$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9.cer File: 39785d42-deab-45fc-836f-b97c88036ed9.cer (raw, json) Hash identifier: 5ZSkPy2XLnMNAD/tMTbKYzY6wznW/cPBdrkTpziD6AQ= Subject key identifier: 38:E5:F5:9A:7D:C5:20:BA:6A:A8:AD:B5:5B:59:45:CA:8B:D1:C8:02 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849DB22986BA2EA3D9FBCB2FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/39785d42-deab-45fc-836f-b97c88036ed9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 May 2025 00:45:33 +0000 Certificate not after: Wed 18 Aug 2027 00:45:33 +0000 Subordinate resources: IP: 23.173.184.0/24 IP: 2602:f97a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:22:98:6b:a2:ea:3d:9f:bc:b2:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 15 00:45:33 2025 GMT Not After : Aug 18 00:45:33 2027 GMT Subject: CN=39785d42-deab-45fc-836f-b97c88036ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:43:2b:83:ee:42:e0:a6:7b:32:77:8f:8f: 8a:6e:13:b3:1c:df:ce:64:8a:20:f6:c4:9a:87:78: e5:54:41:e4:39:1e:e9:05:b1:b8:88:23:c1:4c:85: cf:f6:37:65:87:94:9e:c9:e5:0f:28:da:e2:a6:cf: d8:3d:a9:1c:07:b6:ea:26:04:4b:7c:00:bc:fc:67: 6e:d6:bd:b0:24:1e:5c:0c:ed:bf:18:47:ab:2e:86: bd:1e:fa:53:6b:87:d2:8f:11:f0:a6:45:cb:2b:ea: 1c:7b:bd:cd:6f:24:68:f8:e9:5a:c3:f1:75:6f:58: b3:bb:30:0f:5c:73:d0:82:1d:6b:98:af:2f:07:c5: 14:22:42:26:c2:5a:4e:3d:19:51:2e:ac:58:8c:23: c4:f8:5f:65:96:ae:27:7e:e9:66:cf:f5:34:b6:78: e0:11:8a:f2:2f:8a:4b:b7:78:06:e2:66:b5:25:25: cc:14:14:2e:93:9d:d8:87:e6:38:48:be:b7:12:f9: ba:15:d4:19:38:ac:4f:76:26:88:33:9f:e7:0b:83: 82:21:d7:24:91:1d:33:a5:e0:d3:f6:1a:78:d1:89: 4c:1b:18:ac:13:f8:88:59:77:d3:db:11:1c:b7:2e: 88:5d:24:90:c7:57:57:1c:6e:73:fb:d1:01:d2:0a: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E5:F5:9A:7D:C5:20:BA:6A:A8:AD:B5:5B:59:45:CA:8B:D1:C8:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39785d42-deab-45fc-836f-b97c88036ed9/39785d42-deab-45fc-836f-b97c88036ed9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.184.0/24 IPv6: 2602:f97a::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a9:89:c6:e1:42:c1:29:f2:de:d1:58:cb:92:5c:eb:6c:72: e8:11:7f:cd:87:4e:d4:a2:cf:0b:d1:46:8c:0d:46:fa:d3:5f: bd:50:71:b8:47:1a:ef:af:2c:5b:3b:ac:63:41:cf:4d:33:c4: dc:01:1b:3e:09:60:38:07:ee:95:b5:0a:46:f2:3b:8e:d7:12: c0:79:b8:e0:c4:14:e8:a7:20:3d:db:ce:87:d0:5f:81:b0:e8: a2:b2:6f:e9:85:7b:d5:9e:cc:5d:cd:c8:3e:42:e9:f9:34:b4: 0e:cb:28:73:6d:89:45:57:5f:46:22:85:9e:df:20:ca:c1:7c: 1e:3a:82:2d:30:4a:6f:db:8c:ec:37:3e:28:fb:5a:24:6d:0c: a8:80:2a:78:80:8a:5f:2c:e1:0b:0c:4f:99:42:91:9a:e4:8d: dd:ff:27:29:46:b0:34:de:ad:b0:05:f7:f2:2d:1f:d9:ab:5d: 71:e0:8b:09:94:6e:8f:78:2e:f5:d8:c6:3a:5d:b1:82:c2:10: da:68:a0:b4:1e:4d:3e:36:60:ab:2a:b9:4e:bf:67:b8:8a:05: c1:7e:74:e3:4f:4d:8e:99:5f:fe:4b:d0:29:60:e3:41:2c:28: 38:b5:1b:53:54:c7:80:2e:ed:37:99:56:75:c0:0a:12:95:f2: ae:5e:b4:0f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEnbIphrouo9n7yy/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxNTAwNDUzM1oXDTI3MDgxODAwNDUzM1owLzEtMCsGA1UEAxMk Mzk3ODVkNDItZGVhYi00NWZjLTgzNmYtYjk3Yzg4MDM2ZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdhDK4PuQuCmezJ3j4+KbhOzHN/OZIog9sSa h3jlVEHkOR7pBbG4iCPBTIXP9jdlh5SeyeUPKNrips/YPakcB7bqJgRLfAC8/Gdu 1r2wJB5cDO2/GEerLoa9HvpTa4fSjxHwpkXLK+oce73NbyRo+Olaw/F1b1izuzAP XHPQgh1rmK8vB8UUIkImwlpOPRlRLqxYjCPE+F9llq4nfulmz/U0tnjgEYryL4pL t3gG4ma1JSXMFBQuk53Yh+Y4SL63Evm6FdQZOKxPdiaIM5/nC4OCIdckkR0zpeDT 9hp40YlMGxisE/iIWXfT2xEcty6IXSSQx1dXHG5z+9EB0gqruwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDjl9Zp9xSC6aqittVtZRcqL0cgCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z OTc4NWQ0Mi1kZWFiLTQ1ZmMtODM2Zi1iOTdjODgwMzZlZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM5Nzg1ZDQyLWRlYWItNDVmYy04 MzZmLWI5N2M4ODAzNmVkOS8zOTc4NWQ0Mi1kZWFiLTQ1ZmMtODM2Zi1iOTdjODgw MzZlZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrbgwDgQCAAIwCAMGACYC+XoAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AE6picbhQsEp8t7RWMuSXOtscugRf82HTtSizwvRRowNRvrTX71QcbhHGu+vLFs7 rGNBz00zxNwBGz4JYDgH7pW1CkbyO47XEsB5uODEFOinID3bzofQX4Gw6KKyb+mF e9WezF3NyD5C6fk0tA7LKHNtiUVXX0YihZ7fIMrBfB46gi0wSm/bjOw3Pij7WiRt DKiAKniAil8s4QsMT5lCkZrkjd3/JylGsDTerbAF9/ItH9mrXXHgiwmUbo94LvXY xjpdsYLCENpooLQeTT42YKsquU6/Z7iKBcF+dONPTY6ZX/5L0Clg40EsKDi1G1NU x4Au7TeZVnXAChKV8q5etA8= -----END CERTIFICATE-----Generated at Sun Jun 15 20:43:44 2025 by rpki-client