$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.cer File: c6cf724f-f412-40a8-bfd9-a52cf7dc1112.cer (raw, json) Hash identifier: fx8XJwdc1gnkg6IrbDmGH6WzFyuIupuHH6GkjQ6us3w= Subject key identifier: EA:6A:D0:DB:46:D3:97:B6:E6:D5:7B:38:2A:FC:C4:AC:96:A9:B5:BF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584B71E0F7BEB1B53E4E9F146E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 17:27:20 +0000 Certificate not after: Fri 27 Aug 2027 00:45:36 +0000 Subordinate resources: AS: 1028 IP: 45.45.244.0/22 IP: 131.143.64.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:e0:f7:be:b1:b5:3e:4e:9f:14:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 7 17:27:20 2025 GMT Not After : Aug 27 00:45:36 2027 GMT Subject: CN=c6cf724f-f412-40a8-bfd9-a52cf7dc1112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:b2:b1:f1:9e:ed:73:de:31:f4:63:f2:3c: b9:4b:72:b7:8b:aa:2e:dc:bb:18:00:01:51:89:5b: 31:37:2b:db:92:17:83:61:83:21:47:bd:9e:7e:d9: 29:b5:51:77:72:57:8f:c0:f6:07:1d:d6:dc:69:22: 44:b9:5d:41:6b:0a:98:8d:79:8e:5a:78:6e:2d:d9: bb:85:00:4f:85:60:b1:8d:49:44:1b:6d:72:96:46: d7:4f:f2:7a:1d:13:e8:ec:8c:e8:46:1f:ec:be:1f: 45:0a:cf:7a:36:42:36:ae:f3:e2:c5:47:3d:31:b8: db:24:08:7d:4e:ec:6d:de:4e:52:f2:2b:53:e3:ac: 4a:c9:ea:77:b0:35:41:40:53:61:94:ef:b0:59:f2: 4a:31:45:2c:f0:b3:dd:9f:0f:8b:e8:36:b2:82:f7: 08:ff:c8:d2:bd:5f:96:c3:25:55:45:6e:db:4a:54: 1d:22:62:a5:6f:fa:90:2e:3e:8e:73:37:e0:b6:a7: d1:a4:8e:1c:87:7c:bf:85:7d:1a:a8:fb:fb:fe:58: d3:3c:06:32:38:db:60:a6:db:2d:56:15:ef:6b:e6: b9:d1:20:59:61:47:04:70:48:5c:14:b7:c1:69:d2: 8c:31:a5:ea:8d:b4:b0:39:f1:14:aa:4d:c9:1c:78: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6A:D0:DB:46:D3:97:B6:E6:D5:7B:38:2A:FC:C4:AC:96:A9:B5:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6cf724f-f412-40a8-bfd9-a52cf7dc1112/c6cf724f-f412-40a8-bfd9-a52cf7dc1112.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 45.45.244.0/22 131.143.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1028 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:42:0a:bf:c7:70:35:0d:a8:0c:51:41:95:da:e0:5d:a7:44: e0:e6:02:02:98:eb:72:41:2d:64:8f:8a:c5:11:ec:47:85:b5: 75:5a:cc:f6:03:85:a9:52:d0:ce:39:aa:f3:c9:d4:9c:b6:d8: b1:a7:26:f3:a1:f1:65:9a:ab:ee:fa:31:1e:a5:00:78:85:42: f7:64:e7:24:ac:96:71:e6:5e:3a:04:5a:5b:45:b8:9b:72:f1: 6e:12:f3:c4:b2:13:64:d7:b1:e3:98:6f:95:de:3d:85:a1:1c: d7:9a:ce:5b:40:cc:eb:fe:d3:2e:a4:db:48:85:cb:1b:31:49: ae:52:cb:ec:fc:46:9f:cd:3c:8b:5d:25:96:98:a4:c3:4c:b8: bf:f7:64:cd:92:9b:2b:0c:d1:d9:a9:cb:86:15:5b:11:5b:44: 1b:97:fb:bb:86:26:82:e2:dd:eb:8c:16:b0:0b:81:b9:72:a0: d1:fe:ea:3a:e9:c9:8a:24:35:6f:f4:d3:3f:73:17:49:27:13: 12:c3:3c:7a:d3:31:74:b4:ae:6a:61:b4:a2:16:f4:5d:fc:eb: f0:0b:86:b7:79:ce:92:ee:8d:0c:22:0e:00:6d:c0:92:08:30: de:f4:ed:54:5f:5f:fa:e5:ac:01:3d:e1:7c:49:61:3a:52:f5: b4:9c:0f:bd -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEtx4Pe+sbU+Tp8UbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MTAwNzE3MjcyMFoXDTI3MDgyNzAwNDUzNlowLzEtMCsGA1UEAxMk YzZjZjcyNGYtZjQxMi00MGE4LWJmZDktYTUyY2Y3ZGMxMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd2ysfGe7XPeMfRj8jy5S3K3i6ou3LsYAAFR iVsxNyvbkheDYYMhR72eftkptVF3clePwPYHHdbcaSJEuV1BawqYjXmOWnhuLdm7 hQBPhWCxjUlEG21ylkbXT/J6HRPo7IzoRh/svh9FCs96NkI2rvPixUc9MbjbJAh9 Tuxt3k5S8itT46xKyep3sDVBQFNhlO+wWfJKMUUs8LPdnw+L6DaygvcI/8jSvV+W wyVVRW7bSlQdImKlb/qQLj6OczfgtqfRpI4ch3y/hX0aqPv7/ljTPAYyONtgptst VhXva+a50SBZYUcEcEhcFLfBadKMMaXqjbSwOfEUqk3JHHiT0QIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFOpq0NtG05e25tV7OCr8xKyWqbW/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j NmNmNzI0Zi1mNDEyLTQwYTgtYmZkOS1hNTJjZjdkYzExMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2M2Y2Y3MjRmLWY0MTItNDBhOC1i ZmQ5LWE1MmNmN2RjMTExMi9jNmNmNzI0Zi1mNDEyLTQwYTgtYmZkOS1hNTJjZjdk YzExMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAItLfQDBAKDj0AwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICBAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAREIKv8dwNQ2oDFFBldrgXadE4OYCApjrckEtZI+K xRHsR4W1dVrM9gOFqVLQzjmq88nUnLbYsacm86HxZZqr7voxHqUAeIVC92TnJKyW ceZeOgRaW0W4m3LxbhLzxLITZNex45hvld49haEc15rOW0DM6/7TLqTbSIXLGzFJ rlLL7PxGn808i10llpikw0y4v/dkzZKbKwzR2anLhhVbEVtEG5f7u4YmguLd64wW sAuBuXKg0f7qOunJiiQ1b/TTP3MXSScTEsM8etMxdLSuamG0ohb0Xfzr8AuGt3nO ku6NDCIOAG3Akggw3vTtVF9f+uWsAT3hfElhOlL1tJwPvQ== -----END CERTIFICATE-----Generated at Tue Oct 21 06:45:07 2025 by rpki-client