$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer File: fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer (raw, json) Hash identifier: R4+aNLuRZ15fTrYtkTZXYer5ynOeyUoMoouWM3UfmQE= Subject key identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849D857EAE7134011BBB9940600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 May 2025 00:45:34 +0000 Certificate not after: Tue 17 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 11075 IP: 46.33.20.0/24 IP: 2602:f985::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:57:ea:e7:13:40:11:bb:b9:94:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 14 00:45:34 2025 GMT Not After : Aug 17 00:45:34 2027 GMT Subject: CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:fe:a5:63:88:20:5b:ae:55:ea:88:ec:31: 73:4c:72:72:44:23:e8:4f:36:ce:0b:91:3d:dd:19: 29:58:6f:2b:8b:eb:e6:a7:92:47:b4:0c:c9:89:3b: b4:28:c5:6d:a6:29:78:c2:56:9e:aa:ed:85:54:8a: 04:c0:fe:b2:44:41:03:97:85:be:2c:0c:8f:c5:a5: 10:46:d7:12:3a:a4:70:db:d6:02:1e:8f:86:d3:8b: 92:e8:0f:75:16:e6:db:6b:30:29:3a:e0:c0:fe:bb: 91:32:a5:95:1c:b8:43:08:08:4f:c7:7e:38:a3:91: c0:d8:35:d4:d1:4c:f7:33:68:d1:ac:d3:4a:dd:35: f6:3d:cb:bb:77:c5:d4:63:49:b5:42:6d:35:5a:75: c0:94:d0:bf:18:c3:ad:ae:da:e1:29:95:3c:98:4d: 37:b6:fe:37:c6:1c:49:4a:f7:6a:67:f3:be:97:c8: 1b:e4:e8:c3:77:0e:43:a2:6b:79:a9:ba:63:de:46: 89:55:6b:46:62:7d:90:ca:20:3c:de:39:e1:ef:44: 24:33:cb:d2:0d:a2:06:2f:d7:a6:60:b5:fa:be:03: eb:63:e7:35:ed:03:e9:6d:76:c5:2a:f0:b2:90:10: 36:26:82:7d:a5:d3:29:b8:42:a9:a5:e7:25:29:1c: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 46.33.20.0/24 IPv6: 2602:f985::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11075 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:80:3a:4b:9d:5f:93:fc:57:5d:09:ec:46:a0:54:59:ea:17: fa:c4:b6:06:37:c1:07:e1:21:9b:7d:72:9c:78:86:fa:2a:29: 35:d7:2c:4d:ab:5b:2b:6b:b9:6a:10:14:84:4d:9d:68:16:a8: 72:aa:35:e4:2f:84:40:77:8e:3e:8e:1b:05:75:3b:04:6e:7c: 50:67:f1:30:2c:38:cf:8f:a5:c9:06:a6:80:88:0c:4b:d4:83: be:89:fc:43:66:b3:c6:ee:b6:23:a1:3e:9d:eb:c9:66:f2:0a: 54:45:86:f8:d4:53:f3:42:a5:89:78:7c:1c:6c:e1:6a:f1:0d: 02:0c:fb:d1:d4:48:51:ee:52:fe:a4:97:a6:90:73:87:0d:da: bd:6c:f8:51:ae:fb:4d:54:e6:c4:11:de:fb:5e:6e:89:2f:60: 6f:29:bc:6e:80:fb:54:7c:28:47:cc:9c:01:22:2e:e7:16:09: 28:5d:6c:67:7e:bd:e9:6b:39:85:02:22:41:d0:c8:67:02:88: 1a:24:88:36:86:fd:9a:c9:ab:a0:75:5d:ae:6d:a4:b1:55:37: c7:bb:65:c5:81:a8:a8:e0:4e:45:4b:c3:7d:5a:e8:fe:60:80: 4c:33:6b:17:d0:a9:9d:76:c3:65:28:46:06:d8:0d:a7:d0:7a: f1:9d:9b:59 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEnYV+rnE0ARu7mUBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxNDAwNDUzNFoXDTI3MDgxNzAwNDUzNFowLzEtMCsGA1UEAxMk ZmM3MGJmMWEtZDcyNi00YTE2LTk3ZmUtNDRmYzIzZDA2YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubf+pWOIIFuuVeqI7DFzTHJyRCPoTzbOC5E9 3RkpWG8ri+vmp5JHtAzJiTu0KMVtpil4wlaequ2FVIoEwP6yREEDl4W+LAyPxaUQ RtcSOqRw29YCHo+G04uS6A91FubbazApOuDA/ruRMqWVHLhDCAhPx344o5HA2DXU 0Uz3M2jRrNNK3TX2Pcu7d8XUY0m1Qm01WnXAlNC/GMOtrtrhKZU8mE03tv43xhxJ SvdqZ/O+l8gb5OjDdw5Domt5qbpj3kaJVWtGYn2QyiA83jnh70QkM8vSDaIGL9em YLX6vgPrY+c17QPpbXbFKvCykBA2JoJ9pdMpuEKppeclKRxRQwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIN+vr9mggCwElOitnRNdR/WWTmtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m YzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNkMDZiY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ZjNzBiZjFhLWQ3MjYtNGExNi05 N2ZlLTQ0ZmMyM2QwNmJjZS9mYzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNk MDZiY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAuIRQwDgQCAAIwCAMGACYC+YUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAitDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJqAOkudX5P8V10J7EagVFnqF/rE tgY3wQfhIZt9cpx4hvoqKTXXLE2rWytruWoQFIRNnWgWqHKqNeQvhEB3jj6OGwV1 OwRufFBn8TAsOM+PpckGpoCIDEvUg76J/ENms8butiOhPp3ryWbyClRFhvjUU/NC pYl4fBxs4WrxDQIM+9HUSFHuUv6kl6aQc4cN2r1s+FGu+01U5sQR3vtebokvYG8p vG6A+1R8KEfMnAEiLucWCShdbGd+velrOYUCIkHQyGcCiBokiDaG/ZrJq6B1Xa5t pLFVN8e7ZcWBqKjgTkVLw31a6P5ggEwzaxfQqZ12w2UoRgbYDafQevGdm1k= -----END CERTIFICATE-----Generated at Wed Nov 5 02:09:24 2025 by rpki-client