$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer File: 86d41278-dbec-4ce1-a2aa-72427ed93680.cer (raw, json) Hash identifier: axdlusdsjo65QwFqMZMDzgS0Hc731Ex4oHKfONx9k5g= Subject key identifier: 89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849E7B2AF4B1746EB18FB698A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 May 2025 12:45:35 +0000 Certificate not after: Sun 22 Aug 2027 12:45:35 +0000 Subordinate resources: IP: 23.148.64.0/24 IP: 216.176.36.0/22 IP: 2602:fedc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:b2:af:4b:17:46:eb:18:fb:69:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 19 12:45:35 2025 GMT Not After : Aug 22 12:45:35 2027 GMT Subject: CN=86d41278-dbec-4ce1-a2aa-72427ed93680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:09:ad:70:44:18:c6:02:50:4d:a9:e7:bb: 0d:66:d3:a0:c4:ac:ee:23:08:19:0d:d2:69:24:f7: 2e:d8:5c:91:49:cf:6d:ff:1d:2d:67:b3:55:20:02: b3:9c:f6:9d:a4:16:e0:89:3f:c2:b4:91:d9:0f:27: 3a:39:57:ed:3d:37:79:26:53:79:16:6a:e8:40:2c: f1:f9:a6:6c:be:62:c5:b1:f5:e5:92:7b:29:e3:ba: ac:23:01:a2:32:d4:e1:93:bb:39:09:29:06:e7:8e: fd:13:1c:7f:10:f5:fc:2d:a6:be:6f:d6:8b:81:a3: 96:e8:3a:2b:ad:fd:c5:d3:e6:84:97:d0:99:34:d2: 02:0b:f4:2c:d2:18:10:ee:cd:5f:71:a1:9b:45:5d: af:c1:a1:e9:09:61:e6:d2:15:e8:50:7b:a9:d3:50: 21:fe:f1:55:ae:e8:55:08:5f:47:c0:b3:62:3f:55: c6:16:cd:02:19:5c:b5:1d:a0:f7:b3:c0:8a:be:a3: 3d:48:23:91:79:9b:7f:af:3f:e9:86:00:12:d7:d2: 39:1a:95:88:61:79:77:aa:8f:39:8f:23:29:17:1f: 77:03:0e:28:4d:5e:88:29:14:e7:4b:55:75:cf:83: 4b:87:ce:3f:0b:6a:d5:05:0e:4f:85:e0:0c:68:88: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.148.64.0/24 216.176.36.0/22 IPv6: 2602:fedc::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9f:b3:2f:19:6a:ae:10:27:5c:d6:65:86:f3:fd:9f:69:eb: db:8d:c5:c1:47:9d:11:2d:5c:0d:12:8f:da:65:f6:96:92:50: d5:e0:fb:7b:47:47:17:10:9d:0a:f3:b4:bd:5c:06:35:1d:df: 91:2a:a6:1d:7b:09:e9:cb:86:7c:87:7e:21:c4:de:12:d8:d6: 9c:ab:e8:67:3e:a0:be:0b:af:38:b4:9b:03:98:9c:56:03:f4: ff:c7:21:de:25:45:97:54:47:e0:26:73:7a:9e:83:05:b4:b3: 49:01:15:dc:ea:22:e2:cf:1c:e4:b0:83:51:54:70:d1:80:b7: a6:cc:01:be:15:f1:ba:5f:f6:b6:ce:ad:85:ba:60:e0:c0:52: 18:2c:a9:30:39:17:06:cf:8a:7e:93:45:0e:6f:03:84:1e:c7: 0d:b2:76:03:ee:54:a3:ff:b4:fa:87:54:74:4b:cc:e3:30:e0: 3c:8f:06:76:2a:86:61:d7:c0:3e:ca:7a:c7:07:eb:3b:e4:8f: 1f:e5:81:0d:73:b4:88:87:ca:d3:54:58:c6:76:34:c4:d0:3f: 99:f9:24:72:8b:17:b8:2d:8e:ad:f4:69:06:a1:ea:51:06:43: 31:9f:ca:11:fe:ea:f2:d3:b0:b2:ed:c6:3e:af:39:39:ea:82: d7:bc:b9:ec -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEnnsq9LF0brGPtpigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxOTEyNDUzNVoXDTI3MDgyMjEyNDUzNVowLzEtMCsGA1UEAxMk ODZkNDEyNzgtZGJlYy00Y2UxLWEyYWEtNzI0MjdlZDkzNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WIJrXBEGMYCUE2p57sNZtOgxKzuIwgZDdJp JPcu2FyRSc9t/x0tZ7NVIAKznPadpBbgiT/CtJHZDyc6OVftPTd5JlN5FmroQCzx +aZsvmLFsfXlknsp47qsIwGiMtThk7s5CSkG5479Exx/EPX8Laa+b9aLgaOW6Dor rf3F0+aEl9CZNNICC/Qs0hgQ7s1fcaGbRV2vwaHpCWHm0hXoUHup01Ah/vFVruhV CF9HwLNiP1XGFs0CGVy1HaD3s8CKvqM9SCOReZt/rz/phgAS19I5GpWIYXl3qo85 jyMpFx93Aw4oTV6IKRTnS1V1z4NLh84/C2rVBQ5PheAMaIhpAQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFIk9jFsaPwmi2tRXYybAcEpnG3WEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 NmQ0MTI3OC1kYmVjLTRjZTEtYTJhYS03MjQyN2VkOTM2ODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzg2ZDQxMjc4LWRiZWMtNGNlMS1h MmFhLTcyNDI3ZWQ5MzY4MC84NmQ0MTI3OC1kYmVjLTRjZTEtYTJhYS03MjQyN2Vk OTM2ODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlEADBALYsCQwDgQCAAIwCAMGBCYC/twAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAefsy8Zaq4QJ1zWZYbz/Z9p69uNxcFHnREtXA0Sj9pl9paSUNXg+3tH RxcQnQrztL1cBjUd35Eqph17CenLhnyHfiHE3hLY1pyr6Gc+oL4Lrzi0mwOYnFYD 9P/HId4lRZdUR+Amc3qegwW0s0kBFdzqIuLPHOSwg1FUcNGAt6bMAb4V8bpf9rbO rYW6YODAUhgsqTA5FwbPin6TRQ5vA4Qexw2ydgPuVKP/tPqHVHRLzOMw4DyPBnYq hmHXwD7KescH6zvkjx/lgQ1ztIiHytNUWMZ2NMTQP5n5JHKLF7gtjq30aQah6lEG QzGfyhH+6vLTsLLtxj6vOTnqgte8uew= -----END CERTIFICATE-----Generated at Mon Jun 16 19:50:51 2025 by rpki-client