$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer File: 2522458f-db94-4ba6-8127-005675e4eea9.cer (raw, json) Hash identifier: 4iuvQQiavXLnUETSyWeOWCDj7LnVu3dhrR43N87/a1I= Subject key identifier: 59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849E64D5554E1AD608AF10C4D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 May 2025 00:45:33 +0000 Certificate not after: Sun 22 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 36000 IP: 208.73.76.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:4d:55:54:e1:ad:60:8a:f1:0c:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 19 00:45:33 2025 GMT Not After : Aug 22 00:45:33 2027 GMT Subject: CN=2522458f-db94-4ba6-8127-005675e4eea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:5a:5a:ea:b9:d4:d5:15:be:49:9e:e6:c0: 8a:86:e0:90:51:2f:4e:1d:4b:fc:26:5a:bf:7f:f2: d6:a0:b7:73:36:46:ef:11:88:95:29:a4:1e:ed:38: 99:a0:45:96:e1:cc:bb:93:28:36:57:32:f7:d4:d3: 92:e7:1f:4c:93:4c:d3:02:5d:21:3c:b4:c6:df:fa: 63:62:f4:f3:32:b9:d6:e0:f1:19:4b:23:55:1b:a3: ec:db:bf:62:14:d4:86:9e:82:23:d3:22:75:54:7e: 34:41:c2:6b:66:6d:7d:e4:f3:51:2e:69:2a:0e:1c: f7:ee:f1:bf:b2:8f:c5:cc:47:26:5d:d9:ef:b2:40: 5f:58:e3:2f:3b:06:c4:57:d4:2a:50:08:ea:b8:79: f4:c1:8a:82:90:ba:16:49:a4:14:6f:6c:5e:3e:82: ff:32:1b:07:e9:d9:6f:06:bc:2e:8b:29:eb:ff:cd: 7b:ab:c8:ef:05:52:d5:0c:b9:1b:a9:09:8c:51:34: 71:72:5d:5c:83:4e:bf:23:3d:33:34:f7:03:90:55: 0c:29:7c:d3:de:49:02:67:7c:08:b8:6d:39:24:38: eb:81:ab:bc:a3:85:33:b2:0c:42:36:0f:2a:09:a9: 22:ba:ed:3f:c1:9b:2d:f7:38:08:04:e1:2d:d8:d6: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 208.73.76.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36000 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:84:6e:b8:37:c8:fc:65:12:ca:0c:75:36:e7:f4:2a:5f:aa: ee:db:67:1c:65:dd:ef:8d:91:97:d5:7f:5f:18:28:6e:77:2f: 3c:43:a7:bc:19:5d:ea:b8:16:83:f0:e7:fc:ba:01:1b:96:e9: e7:4a:84:70:fd:55:c4:d5:70:fb:3d:0b:5a:d1:15:9c:58:6c: 69:27:b9:40:cc:1b:97:60:d3:d9:da:48:77:e2:a8:2a:eb:08: 94:75:f4:62:c0:b5:9c:97:02:a7:f7:29:ce:b3:9d:94:f2:92: ae:3f:7b:9b:57:ca:20:50:f0:0c:4e:6d:a2:96:83:da:bf:28: 77:a9:e3:5f:2c:e3:22:ab:46:91:73:83:6c:1f:49:91:9e:c7: 45:ae:e0:54:72:32:5b:81:0b:f4:19:0d:f5:62:22:c1:e2:d1: d1:9a:28:1a:53:0f:64:9a:fa:4d:04:f5:52:92:6d:a8:03:14: 61:f0:50:37:93:a1:4f:7a:d9:ae:62:88:9c:69:39:9a:1c:f9: 7b:33:12:20:b9:10:7d:ae:71:47:0a:f9:08:08:e8:20:c2:96: 78:eb:ab:ba:57:8c:2c:8c:01:83:b7:ff:0e:ca:84:b8:4c:96: 81:19:cc:f9:27:ac:7b:cd:51:f2:19:30:99:a9:aa:c6:08:d7: 67:bc:b0:1f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEnmTVVU4a1givEMTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxOTAwNDUzM1oXDTI3MDgyMjAwNDUzM1owLzEtMCsGA1UEAxMk MjUyMjQ1OGYtZGI5NC00YmE2LTgxMjctMDA1Njc1ZTRlZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7daWuq51NUVvkme5sCKhuCQUS9OHUv8Jlq/ f/LWoLdzNkbvEYiVKaQe7TiZoEWW4cy7kyg2VzL31NOS5x9Mk0zTAl0hPLTG3/pj YvTzMrnW4PEZSyNVG6Ps279iFNSGnoIj0yJ1VH40QcJrZm195PNRLmkqDhz37vG/ so/FzEcmXdnvskBfWOMvOwbEV9QqUAjquHn0wYqCkLoWSaQUb2xePoL/MhsH6dlv Brwuiynr/817q8jvBVLVDLkbqQmMUTRxcl1cg06/Iz0zNPcDkFUMKXzT3kkCZ3wI uG05JDjrgau8o4UzsgxCNg8qCakiuu0/wZst9zgIBOEt2NZSHwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFnB3CteHpeiVco+Q0RJmSPoJuUBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y NTIyNDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2NzVlNGVlYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI1MjI0NThmLWRiOTQtNGJhNi04 MTI3LTAwNTY3NWU0ZWVhOS8yNTIyNDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2NzVl NGVlYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQSUwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIygMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHWEbrg3yPxlEsoMdTbn9Cpfqu7bZxxl3e+NkZfVf18YKG53 LzxDp7wZXeq4FoPw5/y6ARuW6edKhHD9VcTVcPs9C1rRFZxYbGknuUDMG5dg09na SHfiqCrrCJR19GLAtZyXAqf3Kc6znZTykq4/e5tXyiBQ8AxObaKWg9q/KHep418s 4yKrRpFzg2wfSZGex0Wu4FRyMluBC/QZDfViIsHi0dGaKBpTD2Sa+k0E9VKSbagD FGHwUDeToU962a5iiJxpOZoc+XszEiC5EH2ucUcK+QgI6CDClnjrq7pXjCyMAYO3 /w7KhLhMloEZzPknrHvNUfIZMJmpqsYI12e8sB8= -----END CERTIFICATE-----Generated at Sun Jun 15 04:52:07 2025 by rpki-client