$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer (raw, json) Hash identifier: RyVSZC9jPvik6ieuWjAEy5JuWOOyonBB02Z3HkUNdnM= Subject key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849DB229814E228C365F1B4E500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 May 2025 00:45:33 +0000 Certificate not after: Wed 18 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 30691 IP: 65.111.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:22:98:14:e2:28:c3:65:f1:b4:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 15 00:45:33 2025 GMT Not After : Aug 18 00:45:33 2027 GMT Subject: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:9c:60:09:eb:32:3f:bf:87:dc:26:28:4d: f0:3a:10:a0:07:6f:d8:a7:fa:56:8b:d1:f5:8d:24: f9:2f:59:42:53:0e:62:a0:ae:97:92:11:e4:1f:50: 9a:19:2a:6d:cf:10:53:4b:da:e6:54:0e:de:bf:14: 10:e7:da:27:c0:67:eb:d4:01:e9:25:8e:8e:40:91: da:a5:7c:a8:25:38:4c:a9:a5:a0:47:c4:b9:fa:38: af:51:18:fc:52:24:1c:45:28:95:86:de:73:24:49: e1:04:04:6c:02:76:26:3b:a4:eb:39:ae:88:01:1d: f7:f1:47:4c:26:4a:24:39:6a:35:56:74:0e:13:9d: 7e:27:8b:e3:b4:45:de:16:1f:97:f3:c2:48:0e:a2: 5b:77:c5:e6:d3:d4:21:e7:61:3d:a0:9b:f1:e7:47: f2:a4:6a:c5:d1:10:63:23:ae:fb:c9:7d:fa:6b:38: c5:74:b8:ab:90:73:66:34:e6:3b:9e:05:4f:c5:c7: db:5d:da:fc:a8:e6:8d:29:7c:85:9d:a6:f8:96:f9: 2a:fb:8c:43:95:e4:b8:7f:1f:30:78:cb:78:45:81: d0:3c:58:27:6c:7b:85:ab:2c:8e:e4:55:a8:82:40: 09:0b:24:6d:44:2b:33:21:b8:1d:6d:fa:1f:28:7c: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 65.111.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30691 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:95:77:85:3e:7d:90:b6:98:c4:ef:b0:ce:7b:1d:9f:02:23: 98:d0:18:bb:eb:95:8c:e6:d8:49:80:e4:25:5f:4a:e6:bd:d4: cd:87:93:18:ab:25:16:f0:6b:7e:5b:20:1d:d2:af:3c:e8:86: f5:95:b2:8b:e4:b1:d1:54:d0:ea:cb:d3:69:84:a6:a2:3e:cf: bf:2e:00:04:42:c6:0e:5a:2f:87:63:d0:4a:c1:bc:0d:a6:17: 65:41:d6:9e:21:55:fa:73:15:71:d7:bc:eb:0c:69:ce:df:ba: e5:45:b2:50:99:dd:e2:2b:cb:e0:29:08:1d:10:f8:6e:fc:dd: bc:98:bc:47:5c:af:9b:8f:ac:d8:f6:8b:c2:ef:f2:7b:77:41: 38:0c:b8:3f:4a:c6:d2:3a:e0:8f:58:0e:a0:2e:0f:1c:4d:5e: 72:b3:b8:3a:63:fd:bb:84:fc:b1:45:ed:20:12:98:09:fe:64: f3:f1:97:55:76:8e:aa:d2:50:a8:70:5b:98:b5:21:e3:83:1a: 94:33:c3:5e:39:e9:a8:de:72:b4:a4:ee:35:d2:4f:6b:b0:90: b3:8c:9c:1d:e7:e7:c2:9a:7a:5d:68:cf:b6:ae:1f:88:4b:09: fa:3f:a2:a9:5c:ee:f9:fa:d5:27:57:b3:ea:0d:9e:30:a2:48: a7:13:9e:bb -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEnbIpgU4ijDZfG05QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxNTAwNDUzM1oXDTI3MDgxODAwNDUzM1owLzEtMCsGA1UEAxMk M2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVkNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJqcYAnrMj+/h9wmKE3wOhCgB2/Yp/pWi9H1 jST5L1lCUw5ioK6XkhHkH1CaGSptzxBTS9rmVA7evxQQ59onwGfr1AHpJY6OQJHa pXyoJThMqaWgR8S5+jivURj8UiQcRSiVht5zJEnhBARsAnYmO6TrOa6IAR338UdM JkokOWo1VnQOE51+J4vjtEXeFh+X88JIDqJbd8Xm09Qh52E9oJvx50fypGrF0RBj I677yX36azjFdLirkHNmNOY7ngVPxcfbXdr8qOaNKXyFnab4lvkq+4xDleS4fx8w eMt4RYHQPFgnbHuFqyyO5FWogkAJCyRtRCszIbgdbfofKHyuGQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAqqkggzDwrOyA45aX/hhWPRSUpQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNmMmQzNzhkLTIwZTEtNGI1Zi04 NWI5LWU4YzRjYmE1ZDVkNy8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2Jh NWQ1ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARBb/AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC d+MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAXpV3hT59kLaYxO+wznsdnwIjmNAYu+uVjObYSYDkJV9K5r3U zYeTGKslFvBrflsgHdKvPOiG9ZWyi+Sx0VTQ6svTaYSmoj7Pvy4ABELGDlovh2PQ SsG8DaYXZUHWniFV+nMVcde86wxpzt+65UWyUJnd4ivL4CkIHRD4bvzdvJi8R1yv m4+s2PaLwu/ye3dBOAy4P0rG0jrgj1gOoC4PHE1ecrO4OmP9u4T8sUXtIBKYCf5k 8/GXVXaOqtJQqHBbmLUh44MalDPDXjnpqN5ytKTuNdJPa7CQs4ycHefnwpp6XWjP tq4fiEsJ+j+iqVzu+frVJ1ez6g2eMKJIpxOeuw== -----END CERTIFICATE-----Generated at Sun Jun 15 05:02:12 2025 by rpki-client