$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer File: 9ae61efc-a402-4975-bfe7-f7ddda75a628.cer (raw, json) Hash identifier: Zs37sGyz/WfMYx/3zpFBY4J/+oUUeVzDtsh3JNzMv7s= Subject key identifier: 57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A707E372A10197DFE29FA8E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 12:45:36 +0000 Certificate not after: Sun 10 Oct 2027 12:45:36 +0000 Subordinate resources: AS: 400809 IP: 209.135.176.0/22 IP: 2606:fe40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:7e:37:2a:10:19:7d:fe:29:fa:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 7 12:45:36 2025 GMT Not After : Oct 10 12:45:36 2027 GMT Subject: CN=9ae61efc-a402-4975-bfe7-f7ddda75a628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:13:73:9d:70:0f:6f:d3:e6:92:02:85:3a:0c: b8:4a:d6:96:b7:e3:6b:a6:c0:83:22:4a:d2:63:fd: a8:13:26:23:6d:22:cb:54:05:b4:24:61:b1:50:35: d8:98:e3:7f:25:35:fe:22:bb:3d:d9:c6:61:00:0e: f6:80:8e:77:15:fa:7e:0b:cf:b3:d5:df:29:e5:dc: 7f:80:ba:6b:fd:9f:e8:d8:bf:a6:b4:cb:e7:9d:38: 01:8a:36:08:1a:b9:94:ee:f0:bd:9b:4e:af:f1:97: 9c:5a:95:9e:bf:80:65:e2:68:50:4f:2f:41:5f:1a: 5d:ee:31:03:ea:c5:ef:25:15:17:20:be:5c:05:2c: 70:d8:54:ba:56:58:80:3e:8c:11:af:e9:16:75:8c: 24:0a:b3:4f:8a:1b:10:7e:25:73:25:e5:14:2b:fe: fd:67:52:b4:b9:a7:5b:45:c6:78:90:af:af:a1:74: 44:0e:af:df:2e:18:77:dc:d6:34:88:4f:df:08:53: bb:b6:74:07:76:95:13:af:de:bc:69:b2:3e:ad:82: 5a:12:ce:fb:e4:c5:f8:67:4f:91:f5:38:ad:fd:89: f8:04:06:32:c1:63:cd:b4:06:91:4d:f6:0e:68:32: c1:76:4d:8b:2a:b1:ab:a8:cb:ec:bb:ea:b5:07:86: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 209.135.176.0/22 IPv6: 2606:fe40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400809 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cb:cd:8d:48:54:a4:f8:9e:9a:5a:6d:c8:b1:05:22:7a:85: 37:c3:3e:5c:9c:0b:11:13:0e:0a:b8:68:55:8f:d0:9c:e0:1d: f6:54:b8:a4:5a:6f:0d:26:a6:40:1e:94:f4:3b:52:30:56:ac: 74:df:27:0e:3a:6d:a5:3d:db:3a:2e:ce:6e:4f:9c:de:fb:e0: 3c:2b:30:11:96:68:8c:e2:5e:f3:59:22:82:4e:a4:e8:27:af: ee:be:1a:04:ed:f5:b9:52:4b:b7:65:91:19:cc:da:6f:d1:ae: a3:d9:ba:cb:01:99:be:cf:b1:16:33:e1:e6:a1:c7:37:b4:1d: 05:48:dc:22:6d:ea:69:e1:83:1c:0b:b5:39:bd:e9:84:26:63: cf:de:53:12:fc:87:10:10:32:01:eb:c8:91:82:9c:0a:9c:23: f7:96:29:e7:2a:14:57:34:ac:4e:43:0a:f9:2b:91:d7:fb:c0: 15:07:42:bc:38:35:e8:8d:44:10:9c:05:c5:dc:05:b0:25:17: 7c:ec:e6:2e:36:63:a8:21:bc:87:b0:0a:3c:5a:7d:45:c8:16: 18:45:e4:8e:20:03:c4:7c:75:66:bc:3f:46:ab:76:7a:6c:5c: 93:6f:b9:ea:e0:8a:b6:7d:d4:f0:4b:e0:57:66:77:d5:87:24: 3e:14:e0:4c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpwfjcqEBl9/in6joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwNzEyNDUzNloXDTI3MTAxMDEyNDUzNlowLzEtMCsGA1UEAxMk OWFlNjFlZmMtYTQwMi00OTc1LWJmZTctZjdkZGRhNzVhNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RNznXAPb9PmkgKFOgy4StaWt+NrpsCDIkrS Y/2oEyYjbSLLVAW0JGGxUDXYmON/JTX+Irs92cZhAA72gI53Ffp+C8+z1d8p5dx/ gLpr/Z/o2L+mtMvnnTgBijYIGrmU7vC9m06v8ZecWpWev4Bl4mhQTy9BXxpd7jED 6sXvJRUXIL5cBSxw2FS6VliAPowRr+kWdYwkCrNPihsQfiVzJeUUK/79Z1K0uadb RcZ4kK+voXREDq/fLhh33NY0iE/fCFO7tnQHdpUTr968abI+rYJaEs775MX4Z0+R 9Tit/Yn4BAYywWPNtAaRTfYOaDLBdk2LKrGrqMvsu+q1B4bHIQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFf8dtI2L8qpkM3a+7e/7nu2gJrkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 YWU2MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2RkZGE3NWE2MjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzlhZTYxZWZjLWE0MDItNDk3NS1i ZmU3LWY3ZGRkYTc1YTYyOC85YWU2MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2RkZGE3 NWE2MjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALRh7AwDQQCAAIwBwMFACYG/kAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh2pMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFPLzY1IVKT4nppabcixBSJ6hTfD PlycCxETDgq4aFWP0JzgHfZUuKRabw0mpkAelPQ7UjBWrHTfJw46baU92zouzm5P nN774DwrMBGWaIziXvNZIoJOpOgnr+6+GgTt9blSS7dlkRnM2m/RrqPZussBmb7P sRYz4eahxze0HQVI3CJt6mnhgxwLtTm96YQmY8/eUxL8hxAQMgHryJGCnAqcI/eW KecqFFc0rE5DCvkrkdf7wBUHQrw4NeiNRBCcBcXcBbAlF3zs5i42Y6ghvIewCjxa fUXIFhhF5I4gA8R8dWa8P0ardnpsXJNvuergirZ91PBL4Fdmd9WHJD4U4Ew= -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:51 2025 by rpki-client