$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885.cer File: cb73ddb9-215c-471d-8f60-61fdc9b87885.cer (raw, json) Hash identifier: shlh3w5uKLsvBAM9ZHME/wNCwui/eIPfBahCPKOUjyY= Subject key identifier: 0B:73:A6:AA:8D:EB:EB:F5:ED:E7:CF:1B:7E:24:8C:70:F6:A2:74:7D Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A294DC3A1F514C3204F2C8C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/cb73ddb9-215c-471d-8f60-61fdc9b87885.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Jun 2025 00:45:35 +0000 Certificate not after: Wed 15 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 40907 IP: 67.199.244.0/23 IP: 2620:134:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:4d:c3:a1:f5:14:c3:20:4f:2c:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 12 00:45:35 2025 GMT Not After : Sep 15 00:45:35 2027 GMT Subject: CN=cb73ddb9-215c-471d-8f60-61fdc9b87885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:04:a2:22:12:12:13:9b:df:44:65:79:35:1d: f2:e8:fa:85:aa:79:e6:83:5e:84:c2:1d:d1:03:66: e5:12:c6:48:9e:d1:00:17:9c:39:e6:84:79:ed:a5: 7b:08:be:08:62:c6:ca:11:00:e3:29:70:17:3a:23: 0a:a8:98:11:2e:27:7f:d3:f1:99:e8:88:2b:a4:a1: 29:bf:e4:ac:e0:44:d0:7e:86:b4:3b:41:46:2a:8e: ac:5c:d6:0b:1c:3a:a8:a7:df:52:be:b6:06:57:65: 96:01:40:01:e0:b0:4a:f7:35:94:20:61:39:61:3b: 93:83:f3:af:9e:42:0d:07:64:18:0f:c8:1f:0e:cf: be:53:2c:82:21:34:7a:a7:df:fc:25:5d:38:d9:51: c0:5d:11:0c:8e:f4:0f:00:ca:ee:39:d1:15:59:bf: db:f9:41:7e:a3:8d:20:77:4a:ac:67:7c:96:ad:b9: fc:b0:94:d0:52:43:9b:d1:36:e3:49:ea:a5:0b:9b: fc:98:7a:c0:d9:4f:26:88:bd:cf:17:c8:33:2e:f5: 39:2e:a1:4c:f8:13:f0:ac:d1:cb:08:94:b4:91:f2: a5:d2:08:77:99:fa:a4:7b:46:da:e1:f9:87:29:f4: 5d:6d:72:e1:83:ba:ca:e6:6c:48:5c:7f:15:44:02: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:73:A6:AA:8D:EB:EB:F5:ED:E7:CF:1B:7E:24:8C:70:F6:A2:74:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb73ddb9-215c-471d-8f60-61fdc9b87885/cb73ddb9-215c-471d-8f60-61fdc9b87885.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 67.199.244.0/23 IPv6: 2620:134:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40907 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1c:74:43:27:53:39:a4:07:79:7a:a7:4b:fa:27:6a:d2:b8: b3:f2:8f:25:bc:32:a3:ff:bb:ce:5d:fb:8c:22:4a:b7:d3:8a: de:fc:fc:c2:59:c0:dc:f0:3c:4c:a0:fc:2d:15:91:67:dc:8e: 5d:99:0d:85:6c:2e:90:3c:15:97:dd:a5:ed:5c:9c:f4:ed:f6: 92:5c:65:e1:ab:b9:9f:b4:26:62:75:4b:b4:e9:b0:4e:43:1a: 26:08:a8:d0:fc:0f:ea:08:30:d2:b6:ad:3e:62:55:f5:31:c3: f8:f2:ce:93:c3:e1:7d:31:a7:75:b9:b6:f5:df:f7:bb:b1:67: 4e:ed:66:f7:af:de:39:dc:79:16:c3:ca:17:35:8d:8d:50:d8: 5f:a1:d3:cb:52:85:aa:b0:4e:7c:ad:86:57:ec:60:a6:43:ca: 4b:b7:ff:79:ed:33:70:05:7e:40:11:01:ce:8f:0f:d6:f7:01: d1:2a:08:aa:e8:ec:46:11:7a:c4:a3:e5:82:51:a5:e5:21:eb: c0:01:23:7f:e9:81:f3:be:1b:d3:02:15:24:b7:86:5c:5d:0f: 74:2c:82:be:3c:b4:27:06:a5:df:91:2c:29:7e:c6:3d:7d:78: ad:6e:5f:73:5a:60:36:83:fe:7b:e8:b5:c8:3b:82:45:1d:38: 5d:27:6a:55 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEopTcOh9RTDIE8sjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxMjAwNDUzNVoXDTI3MDkxNTAwNDUzNVowLzEtMCsGA1UEAxMk Y2I3M2RkYjktMjE1Yy00NzFkLThmNjAtNjFmZGM5Yjg3ODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQSiIhISE5vfRGV5NR3y6PqFqnnmg16Ewh3R A2blEsZIntEAF5w55oR57aV7CL4IYsbKEQDjKXAXOiMKqJgRLid/0/GZ6IgrpKEp v+Ss4ETQfoa0O0FGKo6sXNYLHDqop99SvrYGV2WWAUAB4LBK9zWUIGE5YTuTg/Ov nkINB2QYD8gfDs++UyyCITR6p9/8JV042VHAXREMjvQPAMruOdEVWb/b+UF+o40g d0qsZ3yWrbn8sJTQUkOb0TbjSeqlC5v8mHrA2U8miL3PF8gzLvU5LqFM+BPwrNHL CJS0kfKl0gh3mfqke0ba4fmHKfRdbXLhg7rK5mxIXH8VRAJZ0QIDAQABo4IELDCC BCgwHQYDVR0OBBYEFAtzpqqN6+v17efPG34kjHD2onR9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j YjczZGRiOS0yMTVjLTQ3MWQtOGY2MC02MWZkYzliODc4ODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2NiNzNkZGI5LTIxNWMtNDcxZC04 ZjYwLTYxZmRjOWI4Nzg4NS9jYjczZGRiOS0yMTVjLTQ3MWQtOGY2MC02MWZkYzli ODc4ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAFDx/QwDwQCAAIwCQMHBCYgATSgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAn8swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAixx0QydTOaQHeXqnS/onatK4 s/KPJbwyo/+7zl37jCJKt9OK3vz8wlnA3PA8TKD8LRWRZ9yOXZkNhWwukDwVl92l 7Vyc9O32klxl4au5n7QmYnVLtOmwTkMaJgio0PwP6ggw0ratPmJV9THD+PLOk8Ph fTGndbm29d/3u7FnTu1m96/eOdx5FsPKFzWNjVDYX6HTy1KFqrBOfK2GV+xgpkPK S7f/ee0zcAV+QBEBzo8P1vcB0SoIqujsRhF6xKPlglGl5SHrwAEjf+mB874b0wIV JLeGXF0PdCyCvjy0Jwal35EsKX7GPX14rW5fc1pgNoP+e+i1yDuCRR04XSdqVQ== -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:37 2025 by rpki-client