$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer File: 7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer (raw, json) Hash identifier: YIYbPKcdqOU23zdGxq+4ZsM6/AQmd0kBuOjN9s5lpWs= Subject key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A1E230ADAD9DF8A239DE4B80C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Jun 2025 00:45:37 +0000 Certificate not after: Sat 11 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 27317 IP: 23.174.40.0/24 IP: 2607:9f40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:23:0a:da:d9:df:8a:23:9d:e4:b8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 8 00:45:37 2025 GMT Not After : Sep 11 00:45:37 2027 GMT Subject: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:94:e0:56:54:67:48:bc:bf:68:42:0c:c3: 61:bc:3d:d9:f6:2c:84:06:5e:ea:fd:6c:ab:9e:90: 7a:7a:05:99:ee:88:9b:5a:14:72:46:63:c0:20:e8: a3:de:6e:4d:8a:8c:e6:1c:37:00:ea:2a:b3:e0:a3: 39:25:75:27:46:1c:10:71:90:c3:3a:fc:48:28:56: a5:b6:5d:a9:a7:e5:13:3a:b3:a5:48:44:b5:aa:b5: fa:6c:cd:89:18:21:9c:97:04:e2:31:93:2e:e8:fd: 93:3a:58:c0:fd:27:a8:54:b4:d0:b6:65:c8:37:d4: 01:4d:de:d5:05:19:66:9b:96:13:69:3b:b0:30:06: 55:66:ad:1c:63:ec:db:a5:ee:5f:9b:56:f9:ee:7e: 48:18:70:f1:d8:6b:eb:bb:c3:a6:2e:b0:43:55:08: 12:0d:8f:af:ca:36:97:4f:9e:bf:1a:c5:60:bc:ee: 62:84:81:3e:bf:f0:28:0a:9a:c6:79:78:6f:4e:b0: 66:73:9a:d2:d1:ac:36:50:42:0a:aa:9e:69:9d:01: e7:8e:5a:6b:8a:96:a4:c2:54:c7:15:29:f8:41:87: e4:b0:f6:28:af:76:b5:d8:82:7f:49:56:35:25:9b: ec:af:e4:14:f9:74:83:92:39:a7:d7:cd:96:07:61: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.174.40.0/24 IPv6: 2607:9f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27317 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4c:49:a6:44:c0:f9:30:28:ed:f9:2f:fb:03:67:f1:c4:f2: bc:47:ed:79:79:d2:9b:11:e3:ff:7b:19:12:cd:e7:4e:f4:a7: 58:33:e3:2f:91:66:91:aa:20:bd:55:8a:45:50:e5:25:d5:ea: 0e:39:be:78:4f:f8:4c:aa:77:e4:0f:0d:e2:e3:18:dc:7e:e4: 51:58:15:a5:62:9d:f5:1f:28:a9:e8:63:0e:75:47:d3:67:50: 4b:ef:e5:b9:a5:12:51:ed:96:cc:24:2a:ee:dd:4c:a3:0d:00: d2:c5:4a:90:d8:7f:7b:6d:d6:10:ae:e9:02:53:97:7b:a1:88: b9:43:f5:7d:a0:a5:41:f3:5c:b4:bc:44:37:50:3d:83:8f:48: 6c:bb:53:29:dd:8a:5e:c1:25:5c:a9:12:a9:d6:5b:80:99:4c: f0:27:cc:18:8f:95:01:2e:ec:f9:30:8c:6c:5f:df:4b:67:c4: 0f:b5:46:9a:b2:0c:90:86:3e:c7:f7:66:74:97:9e:d7:02:8b: 20:74:8c:09:07:77:69:72:48:8a:bd:19:a2:0c:f0:b0:50:ef: 90:cc:c6:b8:a3:3e:14:72:33:c8:3e:0d:48:10:8f:42:31:c1: 0a:d9:91:35:10:ac:8c:cc:b9:2c:85:2e:b1:20:19:06:8c:cc: b4:ae:8b:37 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEoeIwra2d+KI53kuAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwODAwNDUzN1oXDTI3MDkxMTAwNDUzN1owLzEtMCsGA1UEAxMk N2JiZWU5YjEtMWIzMy00OTUxLWE2MTctZWNiODBkOWJhZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c+U4FZUZ0i8v2hCDMNhvD3Z9iyEBl7q/Wyr npB6egWZ7oibWhRyRmPAIOij3m5NiozmHDcA6iqz4KM5JXUnRhwQcZDDOvxIKFal tl2pp+UTOrOlSES1qrX6bM2JGCGclwTiMZMu6P2TOljA/SeoVLTQtmXIN9QBTd7V BRlmm5YTaTuwMAZVZq0cY+zbpe5fm1b57n5IGHDx2Gvru8OmLrBDVQgSDY+vyjaX T56/GsVgvO5ihIE+v/AoCprGeXhvTrBmc5rS0aw2UEIKqp5pnQHnjlpripakwlTH FSn4QYfksPYor3a12IJ/SVY1JZvsr+QU+XSDkjmn182WB2GYlwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFCki9+LydJMrX8ykA7P8UmXnhsKaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5YmFkOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzdiYmVlOWIxLTFiMzMtNDk1MS1h NjE3LWVjYjgwZDliYWQ5OS83YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5 YmFkOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXrigwDQQCAAIwBwMFACYHn0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICarUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIExJpkTA+TAo7fkv+wNn8cTyvEft eXnSmxHj/3sZEs3nTvSnWDPjL5FmkaogvVWKRVDlJdXqDjm+eE/4TKp35A8N4uMY 3H7kUVgVpWKd9R8oqehjDnVH02dQS+/luaUSUe2WzCQq7t1Mow0A0sVKkNh/e23W EK7pAlOXe6GIuUP1faClQfNctLxEN1A9g49IbLtTKd2KXsElXKkSqdZbgJlM8CfM GI+VAS7s+TCMbF/fS2fED7VGmrIMkIY+x/dmdJee1wKLIHSMCQd3aXJIir0Zogzw sFDvkMzGuKM+FHIzyD4NSBCPQjHBCtmRNRCsjMy5LIUusSAZBozMtK6LNw== -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:56 2025 by rpki-client