$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer File: 5dc12714-5247-41c5-b244-d0edceb32982.cer (raw, json) Hash identifier: 7tkpL5lgwAid9JOqkST7qNuN5attMVDNp1/yGUqNDvU= Subject key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A4D98AAF4486447E2C2FF6700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 00:45:36 +0000 Certificate not after: Tue 28 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 18619 AS: 22856 AS: 40763 AS: 394851 AS: 398725 IP: 162.212.244.0/22 IP: 192.12.128.0/24 IP: 204.124.15.0/24 IP: 205.207.95.0/24 IP: 206.166.213.0/24 IP: 209.237.153.0/24 IP: 2605:2b40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:98:aa:f4:48:64:47:e2:c2:ff:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 25 00:45:36 2025 GMT Not After : Sep 28 00:45:36 2027 GMT Subject: CN=5dc12714-5247-41c5-b244-d0edceb32982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:c9:ba:32:94:68:ee:64:ce:10:f3:13:ec: 7b:23:eb:15:d3:42:b6:86:1f:54:68:f7:fc:80:57: bc:c6:f0:10:4b:27:56:a1:0a:5a:76:25:13:32:77: 85:01:d8:bf:70:0a:07:f8:98:49:54:3e:08:94:1a: 57:30:63:13:f0:37:e7:3a:1a:44:95:af:6c:9c:f5: 3f:52:6c:d4:e2:3b:9b:f3:1d:1c:62:66:91:0e:59: ac:7a:90:d0:ab:59:ff:1d:57:d7:80:32:63:3b:27: c5:f7:97:f0:a7:bc:db:2b:9f:5e:67:23:66:a7:81: 72:dc:19:a0:fb:36:e6:8d:07:69:2d:5b:57:f1:52: e5:98:9e:3b:98:dc:3c:6f:d9:c4:a0:97:fa:14:73: 62:18:70:99:b9:5a:45:1c:83:b3:ca:81:42:8b:1b: 19:12:1c:16:56:1d:46:72:b0:fc:41:d5:5f:1c:98: 25:65:34:51:30:1c:a4:4e:33:06:11:48:85:f9:6d: ae:54:e3:83:37:86:f9:77:04:38:9c:7c:40:ff:02: d3:66:f1:3f:88:4f:04:9a:5c:48:74:81:7d:26:2d: 30:f9:d0:77:3b:d4:67:8d:45:63:81:16:48:22:40: 2b:88:b1:c0:a6:a3:89:ac:2a:a5:3b:0e:b1:66:f6: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.212.244.0/22 192.12.128.0/24 204.124.15.0/24 205.207.95.0/24 206.166.213.0/24 209.237.153.0/24 IPv6: 2605:2b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18619 22856 40763 394851 398725 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5d:5e:e4:8a:4e:5b:23:9a:97:08:ca:4c:ca:f9:b8:b5:5e: 4f:94:d8:f7:90:40:b9:35:04:aa:62:22:2b:83:6f:b5:2b:c4: 2e:1a:7a:c8:7c:c9:6b:1d:e0:00:3e:5a:88:7a:af:b9:ba:75: e7:ea:57:c1:67:63:bb:56:0a:d7:16:29:37:dc:68:57:7f:3c: 0a:cf:53:dc:4d:8b:12:0e:70:b3:4c:db:bb:b0:65:14:e9:be: ff:f5:67:31:2d:85:62:89:d8:f5:52:99:48:c9:47:98:75:fa: d0:41:22:b3:06:45:42:93:13:49:41:2d:74:09:5e:e7:5c:d8: 66:94:ce:9e:18:ca:96:06:32:ac:69:3e:57:0f:d6:63:86:8f: 5d:60:8d:5a:ab:67:8d:d1:6d:b6:2a:1d:37:e2:a9:8a:93:4a: ba:f1:20:41:e8:01:aa:86:33:8a:61:da:4c:d0:8e:ef:b9:91: 06:65:99:b1:b6:41:f2:c3:04:1b:53:3a:7d:30:ad:48:89:67: 3c:16:02:0d:c7:a5:cb:77:02:3a:5f:77:8b:2b:e4:b2:5d:6d: 7d:de:fd:37:49:54:9f:bc:d3:78:f8:f4:cd:5a:1c:6d:12:01: b8:44:e1:42:7b:b5:b3:19:6a:11:ec:ae:3d:a5:a2:2b:4b:a1: c1:ed:28:f6 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWEpNmKr0SGRH4sL/ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyNTAwNDUzNloXDTI3MDkyODAwNDUzNlowLzEtMCsGA1UEAxMk NWRjMTI3MTQtNTI0Ny00MWM1LWIyNDQtZDBlZGNlYjMyOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2rJujKUaO5kzhDzE+x7I+sV00K2hh9UaPf8 gFe8xvAQSydWoQpadiUTMneFAdi/cAoH+JhJVD4IlBpXMGMT8DfnOhpEla9snPU/ UmzU4jub8x0cYmaRDlmsepDQq1n/HVfXgDJjOyfF95fwp7zbK59eZyNmp4Fy3Bmg +zbmjQdpLVtX8VLlmJ47mNw8b9nEoJf6FHNiGHCZuVpFHIOzyoFCixsZEhwWVh1G crD8QdVfHJglZTRRMBykTjMGEUiF+W2uVOODN4b5dwQ4nHxA/wLTZvE/iE8EmlxI dIF9Ji0w+dB3O9RnjUVjgRZIIkAriLHApqOJrCqlOw6xZvZybwIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFB3yZV36ppTi+F8C/UMdrtdTlxpVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2ViMzI5ODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzVkYzEyNzE0LTUyNDctNDFjNS1i MjQ0LWQwZWRjZWIzMjk4Mi81ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2Vi MzI5ODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAKi1PQDBADADIADBADMfA8DBADNz18DBADOptUD BADR7ZkwDQQCAAIwBwMFACYFK0AwLAYIKwYBBQUHAQgBAf8EHTAboBkwFwICSLsC AllIAgMAnzsCAwYGYwIDBhWFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEBdXuSKTlsjmpcIykzK+bi1Xk+U 2PeQQLk1BKpiIiuDb7UrxC4aesh8yWsd4AA+Woh6r7m6defqV8FnY7tWCtcWKTfc aFd/PArPU9xNixIOcLNM27uwZRTpvv/1ZzEthWKJ2PVSmUjJR5h1+tBBIrMGRUKT E0lBLXQJXudc2GaUzp4YypYGMqxpPlcP1mOGj11gjVqrZ43RbbYqHTfiqYqTSrrx IEHoAaqGM4ph2kzQju+5kQZlmbG2QfLDBBtTOn0wrUiJZzwWAg3Hpct3Ajpfd4sr 5LJdbX3e/TdJVJ+803j49M1aHG0SAbhE4UJ7tbMZahHsrj2loitLocHtKPY= -----END CERTIFICATE-----Generated at Wed Jul 2 01:43:20 2025 by rpki-client