$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0.cer File: 7333d638-3395-4f20-8d03-4fc71c8c65b0.cer (raw, json) Hash identifier: KMzWW6J2zdMlaZGlO+zqBglkd7P1CzeRdEUCfSyTK84= Subject key identifier: 7B:2B:63:A5:23:D2:5C:0A:2E:B0:E2:BD:24:7D:2F:42:D3:D0:12:C6 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A11C406A5382EBB6066F13680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0/7333d638-3395-4f20-8d03-4fc71c8c65b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Jun 2025 14:24:28 +0000 Certificate not after: Thu 23 Jul 2026 15:21:05 +0000 Subordinate resources: AS: 21507 AS: 22146 AS: 26807 IP: 167.17.0.0/17 IP: 167.17.160.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:c4:06:a5:38:2e:bb:60:66:f1:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 3 14:24:28 2025 GMT Not After : Jul 23 15:21:05 2026 GMT Subject: CN=7333d638-3395-4f20-8d03-4fc71c8c65b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cf:ae:cd:7c:42:cc:bd:d6:6c:d1:0e:38:8e: 29:ea:4b:e0:9d:d5:ad:cf:85:bb:3c:3b:d2:f1:c3: 3b:03:71:4c:f1:68:bc:2b:3c:14:d9:e0:28:c5:f0: 31:ee:84:8b:d7:f1:51:ff:5a:54:87:27:eb:49:d3: 22:cc:f1:ea:50:ab:ce:c5:67:1d:1f:77:0e:2b:b3: 17:3d:66:66:4a:0a:19:5d:1d:2b:3d:cf:1d:48:80: b3:10:2a:bf:a4:a7:e9:a3:79:cd:c4:5d:47:21:ae: 08:80:3e:48:aa:79:74:4c:ab:88:8c:8e:fc:cc:b0: cb:2a:fb:b6:38:22:a1:9f:97:cb:39:3b:c7:d0:e8: c1:7b:92:e5:d1:aa:a3:10:72:29:34:93:82:fd:e0: 0b:8b:0d:03:cf:c7:f7:66:45:86:c3:6d:fe:63:38: 2b:b7:0f:80:64:64:9a:46:f6:75:69:cf:52:36:95: 49:5d:0e:02:16:f4:0f:fb:91:24:40:35:6e:5f:7a: 24:e0:fc:66:1f:30:2c:84:78:aa:ca:9f:e3:27:63: f9:9a:4a:e8:8f:6e:13:ff:ba:c2:d1:e5:cb:e3:83: 15:c1:84:ce:8b:8e:b2:88:ff:3b:f0:96:65:62:1e: fc:fb:f0:3a:8e:8f:d9:3f:f3:a9:26:df:1e:92:1c: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2B:63:A5:23:D2:5C:0A:2E:B0:E2:BD:24:7D:2F:42:D3:D0:12:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0/7333d638-3395-4f20-8d03-4fc71c8c65b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 167.17.0.0/17 167.17.160.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21507 22146 26807 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e1:f2:38:26:96:22:a5:5a:bd:88:14:96:72:84:77:47:92: d0:db:73:ae:57:ff:71:db:a5:20:b0:f0:c2:66:0b:9f:1c:9f: 82:20:fd:71:ce:2f:3b:f5:58:90:50:c9:92:a8:f4:f1:3f:24: 3b:3f:cc:fa:db:d8:3d:42:a2:3c:8f:0f:4e:1b:59:f4:78:c1: 6c:eb:93:c1:0b:38:3d:70:dd:d5:ab:2c:7f:d6:0d:70:8f:66: 6f:e2:3b:7c:f8:ca:7d:5a:00:97:71:d5:71:36:0e:c7:a1:a4: d7:99:53:a6:fc:4d:6c:8a:82:41:bb:63:33:1b:e1:2a:a2:94: b8:37:d3:d8:3e:37:66:8b:95:50:ca:55:68:1e:57:6e:ec:a4: b9:39:65:19:7e:0f:20:62:53:68:a7:2e:ea:f6:d0:18:c2:6e: 86:06:ea:4c:9d:13:d4:f9:3a:ed:f0:82:03:ab:8d:14:43:d3: 4e:8a:72:fa:0d:b6:bd:2c:1f:25:ad:fc:5e:18:2d:b5:d9:1a: eb:d9:aa:06:2e:b2:53:9e:6f:35:8b:c9:df:a1:62:f9:38:74: fd:d5:f5:0b:3e:98:f0:aa:21:83:37:9f:91:81:92:f1:95:08: 91:9c:30:4c:76:ac:62:e8:3c:1e:a5:0c:18:84:88:c6:fb:1a: 12:20:fa:5d -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWEoRxAalOC67YGbxNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwMzE0MjQyOFoXDTI2MDcyMzE1MjEwNVowLzEtMCsGA1UEAxMk NzMzM2Q2MzgtMzM5NS00ZjIwLThkMDMtNGZjNzFjOGM2NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c+uzXxCzL3WbNEOOI4p6kvgndWtz4W7PDvS 8cM7A3FM8Wi8KzwU2eAoxfAx7oSL1/FR/1pUhyfrSdMizPHqUKvOxWcdH3cOK7MX PWZmSgoZXR0rPc8dSICzECq/pKfpo3nNxF1HIa4IgD5Iqnl0TKuIjI78zLDLKvu2 OCKhn5fLOTvH0OjBe5Ll0aqjEHIpNJOC/eALiw0Dz8f3ZkWGw23+Yzgrtw+AZGSa RvZ1ac9SNpVJXQ4CFvQP+5EkQDVuX3ok4PxmHzAshHiqyp/jJ2P5mkroj24T/7rC 0eXL44MVwYTOi46yiP878JZlYh78+/A6jo/ZP/OpJt8ekhxluQIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFHsrY6Uj0lwKLrDivSR9L0LT0BLGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 MzMzZDYzOC0zMzk1LTRmMjAtOGQwMy00ZmM3MWM4YzY1YjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzczMzNkNjM4LTMzOTUtNGYyMC04 ZDAzLTRmYzcxYzhjNjViMC83MzMzZDYzOC0zMzk1LTRmMjAtOGQwMy00ZmM3MWM4 YzY1YjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAenEQADBASnEaAwIQYIKwYBBQUHAQgBAf8EEjAQ oA4wDAICVAMCAlaCAgJotzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBc4fI4JpYipVq9iBSWcoR3R5LQ23Ou V/9x26UgsPDCZgufHJ+CIP1xzi879ViQUMmSqPTxPyQ7P8z629g9QqI8jw9OG1n0 eMFs65PBCzg9cN3Vqyx/1g1wj2Zv4jt8+Mp9WgCXcdVxNg7HoaTXmVOm/E1sioJB u2MzG+EqopS4N9PYPjdmi5VQylVoHldu7KS5OWUZfg8gYlNopy7q9tAYwm6GBupM nRPU+Trt8IIDq40UQ9NOinL6Dba9LB8lrfxeGC212Rrr2aoGLrJTnm81i8nfoWL5 OHT91fULPpjwqiGDN5+RgZLxlQiRnDBMdqxi6DwepQwYhIjG+xoSIPpd -----END CERTIFICATE-----Generated at Sun Jun 15 05:08:08 2025 by rpki-client