$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer File: e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer (raw, json) Hash identifier: RIFOaSuUpBiFkOQfrrRi1KV+B09AFKJ+r1VZDqeHQ8M= Subject key identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A252B5EBA24EB1FA7206E7800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Jun 2025 13:13:03 +0000 Certificate not after: Mon 13 Sep 2027 13:13:03 +0000 Subordinate resources: AS: 32688 IP: 66.6.192.0/21 IP: 168.245.158.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:2b:5e:ba:24:eb:1f:a7:20:6e:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 10 13:13:03 2025 GMT Not After : Sep 13 13:13:03 2027 GMT Subject: CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:99:6d:8e:4e:22:36:80:33:53:bd:8e:34: 95:69:09:b0:c1:71:54:be:38:9c:31:ab:fc:03:06: 71:b1:0b:95:2c:b5:97:75:54:66:29:54:07:a1:32: 7d:52:45:17:4d:45:d0:07:f4:d9:f0:08:8c:c0:60: 38:0e:5d:8a:2b:28:48:00:fd:88:d7:68:a7:26:94: 3a:23:25:42:6f:f8:37:cc:d1:00:62:e3:75:2a:f6: 88:be:fc:f0:5f:1a:54:7f:ca:8b:4c:1b:5e:c2:9e: 86:e9:bc:6f:ed:7a:c7:8c:ee:e5:ba:9e:97:ee:29: 35:fe:16:44:c6:23:7b:dd:61:6a:80:ec:f5:a7:fd: 4d:22:af:8b:5e:ef:9a:4f:a7:1d:02:4e:c3:d3:76: e4:80:c9:f6:5d:cb:6a:fe:94:63:63:be:87:23:9b: 20:db:7d:cf:d7:c8:c7:eb:f5:f8:54:9e:b3:01:91: a4:6e:6e:7f:c7:8c:05:7a:f0:c3:05:74:bc:a0:5b: d3:18:8f:bb:10:90:d1:8d:f5:52:eb:7a:50:89:d3: 95:2c:88:af:4e:cc:1c:a7:cc:64:b5:78:37:52:a3: 74:09:50:19:0a:35:3b:41:c5:c4:f5:24:e4:f3:c6: ed:7b:d3:36:3a:cb:5f:67:a9:2f:3b:62:99:ae:25: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.6.192.0/21 168.245.158.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32688 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:aa:76:d9:f8:04:f3:b8:9f:d4:35:38:ec:c6:9e:59:b5:14: 3b:df:3f:eb:ed:d1:0c:a1:e1:29:01:3b:fe:05:bc:dc:b0:82: bf:b7:57:10:7d:ed:67:d6:75:81:90:8f:bb:8c:93:35:1f:f9: 90:0c:82:67:cb:45:0e:c4:bc:7d:f2:6b:c2:1a:7e:ff:47:16: 56:89:88:4e:a1:ce:9e:dd:f1:db:95:44:bb:31:c3:15:cd:3a: f0:e2:7a:85:c7:04:08:8e:3a:5c:f1:5d:db:15:46:65:00:1b: fb:35:82:00:54:76:1f:87:a7:fa:ae:cf:44:80:c6:75:5f:17: ab:ae:38:ca:9f:55:06:e7:cf:db:1b:62:5a:d6:08:89:83:97: 32:7e:79:f3:a9:a0:bb:52:be:2a:31:58:1b:56:d0:42:43:2b: 6c:f1:b4:34:a2:56:f2:25:02:07:20:79:d5:5f:77:8d:77:80: dc:e4:08:ea:ba:fd:66:f6:7c:f0:5e:21:c7:49:3d:2a:8c:d9: e4:60:9a:d8:fb:29:cf:46:4f:3f:9e:08:cf:6e:93:97:3c:38: 48:a0:8c:33:60:22:3c:20:5d:fa:7a:4d:f1:de:d9:1e:c9:eb: b5:f4:0b:bb:4c:c9:d6:0d:f7:3b:22:b9:f4:d4:e5:dc:be:97: db:f8:fe:83 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEolK166JOsfpyBueAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxMDEzMTMwM1oXDTI3MDkxMzEzMTMwM1owLzEtMCsGA1UEAxMk ZTdlYzA4N2EtYWZiZS00ZTE1LTkyZDMtYWJhYmNjYzBiYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwaZbY5OIjaAM1O9jjSVaQmwwXFUvjicMav8 AwZxsQuVLLWXdVRmKVQHoTJ9UkUXTUXQB/TZ8AiMwGA4Dl2KKyhIAP2I12inJpQ6 IyVCb/g3zNEAYuN1KvaIvvzwXxpUf8qLTBtewp6G6bxv7XrHjO7lup6X7ik1/hZE xiN73WFqgOz1p/1NIq+LXu+aT6cdAk7D03bkgMn2Xctq/pRjY76HI5sg233P18jH 6/X4VJ6zAZGkbm5/x4wFevDDBXS8oFvTGI+7EJDRjfVS63pQidOVLIivTswcp8xk tXg3UqN0CVAZCjU7QcXE9STk88bte9M2OstfZ6kvO2KZriU/vwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFPcJL7nELX4BNZEeqd3t1eu2m4JiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l N2VjMDg3YS1hZmJlLTRlMTUtOTJkMy1hYmFiY2NjMGJiZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U3ZWMwODdhLWFmYmUtNGUxNS05 MmQzLWFiYWJjY2MwYmJlMC9lN2VjMDg3YS1hZmJlLTRlMTUtOTJkMy1hYmFiY2Nj MGJiZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANCBsADBAGo9Z4wGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICf7AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAE6p22fgE87if1DU47MaeWbUUO98/6+3RDKHhKQE7 /gW83LCCv7dXEH3tZ9Z1gZCPu4yTNR/5kAyCZ8tFDsS8ffJrwhp+/0cWVomITqHO nt3x25VEuzHDFc068OJ6hccECI46XPFd2xVGZQAb+zWCAFR2H4en+q7PRIDGdV8X q644yp9VBufP2xtiWtYIiYOXMn5586mgu1K+KjFYG1bQQkMrbPG0NKJW8iUCByB5 1V93jXeA3OQI6rr9ZvZ88F4hx0k9KozZ5GCa2Pspz0ZPP54Iz26Tlzw4SKCMM2Ai PCBd+npN8d7ZHsnrtfQLu0zJ1g33OyK59NTl3L6X2/j+gw== -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:38 2025 by rpki-client