$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer File: 37e69330-3024-406b-b60a-0d95e25f2334.cer (raw, json) Hash identifier: Wysf5AeWgk2bLkiHr7wHXbaEXu2WbS0Hf14wN+q5UKk= Subject key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858492A727A72E2C954F8B5905100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Mar 2025 17:48:26 +0000 Certificate not after: Tue 12 Jan 2027 01:32:14 +0000 Subordinate resources: AS: 401390 IP: 23.191.120.0/24 IP: 149.112.131.0/24 IP: 2602:f7da::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:72:7a:72:e2:c9:54:f8:b5:90:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 12 17:48:26 2025 GMT Not After : Jan 12 01:32:14 2027 GMT Subject: CN=37e69330-3024-406b-b60a-0d95e25f2334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:8b:1e:de:aa:96:68:6c:34:1f:19:44:4e: 90:3d:79:9a:8f:3a:af:80:c4:17:3c:86:50:c3:2f: 20:0c:2a:e7:5c:9b:73:c4:7e:27:87:4b:d8:35:64: fb:9b:99:0d:cf:c9:f1:0c:81:50:da:f3:2d:46:44: a5:e5:d6:a1:17:dc:d0:24:aa:80:46:db:da:26:34: 1a:be:da:0d:df:c3:c5:79:56:4a:05:be:40:4e:7b: 61:d6:a5:f7:ca:fb:ea:c8:df:60:7a:2d:1a:52:aa: 79:31:27:f6:7b:20:e7:75:a9:05:99:79:fd:6b:73: e5:6c:54:fc:8e:c0:6a:75:08:3d:4f:a2:b3:aa:d0: 3b:65:06:ce:c1:dc:19:4c:35:d8:26:6d:ae:3a:66: ba:5a:33:f0:97:b4:d4:d8:51:b7:e1:6a:29:76:34: bc:fd:13:cd:fb:32:44:2d:74:76:c8:48:d0:d0:aa: 54:48:9a:2e:2a:b4:f8:89:13:61:54:90:b9:fc:ea: d8:87:53:26:7f:55:0d:a6:79:7a:2d:de:9e:ae:a3: 90:e7:d3:23:7f:f4:74:01:1b:11:6f:19:05:b0:8b: 29:ff:1d:48:73:bc:c6:38:b1:1a:f1:8a:55:83:bd: b2:85:46:fe:3e:c9:85:09:b7:93:c2:6f:17:79:ed: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.191.120.0/24 149.112.131.0/24 IPv6: 2602:f7da::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401390 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b7:6d:f1:98:09:58:a7:2f:c3:df:3b:fa:20:3b:e1:ba:18: 26:d1:db:83:58:5e:5c:f2:1a:3c:75:8a:b6:9f:62:a2:0b:b0: 17:a0:6d:75:c5:b2:05:09:18:24:e2:42:31:de:34:5e:b7:1a: 00:41:85:38:95:a1:55:71:b2:41:1e:77:59:77:77:6d:15:7b: 00:7a:e6:b3:f5:d4:08:af:fe:6d:c8:10:1f:ab:26:71:b5:c2: 3c:88:3b:34:f0:57:34:b4:99:fb:a2:87:cb:0a:61:34:1e:8f: e5:d0:3f:28:37:ae:3c:38:a6:a2:06:f2:68:74:c9:9d:38:e0: 03:49:b4:3f:59:e6:19:b3:b2:34:89:53:e6:01:dc:bc:89:33: a3:b9:f9:60:02:62:46:af:29:1c:27:5d:d8:96:06:52:75:6d: 31:7a:b6:71:94:a1:b0:1b:65:58:b1:6c:8f:0e:a7:75:f4:76: 23:86:87:c1:f1:58:2b:f5:ba:39:bf:05:bb:34:12:76:1b:a9: bb:7e:e7:4e:0e:92:af:3c:68:43:22:55:82:23:db:2b:8d:71: b0:4d:55:f7:71:af:eb:57:f6:1c:51:e3:ba:5a:bb:f5:db:3f: f0:fd:36:0e:d6:2a:60:ff:6a:fd:4c:a2:2f:80:ff:4e:94:d9: 6b:da:1f:60 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEkqcnpy4slU+LWQUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDMxMjE3NDgyNloXDTI3MDExMjAxMzIxNFowLzEtMCsGA1UEAxMk MzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYyMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3WLHt6qlmhsNB8ZRE6QPXmajzqvgMQXPIZQ wy8gDCrnXJtzxH4nh0vYNWT7m5kNz8nxDIFQ2vMtRkSl5dahF9zQJKqARtvaJjQa vtoN38PFeVZKBb5ATnth1qX3yvvqyN9gei0aUqp5MSf2eyDndakFmXn9a3PlbFT8 jsBqdQg9T6KzqtA7ZQbOwdwZTDXYJm2uOma6WjPwl7TU2FG34WopdjS8/RPN+zJE LXR2yEjQ0KpUSJouKrT4iRNhVJC5/OrYh1Mmf1UNpnl6Ld6erqOQ59Mjf/R0ARsR bxkFsIsp/x1Ic7zGOLEa8YpVg72yhUb+PsmFCbeTwm8Xee1v7QIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFJcWqatmlT8/LED8HTNjhadF1GU5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z N2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM3ZTY5MzMwLTMwMjQtNDA2Yi1i NjBhLTBkOTVlMjVmMjMzNC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1 ZjIzMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXv3gDBACVcIMwDQQCAAIwBwMFACYC99owGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBh/uMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFy3bfGYCVinL8PfO/og O+G6GCbR24NYXlzyGjx1irafYqILsBegbXXFsgUJGCTiQjHeNF63GgBBhTiVoVVx skEed1l3d20VewB65rP11Aiv/m3IEB+rJnG1wjyIOzTwVzS0mfuih8sKYTQej+XQ Pyg3rjw4pqIG8mh0yZ044ANJtD9Z5hmzsjSJU+YB3LyJM6O5+WACYkavKRwnXdiW BlJ1bTF6tnGUobAbZVixbI8Op3X0diOGh8HxWCv1ujm/Bbs0EnYbqbt+504Okq88 aEMiVYIj2yuNcbBNVfdxr+tX9hxR47pau/XbP/D9Ng7WKmD/av1Moi+A/06U2Wva H2A= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:35 2025 by rpki-client