$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer File: f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer (raw, json) Hash identifier: F6lqtmyTOk2WOkgEGpGHx6gEo2+qdPmZp6whB962UHE= Subject key identifier: 5C:63:42:D4:AD:8B:F0:98:04:F4:2E:A5:4E:95:92:69:38:17:53:39 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A41089487C14D7A061B234880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Jun 2025 12:45:36 +0000 Certificate not after: Thu 23 Sep 2027 12:45:36 +0000 Subordinate resources: AS: 27498 IP: 23.128.44.0/24 IP: 2602:f865::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:08:94:87:c1:4d:7a:06:1b:23:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 20 12:45:36 2025 GMT Not After : Sep 23 12:45:36 2027 GMT Subject: CN=f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:cd:95:a2:52:89:dc:ac:8a:57:30:8a:b4: 32:5f:17:4b:13:06:f8:ee:66:ed:d6:b9:f7:12:cf: f5:f6:e5:a7:4f:cf:f0:46:b2:df:81:62:fc:a0:40: e5:3d:ce:47:a1:99:e9:aa:dd:ac:91:c6:6c:e8:65: 90:86:2d:37:91:63:98:84:68:96:30:04:91:c1:94: 1a:af:43:63:9f:1e:39:7e:26:b8:fe:49:61:95:e2: 5d:e9:6b:3d:f3:05:f3:d4:6b:8a:98:58:3d:4b:70: 04:11:c7:fd:77:46:07:cd:a4:58:7f:64:0e:3e:45: de:29:0f:4e:6b:1e:be:61:d9:bc:c5:11:4e:98:87: 55:26:2b:0d:99:11:e1:de:3d:be:50:c1:a7:31:0c: 23:7d:98:69:f6:ca:03:07:ca:ed:c7:3e:9b:a9:7c: ad:b5:06:ea:33:1b:8f:1e:16:9c:c1:f0:f4:eb:3f: 4e:80:0b:c9:07:26:e9:f4:a2:3a:7e:ab:c3:ae:c9: 81:62:97:43:f0:7f:bc:1e:7a:9b:40:ba:21:98:4a: 39:c7:94:bb:81:a7:e2:56:c6:7c:6e:6c:c4:e1:34: d9:27:9e:15:e7:4c:1c:c8:40:28:39:65:93:0f:d4: da:b0:73:e8:b4:01:58:9e:61:c3:ae:41:71:96:7e: 3a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:42:D4:AD:8B:F0:98:04:F4:2E:A5:4E:95:92:69:38:17:53:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.128.44.0/24 IPv6: 2602:f865::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27498 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c1:86:ed:73:f4:d9:2d:33:c0:a6:95:39:97:81:6b:e9:f3: 3b:cc:f4:39:12:41:f9:1a:c7:de:64:69:51:35:cf:f7:06:ca: 68:fd:8e:bb:6b:d3:02:aa:9f:0e:73:bc:93:a5:3c:f7:95:f8: 3b:f4:3a:ae:61:8d:bf:f0:77:23:0e:94:02:5e:be:40:c0:03: ae:24:92:48:b2:1b:39:dd:f4:2a:c4:0b:1e:1b:5c:3d:46:8c: 59:da:d3:d3:a2:e7:6a:7d:43:c6:ba:08:ea:a7:38:af:2c:84: ac:26:5e:5a:be:b2:68:d2:9d:95:d6:bd:62:45:12:76:5f:37: 2f:3e:8f:61:9c:02:e0:aa:e4:ea:7a:87:68:99:8b:66:22:fc: dc:22:a6:b0:14:75:a3:52:74:d4:40:6d:af:f6:51:af:3b:07: 15:97:e1:1c:8b:88:4f:83:75:c1:6b:3e:d8:4f:02:b5:62:df: 01:bc:90:7a:6b:38:da:42:ab:72:bf:3f:82:da:dc:ed:c6:53: 38:53:4f:8a:00:e5:95:da:48:d8:e3:16:2e:5b:f9:6e:ad:36: 42:ab:51:13:b5:a6:c4:55:d1:eb:2f:d7:85:5c:f5:7d:f4:75: 9f:46:13:97:fe:e5:ae:7d:ac:f0:e3:49:9a:45:f0:e6:c5:98: b8:f0:01:db -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpBCJSHwU16BhsjSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyMDEyNDUzNloXDTI3MDkyMzEyNDUzNlowLzEtMCsGA1UEAxMk ZjBjZjk4NmEtMmVjOS00YWEyLTllNjEtNDNhMGVmYzRmMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigfNlaJSidysilcwirQyXxdLEwb47mbt1rn3 Es/19uWnT8/wRrLfgWL8oEDlPc5HoZnpqt2skcZs6GWQhi03kWOYhGiWMASRwZQa r0Njnx45fia4/klhleJd6Ws98wXz1GuKmFg9S3AEEcf9d0YHzaRYf2QOPkXeKQ9O ax6+Ydm8xRFOmIdVJisNmRHh3j2+UMGnMQwjfZhp9soDB8rtxz6bqXyttQbqMxuP HhacwfD06z9OgAvJBybp9KI6fqvDrsmBYpdD8H+8HnqbQLohmEo5x5S7gafiVsZ8 bmzE4TTZJ54V50wcyEAoOWWTD9TasHPotAFYnmHDrkFxln46vwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFxjQtSti/CYBPQupU6Vkmk4F1M5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m MGNmOTg2YS0yZWM5LTRhYTItOWU2MS00M2EwZWZjNGYyZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2YwY2Y5ODZhLTJlYzktNGFhMi05 ZTYxLTQzYTBlZmM0ZjJlYS9mMGNmOTg2YS0yZWM5LTRhYTItOWU2MS00M2EwZWZj NGYyZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgCwwDgQCAAIwCAMGBCYC+GUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmtqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGrBhu1z9NktM8CmlTmXgWvp8zvM 9DkSQfkax95kaVE1z/cGymj9jrtr0wKqnw5zvJOlPPeV+Dv0Oq5hjb/wdyMOlAJe vkDAA64kkkiyGznd9CrECx4bXD1GjFna09Oi52p9Q8a6COqnOK8shKwmXlq+smjS nZXWvWJFEnZfNy8+j2GcAuCq5Op6h2iZi2Yi/NwiprAUdaNSdNRAba/2Ua87BxWX 4RyLiE+DdcFrPthPArVi3wG8kHprONpCq3K/P4La3O3GUzhTT4oA5ZXaSNjjFi5b +W6tNkKrURO1psRV0esv14Vc9X30dZ9GE5f+5a59rPDjSZpF8ObFmLjwAds= -----END CERTIFICATE-----Generated at Mon Jun 30 06:13:28 2025 by rpki-client