$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer File: d51877be-b85b-4cf7-ae49-18c7da88238f.cer (raw, json) Hash identifier: YAGhiKAuCYKbl+M7yeaf02tsqj/0p+MOuFhoQgwkk2A= Subject key identifier: 76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584AE18ED17B88E15A44A157E6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Aug 2025 00:45:24 +0000 Certificate not after: Sat 20 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 18581 AS: 19508 IP: 199.245.201.0/24 IP: 204.52.250.0/24 IP: 205.167.40.0/23 IP: 205.167.70.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:8e:d1:7b:88:e1:5a:44:a1:57:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Aug 17 00:45:24 2025 GMT Not After : Nov 20 01:45:24 2027 GMT Subject: CN=d51877be-b85b-4cf7-ae49-18c7da88238f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:82:de:71:fe:0d:f6:eb:40:95:4c:b6:e4:c6: f5:7c:ad:fb:60:c1:d4:2c:e8:57:a4:b4:e3:f1:e4: fc:45:aa:88:5e:59:c1:7c:5f:dc:b7:43:94:fa:66: a1:66:9a:f8:6b:68:03:9c:7c:0d:ce:41:dd:46:68: dc:28:73:e6:31:7a:c5:b1:ef:60:fa:7a:e1:2a:a0: 01:08:9e:47:33:0c:01:c0:b8:b7:37:99:5c:8e:bd: c9:51:c9:1a:1b:51:f0:22:59:e6:59:c1:dd:40:9a: 28:4b:85:46:27:07:95:86:f8:92:61:da:de:c3:1d: 96:6a:3e:2c:e0:f9:d0:be:c2:df:ba:77:29:61:4c: 02:62:ca:ee:10:2b:69:9c:d5:fd:0a:26:85:df:2e: 70:29:89:5b:49:01:f9:37:e4:bb:f3:f4:c8:98:db: ae:b3:b3:ae:35:c6:b1:13:9a:8c:3b:59:72:ad:83: 72:1d:43:88:3e:d8:eb:b6:54:be:cb:18:a3:49:3d: f0:a9:91:4d:2b:46:22:0d:3a:34:e0:2e:d5:7a:4d: 9f:ac:95:23:2b:5c:9d:0a:21:d1:82:f0:0c:01:8c: fe:a4:71:d4:21:ae:e5:ce:99:9b:50:38:6c:68:3f: 71:b3:b1:b6:35:b9:19:ca:bb:c6:c4:ae:c4:8e:3d: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.245.201.0/24 204.52.250.0/24 205.167.40.0/23 205.167.70.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18581 19508 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8e:a1:1d:ae:fe:69:2b:ce:84:51:d3:c9:ae:7b:80:af:ac: 97:3c:53:5d:40:25:62:1b:f0:7c:36:6d:8f:12:ab:fc:54:5e: c9:f5:57:f5:02:5a:16:18:83:94:5d:79:a5:8a:65:33:30:82: c6:33:bc:70:38:66:60:1a:ae:ed:d8:0c:fb:83:d8:f5:ac:c6: 31:df:a9:1a:6c:21:b9:03:f3:c7:8c:5e:8e:16:05:04:42:bc: 8e:9c:0c:89:a8:b2:60:cb:86:76:4b:bd:c7:82:8d:cd:0a:15: 05:c1:18:fc:2f:0a:bb:39:34:01:9d:41:97:e5:18:a7:84:6b: e3:27:59:15:c8:19:9d:45:13:d6:7f:99:37:fe:39:16:5b:da: f7:b4:4b:7b:e3:92:47:ed:54:53:0a:6b:34:6f:e4:e7:04:24: 01:5f:df:4d:b3:5e:0b:a2:65:37:a3:a4:fe:65:d1:5f:0a:ab: a3:4a:53:30:cd:90:ac:0f:01:59:54:7b:e1:af:26:c3:d4:cb: e6:9f:ee:05:7e:66:27:0d:e3:45:e9:fd:6d:64:05:2c:d6:f7: fa:93:24:aa:fc:fc:1d:0a:fa:b4:ef:64:9f:34:d2:ca:01:fd: d2:2e:25:df:05:78:1d:ae:a0:be:8f:22:8d:87:6b:2d:12:b5: 15:38:99:56 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWErhjtF7iOFaRKFX5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDgxNzAwNDUyNFoXDTI3MTEyMDAxNDUyNFowLzEtMCsGA1UEAxMk ZDUxODc3YmUtYjg1Yi00Y2Y3LWFlNDktMThjN2RhODgyMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgILecf4N9utAlUy25Mb1fK37YMHULOhXpLTj 8eT8RaqIXlnBfF/ct0OU+mahZpr4a2gDnHwNzkHdRmjcKHPmMXrFse9g+nrhKqAB CJ5HMwwBwLi3N5lcjr3JUckaG1HwIlnmWcHdQJooS4VGJweVhviSYdrewx2Waj4s 4PnQvsLfuncpYUwCYsruECtpnNX9CiaF3y5wKYlbSQH5N+S78/TImNuus7OuNcax E5qMO1lyrYNyHUOIPtjrtlS+yxijST3wqZFNK0YiDTo04C7Vek2frJUjK1ydCiHR gvAMAYz+pHHUIa7lzpmbUDhsaD9xs7G2NbkZyrvGxK7Ejj3YIQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFHb2Hzz3lSH1KmwmfzjBMj3UfjyXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k NTE4NzdiZS1iODViLTRjZjctYWU0OS0xOGM3ZGE4ODIzOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Q1MTg3N2JlLWI4NWItNGNmNy1h ZTQ5LTE4YzdkYTg4MjM4Zi9kNTE4NzdiZS1iODViLTRjZjctYWU0OS0xOGM3ZGE4 ODIzOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBADH9ckDBADMNPoDBAHNpygDBAHNp0YwHQYIKwYB BQUHAQgBAf8EDjAMoAowCAICSJUCAkw0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIeOoR2u/mkrzoRR08mu e4CvrJc8U11AJWIb8Hw2bY8Sq/xUXsn1V/UCWhYYg5RdeaWKZTMwgsYzvHA4ZmAa ru3YDPuD2PWsxjHfqRpsIbkD88eMXo4WBQRCvI6cDImosmDLhnZLvceCjc0KFQXB GPwvCrs5NAGdQZflGKeEa+MnWRXIGZ1FE9Z/mTf+ORZb2ve0S3vjkkftVFMKazRv 5OcEJAFf302zXguiZTejpP5l0V8Kq6NKUzDNkKwPAVlUe+GvJsPUy+af7gV+ZicN 40Xp/W1kBSzW9/qTJKr8/B0K+rTvZJ800soB/dIuJd8FeB2uoL6PIo2Hay0StRU4 mVY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:32 2025 by rpki-client