$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7.cer File: eb622fc4-4fd0-4955-b02b-48229b06ccb7.cer (raw, json) Hash identifier: mBqc0JkmpvxFpQcodqvPRlT/bSAP9nab2XKjzrMyGl4= Subject key identifier: 9F:9F:2A:ED:1A:36:E3:DE:28:CF:E0:98:00:0B:9E:E0:DA:32:EF:E7 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A71E38EDA960F853CB3239048 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/eb622fc4-4fd0-4955-b02b-48229b06ccb7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Jul 2025 00:45:36 +0000 Certificate not after: Mon 11 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 12125 IP: 104.129.144.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:e3:8e:da:96:0f:85:3c:b3:23:90:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 8 00:45:36 2025 GMT Not After : Oct 11 00:45:36 2027 GMT Subject: CN=eb622fc4-4fd0-4955-b02b-48229b06ccb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6c:f5:e5:c8:2e:28:4d:1c:b9:79:1e:b7:da: 06:de:e5:b1:a9:ed:2f:7f:63:96:31:24:1a:36:b0: c6:70:38:e0:4b:b2:ee:0b:d4:41:51:98:36:d6:1e: 1a:27:f6:b7:f9:40:34:b4:60:12:dd:89:90:11:70: 92:7d:94:e9:21:20:20:eb:6c:bc:0d:09:08:33:9d: 12:76:24:1d:ba:96:9b:64:1b:d8:20:cd:1c:92:43: 11:f1:80:20:cd:c9:69:c4:30:79:9e:64:21:15:35: 1b:15:7c:a5:e9:ac:dd:20:a4:c4:61:fb:21:f7:6c: 96:c1:cc:70:9a:4d:19:44:1a:f3:e0:08:f0:4d:78: 78:1c:ed:61:ca:49:68:f5:3d:1c:a5:a3:29:c8:1c: 5d:3a:46:a9:64:08:78:8d:66:a7:eb:0a:f1:e9:0e: f4:a1:73:79:55:85:b1:e4:7b:2e:06:d8:68:dc:1e: 74:d5:b8:6e:5f:36:8e:7c:f9:d7:f1:54:7b:02:90: 23:50:20:ba:50:4f:76:d3:73:83:01:9c:d3:39:b9: d6:84:a8:b3:39:29:02:ee:a1:15:a5:31:e6:a6:9a: 7c:d5:d2:10:b1:6a:86:65:32:0f:46:f9:62:4f:16: 61:94:d6:80:b9:05:3f:e1:bd:65:89:9d:d4:49:d8: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:2A:ED:1A:36:E3:DE:28:CF:E0:98:00:0B:9E:E0:DA:32:EF:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/eb622fc4-4fd0-4955-b02b-48229b06ccb7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 104.129.144.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9f:f3:36:6d:42:1a:70:3d:ff:97:93:20:e6:b7:50:1c:fb: 9e:de:31:a9:0a:73:4c:af:18:e4:9a:9d:13:64:22:7a:6d:36: 6a:a2:38:4d:06:d7:63:59:ea:50:ff:ce:ba:e9:de:d8:71:36: ff:9c:f1:c7:56:dd:94:21:c6:35:88:ad:d0:7d:93:07:4f:dc: 28:6a:bf:62:6b:56:9a:57:f7:27:e7:05:34:24:2c:0e:3c:dd: 0a:cc:be:ad:85:d2:9d:a0:c1:49:49:30:27:ef:3d:b0:ff:56: 74:98:8f:b5:62:21:cb:d1:1b:35:7d:43:ae:df:e6:56:98:15: 4e:b5:47:e3:8c:b6:ac:9b:b4:39:b9:39:9b:af:21:01:22:e8: d4:34:ce:24:af:41:3f:31:df:f2:1e:8b:70:1f:38:0f:40:b3: a9:c5:f2:22:c6:99:29:b9:a6:ff:2e:66:53:3f:de:71:ce:3f: 01:93:58:05:24:e0:be:b9:55:8a:8e:c9:fa:13:a0:42:01:59: 3a:86:48:45:e0:2b:a3:57:7e:8b:6d:84:17:a4:f3:2d:de:ce: 2c:5c:b0:61:09:64:13:a6:4f:c1:6c:6d:c5:ea:ff:72:5c:aa: 01:21:77:40:1d:e2:25:3e:1c:39:d2:06:ed:d6:20:91:0e:96: 70:97:d1:69 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEpx447alg+FPLMjkEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwODAwNDUzNloXDTI3MTAxMTAwNDUzNlowLzEtMCsGA1UEAxMk ZWI2MjJmYzQtNGZkMC00OTU1LWIwMmItNDgyMjliMDZjY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2z15cguKE0cuXket9oG3uWxqe0vf2OWMSQa NrDGcDjgS7LuC9RBUZg21h4aJ/a3+UA0tGAS3YmQEXCSfZTpISAg62y8DQkIM50S diQdupabZBvYIM0ckkMR8YAgzclpxDB5nmQhFTUbFXyl6azdIKTEYfsh92yWwcxw mk0ZRBrz4AjwTXh4HO1hyklo9T0cpaMpyBxdOkapZAh4jWan6wrx6Q70oXN5VYWx 5HsuBtho3B501bhuXzaOfPnX8VR7ApAjUCC6UE9203ODAZzTObnWhKizOSkC7qEV pTHmppp81dIQsWqGZTIPRvliTxZhlNaAuQU/4b1liZ3USdjIDwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJ+fKu0aNuPeKM/gmAALnuDaMu/nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YjYyMmZjNC00ZmQwLTQ5NTUtYjAyYi00ODIyOWIwNmNjYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ViNjIyZmM0LTRmZDAtNDk1NS1i MDJiLTQ4MjI5YjA2Y2NiNy9lYjYyMmZjNC00ZmQwLTQ5NTUtYjAyYi00ODIyOWIw NmNjYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJogZAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC L10wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALJ/zNm1CGnA9/5eTIOa3UBz7nt4xqQpzTK8Y5JqdE2Qiem02 aqI4TQbXY1nqUP/Ouune2HE2/5zxx1bdlCHGNYit0H2TB0/cKGq/YmtWmlf3J+cF NCQsDjzdCsy+rYXSnaDBSUkwJ+89sP9WdJiPtWIhy9EbNX1Drt/mVpgVTrVH44y2 rJu0Obk5m68hASLo1DTOJK9BPzHf8h6LcB84D0CzqcXyIsaZKbmm/y5mUz/ecc4/ AZNYBSTgvrlVio7J+hOgQgFZOoZIReAro1d+i22EF6TzLd7OLFywYQlkE6ZPwWxt xer/clyqASF3QB3iJT4cOdIG7dYgkQ6WcJfRaQ== -----END CERTIFICATE-----Generated at Wed Aug 6 13:19:37 2025 by rpki-client