$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer File: d2e35455-e012-4897-80f6-c6386a9f779c.cer (raw, json) Hash identifier: /Z2T4aW/sB8DPjYeA/8KJ5EO5X4LP9Wwan9iCp3c10s= Subject key identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849DB22985E9D5FC71DC8FCD680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 May 2025 00:45:33 +0000 Certificate not after: Wed 18 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 26520 IP: 23.171.88.0/24 IP: 2602:f987::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:22:98:5e:9d:5f:c7:1d:c8:fc:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 15 00:45:33 2025 GMT Not After : Aug 18 00:45:33 2027 GMT Subject: CN=d2e35455-e012-4897-80f6-c6386a9f779c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:4a:83:70:39:d7:7d:1f:46:b8:3c:b8:8d: 32:dd:49:24:90:68:04:05:7a:fd:7f:00:70:e8:4f: 45:8d:7d:ca:43:a9:ff:39:b4:21:fd:20:48:ff:cf: 9e:7b:82:ad:08:3c:45:17:0f:11:79:99:0b:ad:d3: ed:aa:b2:30:a1:03:f1:02:87:08:01:be:0e:96:b3: b2:f1:e3:2f:c0:35:b4:8d:da:99:af:df:2d:73:dc: 70:31:a7:8e:85:0a:d7:2a:b1:10:f3:fb:98:99:91: a4:2c:9e:ca:0c:dd:6b:c0:ef:c4:90:38:86:35:3f: 5d:fb:42:c8:22:7d:08:5f:20:9a:23:ee:71:f4:b9: 06:1e:1e:df:8a:b8:07:80:48:2a:88:44:2e:c8:97: 3e:87:e8:d1:48:43:99:f1:a2:cd:b0:2a:f3:2e:3e: d7:1c:ae:1f:2e:6e:0f:8a:a7:bf:8b:bb:4f:17:6a: 53:e6:3b:40:2d:37:ac:b1:63:88:d8:28:97:78:cc: 6a:45:7c:b5:64:90:a3:34:86:b4:68:b6:d7:1a:70: c8:58:62:e6:f4:29:5f:82:86:77:60:1b:d7:f6:1c: 57:ee:2b:52:f7:41:86:6c:0e:88:31:59:07:e5:5b: ea:13:12:0e:b3:61:dd:b2:1b:78:be:c5:67:fb:47: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.171.88.0/24 IPv6: 2602:f987::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26520 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b6:ec:d3:0a:f0:f2:96:a3:67:fe:50:f7:45:59:d8:0f:37: 1c:8d:fb:f0:eb:b4:d0:5f:bd:e7:67:7b:37:fc:aa:c8:6d:fe: 6b:bd:d1:99:1b:19:68:3e:26:21:96:7c:2c:68:63:28:ae:65: 43:33:1c:9f:48:51:71:03:c6:13:b8:d9:b0:f5:4d:a7:74:83: 83:19:32:0c:c0:2e:4c:16:ef:24:2b:4a:90:12:cd:10:ec:35: cf:28:62:3e:54:d1:ef:73:dd:76:e8:09:88:a4:3a:0d:a2:f8: b5:b0:a2:ab:f1:7f:a7:cf:9f:4d:2e:1e:25:53:cb:38:7f:b4: 98:a3:50:01:87:7e:d3:d5:bc:41:b5:87:a3:4e:8d:60:7c:db: f4:c9:14:9f:22:40:2f:a2:e2:a8:48:10:b0:ef:ff:b3:5a:48: ba:df:0a:28:c3:4a:cb:8a:05:bb:25:5d:0e:44:ac:28:4c:11: 2f:43:98:c9:b8:e3:82:a8:45:0f:6b:28:85:c4:7f:89:3e:a1: a1:ec:78:0d:11:b6:3c:32:30:b2:10:97:4a:c6:dd:f2:0c:fc: 59:b3:da:26:67:79:a8:0a:71:43:63:f3:76:0d:63:94:59:e8: 78:2b:3c:7c:24:f7:d5:d3:7a:e6:da:bb:31:35:c4:7e:52:bf: d8:71:76:d4 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEnbIphenV/HHcj81oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxNTAwNDUzM1oXDTI3MDgxODAwNDUzM1owLzEtMCsGA1UEAxMk ZDJlMzU0NTUtZTAxMi00ODk3LTgwZjYtYzYzODZhOWY3NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApANKg3A5130fRrg8uI0y3UkkkGgEBXr9fwBw 6E9FjX3KQ6n/ObQh/SBI/8+ee4KtCDxFFw8ReZkLrdPtqrIwoQPxAocIAb4OlrOy 8eMvwDW0jdqZr98tc9xwMaeOhQrXKrEQ8/uYmZGkLJ7KDN1rwO/EkDiGNT9d+0LI In0IXyCaI+5x9LkGHh7firgHgEgqiEQuyJc+h+jRSEOZ8aLNsCrzLj7XHK4fLm4P iqe/i7tPF2pT5jtALTessWOI2CiXeMxqRXy1ZJCjNIa0aLbXGnDIWGLm9ClfgoZ3 YBvX9hxX7itS90GGbA6IMVkH5VvqExIOs2Hdsht4vsVn+0fI9wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLxFhMNomNTNm+Z2g1wzU8NjqBd7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k MmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5Zjc3OWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2QyZTM1NDU1LWUwMTItNDg5Ny04 MGY2LWM2Mzg2YTlmNzc5Yy9kMmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5 Zjc3OWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXq1gwDgQCAAIwCAMGBCYC+YcAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmeYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD627NMK8PKWo2f+UPdFWdgPNxyN +/DrtNBfvednezf8qsht/mu90ZkbGWg+JiGWfCxoYyiuZUMzHJ9IUXEDxhO42bD1 Tad0g4MZMgzALkwW7yQrSpASzRDsNc8oYj5U0e9z3XboCYikOg2i+LWwoqvxf6fP n00uHiVTyzh/tJijUAGHftPVvEG1h6NOjWB82/TJFJ8iQC+i4qhIELDv/7NaSLrf CijDSsuKBbslXQ5ErChMES9DmMm444KoRQ9rKIXEf4k+oaHseA0RtjwyMLIQl0rG 3fIM/Fmz2iZneagKcUNj83YNY5RZ6HgrPHwk99XTeubauzE1xH5Sv9hxdtQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:19 2025 by rpki-client