$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.cer File: 2aebbca8-597b-4522-9ea6-9c6cdcbcb889.cer (raw, json) Hash identifier: kTOQ9Mo3ss5SP5wFEx2RQDdW0up88I9NmuJnUTLxsZI= Subject key identifier: 36:C5:47:43:D9:2F:6A:EE:69:3B:BB:21:F0:A0:96:DD:5F:30:6F:7A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849F121937A5DF2E5090F3FA000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 21:51:17 +0000 Certificate not after: Wed 25 Aug 2027 21:51:17 +0000 Subordinate resources: IP: 131.210.0.0/16 IP: 192.35.81.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:21:93:7a:5d:f2:e5:09:0f:3f:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 22 21:51:17 2025 GMT Not After : Aug 25 21:51:17 2027 GMT Subject: CN=2aebbca8-597b-4522-9ea6-9c6cdcbcb889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:de:a7:6c:36:fe:63:8e:df:f3:03:14:70: b8:fb:7c:64:e1:86:c5:5a:de:bc:33:09:94:7a:7b: 56:de:5b:c3:e6:c0:59:9b:e0:70:66:c5:b6:f0:1e: 9a:c4:21:be:10:a8:d7:9f:f2:22:ba:d1:ee:a8:02: cd:ea:82:d9:13:81:60:01:4b:ee:f8:19:ad:0a:7d: e6:77:38:54:9b:b2:4b:46:16:d8:14:c8:0a:4d:64: f0:db:ca:8e:ab:78:67:c6:91:85:22:73:d2:6f:9b: 58:9f:4e:56:67:80:98:48:b9:f8:56:27:e1:9a:e1: 65:b5:68:3c:ac:bf:43:c6:4a:5e:bd:f0:aa:a2:25: 49:55:79:b8:6e:4a:bb:8e:54:f4:94:e3:47:1c:dc: 31:6a:a5:ef:cd:e2:ff:5b:bf:63:4d:41:a7:98:97: 07:ca:81:f0:7f:ba:04:8f:15:58:cc:a0:c9:22:fb: 4a:f4:aa:42:05:dd:61:27:cb:61:e3:54:29:65:68: 7c:1a:1d:1f:3c:fb:81:01:5c:33:69:77:4a:34:93: a0:03:7a:5e:b0:98:c8:24:08:6a:c0:26:84:c0:d8: e2:19:09:e2:d6:4c:ef:cf:db:db:a1:1b:0b:35:21: d4:c0:a2:f7:dd:ee:31:cb:a2:2d:9e:f8:4f:70:de: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C5:47:43:D9:2F:6A:EE:69:3B:BB:21:F0:A0:96:DD:5F:30:6F:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 131.210.0.0/16 192.35.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:65:f0:2a:d4:3c:7a:c7:90:a0:d8:05:31:e8:51:47:9c:b1: c9:38:32:66:9f:a4:01:60:d3:7b:c7:99:53:3c:5f:83:5e:c9: 0f:61:5e:22:53:d3:3e:7d:9f:08:50:cd:45:13:1f:1d:bb:ef: 56:84:a4:ff:ec:83:75:2a:33:e8:97:25:29:c2:73:af:f6:22: 85:f7:cb:fc:a5:2f:77:72:a9:e6:9a:97:cf:5d:67:82:05:d5: da:b7:50:95:31:85:6b:45:3c:87:36:42:b9:e1:52:a0:89:d6: c0:20:48:c9:fc:84:2a:96:98:18:53:55:40:a7:02:79:56:97: 60:18:64:fc:9a:fe:ce:7d:81:05:2d:b2:5c:47:64:bc:a8:2d: a5:6f:af:19:a1:16:46:0b:50:ac:a3:07:55:94:ca:fb:89:0e: 82:3a:51:02:1f:08:2f:7d:9c:c9:1d:13:65:7e:d8:73:79:52: a7:30:58:b5:68:65:13:90:2d:73:de:56:5e:b6:51:36:14:b9: 8b:c4:9a:0f:fc:a6:89:62:cb:3d:cc:f2:2c:e8:ff:da:5c:25: 2b:bd:3f:e5:2c:f3:6a:6c:33:67:2f:47:f4:86:c1:f3:2c:dc: aa:29:1b:1d:20:b0:fd:cd:02:d1:5f:ef:df:0c:63:f9:45:c7: 42:dc:9d:f9 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEnxIZN6XfLlCQ8/oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyMjIxNTExN1oXDTI3MDgyNTIxNTExN1owLzEtMCsGA1UEAxMk MmFlYmJjYTgtNTk3Yi00NTIyLTllYTYtOWM2Y2RjYmNiODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR/ep2w2/mOO3/MDFHC4+3xk4YbFWt68MwmU entW3lvD5sBZm+BwZsW28B6axCG+EKjXn/IiutHuqALN6oLZE4FgAUvu+BmtCn3m dzhUm7JLRhbYFMgKTWTw28qOq3hnxpGFInPSb5tYn05WZ4CYSLn4VifhmuFltWg8 rL9DxkpevfCqoiVJVXm4bkq7jlT0lONHHNwxaqXvzeL/W79jTUGnmJcHyoHwf7oE jxVYzKDJIvtK9KpCBd1hJ8th41QpZWh8Gh0fPPuBAVwzaXdKNJOgA3pesJjIJAhq wCaEwNjiGQni1kzvz9vboRsLNSHUwKL33e4xy6ItnvhPcN5+0wIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFDbFR0PZL2ruaTu7IfCglt1fMG96MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y YWViYmNhOC01OTdiLTQ1MjItOWVhNi05YzZjZGNiY2I4ODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzJhZWJiY2E4LTU5N2ItNDUyMi05 ZWE2LTljNmNkY2JjYjg4OS8yYWViYmNhOC01OTdiLTQ1MjItOWVhNi05YzZjZGNi Y2I4ODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCD0gMEAMAjUTBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPZfAq1Dx6x5Cg 2AUx6FFHnLHJODJmn6QBYNN7x5lTPF+DXskPYV4iU9M+fZ8IUM1FEx8du+9WhKT/ 7IN1KjPolyUpwnOv9iKF98v8pS93cqnmmpfPXWeCBdXat1CVMYVrRTyHNkK54VKg idbAIEjJ/IQqlpgYU1VApwJ5VpdgGGT8mv7OfYEFLbJcR2S8qC2lb68ZoRZGC1Cs owdVlMr7iQ6COlECHwgvfZzJHRNlfthzeVKnMFi1aGUTkC1z3lZetlE2FLmLxJoP /KaJYss9zPIs6P/aXCUrvT/lLPNqbDNnL0f0hsHzLNyqKRsdILD9zQLRX+/fDGP5 RcdC3J35 -----END CERTIFICATE-----Generated at Sun Jun 15 21:57:23 2025 by rpki-client