$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac.cer File: 757f9f4f-7bcb-4918-ad77-cb1331456bac.cer (raw, json) Hash identifier: +fddtKn5fouuLVMTRAW9Z/1obCEchygs7kTTvCXXGN0= Subject key identifier: DA:00:B6:5F:AC:3F:EF:68:BA:57:85:BF:96:B4:65:42:CE:26:54:9B Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849CE9284E41F884B48E2E1D9D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 May 2025 12:45:34 +0000 Certificate not after: Fri 13 Aug 2027 12:45:34 +0000 Subordinate resources: AS: 13953 IP: 108.59.144.0/20 IP: 2620:103:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:92:84:e4:1f:88:4b:48:e2:e1:d9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 10 12:45:34 2025 GMT Not After : Aug 13 12:45:34 2027 GMT Subject: CN=757f9f4f-7bcb-4918-ad77-cb1331456bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:24:f2:fd:b9:ce:90:b9:d1:dc:2a:d7:ba: 78:90:cd:4e:e0:69:33:60:bb:1f:a2:bc:92:14:fd: 2e:26:f8:d6:90:6d:05:62:31:ec:22:bc:1e:88:c4: 34:ef:a3:d4:68:f3:1e:74:9d:07:6a:2e:ef:bb:be: 0e:bf:01:93:01:fe:d9:b4:9c:ef:a3:e5:4e:a5:e9: 15:89:88:aa:cb:8f:db:4a:7c:8c:2f:48:89:90:4f: f3:5d:c2:00:93:a9:37:20:5b:0e:82:fb:a8:3c:c5: b0:01:e8:e4:f5:9b:1e:3e:44:79:f9:3f:e0:b8:b2: af:a8:2e:03:6c:ea:0e:fb:ce:12:86:b8:b0:5a:3c: 28:e7:e3:71:80:2d:43:75:dc:3c:99:37:87:d8:e4: 0d:41:9c:6a:15:54:e0:f9:5a:d1:e0:70:0f:6e:fa: f6:94:cf:29:fb:0e:34:cc:c9:a8:e7:b8:0c:e5:43: 9b:53:a1:2d:ad:86:e7:a6:1d:d5:84:cc:9b:90:47: 42:12:f4:c6:e5:34:4b:29:1f:b9:c3:3c:e1:6b:72: 5e:64:a3:c0:ea:8d:81:6b:25:b9:d7:51:1b:7f:e7: 98:e2:e6:57:2b:e8:3c:29:f7:7e:c9:48:96:8b:87: 0d:6c:92:68:9a:cf:58:f0:b1:e8:a4:ad:d5:0c:45: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:00:B6:5F:AC:3F:EF:68:BA:57:85:BF:96:B4:65:42:CE:26:54:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/757f9f4f-7bcb-4918-ad77-cb1331456bac/757f9f4f-7bcb-4918-ad77-cb1331456bac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.144.0/20 IPv6: 2620:103:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13953 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:64:7f:c3:ff:9c:ff:30:0d:6c:72:c5:7b:95:22:69:8c:e4: 0e:e5:f2:a0:e0:65:13:40:2b:8f:55:20:cc:3a:50:68:8b:08: 30:b7:ef:27:08:71:06:1b:57:56:c6:b5:a4:f9:b5:f5:e0:16: de:78:5c:73:a0:9d:9b:e0:3c:c3:02:a7:5b:32:9f:53:61:7d: c8:c2:1d:c4:2e:2d:42:b4:a0:47:8f:1a:55:5a:2a:b8:bc:81: 0d:c2:70:22:6a:49:47:e0:4d:b0:e5:31:58:85:b1:c5:01:18: 82:04:78:eb:2a:9a:3d:ed:f8:86:c1:86:3c:0c:de:ac:3f:74: fc:1a:b0:74:4b:00:44:93:1a:ec:24:98:78:f7:4e:c3:78:43: b7:2b:65:0f:82:7d:08:60:4e:09:c3:10:de:1a:c9:f0:bd:27: c0:14:62:31:9f:d2:f6:c4:22:26:61:67:04:27:9d:f9:29:4e: b4:f6:1d:92:6e:c1:10:ad:fd:21:58:df:93:db:fe:77:c6:c4: ec:20:a1:cc:b6:aa:cb:c1:cf:23:35:1d:8b:15:d1:e8:a6:05: eb:28:12:a6:37:f1:18:0d:2f:c9:f6:de:d6:41:7c:af:69:3d: 8b:dc:4d:f0:78:e7:58:50:cc:78:95:cf:35:24:74:dc:45:ac: d2:d2:c5:fb -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEnOkoTkH4hLSOLh2dgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxMDEyNDUzNFoXDTI3MDgxMzEyNDUzNFowLzEtMCsGA1UEAxMk NzU3ZjlmNGYtN2JjYi00OTE4LWFkNzctY2IxMzMxNDU2YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqMk8v25zpC50dwq17p4kM1O4GkzYLsforyS FP0uJvjWkG0FYjHsIrweiMQ076PUaPMedJ0Hai7vu74OvwGTAf7ZtJzvo+VOpekV iYiqy4/bSnyML0iJkE/zXcIAk6k3IFsOgvuoPMWwAejk9ZsePkR5+T/guLKvqC4D bOoO+84ShriwWjwo5+NxgC1Dddw8mTeH2OQNQZxqFVTg+VrR4HAPbvr2lM8p+w40 zMmo57gM5UObU6EtrYbnph3VhMybkEdCEvTG5TRLKR+5wzzha3JeZKPA6o2BayW5 11Ebf+eY4uZXK+g8Kfd+yUiWi4cNbJJoms9Y8LHopK3VDEUmnQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNoAtl+sP+9ouleFv5a0ZULOJlSbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 NTdmOWY0Zi03YmNiLTQ5MTgtYWQ3Ny1jYjEzMzE0NTZiYWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzc1N2Y5ZjRmLTdiY2ItNDkxOC1h ZDc3LWNiMTMzMTQ1NmJhYy83NTdmOWY0Zi03YmNiLTQ5MTgtYWQ3Ny1jYjEzMzE0 NTZiYWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBARsO5AwDwQCAAIwCQMHBCYgAQNAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgI2gTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNZH/D/5z/MA1scsV7lSJpjOQO 5fKg4GUTQCuPVSDMOlBoiwgwt+8nCHEGG1dWxrWk+bX14BbeeFxzoJ2b4DzDAqdb Mp9TYX3Iwh3ELi1CtKBHjxpVWiq4vIENwnAiaklH4E2w5TFYhbHFARiCBHjrKpo9 7fiGwYY8DN6sP3T8GrB0SwBEkxrsJJh4907DeEO3K2UPgn0IYE4JwxDeGsnwvSfA FGIxn9L2xCImYWcEJ535KU609h2SbsEQrf0hWN+T2/53xsTsIKHMtqrLwc8jNR2L FdHopgXrKBKmN/EYDS/J9t7WQXyvaT2L3E3weOdYUMx4lc81JHTcRazS0sX7 -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:49 2025 by rpki-client