$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer File: ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer (raw, json) Hash identifier: Gcvxo8a+qClF8EOHNQORjvmYegX2CRZjoImaLzhkx/U= Subject key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A9B1A02EACD67436858929200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Jul 2025 19:03:28 +0000 Certificate not after: Mon 20 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 399525 IP: 23.185.176.0/23 IP: 2602:fc9e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:1a:02:ea:cd:67:43:68:58:92:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 22 19:03:28 2025 GMT Not After : Sep 20 00:45:36 2027 GMT Subject: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:25:cd:2d:be:e1:73:17:91:81:29:59:e4: fe:b7:ec:41:08:4f:1b:5f:50:e4:1f:dd:02:43:c2: 53:98:8d:70:b0:da:3f:f7:7e:cd:58:7f:5c:4c:fe: 51:6d:9a:a8:39:14:6c:2d:f1:73:8e:19:32:1b:0f: 09:22:83:44:9b:c4:62:1a:fc:7a:61:81:46:4c:73: f4:dc:5d:ef:7e:f2:f1:51:45:1e:28:78:83:25:6f: f2:53:f1:af:4b:4f:d9:26:04:3d:ce:a4:dd:59:13: 57:02:17:9f:72:c9:9d:20:32:25:43:45:5a:91:83: 1f:6f:ac:db:a7:da:09:84:56:cd:56:ec:d2:37:89: 85:17:07:1b:2d:63:a8:6b:fc:a1:a9:34:93:eb:05: c4:31:bb:2f:fb:23:04:09:53:2a:9f:cd:f6:eb:63: f0:75:fb:7e:3f:4a:99:8c:14:66:42:b7:9b:41:32: 79:11:1e:c1:35:db:6e:a1:1a:99:f5:d8:50:ba:c3: f2:a5:7e:af:7e:7e:47:36:e1:5f:08:2b:76:1f:20: db:15:eb:a6:9d:be:99:7a:7b:17:bd:2d:e2:7f:48: 10:97:47:cc:18:fd:f1:c5:9a:1d:82:de:07:5a:4e: 81:20:42:84:4c:7c:c6:d1:10:65:1c:23:3b:74:3c: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.185.176.0/23 IPv6: 2602:fc9e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399525 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:08:ea:a5:02:91:8d:d4:30:84:41:66:73:4e:a2:94:b9:67: e0:2c:b6:c7:25:a6:7d:af:26:8b:c2:86:97:05:4e:24:b1:21: 63:1d:3c:f2:35:d3:58:13:ac:0c:f2:60:2e:97:0e:a3:a2:62: bb:3f:40:62:0f:51:42:c8:95:5c:29:df:57:4c:af:a9:69:0d: fa:5c:72:35:60:f9:07:b9:20:51:f7:de:cb:0f:ff:5e:ef:12: 64:ab:b4:34:54:f1:bb:b2:94:4d:3e:ad:8b:c4:3d:72:ef:5a: ce:71:92:b9:1d:d2:42:60:19:a8:16:bc:d8:51:10:66:30:fe: 40:d3:0c:e2:48:42:48:4d:69:e3:e8:2a:8b:1b:b3:32:c1:af: 29:45:84:09:7c:50:3f:69:7e:ef:fe:ad:7e:e5:23:c6:2a:62: 5c:ee:6b:f8:43:ab:2e:58:23:34:a9:cc:fa:93:d4:76:57:9b: 15:8d:5d:dc:92:80:6b:8f:4a:8a:d1:62:2c:ff:0d:5a:fc:32: 45:d2:3c:db:10:72:90:d2:44:4c:36:7a:57:ce:77:83:f6:a1: 21:a3:77:d6:95:84:bc:8d:f4:57:07:d7:cf:ea:6a:e7:79:f3: 59:35:e2:a5:3a:5e:57:b6:5b:6c:ba:2b:70:29:12:00:b8:3b: 2d:c3:57:53 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEqbGgLqzWdDaFiSkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcyMjE5MDMyOFoXDTI3MDkyMDAwNDUzNlowLzEtMCsGA1UEAxMk ZWYxMjM5ZTYtM2FlNy00M2JlLTk2NmItMmY1Yjk2NzFjMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlMlzS2+4XMXkYEpWeT+t+xBCE8bX1DkH90C Q8JTmI1wsNo/937NWH9cTP5RbZqoORRsLfFzjhkyGw8JIoNEm8RiGvx6YYFGTHP0 3F3vfvLxUUUeKHiDJW/yU/GvS0/ZJgQ9zqTdWRNXAhefcsmdIDIlQ0VakYMfb6zb p9oJhFbNVuzSN4mFFwcbLWOoa/yhqTST6wXEMbsv+yMECVMqn83262Pwdft+P0qZ jBRmQrebQTJ5ER7BNdtuoRqZ9dhQusPypX6vfn5HNuFfCCt2HyDbFeumnb6ZensX vS3if0gQl0fMGP3xxZodgt4HWk6BIEKETHzG0RBlHCM7dDwvlQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPy9G7KKWe22u1Sdg8nMvKxDt7TJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l ZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3MWMyOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2VmMTIzOWU2LTNhZTctNDNiZS05 NjZiLTJmNWI5NjcxYzI5ZC9lZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3 MWMyOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXubAwDgQCAAIwCAMGBCYC/J4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYYpTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxCOqlApGN1DCEQWZzTqKUuWfg LLbHJaZ9ryaLwoaXBU4ksSFjHTzyNdNYE6wM8mAulw6jomK7P0BiD1FCyJVcKd9X TK+paQ36XHI1YPkHuSBR997LD/9e7xJkq7Q0VPG7spRNPq2LxD1y71rOcZK5HdJC YBmoFrzYURBmMP5A0wziSEJITWnj6CqLG7Mywa8pRYQJfFA/aX7v/q1+5SPGKmJc 7mv4Q6suWCM0qcz6k9R2V5sVjV3ckoBrj0qK0WIs/w1a/DJF0jzbEHKQ0kRMNnpX zneD9qEho3fWlYS8jfRXB9fP6mrnefNZNeKlOl5XtltsuitwKRIAuDstw1dT -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:18 2025 by rpki-client