$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer File: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer (raw, json) Hash identifier: g3TV1NqKv1aGOMTIBdmVWPb1OH6Qkvj6EsyAAzDcvww= Subject key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849876214D2DFFE4520A7C09DE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Apr 2025 00:45:34 +0000 Certificate not after: Mon 19 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 396935 IP: 23.135.48.0/24 IP: 2602:fdd9::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:62:14:d2:df:fe:45:20:a7:c0:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 15 00:45:34 2025 GMT Not After : Jul 19 00:45:34 2027 GMT Subject: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:23:34:ca:5a:46:ba:ca:9d:ff:14:f4:d6:4b: 73:89:bf:6c:01:8a:85:60:db:4c:79:99:61:f8:ba: f8:02:9c:b6:c8:46:c0:9b:42:f5:f4:6b:22:05:ac: e2:a6:bd:73:d3:d1:f2:ae:49:46:33:a4:9c:fa:f8: 95:b3:62:06:86:53:c8:82:e3:2d:98:a0:34:dc:40: ef:40:ea:49:4c:e2:a1:3f:a1:0a:49:1b:02:b8:04: 48:16:29:a9:e1:f9:c8:ea:13:15:46:d4:ed:5e:58: b7:38:e2:64:e1:aa:c3:92:26:ea:1a:13:09:41:48: b1:40:ef:d9:8f:fa:48:9d:0b:b9:c1:e4:a6:62:d1: e9:8e:21:e7:f8:d4:50:be:bc:e6:97:33:b6:4f:a6: 57:fb:5c:f8:4d:41:92:6d:10:89:1b:08:4b:18:16: e4:9b:06:f8:d8:b4:90:e4:94:ee:39:b3:94:ff:c2: e2:af:06:7a:8f:5f:ed:b9:62:5f:2a:ee:5c:cf:24: 3e:b4:dd:4a:26:19:21:17:3d:b4:98:80:fd:f4:4e: 1c:0b:ab:eb:55:26:58:04:df:c8:d9:4a:f8:9c:77: 56:ad:3a:a5:a7:76:00:65:d8:3c:1f:32:d0:7e:0b: 98:18:a6:a3:4c:1f:d7:6a:50:2b:95:53:5b:7e:b7: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.135.48.0/24 IPv6: 2602:fdd9::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396935 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9e:7e:4d:85:07:e9:57:c6:e4:29:89:33:3f:b6:65:f3:56: 45:e4:0c:7b:fe:b8:db:a9:a6:29:e6:65:22:a7:0b:da:f1:55: 3f:13:48:be:f9:17:3b:c2:93:62:fa:28:75:a3:46:ac:76:12: 00:7f:7e:8d:23:79:3c:f2:48:9c:8f:5b:fa:6f:0c:9b:20:24: ba:73:4c:58:fe:62:df:c0:6a:66:44:f6:a4:e7:be:08:de:b8: c2:bd:b3:e0:f3:3d:d8:dd:1e:ba:a7:ec:bc:a9:be:20:26:0b: 72:a7:0a:88:0e:54:2a:2a:6f:2e:bd:80:d7:62:f8:45:11:68: 34:8d:0f:ea:c7:c9:86:6e:97:eb:2c:13:71:aa:62:ac:fe:6d: dd:30:10:c2:52:b9:3d:e8:a7:b5:43:3a:1e:32:6f:44:4e:4a: 12:b9:a6:e2:14:ac:22:4c:9e:db:d2:1e:b0:f8:4e:16:0a:fb: 17:66:93:01:9c:93:32:fd:4c:89:c2:19:aa:8d:75:82:99:20: 51:84:6d:02:9c:72:f4:79:8e:4e:24:67:05:c4:77:d8:0e:e5: 6c:04:8b:71:54:2c:76:69:2a:68:e9:07:5f:1e:b8:0f:02:a0: 80:e9:c6:22:3d:04:88:98:49:fb:8c:7d:cc:e4:36:e9:2b:e7: b7:93:be:e9 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmHYhTS3/5FIKfAneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQxNTAwNDUzNFoXDTI3MDcxOTAwNDUzNFowLzEtMCsGA1UEAxMk OGQ5NThjNDctYzE4Zi00NmUyLWEzYzMtZWQ0YmEyOWUxYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyM0ylpGusqd/xT01ktzib9sAYqFYNtMeZlh +Lr4Apy2yEbAm0L19GsiBazipr1z09HyrklGM6Sc+viVs2IGhlPIguMtmKA03EDv QOpJTOKhP6EKSRsCuARIFimp4fnI6hMVRtTtXli3OOJk4arDkibqGhMJQUixQO/Z j/pInQu5weSmYtHpjiHn+NRQvrzmlzO2T6ZX+1z4TUGSbRCJGwhLGBbkmwb42LSQ 5JTuObOU/8LirwZ6j1/tuWJfKu5czyQ+tN1KJhkhFz20mID99E4cC6vrVSZYBN/I 2Ur4nHdWrTqlp3YAZdg8HzLQfguYGKajTB/XalArlVNbfrenDQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPNSXcjUrUs9zm+ahfrEUVNhJ/8kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5ZTFjOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzhkOTU4YzQ3LWMxOGYtNDZlMi1h M2MzLWVkNGJhMjllMWM5OS84ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5 ZTFjOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhzAwDgQCAAIwCAMGBCYC/dkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYOhzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLnn5NhQfpV8bkKYkzP7Zl81ZF 5Ax7/rjbqaYp5mUipwva8VU/E0i++Rc7wpNi+ih1o0asdhIAf36NI3k88kicj1v6 bwybICS6c0xY/mLfwGpmRPak574I3rjCvbPg8z3Y3R66p+y8qb4gJgtypwqIDlQq Km8uvYDXYvhFEWg0jQ/qx8mGbpfrLBNxqmKs/m3dMBDCUrk96Ke1QzoeMm9ETkoS uabiFKwiTJ7b0h6w+E4WCvsXZpMBnJMy/UyJwhmqjXWCmSBRhG0CnHL0eY5OJGcF xHfYDuVsBItxVCx2aSpo6QdfHrgPAqCA6cYiPQSImEn7jH3M5DbpK+e3k77p -----END CERTIFICATE-----Generated at Sun Apr 27 02:56:49 2025 by rpki-client