$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8.cer File: 33370fff-a726-4094-b6ac-cacb8a8769f8.cer (raw, json) Hash identifier: aXiL7K8hLt5NWmlm3oiNj5o1nork3p6R71nGFDBR/c0= Subject key identifier: E1:F0:A2:93:2A:73:44:E9:AE:9D:7A:23:DD:BA:E4:14:1D:CA:5F:07 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A15C2FDC03046524230A9AF20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8/33370fff-a726-4094-b6ac-cacb8a8769f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Jun 2025 00:45:37 +0000 Certificate not after: Wed 08 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 11662 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:15:c2:fd:c0:30:46:52:42:30:a9:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 5 00:45:37 2025 GMT Not After : Sep 8 00:45:37 2027 GMT Subject: CN=33370fff-a726-4094-b6ac-cacb8a8769f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:57:08:4f:a5:14:bb:64:d0:7f:ce:b1:87:10: e1:bb:33:d7:55:77:1c:5c:d1:99:c1:cb:61:9c:3e: 11:90:b2:83:08:fd:84:a3:fe:4d:55:d2:ac:8a:a8: 75:64:03:25:03:2a:bc:62:a4:b4:47:eb:d5:5b:2d: d3:74:d9:8d:5a:5c:02:b7:38:cb:5c:de:fd:03:cc: b9:01:9f:63:b5:cb:94:07:91:7d:7e:a7:da:f1:a6: db:d3:b6:ea:92:09:95:47:7b:ae:3b:2f:ea:8b:8e: ea:aa:06:fa:bb:ae:9f:88:8a:e7:03:dd:17:8b:7a: ec:e2:bc:f1:43:d4:84:13:35:17:81:e2:1c:86:8f: f3:b7:2d:60:cb:09:c2:19:d2:ac:eb:3f:5e:6a:9a: 49:7f:48:ae:9b:88:da:99:18:fc:79:18:3a:be:44: 41:2a:b7:52:02:e9:14:f2:7b:c0:77:8e:85:07:98: e2:d3:ef:f6:78:bf:24:a7:cb:f3:1f:00:b8:c5:78: 32:3b:b4:de:fe:d8:0c:31:c6:13:e2:16:b4:ae:c3: ff:bc:a2:4a:79:a0:03:ea:5a:e2:7e:4e:6e:f6:98: bb:6a:61:1e:31:ce:c5:14:da:9e:94:71:69:c0:35: da:a5:c5:cb:b3:42:0e:fb:dc:13:88:b6:d3:cd:0d: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:A2:93:2A:73:44:E9:AE:9D:7A:23:DD:BA:E4:14:1D:CA:5F:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33370fff-a726-4094-b6ac-cacb8a8769f8/33370fff-a726-4094-b6ac-cacb8a8769f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 11662 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:56:72:db:b1:1c:ad:3c:c5:13:41:02:30:96:2d:b8:0a:d0: 71:f7:bc:40:d0:43:2a:20:9f:16:7a:cc:76:c2:6d:66:af:fd: c6:93:dd:58:94:74:95:43:a5:34:ce:83:c1:73:fb:b1:6b:26: e9:79:dd:ac:39:d4:6f:32:7b:59:ec:e6:68:05:44:38:16:76: e9:b1:12:d7:65:92:fa:74:2f:12:fc:e3:13:6e:56:44:c7:79: fb:e7:42:da:b5:f1:c5:de:c4:1c:37:bb:5c:8c:ea:6e:2d:1f: 7c:f4:2a:d0:19:94:a3:34:ca:b1:5c:59:3f:e5:06:6f:d2:f7: a8:4b:b0:4c:ec:8a:29:1e:d5:ac:a3:53:00:3b:9c:50:95:b6: 05:a2:01:5d:ad:1c:df:60:e4:e1:9c:cc:27:74:02:7b:32:d2: 0f:0c:73:17:47:82:f7:ea:b2:d0:ea:89:52:a9:da:52:ed:ab: ee:45:e5:92:b2:1a:04:3b:30:5c:90:0c:43:04:38:5a:cd:46: 1f:35:fc:40:77:05:75:fb:be:d1:83:10:aa:ac:0a:5d:d1:57: 47:e8:15:19:0a:d9:64:fd:3b:51:b8:0f:bc:86:53:bd:9b:ad: f9:d8:96:f1:78:af:f1:75:aa:4e:7f:b7:5c:70:05:01:26:7f: 85:34:b9:51 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEoVwv3AMEZSQjCpryAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwNTAwNDUzN1oXDTI3MDkwODAwNDUzN1owLzEtMCsGA1UEAxMk MzMzNzBmZmYtYTcyNi00MDk0LWI2YWMtY2FjYjhhODc2OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglcIT6UUu2TQf86xhxDhuzPXVXccXNGZwcth nD4RkLKDCP2Eo/5NVdKsiqh1ZAMlAyq8YqS0R+vVWy3TdNmNWlwCtzjLXN79A8y5 AZ9jtcuUB5F9fqfa8abb07bqkgmVR3uuOy/qi47qqgb6u66fiIrnA90Xi3rs4rzx Q9SEEzUXgeIcho/zty1gywnCGdKs6z9eappJf0ium4jamRj8eRg6vkRBKrdSAukU 8nvAd46FB5ji0+/2eL8kp8vzHwC4xXgyO7Te/tgMMcYT4ha0rsP/vKJKeaAD6lri fk5u9pi7amEeMc7FFNqelHFpwDXapcXLs0IO+9wTiLbTzQ23BwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFOHwopMqc0Tprp16I9265BQdyl8HMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z MzM3MGZmZi1hNzI2LTQwOTQtYjZhYy1jYWNiOGE4NzY5ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzMzMzcwZmZmLWE3MjYtNDA5NC1i NmFjLWNhY2I4YTg3NjlmOC8zMzM3MGZmZi1hNzI2LTQwOTQtYjZhYy1jYWNiOGE4 NzY5ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLY4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATFZy27EcrTzFE0ECMJYtuArQcfe8 QNBDKiCfFnrMdsJtZq/9xpPdWJR0lUOlNM6DwXP7sWsm6XndrDnUbzJ7WezmaAVE OBZ26bES12WS+nQvEvzjE25WRMd5++dC2rXxxd7EHDe7XIzqbi0ffPQq0BmUozTK sVxZP+UGb9L3qEuwTOyKKR7VrKNTADucUJW2BaIBXa0c32Dk4ZzMJ3QCezLSDwxz F0eC9+qy0OqJUqnaUu2r7kXlkrIaBDswXJAMQwQ4Ws1GHzX8QHcFdfu+0YMQqqwK XdFXR+gVGQrZZP07UbgPvIZTvZut+diW8Xiv8XWqTn+3XHAFASZ/hTS5UQ== -----END CERTIFICATE-----Generated at Sun Jun 15 05:07:52 2025 by rpki-client