$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer File: e0808dbd-8138-4b99-ac5a-4f6a7f475f92.cer (raw, json) Hash identifier: 5pUnlwXEmIgopNb67E87jEvnHcM6rpepP3OzoFOnqM4= Subject key identifier: CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849E9180E0EC2370EFE645146A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 May 2025 00:45:38 +0000 Certificate not after: Mon 23 Aug 2027 00:45:38 +0000 Subordinate resources: AS: 396919 IP: 66.51.112.0/21 IP: 69.58.92.0/23 IP: 162.213.48.0/21 IP: 170.249.92.0/22 IP: 216.180.128.0/20 IP: 2605:940::/32 IP: 2620:51:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:18:0e:0e:c2:37:0e:fe:64:51:46:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 20 00:45:38 2025 GMT Not After : Aug 23 00:45:38 2027 GMT Subject: CN=e0808dbd-8138-4b99-ac5a-4f6a7f475f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:fb:f7:92:66:34:c4:06:9e:29:fc:e2:fb: 81:54:a3:ea:e8:fc:44:ac:d2:50:ab:0e:ed:9e:98: 0b:1f:bd:c5:5a:33:a8:c1:89:14:fb:5b:ef:ec:17: 61:55:45:37:fa:f7:89:e6:29:c9:5d:d1:44:bf:17: 27:5f:30:5c:b4:0c:e6:12:33:ce:14:5d:9c:33:c6: ba:bb:26:48:54:c4:88:7c:e9:bd:42:91:87:05:75: 42:10:c5:58:ee:19:96:cc:3d:c7:54:73:b2:26:72: 0f:87:35:7f:bf:f8:8b:b8:2e:de:dc:a8:9e:c9:db: eb:28:71:ff:a0:97:5c:fb:d3:84:1d:80:e4:bb:fc: 6c:aa:8a:cf:8e:ec:f5:60:b6:89:10:ec:c7:54:13: f3:9f:d0:47:95:85:bd:ce:1d:84:f0:f9:04:0e:cb: 80:d6:8a:57:ee:e2:ea:1f:16:8b:00:ea:6c:25:3f: 14:fd:0b:cf:e8:7b:c0:66:eb:c5:7e:84:c2:49:17: d2:0f:fc:d3:d2:c8:d9:2f:43:dc:66:14:d5:a1:06: d6:ad:9c:66:e1:e4:fc:94:cb:ea:b0:3e:e0:90:8e: 93:d9:fe:96:d4:ce:ac:29:4f:94:84:d8:d7:fa:11: 91:e0:55:56:ca:16:5e:a7:31:6e:ee:cc:64:02:9f: 7f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:54:C2:97:29:E2:9F:BF:FD:7B:3F:D5:DB:32:2A:8B:CC:EC:9A:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0808dbd-8138-4b99-ac5a-4f6a7f475f92/e0808dbd-8138-4b99-ac5a-4f6a7f475f92.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.51.112.0/21 69.58.92.0/23 162.213.48.0/21 170.249.92.0/22 216.180.128.0/20 IPv6: 2605:940::/32 2620:51:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396919 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c9:2a:c9:2c:06:92:d8:59:23:67:f4:10:9c:59:47:66:3b: ac:2d:5d:7d:d1:9f:6e:cb:c2:34:83:77:30:ca:2a:da:e6:18: 60:ed:ed:78:1e:c6:33:fa:8b:a6:c9:37:eb:86:d8:56:27:7b: a6:5e:9c:89:fd:c8:ae:8b:99:5d:aa:77:c3:04:c4:d8:97:24: 15:c7:dc:34:1c:32:89:ef:34:08:23:47:13:f1:ad:ad:49:0e: bf:2a:79:99:1b:31:8f:ff:db:f0:49:2a:c0:7e:38:e9:ac:43: 6c:46:8f:41:4c:13:5c:44:97:30:c0:cb:29:7b:9c:10:26:74: 17:f0:d9:24:62:bb:be:ee:6a:82:c5:3c:94:7a:2e:3f:47:03: 19:de:f2:5f:b0:ef:f2:d5:d3:6f:f1:6f:f4:7e:2c:ce:9e:67: f0:87:64:14:90:3f:a4:56:eb:85:d6:dd:33:b1:12:c8:48:0d: f6:6f:ad:af:3f:8f:11:d4:10:89:7e:5f:7b:48:07:dd:81:3f: c9:ec:c1:17:43:2d:91:ac:6c:f4:d5:16:2a:c5:c4:2b:65:36: 7d:3c:95:af:8b:82:33:56:82:b5:25:d9:57:85:d3:57:51:4d: 22:8a:e9:02:7d:c8:fe:a5:58:ff:fa:94:12:7d:95:7a:aa:4b: 53:70:f9:db -----BEGIN CERTIFICATE----- MIIHOTCCBiGgAwIBAgIUAQ0Mn0MoWEnpGA4OwjcO/mRRRqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyMDAwNDUzOFoXDTI3MDgyMzAwNDUzOFowLzEtMCsGA1UEAxMk ZTA4MDhkYmQtODEzOC00Yjk5LWFjNWEtNGY2YTdmNDc1ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYj795JmNMQGnin84vuBVKPq6PxErNJQqw7t npgLH73FWjOowYkU+1vv7BdhVUU3+veJ5inJXdFEvxcnXzBctAzmEjPOFF2cM8a6 uyZIVMSIfOm9QpGHBXVCEMVY7hmWzD3HVHOyJnIPhzV/v/iLuC7e3KieydvrKHH/ oJdc+9OEHYDku/xsqorPjuz1YLaJEOzHVBPzn9BHlYW9zh2E8PkEDsuA1opX7uLq HxaLAOpsJT8U/QvP6HvAZuvFfoTCSRfSD/zT0sjZL0PcZhTVoQbWrZxm4eT8lMvq sD7gkI6T2f6W1M6sKU+UhNjX+hGR4FVWyhZepzFu7sxkAp9/kwIDAQABo4IESzCC BEcwHQYDVR0OBBYEFMpUwpcp4p+//Xs/1dsyKovM7JqzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l MDgwOGRiZC04MTM4LTRiOTktYWM1YS00ZjZhN2Y0NzVmOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2UwODA4ZGJkLTgxMzgtNGI5OS1h YzVhLTRmNmE3ZjQ3NWY5Mi9lMDgwOGRiZC04MTM4LTRiOTktYWM1YS00ZjZhN2Y0 NzVmOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MCQEAgABMB4DBANCM3ADBAFFOlwDBAOi1TADBAKq+VwDBATYtIAw FgQCAAIwEAMFACYFCUADBwAmIABRIAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bg53MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFrJKsksBpLYWSNn9BCcWUdmO6wtXX3Rn27LwjSDdzDKKtrm GGDt7XgexjP6i6bJN+uG2FYne6ZenIn9yK6LmV2qd8MExNiXJBXH3DQcMonvNAgj RxPxra1JDr8qeZkbMY//2/BJKsB+OOmsQ2xGj0FME1xElzDAyyl7nBAmdBfw2SRi u77uaoLFPJR6Lj9HAxne8l+w7/LV02/xb/R+LM6eZ/CHZBSQP6RW64XW3TOxEshI DfZvra8/jxHUEIl+X3tIB92BP8nswRdDLZGsbPTVFirFxCtlNn08la+LgjNWgrUl 2VeF01dRTSKK6QJ9yP6lWP/6lBJ9lXqqS1Nw+ds= -----END CERTIFICATE-----Generated at Wed Nov 5 01:39:10 2025 by rpki-client