$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer File: bbc10cdd-c548-4bd0-aafb-ae57822b4599.cer (raw, json) Hash identifier: CuMmgP7onpe5KlTMIBepTHj47pvJlJIxZAhyM8h3KJ8= Subject key identifier: BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A2AB31D1C07952FF69E123280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Jun 2025 12:45:36 +0000 Certificate not after: Wed 15 Sep 2027 12:45:36 +0000 Subordinate resources: AS: 397260 IP: 64.39.232.0/24 IP: 167.253.30.0/24 IP: 2602:fad5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b3:1d:1c:07:95:2f:f6:9e:12:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 12 12:45:36 2025 GMT Not After : Sep 15 12:45:36 2027 GMT Subject: CN=bbc10cdd-c548-4bd0-aafb-ae57822b4599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:93:82:42:86:d1:08:4b:64:9b:69:9b:b5: 45:5c:c2:ee:3f:a3:c1:0f:68:f4:f5:c4:3c:20:33: f3:13:57:61:6c:09:9f:e8:28:bb:ef:f0:4b:24:92: cd:34:3d:43:1d:e7:92:76:ca:55:2e:a8:04:e9:da: 31:87:09:34:f9:ea:d2:06:fe:e9:ee:c6:7c:f2:1c: 87:ba:5e:cd:85:4e:63:24:46:5e:9a:e2:95:a1:6e: fb:2c:31:d6:b7:cc:ba:f4:56:29:5a:54:2a:ac:45: 72:4a:e8:36:c8:b6:80:d1:07:2f:e1:0a:45:03:42: 3a:db:16:e2:cb:34:ea:2a:e9:06:6e:74:70:eb:74: 97:b2:6d:98:7c:59:c6:28:78:c6:fa:ce:37:f8:65: 0c:69:1f:18:f1:ed:6a:f7:4b:59:90:bd:4f:12:6d: 07:da:a9:9a:e4:1e:78:3a:0f:ef:78:1a:e8:52:e3: 8a:bf:b6:e6:6e:37:4d:00:77:cc:c7:17:a4:b0:67: 59:70:46:85:30:52:88:f6:c8:31:67:f0:7b:69:83: b1:09:89:cc:3e:db:4f:ff:9f:5b:58:d7:92:fd:f7: e4:a2:03:6c:5e:01:e5:20:62:74:2b:03:19:25:6c: 29:eb:6f:72:e0:fa:8f:16:b9:e8:33:9a:c3:ed:79: 89:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:A0:07:28:56:E3:62:62:B3:92:B7:99:FD:3E:20:EB:18:6F:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bbc10cdd-c548-4bd0-aafb-ae57822b4599/bbc10cdd-c548-4bd0-aafb-ae57822b4599.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.39.232.0/24 167.253.30.0/24 IPv6: 2602:fad5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397260 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:58:02:f6:78:8d:82:a1:4e:f5:59:95:fb:a6:8d:2e:4d:f0: 88:03:1a:72:80:d6:6d:61:14:6a:31:4a:4e:dc:a2:ea:f9:c6: ef:93:0f:cb:43:8e:5d:ed:45:83:c0:e5:56:c6:81:f4:c4:be: eb:86:f6:2e:23:e2:38:d6:42:de:25:94:de:38:cc:7c:ba:1d: ce:98:84:b0:3e:a8:b9:b1:39:1f:80:32:d1:09:ca:09:36:38: af:e2:d9:e3:f8:37:60:04:46:32:bb:6a:48:df:8d:2c:53:2e: 51:ae:50:4d:37:bd:23:19:f0:17:92:a0:4c:f1:c7:10:08:3d: c6:0b:7b:60:b8:cb:c8:d8:27:a5:a0:ac:f6:ad:43:4a:94:ba: 37:10:7a:a6:65:51:38:d7:5c:51:5b:e0:4c:72:ae:0f:e7:f5: 7c:99:3d:c8:19:86:7b:7a:11:ca:44:59:0b:f4:9f:69:4a:0e: 8c:f7:f0:0d:23:fb:29:da:f8:57:fc:35:a7:e7:41:b5:98:ac: 8d:00:64:63:ef:2f:c2:33:16:f3:c2:09:a0:fa:85:a6:21:94: 50:5a:97:7c:43:4e:2d:ae:b2:07:ff:66:9e:46:13:31:83:db: 56:af:ab:6c:82:64:fe:61:b2:29:ed:86:c4:ea:18:a6:fc:7a: 87:1a:71:6f -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEoqsx0cB5Uv9p4SMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxMjEyNDUzNloXDTI3MDkxNTEyNDUzNlowLzEtMCsGA1UEAxMk YmJjMTBjZGQtYzU0OC00YmQwLWFhZmItYWU1NzgyMmI0NTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQOTgkKG0QhLZJtpm7VFXMLuP6PBD2j09cQ8 IDPzE1dhbAmf6Ci77/BLJJLNND1DHeeSdspVLqgE6doxhwk0+erSBv7p7sZ88hyH ul7NhU5jJEZemuKVoW77LDHWt8y69FYpWlQqrEVySug2yLaA0Qcv4QpFA0I62xbi yzTqKukGbnRw63SXsm2YfFnGKHjG+s43+GUMaR8Y8e1q90tZkL1PEm0H2qma5B54 Og/veBroUuOKv7bmbjdNAHfMxxeksGdZcEaFMFKI9sgxZ/B7aYOxCYnMPttP/59b WNeS/ffkogNsXgHlIGJ0KwMZJWwp629y4PqPFrnoM5rD7XmJjwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFLz4oAcoVuNiYrOSt5n9PiDrGG/8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i YmMxMGNkZC1jNTQ4LTRiZDAtYWFmYi1hZTU3ODIyYjQ1OTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2JiYzEwY2RkLWM1NDgtNGJkMC1h YWZiLWFlNTc4MjJiNDU5OS9iYmMxMGNkZC1jNTQ4LTRiZDAtYWFmYi1hZTU3ODIy YjQ1OTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBABAJ+gDBACn/R4wDgQCAAIwCAMGACYC+tUAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYPzDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjWAL2eI2CoU71WZX7 po0uTfCIAxpygNZtYRRqMUpO3KLq+cbvkw/LQ45d7UWDwOVWxoH0xL7rhvYuI+I4 1kLeJZTeOMx8uh3OmISwPqi5sTkfgDLRCcoJNjiv4tnj+DdgBEYyu2pI340sUy5R rlBNN70jGfAXkqBM8ccQCD3GC3tguMvI2CeloKz2rUNKlLo3EHqmZVE411xRW+BM cq4P5/V8mT3IGYZ7ehHKRFkL9J9pSg6M9/ANI/sp2vhX/DWn50G1mKyNAGRj7y/C Mxbzwgmg+oWmIZRQWpd8Q04trrIH/2aeRhMxg9tWr6tsgmT+YbIp7YbE6him/HqH GnFv -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:05 2025 by rpki-client