$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer File: ebf10f16-5f3c-4b91-8d9d-40a9535563bb.cer (raw, json) Hash identifier: PwgnIsKEuknmpN6/WZLHhsuO4ND6PZspISFHq+4PH4M= Subject key identifier: 21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A98F922E0D532CAF6F9BBB200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 00:45:36 +0000 Certificate not after: Mon 25 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 397529 AS: 401028 AS: 401301 IP: 23.132.144.0/24 IP: 2620:6f:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:f9:22:e0:d5:32:ca:f6:f9:bb:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 22 00:45:36 2025 GMT Not After : Oct 25 00:45:36 2027 GMT Subject: CN=ebf10f16-5f3c-4b91-8d9d-40a9535563bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:7a:93:c3:00:58:d5:bf:c1:d1:c3:ac:78: fa:50:e5:5e:37:83:e2:cd:32:43:2f:fc:de:f9:bc: df:6d:23:29:9b:8b:07:90:d6:1c:e2:72:dd:d2:bd: fd:fd:78:b1:16:e5:db:e6:73:7b:b3:a7:61:f9:24: 85:a5:3c:3a:af:33:c3:64:09:dc:c5:41:26:be:28: ca:c4:82:90:40:86:6c:7a:ee:8e:97:03:63:3d:a3: ae:fd:b9:ff:7b:c6:49:d2:e0:e1:91:0c:e0:36:30: f4:e9:10:de:40:19:78:e0:13:e4:6f:0f:96:ea:a1: c4:06:02:66:dc:51:2c:07:d0:58:4e:37:eb:84:bb: 74:70:26:bb:16:6c:f5:7b:e5:0a:29:4e:f1:86:00: 08:a0:d4:e8:7d:b4:8d:14:52:47:f6:96:e2:d8:9f: 4a:9a:6b:b9:1b:6c:00:d0:61:9c:40:bc:ba:cb:32: 2f:24:54:9e:c3:ae:4a:7f:dc:ac:df:e8:85:d7:64: 32:53:95:a2:7e:bd:7b:5b:bf:c2:17:07:b4:57:00: ba:9b:05:4a:ff:58:32:63:e2:94:6c:23:50:90:af: 51:ec:f4:df:a1:6d:7a:10:42:e6:33:13:c3:2d:04: 79:ae:4f:53:5d:ac:f9:89:7e:7b:27:74:4a:39:00: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:70:A7:D4:B5:C5:D2:40:F1:E8:24:81:59:80:9B:00:C6:63:B2:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebf10f16-5f3c-4b91-8d9d-40a9535563bb/ebf10f16-5f3c-4b91-8d9d-40a9535563bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.132.144.0/24 IPv6: 2620:6f:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397529 401028 401301 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1e:c4:44:fe:01:e8:f8:99:0a:f7:d6:8a:d3:3b:55:f6:cf: 5e:81:b2:26:6a:cc:ec:a3:5b:fd:40:5d:74:4d:72:40:9b:e3: 52:0e:5c:2f:ce:dd:b7:3d:4e:3a:44:07:d0:65:ac:ce:b0:28: c3:7b:9d:9d:49:09:ef:10:0e:ca:51:41:2c:f3:40:e1:4f:4d: a3:95:a0:ec:37:07:de:1f:52:15:80:78:63:57:9e:6e:dc:8d: 6a:d7:58:2f:6d:8f:1f:15:16:5e:c8:d5:fc:44:11:8d:66:8c: 62:20:b8:ce:1e:66:13:36:6a:c5:af:cc:31:3b:26:6c:38:8f: 14:cb:df:61:45:a4:86:94:ae:d2:9c:e6:6f:42:e7:d6:92:60: fc:4b:e2:17:8e:c9:5e:15:56:98:22:9b:16:1a:bf:0e:ca:76: 2e:2e:65:5f:01:f7:b6:0f:d5:d2:b4:8f:e8:23:49:7d:6d:41: 8e:b9:af:19:d0:f1:f0:7e:a4:cd:d1:1b:86:ef:1e:f5:a2:ca: 86:4d:6d:57:12:49:0c:dd:6f:7d:54:3f:b2:6b:06:54:36:84: fb:eb:f7:27:d8:82:c7:a2:30:10:80:ce:1d:13:1e:89:40:2f: 19:fe:72:7a:79:58:81:28:d8:e2:84:b0:23:92:14:a4:ea:dd: 31:27:1c:08 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEqY+SLg1TLK9vm7sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMjAwNDUzNloXDTI3MTAyNTAwNDUzNlowLzEtMCsGA1UEAxMk ZWJmMTBmMTYtNWYzYy00YjkxLThkOWQtNDBhOTUzNTU2M2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrZ6k8MAWNW/wdHDrHj6UOVeN4PizTJDL/ze +bzfbSMpm4sHkNYc4nLd0r39/XixFuXb5nN7s6dh+SSFpTw6rzPDZAncxUEmvijK xIKQQIZseu6OlwNjPaOu/bn/e8ZJ0uDhkQzgNjD06RDeQBl44BPkbw+W6qHEBgJm 3FEsB9BYTjfrhLt0cCa7Fmz1e+UKKU7xhgAIoNTofbSNFFJH9pbi2J9Kmmu5G2wA 0GGcQLy6yzIvJFSew65Kf9ys3+iF12QyU5Wifr17W7/CFwe0VwC6mwVK/1gyY+KU bCNQkK9R7PTfoW16EELmMxPDLQR5rk9TXaz5iX57J3RKOQB8yQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFCFwp9S1xdJA8egkgVmAmwDGY7KcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YmYxMGYxNi01ZjNjLTRiOTEtOGQ5ZC00MGE5NTM1NTYzYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ViZjEwZjE2LTVmM2MtNGI5MS04 ZDlkLTQwYTk1MzU1NjNiYi9lYmYxMGYxNi01ZjNjLTRiOTEtOGQ5ZC00MGE5NTM1 NTYzYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXhJAwDwQCAAIwCQMHBCYgAG8gADAkBggrBgEF BQcBCAEB/wQVMBOgETAPAgMGENkCAwYehAIDBh+VMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAIexET+Aej4 mQr31orTO1X2z16BsiZqzOyjW/1AXXRNckCb41IOXC/O3bc9TjpEB9BlrM6wKMN7 nZ1JCe8QDspRQSzzQOFPTaOVoOw3B94fUhWAeGNXnm7cjWrXWC9tjx8VFl7I1fxE EY1mjGIguM4eZhM2asWvzDE7Jmw4jxTL32FFpIaUrtKc5m9C59aSYPxL4heOyV4V VpgimxYavw7Kdi4uZV8B97YP1dK0j+gjSX1tQY65rxnQ8fB+pM3RG4bvHvWiyoZN bVcSSQzdb31UP7JrBlQ2hPvr9yfYgseiMBCAzh0THolALxn+cnp5WIEo2OKEsCOS FKTq3TEnHAg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:09 2025 by rpki-client