$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88.cer File: 0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88.cer (raw, json) Hash identifier: 0Kdy00Xi9kSz+Vy5+zGffuR85gycIllImy3V/WKO4Wc= Subject key identifier: BB:D0:3E:E4:06:84:A2:F1:E0:FB:8A:59:5C:03:05:17:4C:DE:0D:01 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849C4CD222CBEA73FEC8D689240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 May 2025 00:45:34 +0000 Certificate not after: Tue 10 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 54051 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:cd:22:2c:be:a7:3f:ec:8d:68:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 7 00:45:34 2025 GMT Not After : Aug 10 00:45:34 2027 GMT Subject: CN=0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:28:c9:81:70:16:17:ad:9e:1f:c1:cd:1b:f4: f2:fe:93:ac:04:58:d2:3f:79:3d:58:1f:10:23:fa: 9d:1c:d5:03:48:d6:15:18:ae:42:a6:20:50:db:6a: 5d:fe:05:12:2a:3e:45:b0:c4:ea:4e:d5:23:75:c9: b4:a3:2a:e5:29:4f:3e:67:46:32:72:33:b8:b3:c1: 65:2c:bc:3e:d2:c4:f1:e0:57:16:8a:af:e6:e8:e5: 44:ed:e4:a4:2e:07:3d:eb:89:78:b3:f9:87:61:59: 76:d2:41:0b:0b:d9:5e:7a:42:81:c8:29:12:68:d8: 2b:8c:25:7a:56:0c:d0:f0:84:81:66:df:7f:6b:60: 28:87:e0:c8:06:8b:cc:61:d5:d7:2a:67:04:2f:c6: 6d:71:3b:ff:bf:34:6f:f1:79:78:f5:9d:37:82:81: ce:76:2c:da:8f:b9:2f:7c:6d:72:b7:7c:e7:8d:27: f9:d6:9f:f8:d9:49:80:03:85:db:78:0c:7b:a6:33: c9:36:24:eb:23:6a:3c:1b:c9:1f:72:2b:69:7d:17: b3:58:b3:1a:37:98:5b:c8:99:33:9c:57:d7:63:c1: 4a:c2:e7:a3:17:cc:54:9d:0b:63:81:54:41:70:07: 7c:d5:ee:38:05:36:9b:8e:77:02:51:4c:1a:d6:74: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:3E:E4:06:84:A2:F1:E0:FB:8A:59:5C:03:05:17:4C:DE:0D:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88/0e8c50ba-b9d3-4d9a-aead-4fd5e5c21e88.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 54051 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a1:35:31:48:bc:1e:9a:de:70:11:06:eb:eb:56:8d:a3:f9: af:8a:03:58:d2:df:a4:e0:b5:76:8c:7a:5c:ba:73:0e:6b:60: 57:57:93:b0:aa:7f:0c:eb:85:77:dc:c8:a3:d9:65:bf:9f:f1: 4a:7f:46:e0:11:87:5c:7d:89:07:ba:a9:84:bc:6a:bf:1e:6a: f7:7e:43:9c:73:83:1f:75:65:9b:fb:e5:26:8a:f2:ab:33:be: 69:b6:a8:d9:ac:2f:2c:06:75:3a:4b:57:a0:88:77:77:6a:28: e6:85:db:e5:ca:39:6f:5d:61:02:3c:dc:82:54:6d:ee:d7:aa: e5:9d:23:ce:84:12:5b:47:07:93:5b:f7:d4:cb:a6:2c:be:20: 64:50:06:22:6e:05:26:99:28:75:ce:4e:25:00:4b:06:1f:76: 4b:9f:65:49:b8:f6:9b:be:b5:48:61:77:74:7e:0a:54:14:af: 67:2e:81:39:08:91:09:dd:7b:97:59:11:8f:e1:da:12:b4:8d: 13:fe:53:66:ac:63:d4:2d:45:69:3c:7a:22:57:cb:5c:ef:80: 1c:90:7f:c9:b6:6e:f3:ae:52:05:38:97:05:f2:de:0a:52:ed: e4:ec:d7:03:a9:e1:87:0e:22:e3:b2:56:b7:3f:63:fb:54:ad: 9c:01:f5:de -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEnEzSIsvqc/7I1okkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNzAwNDUzNFoXDTI3MDgxMDAwNDUzNFowLzEtMCsGA1UEAxMk MGU4YzUwYmEtYjlkMy00ZDlhLWFlYWQtNGZkNWU1YzIxZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SjJgXAWF62eH8HNG/Ty/pOsBFjSP3k9WB8Q I/qdHNUDSNYVGK5CpiBQ22pd/gUSKj5FsMTqTtUjdcm0oyrlKU8+Z0YycjO4s8Fl LLw+0sTx4FcWiq/m6OVE7eSkLgc964l4s/mHYVl20kELC9leekKByCkSaNgrjCV6 VgzQ8ISBZt9/a2Aoh+DIBovMYdXXKmcEL8ZtcTv/vzRv8Xl49Z03goHOdizaj7kv fG1yt3znjSf51p/42UmAA4XbeAx7pjPJNiTrI2o8G8kfcitpfRezWLMaN5hbyJkz nFfXY8FKwuejF8xUnQtjgVRBcAd81e44BTabjncCUUwa1nRYzwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFLvQPuQGhKLx4PuKWVwDBRdM3g0BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w ZThjNTBiYS1iOWQzLTRkOWEtYWVhZC00ZmQ1ZTVjMjFlODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzBlOGM1MGJhLWI5ZDMtNGQ5YS1h ZWFkLTRmZDVlNWMyMWU4OC8wZThjNTBiYS1iOWQzLTRkOWEtYWVhZC00ZmQ1ZTVj MjFlODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANMjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABChNTFIvB6a3nARBuvrVo2j+a+K A1jS36TgtXaMely6cw5rYFdXk7CqfwzrhXfcyKPZZb+f8Up/RuARh1x9iQe6qYS8 ar8eavd+Q5xzgx91ZZv75SaK8qszvmm2qNmsLywGdTpLV6CId3dqKOaF2+XKOW9d YQI83IJUbe7XquWdI86EEltHB5Nb99TLpiy+IGRQBiJuBSaZKHXOTiUASwYfdkuf ZUm49pu+tUhhd3R+ClQUr2cugTkIkQnde5dZEY/h2hK0jRP+U2asY9QtRWk8eiJX y1zvgByQf8m2bvOuUgU4lwXy3gpS7eTs1wOp4YcOIuOyVrc/Y/tUrZwB9d4= -----END CERTIFICATE-----Generated at Sun Jun 15 04:59:26 2025 by rpki-client