$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer File: 93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer (raw, json) Hash identifier: wfJQfjU0Vu5ZdAclBvJkM4E1WjqlxFL4aswtYpbUPjc= Subject key identifier: 76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849FF6D8514A431A1091EC8BE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 May 2025 00:45:37 +0000 Certificate not after: Tue 31 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 31930 IP: 142.137.0.0/16 IP: 2620:fa:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:6d:85:14:a4:31:a1:09:1e:c8:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 28 00:45:37 2025 GMT Not After : Aug 31 00:45:37 2027 GMT Subject: CN=93638ba7-22ee-4fb0-8a1d-d1e213fa2881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:ca:0c:b3:6f:c2:0f:48:69:f1:04:21:9d: ec:f1:cb:28:6d:14:ad:8a:e4:2a:97:aa:e8:9e:29: 44:b5:fb:61:a0:63:4b:df:c6:81:19:d6:fe:4d:4f: f6:1c:cc:bd:be:5a:03:91:91:6b:7a:d6:b7:fe:98: 09:b1:23:8e:d8:45:76:2f:80:09:bd:8d:6b:2c:04: 6f:e8:eb:62:35:76:de:62:82:f6:15:83:7f:66:ee: 76:73:ae:b0:c4:4d:ee:9b:ae:1e:82:d7:f7:4a:34: de:c1:ca:6e:41:bf:bf:54:fb:01:40:74:26:7e:47: 77:7e:b0:c5:41:25:67:ad:6c:1d:0c:6e:df:e6:ca: eb:cb:74:ca:f3:05:31:20:36:88:0a:1b:b0:5d:ac: 7e:2d:83:fa:17:77:3c:a1:25:15:20:b7:26:14:fc: 9c:57:79:28:04:bb:00:90:c5:a5:e2:55:bf:33:b0: d3:25:c2:ab:d6:72:cb:8b:27:23:5f:ea:f3:fc:b1: 35:51:c7:25:cc:ae:17:03:0e:0f:49:80:65:58:e7: bf:7d:31:41:74:4b:4d:b8:95:65:61:58:0d:32:b4: 0e:4b:d7:22:e7:da:33:48:40:2a:a9:2f:90:e9:c1: be:ac:e8:47:1f:09:eb:83:87:b2:9c:dc:c2:93:3d: 26:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 142.137.0.0/16 IPv6: 2620:fa:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31930 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:63:41:37:85:89:d0:14:b9:98:83:e0:d6:57:2d:c1:18:0e: 48:2a:18:5e:84:b7:05:91:45:d6:09:ae:32:be:20:8e:31:5f: 7e:ac:24:61:75:84:0b:1d:49:97:9a:ad:ec:54:a9:7f:01:3e: 7d:5d:1c:d8:65:97:34:b7:ec:32:ae:5b:af:42:e8:65:53:dc: 53:50:d4:42:49:1e:29:4d:4c:cd:3f:11:0a:ef:0d:a2:7d:de: f4:20:4d:21:2e:01:11:fa:00:73:7c:77:7b:d9:2e:c0:f0:a4: a8:7a:28:bc:34:fe:a7:f5:03:ad:24:fa:72:55:e4:fc:d5:42: a0:b3:7a:c8:18:32:4a:1c:4c:93:21:6f:3c:57:21:aa:52:5e: 35:85:43:8d:47:27:7b:8c:3f:e9:bc:d1:e9:fa:5f:2a:e4:db: ce:5a:0d:81:8e:0c:1e:b8:af:80:a6:92:46:5e:02:47:e9:6b: aa:d4:c5:14:1b:27:1c:43:72:f3:12:17:4a:4a:0b:90:87:97: 5f:d6:6e:cb:5b:46:aa:d1:e8:27:3b:58:0b:9a:39:64:43:26: 46:dc:29:ac:24:80:6f:70:5c:7a:85:d0:d6:86:ae:12:46:ed: 6a:9f:fe:fc:a1:7c:ca:fa:e6:17:ab:38:3c:09:ff:9c:d3:ad: 50:e2:ab:8d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEn/bYUUpDGhCR7IvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyODAwNDUzN1oXDTI3MDgzMTAwNDUzN1owLzEtMCsGA1UEAxMk OTM2MzhiYTctMjJlZS00ZmIwLThhMWQtZDFlMjEzZmEyODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvbKDLNvwg9IafEEIZ3s8csobRStiuQql6ro nilEtfthoGNL38aBGdb+TU/2HMy9vloDkZFreta3/pgJsSOO2EV2L4AJvY1rLARv 6OtiNXbeYoL2FYN/Zu52c66wxE3um64egtf3SjTewcpuQb+/VPsBQHQmfkd3frDF QSVnrWwdDG7f5srry3TK8wUxIDaIChuwXax+LYP6F3c8oSUVILcmFPycV3koBLsA kMWl4lW/M7DTJcKr1nLLiycjX+rz/LE1UcclzK4XAw4PSYBlWOe/fTFBdEtNuJVl YVgNMrQOS9ci59ozSEAqqS+Q6cG+rOhHHwnrg4eynNzCkz0m3QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFHZVy6tlAxPkHoq8ZGo9oWAzaeTsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 MzYzOGJhNy0yMmVlLTRmYjAtOGExZC1kMWUyMTNmYTI4ODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzkzNjM4YmE3LTIyZWUtNGZiMC04 YTFkLWQxZTIxM2ZhMjg4MS85MzYzOGJhNy0yMmVlLTRmYjAtOGExZC1kMWUyMTNm YTI4ODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCOiTAPBAIAAjAJAwcAJiAA+oAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAny6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJZjQTeFidAUuZiD4NZXLcEYDkgq GF6EtwWRRdYJrjK+II4xX36sJGF1hAsdSZearexUqX8BPn1dHNhllzS37DKuW69C 6GVT3FNQ1EJJHilNTM0/EQrvDaJ93vQgTSEuARH6AHN8d3vZLsDwpKh6KLw0/qf1 A60k+nJV5PzVQqCzesgYMkocTJMhbzxXIapSXjWFQ41HJ3uMP+m80en6Xyrk285a DYGODB64r4CmkkZeAkfpa6rUxRQbJxxDcvMSF0pKC5CHl1/WbstbRqrR6Cc7WAua OWRDJkbcKawkgG9wXHqF0NaGrhJG7Wqf/vyhfMr65herODwJ/5zTrVDiq40= -----END CERTIFICATE-----Generated at Tue Nov 4 23:17:22 2025 by rpki-client