$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.cer File: cb7393ae-ce6f-4290-b73b-77b4ab015a2b.cer (raw, json) Hash identifier: zch5meZ6SF6q4RDq+W6iH7Qd4LRRPClfVM35GseqHWk= Subject key identifier: 82:3F:E9:B1:41:70:94:1B:C7:84:1A:20:02:21:2B:A2:68:9F:66:46 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A102D9FEB7B5E5C76B809E520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Jun 2025 00:45:37 +0000 Certificate not after: Mon 06 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 54805 IP: 198.72.80.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:2d:9f:eb:7b:5e:5c:76:b8:09:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 3 00:45:37 2025 GMT Not After : Sep 6 00:45:37 2027 GMT Subject: CN=cb7393ae-ce6f-4290-b73b-77b4ab015a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:17:11:6f:d7:2b:fb:97:79:40:31:95:0a: 9c:5a:dc:c6:6c:4b:eb:a1:79:be:37:d3:2b:7a:da: f6:9e:9e:6b:0a:a6:63:76:2d:59:48:86:9e:9d:75: 41:77:ef:47:82:30:24:e5:6f:f0:cd:2d:1b:7f:8c: 8e:a7:02:7d:0e:da:8a:b1:4e:4c:20:d1:51:58:c3: 00:96:1f:5d:f1:e2:a6:ee:4b:31:d3:36:6a:08:5e: bc:54:65:f2:4b:c8:d4:b5:59:ec:68:84:70:82:0f: 8e:58:17:7e:74:aa:ee:e0:35:23:44:29:af:ce:e5: 98:25:59:30:19:96:fb:55:39:8a:78:d7:01:e9:66: 0c:14:54:67:34:9d:d3:9d:c1:8f:9a:20:ef:4d:bd: f3:fd:65:a6:c1:29:7c:01:df:90:c9:ee:07:28:20: fa:11:22:b8:1a:76:bf:66:15:1a:fb:c9:85:ec:38: 4e:89:a1:7a:91:8f:79:6b:24:cf:e1:4e:75:a5:1a: 09:4a:87:db:46:3d:d0:c1:66:3b:c3:2b:dd:6e:b3: 60:bf:49:52:81:cd:db:fc:09:68:84:87:91:ff:5a: 0a:26:86:22:a1:56:98:78:e5:0a:a1:0f:00:63:24: a7:b4:dd:a7:99:62:d7:cc:0f:26:26:98:b7:7a:c7: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3F:E9:B1:41:70:94:1B:C7:84:1A:20:02:21:2B:A2:68:9F:66:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.72.80.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54805 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b0:2b:2f:18:3f:9d:95:44:5d:4a:1c:23:54:34:aa:38:bb: dd:ef:1b:ec:64:a4:15:30:5c:fa:4e:77:cd:a9:21:05:1d:c4: 0d:2b:76:72:27:38:d9:e8:95:e3:bd:72:e7:cc:db:69:c6:27: 5e:b8:59:64:b9:ae:ef:74:dc:52:e3:44:b7:4f:c8:7c:1b:b1: 6f:c2:69:96:0c:be:dd:82:7f:c9:75:e5:ec:7c:ca:e0:72:b5: 16:0f:07:6e:f6:be:7a:9d:b2:91:1a:75:0e:3f:7c:9c:2a:4a: ce:5a:1f:57:de:59:6c:28:70:10:bc:17:42:0b:36:6a:31:f2: 5a:c0:0e:1b:ec:f4:fb:a2:63:41:7a:cf:d3:af:74:dd:33:bc: 56:8a:22:60:04:6a:37:09:f5:82:fb:ce:20:02:af:3f:26:39: be:39:4f:9e:63:55:c7:2c:de:86:8f:e2:b8:5e:f5:78:9a:61: fb:49:c5:80:f6:b8:94:c1:a5:36:49:98:ae:45:95:4d:85:6b: ed:e6:b3:45:10:66:bc:43:95:49:fe:9a:9c:21:73:9b:65:5d: 7f:2c:21:58:42:ea:b1:99:84:0e:c0:32:31:98:59:d7:58:4b: e0:91:d2:24:dc:ca:88:5b:9d:6a:59:23:93:54:7e:3b:be:f1: 8d:1b:30:6d -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEoQLZ/re15cdrgJ5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwMzAwNDUzN1oXDTI3MDkwNjAwNDUzN1owLzEtMCsGA1UEAxMk Y2I3MzkzYWUtY2U2Zi00MjkwLWI3M2ItNzdiNGFiMDE1YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVQXEW/XK/uXeUAxlQqcWtzGbEvroXm+N9Mr etr2np5rCqZjdi1ZSIaenXVBd+9HgjAk5W/wzS0bf4yOpwJ9DtqKsU5MINFRWMMA lh9d8eKm7ksx0zZqCF68VGXyS8jUtVnsaIRwgg+OWBd+dKru4DUjRCmvzuWYJVkw GZb7VTmKeNcB6WYMFFRnNJ3TncGPmiDvTb3z/WWmwSl8Ad+Qye4HKCD6ESK4Gna/ ZhUa+8mF7DhOiaF6kY95ayTP4U51pRoJSofbRj3QwWY7wyvdbrNgv0lSgc3b/Alo hIeR/1oKJoYioVaYeOUKoQ8AYySntN2nmWLXzA8mJpi3esc03QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFII/6bFBcJQbx4QaIAIhK6Jon2ZGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j YjczOTNhZS1jZTZmLTQyOTAtYjczYi03N2I0YWIwMTVhMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2NiNzM5M2FlLWNlNmYtNDI5MC1i NzNiLTc3YjRhYjAxNWEyYi9jYjczOTNhZS1jZTZmLTQyOTAtYjczYi03N2I0YWIw MTVhMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATGSFAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANYVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABGwKy8YP52VRF1KHCNUNKo4u93vG+xkpBUwXPpOd82pIQUd xA0rdnInONnoleO9cufM22nGJ164WWS5ru903FLjRLdPyHwbsW/CaZYMvt2Cf8l1 5ex8yuBytRYPB272vnqdspEadQ4/fJwqSs5aH1feWWwocBC8F0ILNmox8lrADhvs 9PuiY0F6z9OvdN0zvFaKImAEajcJ9YL7ziACrz8mOb45T55jVccs3oaP4rhe9Xia YftJxYD2uJTBpTZJmK5FlU2Fa+3ms0UQZrxDlUn+mpwhc5tlXX8sIVhC6rGZhA7A MjGYWddYS+CR0iTcyohbnWpZI5NUfju+8Y0bMG0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:43:13 2025 by rpki-client