$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer File: 7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer (raw, json) Hash identifier: 9GbGyR3z1SQsnsLsVKxEaap/+y3IOozup1HI3iH3CnU= Subject key identifier: 96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584B771B85178E8C9FA4AAC6BD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 14:24:21 +0000 Certificate not after: Sat 02 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 46998 IP: 23.174.136.0/24 IP: 142.249.200.0/22 IP: 2602:f938::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:1b:85:17:8e:8c:9f:a4:aa:c6:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 9 14:24:21 2025 GMT Not After : Oct 2 00:45:37 2027 GMT Subject: CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:16:3f:96:01:16:19:a9:08:7a:fb:21:e1: f2:7f:48:90:0d:ed:f2:19:1a:e5:bb:48:73:ec:2b: 46:5c:92:64:19:63:98:9f:68:d7:4a:6b:42:5f:b8: 34:17:93:44:dc:5d:fa:e0:69:ac:a7:67:dd:60:a4: 33:9a:0c:9a:d9:17:54:b2:56:6d:fa:cf:df:0c:9d: 7e:34:38:e0:03:2a:b5:aa:0f:1d:a0:e5:ff:07:5b: ec:6a:83:15:be:9e:0b:b2:d2:2f:46:c5:96:96:ad: d1:d3:d1:9a:49:26:64:65:89:4c:a9:20:54:50:38: 36:f2:4f:48:fc:41:5a:65:57:34:1d:52:19:62:8b: f1:67:08:b8:f1:84:fa:d5:0a:f2:d3:e3:7e:d5:90: 73:cc:ce:98:be:5a:38:81:23:81:7c:94:47:6d:07: f4:d6:ed:3b:cd:53:38:64:72:29:4a:b6:c4:7c:0c: 4d:8f:9d:81:99:c3:76:c0:ea:78:12:e5:4e:2d:2f: 4d:ca:a6:a2:68:38:49:ee:16:5b:86:c0:4a:9f:17: aa:c3:81:26:4a:ae:db:a9:3a:c1:37:56:e5:c0:f6: f5:8c:4b:76:d4:7d:d7:b6:30:79:0a:0f:5b:4c:f3: db:d8:d2:3d:7d:df:31:b4:c4:40:92:17:84:eb:25: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.174.136.0/24 142.249.200.0/22 IPv6: 2602:f938::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46998 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ef:d8:f5:53:1c:d3:f4:73:36:8c:1e:cc:12:23:9d:29:dc: 2a:b8:e1:6e:3f:08:15:1a:de:d1:02:ff:8e:12:da:28:f2:48: 3f:c8:b3:30:74:d1:4d:f9:21:c6:78:ed:a5:f2:17:81:46:30: cb:49:ca:e3:95:72:e3:c0:ac:c7:8a:22:be:d8:51:7b:36:7d: 51:04:be:3e:25:bb:44:a3:8a:de:f8:9e:ae:00:dc:19:75:4c: 8a:34:74:21:72:22:b9:16:74:dc:8c:c1:d2:05:8e:a0:11:0c: 2b:a4:49:ef:a3:29:b8:a8:b9:a5:12:89:f1:ba:1d:c8:9a:15: ec:b7:2a:bd:17:0e:17:a4:15:45:ff:f0:3c:18:2c:68:22:0c: ff:d2:77:fc:f6:1a:38:57:52:75:a8:d9:e0:dc:20:ad:0a:ca: 91:ed:b7:33:33:18:d4:78:e2:aa:a0:32:2e:1b:fc:54:be:65: 20:6b:c4:42:7e:bb:c3:c0:f6:4f:b8:09:b2:05:95:da:85:c8: 70:e2:3c:83:0b:a9:a9:14:a6:37:19:52:62:f2:fb:f3:a7:57: 30:bb:dc:16:ba:18:0e:6b:88:c3:b6:d6:2b:19:f9:bc:62:03: a3:87:4e:9f:b0:c5:3b:56:94:88:c1:27:cd:59:0e:8b:11:9b: 53:48:79:01 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEt3G4UXjoyfpKrGvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MTAwOTE0MjQyMVoXDTI3MTAwMjAwNDUzN1owLzEtMCsGA1UEAxMk N2YxYjIzZDEtYjI2ZC00OWY3LWI5Y2UtYzM4OTZhZDQzNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCkWP5YBFhmpCHr7IeHyf0iQDe3yGRrlu0hz 7CtGXJJkGWOYn2jXSmtCX7g0F5NE3F364Gmsp2fdYKQzmgya2RdUslZt+s/fDJ1+ NDjgAyq1qg8doOX/B1vsaoMVvp4LstIvRsWWlq3R09GaSSZkZYlMqSBUUDg28k9I /EFaZVc0HVIZYovxZwi48YT61Qry0+N+1ZBzzM6Yvlo4gSOBfJRHbQf01u07zVM4 ZHIpSrbEfAxNj52BmcN2wOp4EuVOLS9NyqaiaDhJ7hZbhsBKnxeqw4EmSq7bqTrB N1blwPb1jEt21H3XtjB5Cg9bTPPb2NI9fd8xtMRAkheE6yWXvwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFJYPJonyUXkk8EwHNbCWyUNOpxuLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 ZjFiMjNkMS1iMjZkLTQ5ZjctYjljZS1jMzg5NmFkNDM3MjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzdmMWIyM2QxLWIyNmQtNDlmNy1i OWNlLWMzODk2YWQ0MzcyMi83ZjFiMjNkMS1iMjZkLTQ5ZjctYjljZS1jMzg5NmFk NDM3MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXrogDBAKO+cgwDgQCAAIwCAMGACYC+TgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC3ljBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCW79j1UxzT9HM2jB7M EiOdKdwquOFuPwgVGt7RAv+OEtoo8kg/yLMwdNFN+SHGeO2l8heBRjDLScrjlXLj wKzHiiK+2FF7Nn1RBL4+JbtEo4re+J6uANwZdUyKNHQhciK5FnTcjMHSBY6gEQwr pEnvoym4qLmlEonxuh3ImhXstyq9Fw4XpBVF//A8GCxoIgz/0nf89ho4V1J1qNng 3CCtCsqR7bczMxjUeOKqoDIuG/xUvmUga8RCfrvDwPZPuAmyBZXahchw4jyDC6mp FKY3GVJi8vvzp1cwu9wWuhgOa4jDttYrGfm8YgOjh06fsMU7VpSIwSfNWQ6LEZtT SHkB -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:56 2025 by rpki-client