$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer File: 2531a4ba-6abc-447c-add8-67edc3c483ab.cer (raw, json) Hash identifier: 1dN948nz1ZEsvayNsG9ed05+3ckLsL6q3AmrkeFjY/E= Subject key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A023834797C9DD1B5857BC280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 May 2025 00:45:37 +0000 Certificate not after: Wed 01 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 395585 IP: 23.171.0.0/24 IP: 2620:12a:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:38:34:79:7c:9d:d1:b5:85:7b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 29 00:45:37 2025 GMT Not After : Sep 1 00:45:37 2027 GMT Subject: CN=2531a4ba-6abc-447c-add8-67edc3c483ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:b0:e5:04:41:b4:b9:d8:7b:c1:84:7f:df: a1:fb:c3:ed:16:4a:ff:f0:cd:00:d3:72:54:16:5e: f0:c3:d1:ba:17:54:34:f9:06:7d:07:0d:fd:d8:b8: 07:4c:56:77:6c:08:7a:2b:b8:d9:81:e5:1f:87:3a: db:d0:ff:40:e9:5b:b5:97:79:ed:1d:44:64:22:65: 96:32:a4:34:c2:e3:c7:5c:42:65:cf:76:18:86:b2: 63:27:53:96:e9:04:10:2e:b0:9a:c1:d4:ff:51:b8: 14:33:af:92:50:04:22:cf:62:cf:6d:ad:e0:87:e3: b7:2b:e7:9a:a2:88:e0:81:be:3c:62:3b:e5:bd:27: 70:5a:44:a6:fd:53:76:a4:94:8b:52:07:21:0c:ac: fd:d8:22:57:d2:74:92:a3:06:19:bb:08:8c:67:87: 20:36:04:eb:14:3d:32:28:03:97:46:46:22:ac:1a: a4:0f:56:5f:90:63:37:22:05:1b:8c:82:21:ad:ab: 3e:ac:9c:00:8b:9e:26:4e:6e:74:03:e6:a1:42:a5: d6:6c:d6:88:6b:b9:11:c6:e4:18:b4:46:f2:27:88: 3e:0d:1a:c6:a0:47:7d:35:17:59:d2:2d:1f:f7:6b: 33:49:57:f4:28:9d:d1:41:53:d4:1a:2c:8a:1b:e2: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.171.0.0/24 IPv6: 2620:12a:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395585 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:77:a8:a0:93:62:58:02:a5:14:f3:51:b3:9d:46:36:59:5a: 8e:84:03:a4:d2:83:32:41:2e:64:02:3a:22:bd:ae:21:b3:8d: de:cd:ae:e6:7d:4d:10:73:ed:93:69:39:4a:ea:30:32:20:34: fd:3d:23:e1:0e:cd:37:5b:40:47:a6:e1:a5:0b:d4:a0:11:84: ea:72:4a:84:4a:53:6f:54:0b:58:08:ed:85:8e:23:b4:ae:2c: 7b:f0:cd:71:c8:c6:23:b8:37:a7:35:c5:e0:2f:3d:31:33:9e: 46:b3:5c:23:7f:07:7b:ac:c0:b8:63:24:ff:5b:0b:7b:f4:35: 42:d7:5f:0b:fd:80:33:70:9d:ba:7a:97:5b:c3:13:73:67:4c: c5:c7:19:9d:da:78:78:fd:cf:17:6b:32:ef:ec:4d:c1:42:d7: 8c:3d:2c:5b:4e:03:35:66:21:56:8a:2e:8c:ce:a1:ca:6a:e1: db:5f:72:25:0e:c6:74:8e:ae:7b:47:14:ae:1b:ca:cd:93:bb: 16:85:ab:a7:e4:4c:c5:c2:e4:03:29:37:0d:79:49:bc:1a:9d: 0b:f1:6b:51:a6:3a:b9:7d:55:4c:05:b3:8f:31:1b:46:f5:dc: ca:97:53:6b:be:d5:3b:fb:a6:b3:9b:96:cb:cf:cf:fb:ad:52: b1:ae:2e:86 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEoCODR5fJ3RtYV7woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyOTAwNDUzN1oXDTI3MDkwMTAwNDUzN1owLzEtMCsGA1UEAxMk MjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4M2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbyw5QRBtLnYe8GEf9+h+8PtFkr/8M0A03JU Fl7ww9G6F1Q0+QZ9Bw392LgHTFZ3bAh6K7jZgeUfhzrb0P9A6Vu1l3ntHURkImWW MqQ0wuPHXEJlz3YYhrJjJ1OW6QQQLrCawdT/UbgUM6+SUAQiz2LPba3gh+O3K+ea oojggb48YjvlvSdwWkSm/VN2pJSLUgchDKz92CJX0nSSowYZuwiMZ4cgNgTrFD0y KAOXRkYirBqkD1ZfkGM3IgUbjIIhras+rJwAi54mTm50A+ahQqXWbNaIa7kRxuQY tEbyJ4g+DRrGoEd9NRdZ0i0f92szSVf0KJ3RQVPUGiyKG+LSpQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJ46n3T5bGTtY5+sgfLkN0Mu9jsKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y NTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI1MzFhNGJhLTZhYmMtNDQ3Yy1h ZGQ4LTY3ZWRjM2M0ODNhYi8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNj NDgzYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqwAwDgQCAAIwCAMGACYgASrAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYJQTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6d6igk2JYAqUU81GznUY2WVqO hAOk0oMyQS5kAjoiva4hs43eza7mfU0Qc+2TaTlK6jAyIDT9PSPhDs03W0BHpuGl C9SgEYTqckqESlNvVAtYCO2FjiO0rix78M1xyMYjuDenNcXgLz0xM55Gs1wjfwd7 rMC4YyT/Wwt79DVC118L/YAzcJ26epdbwxNzZ0zFxxmd2nh4/c8XazLv7E3BQteM PSxbTgM1ZiFWii6MzqHKauHbX3IlDsZ0jq57RxSuG8rNk7sWhaun5EzFwuQDKTcN eUm8Gp0L8WtRpjq5fVVMBbOPMRtG9dzKl1NrvtU7+6azm5bLz8/7rVKxri6G -----END CERTIFICATE-----Generated at Sun Jun 15 22:05:58 2025 by rpki-client