$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer File: e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer (raw, json) Hash identifier: i1evO8MLsiKdm+Geoijy5FeLS6venFYRNQ/AHhLny9U= Subject key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A883907967598A6411562B180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 00:45:36 +0000 Certificate not after: Tue 19 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 204.235.252.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:39:07:96:75:98:a6:41:15:62:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 16 00:45:36 2025 GMT Not After : Oct 19 00:45:36 2027 GMT Subject: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:55:bf:c5:bd:58:9e:93:63:e8:4d:15:54:c8: c5:27:0c:ad:92:d9:e1:12:25:0f:1b:93:46:a2:20: 0e:6b:0c:03:a3:e7:63:ba:b9:86:af:fb:88:2c:72: 21:0b:a1:0a:11:e3:ef:02:32:66:e9:cb:bf:02:4e: 82:41:ed:92:41:e7:8c:1e:14:7a:99:a1:c6:0e:67: 02:06:36:a8:51:f3:f1:ff:b3:8f:15:83:61:55:9f: d5:9d:8d:08:0a:45:12:3b:a6:21:69:94:43:bd:4c: 48:e5:a1:91:dd:3b:f6:cc:31:f0:41:7c:50:75:8e: 9e:77:a7:e0:a3:eb:da:a9:59:02:aa:1a:3e:33:c0: 2a:9d:e7:7c:e1:17:67:02:14:dc:b1:b6:3a:54:10: 31:74:7c:b1:3a:d8:e1:7f:e7:2a:06:05:a8:97:97: 65:a8:11:55:e5:cf:63:4f:5c:21:fb:64:c3:ce:ae: 9c:4a:6c:53:fb:c9:de:a1:c4:f7:9c:63:80:b0:3b: 2e:68:12:c8:b2:dc:8f:78:b8:07:fe:9a:65:72:83: a6:cc:a3:2d:52:08:51:84:9d:b4:ac:13:ed:fd:76: 05:d1:46:a8:a4:cd:c7:cc:6d:b4:ab:a0:d3:3c:8f: fc:19:a1:4d:04:4a:fc:c5:37:78:d3:66:6c:fb:0b: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 204.235.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:80:b6:f8:54:b3:9c:9e:b4:5a:32:11:4b:ec:bd:84:14:5b: 70:da:bd:75:73:65:de:8a:22:78:f3:51:e8:00:11:c4:1f:7d: ec:17:e5:b6:42:e1:e0:36:80:32:91:06:05:b9:53:4e:da:3e: dd:63:fe:be:43:33:20:f0:0c:8d:bf:75:f3:96:e8:cb:cd:60: d6:8b:b5:cc:52:99:b6:94:83:4f:9d:fe:ef:b2:ca:a5:72:cc: 08:d5:44:49:e6:6b:e6:d9:f3:6b:2f:63:67:de:66:2a:bf:b9: 13:41:95:10:24:97:51:74:ba:96:73:b2:ae:f9:a1:b7:d8:5c: e4:e6:ea:24:15:31:51:88:94:67:7b:04:0b:9f:7b:bd:29:4c: ec:a1:60:2c:0f:b4:f9:b4:74:5c:5c:0f:bd:0f:18:3a:01:87: 67:69:8f:85:08:3a:b3:5c:d0:60:8b:84:1b:7e:35:98:51:2b: 70:60:29:6f:46:5b:39:5e:92:b5:55:62:bc:6a:d0:a9:43:c1: 9f:3b:7d:23:58:63:0e:10:ed:6d:3d:b8:cf:f7:ee:31:a4:97: 75:8e:82:be:1c:68:50:8e:3e:04:f3:77:b6:75:bd:73:13:af: 1f:72:62:00:21:21:2a:65:8e:d7:d8:54:2b:84:9f:00:e8:43: a1:27:5c:e1 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEqIOQeWdZimQRVisYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcxNjAwNDUzNloXDTI3MTAxOTAwNDUzNlowLzEtMCsGA1UEAxMk ZTkxM2Y5MjItZTlmYy00NWVlLTgzOTYtOGE1NmMwZjViZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VW/xb1YnpNj6E0VVMjFJwytktnhEiUPG5NG oiAOawwDo+djurmGr/uILHIhC6EKEePvAjJm6cu/Ak6CQe2SQeeMHhR6maHGDmcC BjaoUfPx/7OPFYNhVZ/VnY0ICkUSO6YhaZRDvUxI5aGR3Tv2zDHwQXxQdY6ed6fg o+vaqVkCqho+M8Aqned84RdnAhTcsbY6VBAxdHyxOtjhf+cqBgWol5dlqBFV5c9j T1wh+2TDzq6cSmxT+8neocT3nGOAsDsuaBLIstyPeLgH/pplcoOmzKMtUghRhJ20 rBPt/XYF0UaopM3HzG20q6DTPI/8GaFNBEr8xTd402Zs+wuARQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGhWOgQBzIVB2a5WsyEL/4Ym6MGDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l OTEzZjkyMi1lOWZjLTQ1ZWUtODM5Ni04YTU2YzBmNWJkMjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U5MTNmOTIyLWU5ZmMtNDVlZS04 Mzk2LThhNTZjMGY1YmQyNS9lOTEzZjkyMi1lOWZjLTQ1ZWUtODM5Ni04YTU2YzBm NWJkMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALM6/wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkoC2+FSznJ60WjIRS+y9 hBRbcNq9dXNl3ooiePNR6AARxB997BfltkLh4DaAMpEGBblTTto+3WP+vkMzIPAM jb9185boy81g1ou1zFKZtpSDT53+77LKpXLMCNVESeZr5tnzay9jZ95mKr+5E0GV ECSXUXS6lnOyrvmht9hc5ObqJBUxUYiUZ3sEC597vSlM7KFgLA+0+bR0XFwPvQ8Y OgGHZ2mPhQg6s1zQYIuEG341mFErcGApb0ZbOV6StVVivGrQqUPBnzt9I1hjDhDt bT24z/fuMaSXdY6CvhxoUI4+BPN3tnW9cxOvH3JiACEhKmWO19hUK4SfAOhDoSdc 4Q== -----END CERTIFICATE-----Generated at Mon Aug 4 07:49:49 2025 by rpki-client