$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5.cer File: ea312878-f1ba-42e7-a1ba-81816caf8ac5.cer (raw, json) Hash identifier: WL8s1SxdYVLmC93n2yb+6lvE/NHubSC8GjIaBEV/v+4= Subject key identifier: 03:07:10:68:04:D9:5C:64:24:49:7C:10:73:CC:A1:E3:FC:92:84:BF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849FF6D84DC408B40690DB44680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ea312878-f1ba-42e7-a1ba-81816caf8ac5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 May 2025 00:45:37 +0000 Certificate not after: Tue 31 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 54617 IP: 204.238.141.0/24 IP: 2620:1b:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:6d:84:dc:40:8b:40:69:0d:b4:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 28 00:45:37 2025 GMT Not After : Aug 31 00:45:37 2027 GMT Subject: CN=ea312878-f1ba-42e7-a1ba-81816caf8ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:85:7f:9a:4b:cd:17:06:56:f9:2d:9d:2e:6d: 07:f5:fc:c5:50:4e:6e:cc:86:88:de:54:36:36:e9: ea:0c:04:69:7b:f1:79:41:9e:e1:ee:fd:a3:5a:04: 49:2e:54:2b:ee:1e:55:73:bf:ee:15:5d:f1:e6:03: ec:2d:bd:91:50:bc:ee:7b:fa:e6:b4:24:21:9c:66: c0:12:73:1a:62:0b:29:64:96:ea:bc:5c:61:ef:17: 69:b5:47:85:ad:5b:bf:ce:81:59:e8:14:d8:57:ed: fc:d2:72:17:ca:f3:16:f2:e9:20:8e:1d:3a:9a:1b: 0d:e0:9a:5c:bb:56:bc:f3:01:bd:28:29:6e:72:e6: 0c:76:88:77:14:70:80:20:59:6d:56:71:83:6d:98: f3:e0:a4:0f:ea:d1:8a:81:cf:73:96:55:90:82:1d: 33:19:fa:ae:72:c7:bd:e8:58:53:b3:ee:2c:12:4e: 03:ea:6d:c0:e7:97:07:0c:00:a2:88:8b:56:c0:6b: b3:85:11:1d:37:f3:b5:b0:98:ae:5c:a1:26:b4:1a: 7e:aa:59:a2:94:5d:b1:22:5d:31:c6:8b:9c:ea:ed: 4f:bb:c9:8e:22:68:74:bf:34:17:23:bf:00:ff:83: 21:78:26:0c:f5:a9:7e:ed:70:f8:e0:59:56:98:18: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:10:68:04:D9:5C:64:24:49:7C:10:73:CC:A1:E3:FC:92:84:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ea312878-f1ba-42e7-a1ba-81816caf8ac5/ea312878-f1ba-42e7-a1ba-81816caf8ac5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 204.238.141.0/24 IPv6: 2620:1b:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54617 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:79:1b:ec:5c:39:a5:c3:65:f6:ee:32:9a:07:32:1c:d4:01: a5:b6:f9:86:46:ca:3c:96:ac:d4:1d:61:68:07:a2:9e:45:85: c0:55:b3:a5:f7:d3:36:91:de:d4:89:03:72:a3:8b:e2:7c:77: 77:70:3c:ef:d7:7a:9a:4a:e3:c1:72:13:b0:66:60:e9:0c:f3: 22:73:72:11:b8:0d:60:22:48:05:d4:39:27:ea:02:b0:c0:72: 7e:6b:22:21:ce:f5:9d:37:b4:fe:e4:be:6f:6c:b7:25:cf:c5: 99:13:21:de:21:1a:e7:8e:56:c2:47:0b:2a:b3:0c:fb:18:49: 3a:43:6c:53:31:88:90:fc:12:8b:06:7d:c3:02:81:16:05:35: fe:42:09:26:12:ae:7c:cd:3d:78:49:00:5e:57:95:29:94:0e: 64:59:d2:82:04:85:16:60:10:81:10:c8:64:9d:ad:f7:d3:1d: 35:eb:18:cf:0c:cb:c4:7c:c7:9d:0b:cb:f2:46:11:47:5c:a3: 2e:11:ca:e6:10:48:31:70:fb:40:0d:59:2b:10:5f:04:40:fc: 02:36:e1:b8:ed:7c:59:b6:18:65:0d:03:c7:06:a4:27:59:ec: d3:19:5b:97:01:d7:db:5f:d0:e9:cb:ff:0c:a2:a8:5e:30:56: fa:0e:39:42 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEn/bYTcQItAaQ20RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyODAwNDUzN1oXDTI3MDgzMTAwNDUzN1owLzEtMCsGA1UEAxMk ZWEzMTI4NzgtZjFiYS00MmU3LWExYmEtODE4MTZjYWY4YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYV/mkvNFwZW+S2dLm0H9fzFUE5uzIaI3lQ2 NunqDARpe/F5QZ7h7v2jWgRJLlQr7h5Vc7/uFV3x5gPsLb2RULzue/rmtCQhnGbA EnMaYgspZJbqvFxh7xdptUeFrVu/zoFZ6BTYV+380nIXyvMW8ukgjh06mhsN4Jpc u1a88wG9KClucuYMdoh3FHCAIFltVnGDbZjz4KQP6tGKgc9zllWQgh0zGfqucse9 6FhTs+4sEk4D6m3A55cHDACiiItWwGuzhREdN/O1sJiuXKEmtBp+qlmilF2xIl0x xouc6u1Pu8mOImh0vzQXI78A/4MheCYM9al+7XD44FlWmBjsbQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFAMHEGgE2VxkJEl8EHPMoeP8koS/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YTMxMjg3OC1mMWJhLTQyZTctYTFiYS04MTgxNmNhZjhhYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2VhMzEyODc4LWYxYmEtNDJlNy1h MWJhLTgxODE2Y2FmOGFjNS9lYTMxMjg3OC1mMWJhLTQyZTctYTFiYS04MTgxNmNh ZjhhYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADM7o0wDwQCAAIwCQMHACYgABugADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA1VkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEXkb7Fw5pcNl9u4ymgcyHNQB pbb5hkbKPJas1B1haAeinkWFwFWzpffTNpHe1IkDcqOL4nx3d3A879d6mkrjwXIT sGZg6QzzInNyEbgNYCJIBdQ5J+oCsMByfmsiIc71nTe0/uS+b2y3Jc/FmRMh3iEa 545WwkcLKrMM+xhJOkNsUzGIkPwSiwZ9wwKBFgU1/kIJJhKufM09eEkAXleVKZQO ZFnSggSFFmAQgRDIZJ2t99MdNesYzwzLxHzHnQvL8kYRR1yjLhHK5hBIMXD7QA1Z KxBfBED8AjbhuO18WbYYZQ0DxwakJ1ns0xlblwHX21/Q6cv/DKKoXjBW+g45Qg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:27 2025 by rpki-client