$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1.cer File: 4491747a-51aa-4b4e-b4e9-53474dd898f1.cer (raw, json) Hash identifier: mL5IEutRDZzI7BRQSYMoEeZoHiiYtalf0yd9RcAZqN8= Subject key identifier: 1C:4D:08:23:33:FD:89:61:22:F6:0F:EF:BB:2D:A7:2C:80:7C:46:57 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849E382A872ECFAD1B5711A2960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 18 May 2025 00:45:34 +0000 Certificate not after: Sat 21 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 11046 IP: 205.149.8.0/21 IP: 2606:1180::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e3:82:a8:72:ec:fa:d1:b5:71:1a:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 18 00:45:34 2025 GMT Not After : Aug 21 00:45:34 2027 GMT Subject: CN=4491747a-51aa-4b4e-b4e9-53474dd898f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:4d:2a:b4:01:23:cc:ba:9b:a5:91:6a:71: a9:5c:54:a1:71:1f:dc:57:a0:96:bf:58:74:19:83: b6:c0:83:62:15:cf:4a:bd:20:f4:9a:7d:a1:ec:4d: f8:99:9d:39:94:28:95:b6:3b:65:5a:6c:42:ed:15: 28:e2:08:c3:7a:3d:69:53:47:3f:16:dc:9c:3d:d7: 41:4c:99:38:9d:4b:1c:19:09:2a:d6:1c:64:f5:26: 4e:da:18:ed:09:76:71:d3:3c:21:17:7b:2a:4b:0d: b3:8c:d1:49:56:a8:5b:8a:9c:b7:e6:bc:e7:90:79: e3:86:ef:11:9d:41:6e:b2:a7:62:fa:ff:cc:30:66: 3f:b2:f3:a6:37:8b:0c:98:84:2b:4c:7b:4a:81:e6: 2c:39:e5:e3:1b:aa:38:11:5f:9f:76:97:fe:28:7d: 03:7b:37:b0:a3:cf:8e:59:4e:1a:f7:3f:a7:3b:72: 4c:0d:7f:3a:29:a2:8a:45:c9:fd:04:25:d9:8e:2e: 77:74:d0:c8:82:7e:a7:be:fd:c3:34:21:73:2a:0f: 70:d0:65:e8:e8:03:f7:a6:64:0c:89:c5:f8:87:82: 40:a7:6e:1b:05:64:92:ab:3b:e1:cb:9a:bd:5e:c6: 61:28:5c:fc:94:b1:09:b4:e6:63:c3:e7:76:c4:e7: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4D:08:23:33:FD:89:61:22:F6:0F:EF:BB:2D:A7:2C:80:7C:46:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4491747a-51aa-4b4e-b4e9-53474dd898f1/4491747a-51aa-4b4e-b4e9-53474dd898f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 205.149.8.0/21 IPv6: 2606:1180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11046 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:71:18:b7:ba:40:07:f5:c2:49:59:71:ed:ea:1b:22:2a:e6: 5a:92:3c:bf:7c:92:2c:8d:66:35:c4:35:92:d0:e5:00:ef:f7: 8c:da:31:b4:26:5f:86:67:87:29:ff:c0:29:b9:ae:ce:c3:d2: d4:1f:f8:14:b2:ca:90:ca:e5:32:9b:d2:0a:f0:cc:ab:70:c8: 69:25:09:9d:99:ad:ae:e3:af:bd:8f:32:68:2e:29:c6:1e:c7: f4:b1:eb:dc:66:ce:9d:27:10:c0:78:2a:e5:2c:a0:7f:48:47: 4c:fb:c6:33:88:9a:fd:0d:ed:03:63:f2:ea:34:20:d2:52:1e: 90:8d:86:f1:42:cd:f9:ab:40:7b:4a:6c:cc:80:1e:b7:91:36: 05:a8:c9:91:f9:d5:2f:fe:fd:4d:a1:fa:a1:20:a2:f0:bd:65: 27:75:2d:1f:04:7a:0c:1c:d6:7c:bc:46:a1:0a:b8:61:6c:4c: fb:ff:7c:22:41:0c:a0:d0:c4:29:37:80:c6:1c:fe:5f:f9:1d: 76:ed:4e:6f:cb:4b:27:57:e4:39:46:14:e1:41:8d:af:66:86: bf:62:9c:9e:26:d3:12:67:8d:f1:9d:32:cd:3e:b7:a6:b1:cf: 83:d7:97:5f:3b:67:6a:7b:76:20:67:13:49:0a:14:cb:dd:50: da:6e:c9:d5 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEnjgqhy7PrRtXEaKWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxODAwNDUzNFoXDTI3MDgyMTAwNDUzNFowLzEtMCsGA1UEAxMk NDQ5MTc0N2EtNTFhYS00YjRlLWI0ZTktNTM0NzRkZDg5OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+1NKrQBI8y6m6WRanGpXFShcR/cV6CWv1h0 GYO2wINiFc9KvSD0mn2h7E34mZ05lCiVtjtlWmxC7RUo4gjDej1pU0c/FtycPddB TJk4nUscGQkq1hxk9SZO2hjtCXZx0zwhF3sqSw2zjNFJVqhbipy35rznkHnjhu8R nUFusqdi+v/MMGY/svOmN4sMmIQrTHtKgeYsOeXjG6o4EV+fdpf+KH0Dezewo8+O WU4a9z+nO3JMDX86KaKKRcn9BCXZji53dNDIgn6nvv3DNCFzKg9w0GXo6AP3pmQM icX4h4JAp24bBWSSqzvhy5q9XsZhKFz8lLEJtOZjw+d2xOeO2wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFBxNCCMz/YlhIvYP77stpyyAfEZXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 NDkxNzQ3YS01MWFhLTRiNGUtYjRlOS01MzQ3NGRkODk4ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQ0OTE3NDdhLTUxYWEtNGI0ZS1i NGU5LTUzNDc0ZGQ4OThmMS80NDkxNzQ3YS01MWFhLTRiNGUtYjRlOS01MzQ3NGRk ODk4ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPNlQgwDQQCAAIwBwMFACYGEYAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICKyYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKnEYt7pAB/XCSVlx7eobIirmWpI8 v3ySLI1mNcQ1ktDlAO/3jNoxtCZfhmeHKf/AKbmuzsPS1B/4FLLKkMrlMpvSCvDM q3DIaSUJnZmtruOvvY8yaC4pxh7H9LHr3GbOnScQwHgq5Sygf0hHTPvGM4ia/Q3t A2Py6jQg0lIekI2G8ULN+atAe0pszIAet5E2BajJkfnVL/79TaH6oSCi8L1lJ3Ut HwR6DBzWfLxGoQq4YWxM+/98IkEMoNDEKTeAxhz+X/kddu1Ob8tLJ1fkOUYU4UGN r2aGv2KcnibTEmeN8Z0yzT63prHPg9eXXztnant2IGcTSQoUy91Q2m7J1Q== -----END CERTIFICATE-----Generated at Mon Jun 16 10:31:32 2025 by rpki-client