$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer File: 9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer (raw, json) Hash identifier: kW+VquBtj2ctwwS1DAgZiO+UVJH0aGGghrpORtsa12s= Subject key identifier: AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A9A5E799B41DFB712D3383F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 12:45:36 +0000 Certificate not after: Mon 25 Oct 2027 12:45:36 +0000 Subordinate resources: AS: 25948 IP: 23.172.208.0/24 IP: 172.110.129.0/24 IP: 198.135.236.0/24 IP: 199.212.255.0/24 IP: 216.10.69.0/24 IP: 2602:808::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5e:79:9b:41:df:b7:12:d3:38:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 22 12:45:36 2025 GMT Not After : Oct 25 12:45:36 2027 GMT Subject: CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:fa:a4:d9:8f:80:81:15:f0:45:72:bd:1c: 39:26:08:4d:16:01:bd:68:17:2d:e0:7a:29:9b:44: aa:56:a8:3a:be:d9:38:6f:ab:98:61:e1:9f:d5:ef: c2:72:a6:3d:58:01:4e:34:ee:a3:52:3c:67:93:53: 65:a1:02:fc:af:03:8c:49:ff:a9:c1:c4:aa:22:f1: 6b:96:9c:fb:9b:b2:89:7d:9b:f9:4d:a7:6a:9b:92: 6b:ea:b8:36:e6:ce:d6:cb:36:d5:39:31:cf:8a:7b: 0d:7c:70:5c:cc:f5:aa:2c:82:fc:5f:a2:e1:4c:bc: 97:00:c9:b2:6a:42:b4:06:09:e1:aa:bd:a7:bc:5e: f4:e0:6b:c8:8a:7a:c8:18:a1:5e:81:a9:49:01:cd: 80:c0:af:19:55:a8:3d:d1:aa:63:1b:df:e7:9d:f5: ff:10:e0:b8:48:37:50:88:5e:54:bd:16:d2:2e:53: d4:5e:87:75:57:89:39:7f:fe:f6:e4:28:eb:ae:8c: 54:5b:7e:61:68:ba:b2:5b:d3:81:e4:2e:50:f7:d6: cc:70:22:4b:79:fe:d3:1f:c7:90:c2:c2:20:e5:45: 9d:af:83:c1:f2:e2:0b:76:59:d1:13:aa:d5:a2:2d: 90:42:de:5d:f1:a5:5f:bd:49:15:64:be:7f:bd:1d: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.172.208.0/24 172.110.129.0/24 198.135.236.0/24 199.212.255.0/24 216.10.69.0/24 IPv6: 2602:808::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25948 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9c:45:1c:a3:f3:28:79:97:73:3a:99:31:d3:71:cf:3d:4a: 08:2c:15:1f:57:bb:ce:77:49:89:42:71:29:93:83:e8:0e:d5: 72:e9:80:05:47:1f:d5:91:85:1a:89:8f:46:a3:82:0d:48:91: 57:30:22:5d:19:22:cb:b5:6e:c2:bb:88:c6:48:38:1c:de:2f: 49:c5:f4:14:9e:71:8b:1d:4f:d9:15:3b:32:c6:48:6d:15:4d: f2:59:2c:38:5c:ba:08:dc:d8:11:bd:6f:b8:cc:34:1a:32:0f: b9:85:e5:b9:ae:fa:3b:69:89:4f:c7:f7:f1:65:b6:ac:4a:90: 88:3a:af:bb:ec:c7:4d:42:74:15:57:40:33:4f:fa:9f:30:fa: 69:26:2f:5b:ac:b4:f2:81:7c:f0:a8:3b:e2:3e:f2:d8:16:b1: c8:75:ed:5e:d1:ee:7a:2a:3f:75:10:f9:60:92:a3:61:f8:00: 00:94:80:f0:48:14:b9:03:4e:43:9b:22:68:5b:72:2d:12:26: fd:d4:55:c6:0b:a7:94:56:a9:50:8c:32:5b:b4:1c:49:a0:ed: 73:ea:4e:2b:58:fc:91:ea:40:48:78:5c:cc:b5:28:96:7a:c1: b5:df:cb:dd:bc:48:42:3c:fa:da:be:1a:0a:08:9e:d8:d4:1c: 86:cd:63:be -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEqaXnmbQd+3EtM4P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMjEyNDUzNloXDTI3MTAyNTEyNDUzNlowLzEtMCsGA1UEAxMk OTIxMmIwZGItYmI3My00YTZmLWE1ZTctNDQyM2Y0ODg5ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEr6pNmPgIEV8EVyvRw5JghNFgG9aBct4Hop m0SqVqg6vtk4b6uYYeGf1e/CcqY9WAFONO6jUjxnk1NloQL8rwOMSf+pwcSqIvFr lpz7m7KJfZv5Tadqm5Jr6rg25s7WyzbVOTHPinsNfHBczPWqLIL8X6LhTLyXAMmy akK0Bgnhqr2nvF704GvIinrIGKFegalJAc2AwK8ZVag90apjG9/nnfX/EOC4SDdQ iF5UvRbSLlPUXod1V4k5f/725CjrroxUW35haLqyW9OB5C5Q99bMcCJLef7TH8eQ wsIg5UWdr4PB8uILdlnRE6rVoi2QQt5d8aVfvUkVZL5/vR3AWQIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFKwq8wCgl9r5DwjA89ugRamdtVBVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 MjEyYjBkYi1iYjczLTRhNmYtYTVlNy00NDIzZjQ4ODllZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzkyMTJiMGRiLWJiNzMtNGE2Zi1h NWU3LTQ0MjNmNDg4OWVlOC85MjEyYjBkYi1iYjczLTRhNmYtYTVlNy00NDIzZjQ4 ODllZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCQEAgABMB4DBAAXrNADBACsboEDBADGh+wDBADH1P8DBADYCkUw DwQCAAIwCQMHBCYCCAgAADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJlXDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAMnEUco/MoeZdzOpkx03HPPUoILBUfV7vOd0mJQnEpk4PoDtVy6YAFRx/V kYUaiY9Go4INSJFXMCJdGSLLtW7Cu4jGSDgc3i9JxfQUnnGLHU/ZFTsyxkhtFU3y WSw4XLoI3NgRvW+4zDQaMg+5heW5rvo7aYlPx/fxZbasSpCIOq+77MdNQnQVV0Az T/qfMPppJi9brLTygXzwqDviPvLYFrHIde1e0e56Kj91EPlgkqNh+AAAlIDwSBS5 A05DmyJoW3ItEib91FXGC6eUVqlQjDJbtBxJoO1z6k4rWPyR6kBIeFzMtSiWesG1 38vdvEhCPPravhoKCJ7Y1ByGzWO+ -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:48 2025 by rpki-client