$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd.cer File: e20283c0-db21-4d92-ac23-4da5857d3bfd.cer (raw, json) Hash identifier: 2t3QEZuDt7PRICDPncYNk4KBpV944BemjRuR6fqRVaY= Subject key identifier: 26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849DB2297D57470BBAE8E849C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 May 2025 00:45:33 +0000 Certificate not after: Wed 18 Aug 2027 00:45:33 +0000 Subordinate resources: IP: 2604:1ec0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:22:97:d5:74:70:bb:ae:8e:84:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 15 00:45:33 2025 GMT Not After : Aug 18 00:45:33 2027 GMT Subject: CN=e20283c0-db21-4d92-ac23-4da5857d3bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:33:36:01:21:b0:b8:34:48:73:12:4c:ab:e2: cf:c5:85:2d:f4:d7:97:95:27:51:18:fd:ad:e4:b7: a3:60:b6:c7:39:c7:0b:c9:63:48:cc:72:9c:aa:39: 89:a4:ab:4a:fd:2c:23:b1:3b:c8:8c:16:50:0a:ae: d6:45:48:0c:3d:ec:bf:1f:76:a1:22:4b:98:85:40: c0:40:b8:a7:18:c6:6e:c4:be:4e:c8:8b:5c:e6:96: 0a:13:a4:b2:62:7f:cc:64:ba:c5:15:4b:de:94:5b: 92:88:a1:5f:b6:aa:c2:41:ea:36:eb:b4:bc:57:fa: 8a:98:9e:90:ba:ed:1e:af:cc:4a:e9:2d:3d:04:36: 18:ff:a9:03:89:b0:da:39:4e:40:e2:a0:d0:c0:43: 27:a1:13:16:83:1e:2e:06:28:7e:17:c3:c4:3a:9c: be:d5:f6:fc:3b:9e:f9:ed:a1:e6:68:ec:bc:8f:5a: b1:0e:9a:c0:f6:2c:9f:21:bb:bb:02:92:0c:e2:f1: 1c:38:27:a8:8e:20:52:07:49:08:13:59:9d:be:36: b6:19:a0:92:a5:52:87:ed:8c:4b:e9:a5:03:50:68: 73:5a:bc:47:36:85:88:f7:9c:3a:99:54:02:7e:ad: fe:29:46:cb:2a:26:f5:7f:ac:6f:a5:94:09:59:99: 4a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D2:7B:E0:3F:0A:48:AA:21:AE:FC:49:EB:65:08:33:17:03:89:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e20283c0-db21-4d92-ac23-4da5857d3bfd/e20283c0-db21-4d92-ac23-4da5857d3bfd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2604:1ec0::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fc:55:ab:4e:56:5a:48:30:ab:7e:e2:e8:60:29:9f:4e:cd: b8:7a:35:1e:df:c7:b5:ca:28:63:2e:f4:01:2f:59:10:b3:2b: f1:9e:a7:0a:85:29:e1:58:5c:ea:bb:8d:41:f2:0f:ad:d3:cb: f4:55:22:92:99:f2:a3:17:b7:8e:3c:c5:f8:06:6e:5e:2d:c4: e5:be:9c:5d:80:95:e7:f8:c2:93:49:9a:84:ab:a8:e3:bb:4e: 42:0a:a7:d1:13:30:44:01:39:57:ae:dd:35:90:10:10:e9:2b: 72:ea:52:17:eb:09:93:c8:d8:60:25:04:15:18:65:33:5e:92: 6f:46:6a:2a:4e:ec:b8:d7:af:f0:4a:eb:2e:10:85:13:34:4f: d0:2d:86:2e:4f:81:dd:d9:37:69:eb:2c:25:24:cf:7c:01:d7: a1:95:28:14:40:42:63:1a:01:41:62:5c:f0:9b:d1:0b:cd:99: 6a:3d:9d:9d:e1:d6:80:1d:e6:71:07:ea:3b:df:f8:8e:77:4f: 4f:eb:01:3e:8c:db:82:8e:f7:59:be:3b:33:cb:69:8f:bf:b4: 9a:3f:57:59:f6:82:35:cf:8a:61:8e:9c:23:ec:94:7e:f2:ca: ee:81:40:b9:5c:5e:c8:df:6c:74:19:d3:5e:91:15:d4:e3:0b: d1:f3:12:a3 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEnbIpfVdHC7ro6EnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxNTAwNDUzM1oXDTI3MDgxODAwNDUzM1owLzEtMCsGA1UEAxMk ZTIwMjgzYzAtZGIyMS00ZDkyLWFjMjMtNGRhNTg1N2QzYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTM2ASGwuDRIcxJMq+LPxYUt9NeXlSdRGP2t 5LejYLbHOccLyWNIzHKcqjmJpKtK/SwjsTvIjBZQCq7WRUgMPey/H3ahIkuYhUDA QLinGMZuxL5OyItc5pYKE6SyYn/MZLrFFUvelFuSiKFftqrCQeo267S8V/qKmJ6Q uu0er8xK6S09BDYY/6kDibDaOU5A4qDQwEMnoRMWgx4uBih+F8PEOpy+1fb8O575 7aHmaOy8j1qxDprA9iyfIbu7ApIM4vEcOCeojiBSB0kIE1mdvja2GaCSpVKH7YxL 6aUDUGhzWrxHNoWI95w6mVQCfq3+KUbLKib1f6xvpZQJWZlKjwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFCbSe+A/CkiqIa78SetlCDMXA4nPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l MjAyODNjMC1kYjIxLTRkOTItYWMyMy00ZGE1ODU3ZDNiZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2UyMDI4M2MwLWRiMjEtNGQ5Mi1h YzIzLTRkYTU4NTdkM2JmZC9lMjAyODNjMC1kYjIxLTRkOTItYWMyMy00ZGE1ODU3 ZDNiZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmBB7AADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg/FWrTlZaSDCrfuLo YCmfTs24ejUe38e1yihjLvQBL1kQsyvxnqcKhSnhWFzqu41B8g+t08v0VSKSmfKj F7eOPMX4Bm5eLcTlvpxdgJXn+MKTSZqEq6jju05CCqfREzBEATlXrt01kBAQ6Sty 6lIX6wmTyNhgJQQVGGUzXpJvRmoqTuy416/wSusuEIUTNE/QLYYuT4Hd2Tdp6ywl JM98AdehlSgUQEJjGgFBYlzwm9ELzZlqPZ2d4daAHeZxB+o73/iOd09P6wE+jNuC jvdZvjszy2mPv7SaP1dZ9oI1z4phjpwj7JR+8srugUC5XF7I32x0GdNekRXU4wvR 8xKj -----END CERTIFICATE-----Generated at Wed Nov 5 02:53:09 2025 by rpki-client