGLMrf9re9Y0wodFqlDhXser7HNsUIyaQGnbySMwnZ2oMPQ3yBTB4uSpkPc utzIq7w9JD72z8TfAF1eAoPTfqznZU6M+26aOnePX90CKBfUDwIDAQABo4IEfjCC BHowHQYDVR0OBBYEFC8nmxqgj4+ZyyejfY41LW2W0iOdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzZmODQxNGU1LWFkZDUtNDRmOS1h ZGE2LWI4YzkwNzAyNzE5NS82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcw MjcxOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwgYIGCCsGAQUF BwEHAQH/BHMwcTBgBAIAATBaAwQHQTCAAwQGRUnAAwQGRVAAAwQFSBaAAwQGSDNA AwQCaNqwAwQDotyIAwQEwNZwAwQExAGgAwQDxjg4AwQDxwdwAwQDx/5oAwQFyDJA AwQFzdbAAwQF2G5gMA0EAgACMAcDBQAmBKGAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAigmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBABR6sfvdKKbPZ547zNv6c6tNCymvOigYEQJiMRhs5KhS SU83SI46O4/FwwBJxbKFSkRk/C9O0RNrRmsSKX1yeMavUyGzwt+VSNp+JOsy6FIa ls8dImkcCcuZnJX0CECjgSZaaraCdJDKQK4YHsCjXfsiMQEZfTh12smVCO/dbEZc 21oXG/Im1xOb4Yo3E8p+40DYDmiSCUOJK8LUwytKj6rTy1CuW3hJpY/HvQsRWkJo SroNG3N7PlfFBbv7RFy9SE5fnjMLl+FmFL2I/8erJa1EGRg8B828u+a7W7X1W3kb oEIRdlDoenhZTFke7jNaD+qLj/6LsbiN1qmpT9N8nrw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:42 2025 by rpki-client