$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5.cer File: 176385df-23a6-41a1-bbc0-dd5116b049c5.cer (raw, json) Hash identifier: tVpB1pLnDa3pdBEXEujMPukoIThJhscGxgtcV36FOmw= Subject key identifier: C7:5D:43:5D:FB:A7:95:DA:30:8A:1D:20:BA:16:11:A9:2A:8A:04:AF Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849876214A21D27647C50592F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/176385df-23a6-41a1-bbc0-dd5116b049c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Apr 2025 00:45:34 +0000 Certificate not after: Mon 19 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 394037 IP: 134.195.54.0/23 IP: 172.110.180.0/22 IP: 2602:fd38::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:62:14:a2:1d:27:64:7c:50:59:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 15 00:45:34 2025 GMT Not After : Jul 19 00:45:34 2027 GMT Subject: CN=176385df-23a6-41a1-bbc0-dd5116b049c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:bf:1c:e0:3d:c4:6d:5b:26:d9:c7:3b:75: ea:69:f7:dd:cf:74:32:21:90:ba:d3:1d:20:ae:71: 84:35:33:1a:35:bd:77:89:78:de:4d:c9:2f:fc:e2: 98:31:37:13:0e:c9:ff:51:2f:0c:bd:52:2a:9b:59: 22:1e:5b:04:b4:2b:1a:15:29:23:1a:f6:43:54:bf: c0:bc:4d:67:51:ff:65:65:74:23:8b:94:10:7b:51: 7b:de:28:8a:5e:91:bb:05:93:55:c8:ca:d5:67:b0: 24:51:e2:7c:90:35:37:de:15:ad:0d:9f:65:43:92: 5a:39:f5:e0:8c:b1:f5:a0:94:06:65:57:0a:5a:c5: 1a:50:d3:13:87:37:b8:f5:d9:75:3b:f3:42:33:17: a5:33:88:9b:8d:9c:5b:7c:eb:e9:22:8d:fb:47:ea: 5e:eb:e7:06:38:19:dc:86:ff:7d:a3:e8:f7:80:96: ec:6a:e9:63:15:e0:12:4e:95:f7:4f:c7:b1:bf:a5: bd:ca:19:a6:70:9e:ca:41:7a:e0:04:8d:0f:43:5e: 19:9b:63:4a:6b:dc:bc:9c:3c:ea:dd:e1:f5:64:da: a4:f7:b3:e5:e0:a9:52:ee:51:9e:e9:41:b4:0f:ac: 74:bb:96:60:d6:61:46:0e:cf:46:ed:78:51:94:cd: 6c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5D:43:5D:FB:A7:95:DA:30:8A:1D:20:BA:16:11:A9:2A:8A:04:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/176385df-23a6-41a1-bbc0-dd5116b049c5/176385df-23a6-41a1-bbc0-dd5116b049c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 134.195.54.0/23 172.110.180.0/22 IPv6: 2602:fd38::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394037 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b4:81:b8:8e:6f:5d:5c:26:ca:2f:dc:ef:2e:14:bb:0f:5b: 4d:ca:d5:3c:39:31:10:f3:7e:90:3c:c5:88:f0:8d:8c:3c:48: 57:da:18:62:50:f4:5c:9a:af:d8:ce:d3:23:1a:ad:4f:b4:45: 7d:c2:77:ac:10:5c:e8:5f:3b:79:ad:85:9e:25:06:eb:2b:72: d3:1f:7d:df:bd:7c:b3:16:b1:c5:36:2a:0d:52:12:6f:a0:f3: ec:fc:53:ea:bf:4c:14:7b:5c:62:a8:bc:15:27:93:a7:e5:c4: 14:84:cd:42:17:60:cb:b1:4e:0f:7f:8f:6b:f1:4f:2c:6d:3e: 32:42:2b:1e:4e:28:60:ab:b0:dc:6b:38:46:b9:09:22:84:31: 3d:5f:c3:87:01:f8:aa:f8:a3:b0:55:86:a8:10:ac:cb:55:c5: ed:fe:df:ce:74:1e:6f:cc:c5:90:22:56:db:26:c9:f2:50:17: 06:bb:98:6f:3e:46:8b:cb:8f:0d:5d:24:7c:07:c1:94:94:ab: 43:01:db:99:b0:bb:93:b3:54:e3:12:f4:47:ba:e8:8c:03:8b: 64:b5:02:74:ef:45:19:f4:6f:05:47:43:58:15:21:08:26:e3: 8b:05:98:0f:e3:90:1c:5e:53:f8:b2:04:bb:1f:8b:b8:3f:09: 29:e6:2f:ac -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEmHYhSiHSdkfFBZLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQxNTAwNDUzNFoXDTI3MDcxOTAwNDUzNFowLzEtMCsGA1UEAxMk MTc2Mzg1ZGYtMjNhNi00MWExLWJiYzAtZGQ1MTE2YjA0OWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEO/HOA9xG1bJtnHO3Xqaffdz3QyIZC60x0g rnGENTMaNb13iXjeTckv/OKYMTcTDsn/US8MvVIqm1kiHlsEtCsaFSkjGvZDVL/A vE1nUf9lZXQji5QQe1F73iiKXpG7BZNVyMrVZ7AkUeJ8kDU33hWtDZ9lQ5JaOfXg jLH1oJQGZVcKWsUaUNMThze49dl1O/NCMxelM4ibjZxbfOvpIo37R+pe6+cGOBnc hv99o+j3gJbsauljFeASTpX3T8exv6W9yhmmcJ7KQXrgBI0PQ14Zm2NKa9y8nDzq 3eH1ZNqk97Pl4KlS7lGe6UG0D6x0u5Zg1mFGDs9G7XhRlM1suwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMddQ137p5XaMIodILoWEakqigSvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x NzYzODVkZi0yM2E2LTQxYTEtYmJjMC1kZDUxMTZiMDQ5YzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzE3NjM4NWRmLTIzYTYtNDFhMS1i YmMwLWRkNTExNmIwNDljNS8xNzYzODVkZi0yM2E2LTQxYTEtYmJjMC1kZDUxMTZi MDQ5YzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAGGwzYDBAKsbrQwDgQCAAIwCAMGBCYC/TgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYDNTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUtIG4jm9dXCbKL9zv LhS7D1tNytU8OTEQ836QPMWI8I2MPEhX2hhiUPRcmq/YztMjGq1PtEV9wnesEFzo Xzt5rYWeJQbrK3LTH33fvXyzFrHFNioNUhJvoPPs/FPqv0wUe1xiqLwVJ5On5cQU hM1CF2DLsU4Pf49r8U8sbT4yQiseTihgq7DcazhGuQkihDE9X8OHAfiq+KOwVYao EKzLVcXt/t/OdB5vzMWQIlbbJsnyUBcGu5hvPkaLy48NXSR8B8GUlKtDAduZsLuT s1TjEvRHuuiMA4tktQJ070UZ9G8FR0NYFSEIJuOLBZgP45AcXlP4sgS7H4u4Pwkp 5i+s -----END CERTIFICATE-----Generated at Sun Jun 15 05:09:57 2025 by rpki-client