$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer File: a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer (raw, json) Hash identifier: Oosaq4dcbAgMi9TenGOGVX6njdAabKfe8cieD8+nRIU= Subject key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849EEAD6B404A072BD45E6D89A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 00:45:37 +0000 Certificate not after: Wed 25 Aug 2027 00:45:37 +0000 Subordinate resources: IP: 199.9.57.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:ad:6b:40:4a:07:2b:d4:5e:6d:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 22 00:45:37 2025 GMT Not After : Aug 25 00:45:37 2027 GMT Subject: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:e4:c1:ad:3a:4a:2d:38:06:2c:76:8c:0a: 84:41:a8:6e:f8:6b:20:6f:f0:0f:0c:9a:5d:eb:37: 3a:5c:91:26:dd:a1:79:4c:1a:54:65:9e:b4:4f:a0: 64:e6:18:e1:5a:4c:6e:90:6a:76:37:63:8d:97:ee: 92:0e:25:9c:fc:d5:07:10:a2:c5:5c:9a:1e:25:fb: 19:d9:6e:01:4b:77:bd:cf:94:c4:f9:42:99:47:5a: af:75:a9:20:c4:7a:92:dd:17:60:d6:9c:05:85:ae: a0:3c:af:28:95:c0:bf:d7:8f:56:87:79:2f:7f:52: b3:82:cb:28:95:88:50:16:5f:cb:6e:65:a9:58:6f: 5f:37:e3:65:c2:30:0a:4a:14:b6:bc:c8:29:77:3f: 58:36:fc:4b:a6:bc:5a:97:97:8c:cf:94:39:2e:a6: 05:16:64:6d:d7:3b:52:62:af:e3:76:d5:81:35:c8: 4c:a4:8e:c6:37:da:c2:ff:11:20:d8:15:60:04:83: 82:9d:9b:a0:41:7e:9d:7d:d0:a5:8f:96:c6:cf:22: bb:e5:31:98:87:c9:2a:d7:63:45:f7:74:25:36:3f: 79:ce:84:b6:c5:76:69:9d:da:9c:af:2e:58:30:21: 47:b9:48:ee:8a:38:00:08:8c:85:49:c6:8e:ff:19: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.9.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5c:49:f7:23:22:e0:98:70:20:95:33:6b:a6:12:6d:4e:e8: 8a:08:37:50:5b:9b:56:d7:9e:76:13:84:b7:7b:6e:8b:c8:c2: 70:8a:4c:09:9f:82:a2:78:46:69:9f:6c:f0:85:ea:b8:f6:6c: 3a:19:89:cc:41:6f:d0:ab:2e:4a:75:a4:63:c4:3b:09:a4:a0: 6b:a8:71:49:78:c7:4a:d8:27:61:80:cd:9e:72:ee:f6:3a:04: 02:83:f0:1e:d1:f0:8d:31:14:0a:8c:e3:86:32:94:f2:06:0f: 1a:81:87:51:c4:22:9f:9f:56:8d:b8:91:9f:73:42:70:1f:05: ea:ff:fa:83:3d:2b:19:72:e0:ab:83:5f:00:60:49:a0:88:67: 15:cd:59:3a:fc:db:5f:ac:0e:8d:db:bf:c9:94:71:11:ef:6f: 3b:22:d9:13:d8:e8:38:d1:1e:8b:2a:c5:7c:12:88:54:76:59: 33:ef:22:49:3e:3c:52:0e:80:42:e1:e0:af:71:2c:72:0b:1b: 7a:d2:9a:e1:65:69:3a:7b:c8:c4:4a:1d:d3:58:ab:fd:3f:6e: 21:4c:52:80:b8:51:af:e5:b5:67:74:9a:5d:50:94:fd:b3:92: ba:6d:a3:19:11:11:81:b3:99:56:ae:e4:62:c0:d1:bf:e7:2b: 9e:91:a6:58 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEnurWtASgcr1F5tiaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyMjAwNDUzN1oXDTI3MDgyNTAwNDUzN1owLzEtMCsGA1UEAxMk YTFiMWZiNDMtZGIwYy00MmU0LWFkNjItNGUwODZjYTJmNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscrkwa06Si04Bix2jAqEQahu+Gsgb/APDJpd 6zc6XJEm3aF5TBpUZZ60T6Bk5hjhWkxukGp2N2ONl+6SDiWc/NUHEKLFXJoeJfsZ 2W4BS3e9z5TE+UKZR1qvdakgxHqS3Rdg1pwFha6gPK8olcC/149Wh3kvf1Kzgsso lYhQFl/LbmWpWG9fN+NlwjAKShS2vMgpdz9YNvxLprxal5eMz5Q5LqYFFmRt1ztS Yq/jdtWBNchMpI7GN9rC/xEg2BVgBIOCnZugQX6dfdClj5bGzyK75TGYh8kq12NF 93QlNj95zoS2xXZpndqcry5YMCFHuUjuijgACIyFScaO/xlXuQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHKXsU4wztl+LrgOi5WKtx03XUXXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h MWIxZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4NmNhMmY0ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ExYjFmYjQzLWRiMGMtNDJlNC1h ZDYyLTRlMDg2Y2EyZjRkNy9hMWIxZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4NmNh MmY0ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHCTkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANFxJ9yMi4JhwIJUza6YS bU7oigg3UFubVteedhOEt3tui8jCcIpMCZ+ConhGaZ9s8IXquPZsOhmJzEFv0Ksu SnWkY8Q7CaSga6hxSXjHStgnYYDNnnLu9joEAoPwHtHwjTEUCozjhjKU8gYPGoGH UcQin59WjbiRn3NCcB8F6v/6gz0rGXLgq4NfAGBJoIhnFc1ZOvzbX6wOjdu/yZRx Ee9vOyLZE9joONEeiyrFfBKIVHZZM+8iST48Ug6AQuHgr3EscgsbetKa4WVpOnvI xEod01ir/T9uIUxSgLhRr+W1Z3SaXVCU/bOSum2jGRERgbOZVq7kYsDRv+crnpGm WA== -----END CERTIFICATE-----Generated at Wed Nov 5 00:37:14 2025 by rpki-client