$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer File: 481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer (raw, json) Hash identifier: z5FL3KlI5qaEmStZmWkkOb7Q9tVrOJtBtCMdhOxUALA= Subject key identifier: 1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285849C4CD226158E285014D533280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 May 2025 00:45:34 +0000 Certificate not after: Tue 10 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 393668 IP: 192.65.0.0/24 IP: 2620:12f:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:cd:22:61:58:e2:85:01:4d:53:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 7 00:45:34 2025 GMT Not After : Aug 10 00:45:34 2027 GMT Subject: CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:67:19:1f:a7:6a:b7:97:36:55:14:2a:23: 2b:3d:8f:ba:19:98:4b:6a:5b:91:b7:98:76:fa:cd: 97:d5:6c:a9:f8:42:6c:d5:40:60:4f:16:b1:4c:a8: 0e:45:35:df:19:d1:51:51:85:ea:c6:8d:d5:21:a7: cc:5b:5c:b0:39:9f:45:72:a7:04:1a:51:a5:3e:fd: a8:af:23:53:cb:56:bc:4f:2a:8f:33:b3:18:de:dd: 2e:07:55:b3:d2:83:00:71:d8:16:e0:86:07:52:d7: 57:e5:32:d7:1e:a3:ac:16:7d:b7:6b:a3:38:b4:37: de:42:a0:87:b1:b3:e9:8d:0b:0d:3c:70:b8:0a:98: d2:11:40:e7:be:14:e5:d1:c6:4f:05:8f:78:af:fd: 01:73:a4:31:34:d0:a0:1a:55:68:00:37:58:4c:8d: 7a:2f:02:2b:4e:ba:c2:ef:36:f9:d8:9b:56:ec:34: 4f:c8:b1:02:44:79:df:88:ea:80:2c:40:66:3f:53: 55:ea:c2:63:15:3e:97:c5:d0:44:75:7b:fe:3d:db: c2:b9:64:a8:d9:fa:d9:16:28:73:c1:2b:06:73:37: be:fc:38:f5:f1:1a:04:c7:e6:16:df:7d:73:6b:5f: 5d:98:20:f9:2a:a5:e5:d0:48:90:5d:4f:6a:d2:ee: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.65.0.0/24 IPv6: 2620:12f:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393668 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:69:88:72:dc:0c:2a:d6:a2:c3:6d:7e:90:47:25:b2:af:ce: 72:37:58:42:02:8d:fd:c3:fa:26:e6:36:22:81:10:58:96:cc: 9a:fd:07:22:be:9c:6c:f8:de:38:07:81:73:4c:b6:70:51:80: 51:90:fe:a3:19:6c:89:b9:2f:fe:4e:5b:7f:cf:cf:15:71:f4: 8f:06:b8:c5:9e:7e:42:ac:4d:0e:20:a6:dc:1b:50:1b:d8:4b: e4:c7:5a:11:bd:f2:14:ea:57:d2:e6:94:9e:c0:7d:fe:7d:5c: d6:8b:60:f6:0a:98:97:43:a5:4e:cd:41:00:df:bf:a2:dc:c5: 59:0f:79:a3:30:5c:c8:14:f6:b5:7e:2f:b2:7a:d9:5a:2a:8f: b5:31:c4:0b:83:23:9a:2b:40:f4:cb:9f:d0:37:8a:ef:b9:e2: 0e:71:12:85:aa:0e:97:f7:df:63:04:4c:46:5b:c8:72:77:30: 0d:0f:15:3e:1e:3f:92:17:ce:08:05:25:0c:f0:9e:6f:5a:13: af:0d:38:c1:2d:b6:51:05:5e:8d:eb:c1:c6:a7:82:5b:5e:89: a4:61:48:ed:17:0e:f3:72:54:18:11:7c:0a:d0:26:41:c9:8a: 65:27:87:6d:66:87:8b:fd:61:0b:a6:2e:e4:df:f2:6c:97:5b: c9:5d:75:60 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEnEzSJhWOKFAU1TMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDUwNzAwNDUzNFoXDTI3MDgxMDAwNDUzNFowLzEtMCsGA1UEAxMk NDgxZWZmOWEtYzhiOS00ZWVkLWFmOGUtYzM4NTljMjJiNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujhnGR+nareXNlUUKiMrPY+6GZhLaluRt5h2 +s2X1Wyp+EJs1UBgTxaxTKgORTXfGdFRUYXqxo3VIafMW1ywOZ9FcqcEGlGlPv2o ryNTy1a8TyqPM7MY3t0uB1Wz0oMAcdgW4IYHUtdX5TLXHqOsFn23a6M4tDfeQqCH sbPpjQsNPHC4CpjSEUDnvhTl0cZPBY94r/0Bc6QxNNCgGlVoADdYTI16LwIrTrrC 7zb52JtW7DRPyLECRHnfiOqALEBmP1NV6sJjFT6XxdBEdXv+PdvCuWSo2frZFihz wSsGcze+/Dj18RoEx+YW331za19dmCD5KqXl0EiQXU9q0u5a6QIDAQABo4IELDCC BCgwHQYDVR0OBBYEFBouBN7IkTgluxguJuLAmHjnOrp5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 ODFlZmY5YS1jOGI5LTRlZWQtYWY4ZS1jMzg1OWMyMmI1YzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQ4MWVmZjlhLWM4YjktNGVlZC1h ZjhlLWMzODU5YzIyYjVjOC80ODFlZmY5YS1jOGI5LTRlZWQtYWY4ZS1jMzg1OWMy MmI1YzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAQQAwDwQCAAIwCQMHBCYgAS9gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGAcQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgGmIctwMKtaiw21+kEclsq/O cjdYQgKN/cP6JuY2IoEQWJbMmv0HIr6cbPjeOAeBc0y2cFGAUZD+oxlsibkv/k5b f8/PFXH0jwa4xZ5+QqxNDiCm3BtQG9hL5MdaEb3yFOpX0uaUnsB9/n1c1otg9gqY l0OlTs1BAN+/otzFWQ95ozBcyBT2tX4vsnrZWiqPtTHEC4MjmitA9Muf0DeK77ni DnEShaoOl/ffYwRMRlvIcncwDQ8VPh4/khfOCAUlDPCeb1oTrw04wS22UQVejevB xqeCW16JpGFI7RcO83JUGBF8CtAmQcmKZSeHbWaHi/1hC6Yu5N/ybJdbyV11YA== -----END CERTIFICATE-----Generated at Sun Jun 15 05:12:06 2025 by rpki-client