$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2.cer File: 7df7e023-145a-4cd7-8721-998050ab91e2.cer (raw, json) Hash identifier: /B+d8ipr9Ce7MLGE4OmgkSQ3tsUkJ44eool6VG1X0yI= Subject key identifier: 78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849EEAD6B0AA245B59765484CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 00:45:37 +0000 Certificate not after: Wed 25 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 11848 IP: 23.174.72.0/24 IP: 170.199.240.0/23 IP: 199.195.14.0/23 IP: 2607:1e80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:ad:6b:0a:a2:45:b5:97:65:48:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 22 00:45:37 2025 GMT Not After : Aug 25 00:45:37 2027 GMT Subject: CN=7df7e023-145a-4cd7-8721-998050ab91e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:2d:2d:e9:8c:82:2c:c6:e4:3d:cf:2c:6f: 8b:fc:12:e9:95:57:20:74:8a:c7:50:78:c4:1b:ff: 0b:d0:19:5f:6e:4e:dc:c2:39:b0:e4:c6:fb:f5:e6: a2:f6:6b:24:d6:d4:3c:f3:ba:10:8d:86:47:cb:bf: 97:15:39:85:4e:c0:ab:f3:4a:84:d3:24:88:bf:20: 8f:b6:4d:1c:46:92:5c:8b:f9:fc:8a:bb:c8:d9:eb: 08:d4:59:3a:82:56:04:a9:39:2e:bc:3d:b0:df:dc: bf:42:06:48:9d:db:7f:e1:13:9b:fc:31:45:d5:89: 24:2d:a2:fb:d8:c7:73:80:5d:98:27:c5:25:a6:9b: 35:e0:59:19:b4:8a:1d:a6:5f:90:29:e3:58:de:6a: 41:6e:69:78:50:9c:1e:cd:30:89:b1:4f:47:6a:2b: f9:ac:73:5f:85:a0:49:cd:b1:1b:49:b9:89:8a:91: 03:8a:1c:1b:ac:85:6d:56:1f:c7:4a:db:86:ed:b4: e4:24:fa:56:5b:6a:0d:1f:f2:1d:24:8b:ca:62:88: d1:58:d0:d3:8f:4d:55:a5:b4:b7:3f:cb:fd:75:a6: 84:9d:2d:c6:a2:d9:87:18:5d:e5:4e:bc:10:cd:be: 42:fb:12:b0:61:ea:da:78:e3:ca:75:6b:1f:a0:38: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2D:65:31:23:A4:D4:35:35:F5:89:BA:CB:56:D1:0C:58:E3:56:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7df7e023-145a-4cd7-8721-998050ab91e2/7df7e023-145a-4cd7-8721-998050ab91e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.174.72.0/24 170.199.240.0/23 199.195.14.0/23 IPv6: 2607:1e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11848 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6d:4f:2e:9c:65:c5:e1:93:80:b3:15:e6:72:c8:a4:c6:34: 60:21:ce:e5:91:1a:17:62:9a:6b:74:a4:ad:54:7d:17:89:8c: 2b:85:de:2a:63:02:14:22:84:f7:c5:76:3e:80:bc:7b:6c:9d: d8:fb:c5:f8:6d:e6:92:d3:5c:d8:09:7e:87:91:ad:49:a2:f9: f8:89:fb:7e:98:ec:37:eb:9e:53:7d:52:c6:62:62:cd:07:0b: 9f:c8:c0:59:3e:c2:31:f7:1a:c4:7b:4f:49:e3:a4:3f:03:e0: bb:fb:af:76:c4:09:c2:38:7a:12:77:80:3d:df:df:c3:ff:3a: fd:28:c8:b7:d3:c5:35:e2:9f:5f:1d:a9:19:50:ef:99:41:8c: 1e:f6:8c:04:81:74:1b:8f:90:dd:3e:a6:9b:f0:34:64:53:f9: db:a5:31:96:a4:f6:91:8a:81:48:eb:b4:8e:1f:1f:47:79:be: 7e:6a:20:a4:51:93:6d:38:27:cd:09:dd:82:5a:9a:60:6e:35: 39:32:87:73:d0:50:01:a4:4c:be:f4:84:78:20:d5:e9:78:ce: 20:9b:19:ff:3d:19:ec:7d:71:55:02:2f:72:f3:aa:04:56:b3: 6b:07:78:7d:7f:c0:8e:73:0a:9f:2b:e5:ad:ff:c6:c3:22:35: ab:18:38:98 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEnurWsKokW1l2VITMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyMjAwNDUzN1oXDTI3MDgyNTAwNDUzN1owLzEtMCsGA1UEAxMk N2RmN2UwMjMtMTQ1YS00Y2Q3LTg3MjEtOTk4MDUwYWI5MWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhMtLemMgizG5D3PLG+L/BLplVcgdIrHUHjE G/8L0Blfbk7cwjmw5Mb79eai9msk1tQ887oQjYZHy7+XFTmFTsCr80qE0ySIvyCP tk0cRpJci/n8irvI2esI1Fk6glYEqTkuvD2w39y/QgZIndt/4ROb/DFF1YkkLaL7 2MdzgF2YJ8Ulpps14FkZtIodpl+QKeNY3mpBbml4UJwezTCJsU9Haiv5rHNfhaBJ zbEbSbmJipEDihwbrIVtVh/HStuG7bTkJPpWW2oNH/IdJIvKYojRWNDTj01VpbS3 P8v9daaEnS3GotmHGF3lTrwQzb5C+xKwYeraeOPKdWsfoDiFdQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFHgtZTEjpNQ1NfWJustW0QxY41buMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 ZGY3ZTAyMy0xNDVhLTRjZDctODcyMS05OTgwNTBhYjkxZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzdkZjdlMDIzLTE0NWEtNGNkNy04 NzIxLTk5ODA1MGFiOTFlMi83ZGY3ZTAyMy0xNDVhLTRjZDctODcyMS05OTgwNTBh YjkxZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXrkgDBAGqx/ADBAHHww4wDQQCAAIwBwMFACYH HoAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLkgwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQG1PLpxlxeGT gLMV5nLIpMY0YCHO5ZEaF2Kaa3SkrVR9F4mMK4XeKmMCFCKE98V2PoC8e2yd2PvF +G3mktNc2Al+h5GtSaL5+In7fpjsN+ueU31SxmJizQcLn8jAWT7CMfcaxHtPSeOk PwPgu/uvdsQJwjh6EneAPd/fw/86/SjIt9PFNeKfXx2pGVDvmUGMHvaMBIF0G4+Q 3T6mm/A0ZFP526UxlqT2kYqBSOu0jh8fR3m+fmogpFGTbTgnzQndglqaYG41OTKH c9BQAaRMvvSEeCDV6XjOIJsZ/z0Z7H1xVQIvcvOqBFazawd4fX/AjnMKnyvlrf/G wyI1qxg4mA== -----END CERTIFICATE-----Generated at Mon Jun 16 09:40:05 2025 by rpki-client