$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4fd224eb-873c-45e8-93ac-cdab2e2ac519.cer File: 4fd224eb-873c-45e8-93ac-cdab2e2ac519.cer (raw, json) Hash identifier: a6WM01FF+vYKI1nbsr8jA6dQrCUZ8jTSQYm8LzA6hts= Subject key identifier: AE:BA:E1:B0:DD:77:28:AA:29:EF:3B:87:D1:7C:29:AB:E8:83:A9:3E Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A3CD88E91B2F86DCEA3B30380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4fd224eb-873c-45e8-93ac-cdab2e2ac519/4fd224eb-873c-45e8-93ac-cdab2e2ac519.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4fd224eb-873c-45e8-93ac-cdab2e2ac519/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Jun 2025 00:45:35 +0000 Certificate not after: Wed 22 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 394476 IP: 216.48.110.0/23 IP: 2602:f93e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:d8:8e:91:b2:f8:6d:ce:a3:b3:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 19 00:45:35 2025 GMT Not After : Sep 22 00:45:35 2027 GMT Subject: CN=4fd224eb-873c-45e8-93ac-cdab2e2ac519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:0d:62:4c:ae:5b:de:d0:c9:49:ec:ec:f4: aa:9f:38:b1:55:92:f8:d5:f4:7b:30:26:95:61:f9: ff:5c:a1:58:42:c9:39:83:58:02:8c:ec:46:4f:7f: 32:8b:e0:28:c6:ad:8c:71:fa:f5:6f:3a:74:ee:b1: 3c:3b:7d:9b:74:92:fb:ef:a9:2d:54:c2:11:3c:ab: b9:0a:31:f9:22:44:8e:8d:df:99:51:2a:4b:2e:06: 62:b5:83:3d:66:74:1b:a7:5a:05:bc:84:04:0c:d5: 67:73:24:ee:53:3c:be:9b:65:1a:e7:24:64:ac:4f: 4f:ce:35:39:b5:32:c6:89:7e:c6:c2:53:e3:4e:e1: e9:bc:65:3c:00:99:b9:2a:05:d0:15:50:03:ff:07: 4b:69:28:ef:bc:b1:43:d0:9d:d8:d6:46:9a:2f:6d: 21:67:a8:37:f9:67:f7:82:24:39:36:35:d2:e4:b0: a3:15:17:07:dd:aa:50:9f:db:49:24:ff:9b:3b:b1: d4:66:f2:47:44:d6:f0:23:88:06:29:7b:b0:f9:02: 94:a0:56:ce:70:d0:1e:ee:57:cb:27:a6:1c:57:61: ed:ab:c7:d7:f4:89:67:74:15:7b:60:4e:a0:9d:02: b6:3a:bb:66:d8:92:c8:67:7e:4b:c6:5f:85:bc:58: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BA:E1:B0:DD:77:28:AA:29:EF:3B:87:D1:7C:29:AB:E8:83:A9:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4fd224eb-873c-45e8-93ac-cdab2e2ac519/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4fd224eb-873c-45e8-93ac-cdab2e2ac519/4fd224eb-873c-45e8-93ac-cdab2e2ac519.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 216.48.110.0/23 IPv6: 2602:f93e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394476 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ea:b3:ea:6c:c4:db:cc:f0:a9:57:02:92:86:02:45:2c:31: a0:4a:da:71:98:1a:3e:c6:94:52:37:4f:46:22:83:43:28:e3: c9:01:f8:7f:e3:0d:34:94:a6:8d:f2:db:ef:05:c4:f2:fd:6f: 61:bb:09:0f:63:9b:4b:f8:30:63:96:92:ed:a0:ff:31:e4:86: f4:44:f2:47:34:f3:f8:ad:04:f8:7e:f7:8a:2e:75:eb:93:6c: 8e:cb:20:b4:0f:5f:8e:8d:f2:e2:93:ef:45:9e:d2:7a:cb:bf: 76:e7:c4:6b:3a:4f:08:e3:68:e2:0f:78:23:76:33:22:f5:bb: 50:0c:24:aa:e7:32:9f:75:91:e9:81:a3:a9:0b:48:94:e7:2e: 50:c1:7d:80:95:da:7e:8a:be:a6:58:e8:fd:bc:a2:6d:9f:40: df:67:65:a2:3a:64:a8:02:b5:f0:99:50:57:87:56:f7:76:79: f2:71:15:de:7c:1f:9e:2b:1b:c9:87:e2:4a:4d:33:26:70:0f: 7b:a2:99:d6:17:09:b0:08:55:dd:6a:be:58:dd:5f:d0:2f:84: d6:9d:84:8f:78:ce:cc:ec:0b:fe:80:24:0c:2d:3a:46:7b:00: e9:66:1f:c4:62:ba:9b:54:09:28:ad:95:e9:c4:6e:7f:e0:b2: 99:e5:e3:cb -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEo82I6RsvhtzqOzA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxOTAwNDUzNVoXDTI3MDkyMjAwNDUzNVowLzEtMCsGA1UEAxMk NGZkMjI0ZWItODczYy00NWU4LTkzYWMtY2RhYjJlMmFjNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHUNYkyuW97QyUns7PSqnzixVZL41fR7MCaV Yfn/XKFYQsk5g1gCjOxGT38yi+Aoxq2Mcfr1bzp07rE8O32bdJL776ktVMIRPKu5 CjH5IkSOjd+ZUSpLLgZitYM9ZnQbp1oFvIQEDNVncyTuUzy+m2Ua5yRkrE9PzjU5 tTLGiX7GwlPjTuHpvGU8AJm5KgXQFVAD/wdLaSjvvLFD0J3Y1kaaL20hZ6g3+Wf3 giQ5NjXS5LCjFRcH3apQn9tJJP+bO7HUZvJHRNbwI4gGKXuw+QKUoFbOcNAe7lfL J6YcV2Htq8fX9IlndBV7YE6gnQK2Ortm2JLIZ35Lxl+FvFi97QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFK664bDddyiqKe87h9F8Kavog6k+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 ZmQyMjRlYi04NzNjLTQ1ZTgtOTNhYy1jZGFiMmUyYWM1MTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRmZDIyNGViLTg3M2MtNDVlOC05 M2FjLWNkYWIyZTJhYzUxOS80ZmQyMjRlYi04NzNjLTQ1ZTgtOTNhYy1jZGFiMmUy YWM1MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHYMG4wDgQCAAIwCAMGACYC+T4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYE7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQ6rPqbMTbzPCpVwKShgJFLDGg StpxmBo+xpRSN09GIoNDKOPJAfh/4w00lKaN8tvvBcTy/W9huwkPY5tL+DBjlpLt oP8x5Ib0RPJHNPP4rQT4fveKLnXrk2yOyyC0D1+OjfLik+9FntJ6y79258RrOk8I 42jiD3gjdjMi9btQDCSq5zKfdZHpgaOpC0iU5y5QwX2Aldp+ir6mWOj9vKJtn0Df Z2WiOmSoArXwmVBXh1b3dnnycRXefB+eKxvJh+JKTTMmcA97opnWFwmwCFXdar5Y 3V/QL4TWnYSPeM7M7Av+gCQMLTpGewDpZh/EYrqbVAkorZXpxG5/4LKZ5ePL -----END CERTIFICATE-----Generated at Sun Jun 29 14:41:13 2025 by rpki-client