$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57.cer File: 2425e15e-d5ff-402a-863b-92cb41a87c57.cer (raw, json) Hash identifier: QEIuVTtl8dIAbvrJFU0uWPqya+HOL01lErj3cQNTjyo= Subject key identifier: 53:BB:18:27:B1:0F:0D:C8:CD:7C:0C:BB:0A:F2:A0:21:9C:93:C1:47 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584998222EFE7BDB53700224A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/2425e15e-d5ff-402a-863b-92cb41a87c57.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Apr 2025 00:45:34 +0000 Certificate not after: Sun 25 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 396343 AS: 399482 IP: 64.30.155.0/24 IP: 67.226.216.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:22:2e:fe:7b:db:53:70:02:24:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 21 00:45:34 2025 GMT Not After : Jul 25 00:45:34 2027 GMT Subject: CN=2425e15e-d5ff-402a-863b-92cb41a87c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:05:f4:5a:e0:6b:03:5b:8c:96:c2:bb:51:7e: 4b:f2:cb:5b:fc:8c:55:09:27:96:70:82:af:97:63: 34:83:df:62:b3:bd:66:75:6b:22:d6:54:65:46:83: be:68:3c:09:22:33:e1:f0:e2:b9:aa:f1:43:b8:9c: 36:25:d6:9e:12:74:9b:89:b6:4f:34:9b:21:1f:5c: 5a:36:fd:0d:b8:f0:5d:2f:f8:9f:2d:31:31:7c:67: ba:b9:df:64:be:76:21:5d:1a:0f:8c:42:20:a8:12: 2f:3d:99:45:eb:32:fa:a1:16:c1:56:a4:68:47:de: 8f:7c:fb:5d:5f:b5:ab:41:32:4c:ba:5e:62:1d:2c: 6a:11:2a:c8:60:0c:43:5f:e5:db:22:44:d1:8b:e5: d0:be:62:ff:d7:40:a9:c7:e6:2f:1d:fc:5f:9d:09: dc:76:09:39:c2:39:62:9d:39:07:9d:8c:0d:d1:b9: 8c:16:3c:75:08:54:0d:60:ab:ee:79:6e:b2:7e:3b: aa:e1:0f:e3:73:36:b8:13:55:a1:71:e7:b0:5e:4a: ee:a1:73:25:ac:26:48:dd:a3:b9:9a:05:aa:d7:3f: 22:69:b4:c9:17:2e:30:88:f1:6e:cc:d4:3d:c3:cf: 49:03:eb:87:cb:b9:97:d8:02:5d:e4:7e:54:2a:1f: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BB:18:27:B1:0F:0D:C8:CD:7C:0C:BB:0A:F2:A0:21:9C:93:C1:47 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2425e15e-d5ff-402a-863b-92cb41a87c57/2425e15e-d5ff-402a-863b-92cb41a87c57.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.30.155.0/24 67.226.216.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396343 399482 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c4:0f:e5:7b:17:d3:9f:f9:6e:63:86:85:f1:18:ab:78:f7: 42:96:16:08:1b:e1:da:7b:52:3e:89:48:23:8e:5f:b7:c4:4a: 6b:d5:b8:62:1f:8a:49:f0:f0:06:48:42:12:fe:e7:d5:f3:a2: 6c:bd:6b:a2:14:aa:1b:3c:ae:f6:e9:4f:ab:09:9f:64:04:1c: 69:14:be:49:6c:4c:76:c7:9b:c2:4d:46:a9:20:0e:c9:f8:18: a4:01:91:63:f6:cc:81:f5:1b:ae:70:42:36:27:d5:9c:71:f5: 77:12:6f:4f:75:5e:61:4c:fa:6b:32:7b:cb:a7:28:c3:e6:da: 40:01:8c:95:2c:c2:9a:31:b8:39:27:5d:7d:d6:72:17:77:90: 77:e2:05:56:58:b5:d6:fc:9f:80:bb:99:56:78:da:05:65:79: 98:fe:1b:80:4d:70:80:fb:b9:1a:cd:c4:e4:5f:9d:e2:e9:8b: a8:92:4c:d7:06:fe:f2:db:06:28:52:d7:98:a1:ab:bd:82:c6: 2e:ad:67:1e:98:95:80:92:80:3d:8e:1e:01:9c:01:e4:eb:e7: 62:05:57:6e:a8:96:9f:62:a7:c1:54:9a:ff:ca:9c:95:82:da: ed:17:49:71:bf:a0:42:73:9c:87:73:f8:17:86:db:80:05:d2: d1:79:79:73 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEmYIi7+e9tTcAIkpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQyMTAwNDUzNFoXDTI3MDcyNTAwNDUzNFowLzEtMCsGA1UEAxMk MjQyNWUxNWUtZDVmZi00MDJhLTg2M2ItOTJjYjQxYTg3YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwX0WuBrA1uMlsK7UX5L8stb/IxVCSeWcIKv l2M0g99is71mdWsi1lRlRoO+aDwJIjPh8OK5qvFDuJw2JdaeEnSbibZPNJshH1xa Nv0NuPBdL/ifLTExfGe6ud9kvnYhXRoPjEIgqBIvPZlF6zL6oRbBVqRoR96PfPtd X7WrQTJMul5iHSxqESrIYAxDX+XbIkTRi+XQvmL/10Cpx+YvHfxfnQncdgk5wjli nTkHnYwN0bmMFjx1CFQNYKvueW6yfjuq4Q/jcza4E1WhceewXkruoXMlrCZI3aO5 mgWq1z8iabTJFy4wiPFuzNQ9w89JA+uHy7mX2AJd5H5UKh+n6QIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFFO7GCexDw3IzXwMuwryoCGck8FHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y NDI1ZTE1ZS1kNWZmLTQwMmEtODYzYi05MmNiNDFhODdjNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI0MjVlMTVlLWQ1ZmYtNDAyYS04 NjNiLTkyY2I0MWE4N2M1Ny8yNDI1ZTE1ZS1kNWZmLTQwMmEtODYzYi05MmNiNDFh ODdjNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABAHpsDBABD4tgwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDBgw3AgMGGHowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhsQP5XsX05/5bmOGhfEYq3j3QpYWCBvh 2ntSPolII45ft8RKa9W4Yh+KSfDwBkhCEv7n1fOibL1rohSqGzyu9ulPqwmfZAQc aRS+SWxMdsebwk1GqSAOyfgYpAGRY/bMgfUbrnBCNifVnHH1dxJvT3VeYUz6azJ7 y6cow+baQAGMlSzCmjG4OSddfdZyF3eQd+IFVli11vyfgLuZVnjaBWV5mP4bgE1w gPu5Gs3E5F+d4umLqJJM1wb+8tsGKFLXmKGrvYLGLq1nHpiVgJKAPY4eAZwB5Ovn YgVXbqiWn2KnwVSa/8qclYLa7RdJcb+gQnOch3P4F4bbgAXS0Xl5cw== -----END CERTIFICATE-----Generated at Sun Apr 27 15:11:15 2025 by rpki-client