$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer File: 39cfcd95-1931-4846-b938-e8a3b993f2a8.cer (raw, json) Hash identifier: cpfxDyECHpG417aVbEQujrN12Q10APiHi1NMlSupVMY= Subject key identifier: A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849752AE80D103A89917F45FB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Apr 2025 12:09:51 +0000 Certificate not after: Mon 12 Jul 2027 12:09:51 +0000 Subordinate resources: IP: 23.137.4.0/24 IP: 2602:f695::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:2a:e8:0d:10:3a:89:91:7f:45:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 8 12:09:51 2025 GMT Not After : Jul 12 12:09:51 2027 GMT Subject: CN=39cfcd95-1931-4846-b938-e8a3b993f2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:81:bd:2e:0a:ab:d7:43:97:5b:8f:47:f9: 2f:ba:51:a6:b4:df:d5:4f:63:a2:4a:78:9e:d6:0e: 68:73:55:87:44:48:df:a0:39:77:9b:b3:a5:97:75: 66:29:ae:52:9f:bc:ef:43:71:5c:7b:b8:4c:d4:31: c6:ed:7d:ef:d3:3a:98:98:10:42:20:0d:9f:1f:e2: ef:75:4d:7d:c1:94:62:1e:dd:a9:7f:50:e3:bf:b2: 00:02:49:66:cc:2b:d2:b9:77:bd:cb:ac:ec:f9:b5: fc:39:fe:4a:8f:0c:58:c6:dc:1b:88:bc:d3:9b:d9: 93:47:e9:dc:9c:31:01:7d:ec:b6:a2:cd:f5:a0:06: 72:fc:f8:e8:2e:7a:ea:50:cc:df:56:e0:a6:8e:e9: a1:60:00:9f:c8:ef:91:1c:e1:cb:ed:d5:07:f7:ad: f5:e0:d0:d9:0f:de:19:76:1b:23:cf:b4:29:6e:3d: 64:79:1f:82:ff:aa:5c:b1:ba:cf:cd:3d:a4:c5:1c: 7b:cf:4f:55:44:4f:87:57:66:44:ff:2a:bb:6a:82: a8:a9:fb:4c:f4:82:25:13:de:bb:75:49:75:8e:16: a5:a1:d5:6d:62:05:81:69:78:b1:9d:be:06:f8:ab: 6c:50:fa:c9:a9:62:58:83:72:af:22:b1:c2:62:26: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.137.4.0/24 IPv6: 2602:f695::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:be:4e:a0:e2:d7:43:d2:d1:be:e1:4d:85:79:66:18:b7:1a: 26:a0:52:68:69:df:1d:78:98:b9:a7:fc:1c:87:a0:18:9f:84: 62:f4:49:7e:72:ba:5d:9f:66:d0:bf:ea:22:05:11:b3:da:aa: cb:83:1e:45:56:3b:a5:5c:0a:f2:93:48:5d:5f:c6:74:10:f9: c5:bc:bd:7f:ae:69:9f:1a:c5:25:7d:b4:cf:d2:86:47:f8:2c: ff:21:e7:f0:e7:72:05:1a:1f:2a:15:a9:ad:e3:5b:ec:7e:49: 23:1a:f7:a9:8e:bd:c5:9a:79:db:16:38:79:01:d1:8b:e4:f0: a7:0d:14:70:0f:8d:8d:0c:40:65:7c:80:5c:44:aa:cd:af:95: 02:04:fc:46:3a:91:1c:fb:3e:65:43:8e:09:b5:ad:47:8d:92: 8d:39:55:37:d9:74:c2:5c:da:05:ff:9f:cc:51:eb:78:14:81: c5:97:12:ac:cc:d7:53:1a:f8:79:8d:50:20:95:8f:12:d0:83: 0c:45:53:bd:29:de:18:5f:1c:aa:51:76:9c:39:90:6f:a1:84: a7:a3:c0:94:fa:7d:0d:7c:5e:11:b2:64:3d:31:2f:43:ab:d1: 37:d4:63:39:72:1a:81:3a:cf:51:38:94:a4:df:1e:03:26:b4: ed:e6:5c:5c -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEl1KugNEDqJkX9F+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQwODEyMDk1MVoXDTI3MDcxMjEyMDk1MVowLzEtMCsGA1UEAxMk MzljZmNkOTUtMTkzMS00ODQ2LWI5MzgtZThhM2I5OTNmMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg6BvS4Kq9dDl1uPR/kvulGmtN/VT2OiSnie 1g5oc1WHREjfoDl3m7Oll3VmKa5Sn7zvQ3Fce7hM1DHG7X3v0zqYmBBCIA2fH+Lv dU19wZRiHt2pf1Djv7IAAklmzCvSuXe9y6zs+bX8Of5KjwxYxtwbiLzTm9mTR+nc nDEBfey2os31oAZy/PjoLnrqUMzfVuCmjumhYACfyO+RHOHL7dUH96314NDZD94Z dhsjz7Qpbj1keR+C/6pcsbrPzT2kxRx7z09VRE+HV2ZE/yq7aoKoqftM9IIlE967 dUl1jhalodVtYgWBaXixnb4G+KtsUPrJqWJYg3KvIrHCYiYIWQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKYb+YU6Hlyz7ROFOKoZRx8RQOg5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z OWNmY2Q5NS0xOTMxLTQ4NDYtYjkzOC1lOGEzYjk5M2YyYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM5Y2ZjZDk1LTE5MzEtNDg0Ni1i OTM4LWU4YTNiOTkzZjJhOC8zOWNmY2Q5NS0xOTMxLTQ4NDYtYjkzOC1lOGEzYjk5 M2YyYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiQQwDgQCAAIwCAMGACYC9pUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJO+TqDi10PS0b7hTYV5Zhi3GiagUmhp3x14mLmn/ByHoBifhGL0SX5yul2fZtC/ 6iIFEbPaqsuDHkVWO6VcCvKTSF1fxnQQ+cW8vX+uaZ8axSV9tM/Shkf4LP8h5/Dn cgUaHyoVqa3jW+x+SSMa96mOvcWaedsWOHkB0Yvk8KcNFHAPjY0MQGV8gFxEqs2v lQIE/EY6kRz7PmVDjgm1rUeNko05VTfZdMJc2gX/n8xR63gUgcWXEqzM11Ma+HmN UCCVjxLQgwxFU70p3hhfHKpRdpw5kG+hhKejwJT6fQ18XhGyZD0xL0Or0TfUYzly GoE6z1E4lKTfHgMmtO3mXFw= -----END CERTIFICATE-----Generated at Tue Apr 29 00:41:13 2025 by rpki-client