$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer File: b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer (raw, json) Hash identifier: JXSdc0lnkG+W75S/kfxhfA8rMyE13AoxowsUo9u2jDw= Subject key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849DB2297FD0A1DD39448C6C240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 May 2025 00:45:33 +0000 Certificate not after: Wed 18 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 13743 AS: 21521 AS: 25813 AS: 36277 IP: 192.252.0.0/21 IP: 207.231.176.0/20 IP: 208.65.4.0/22 IP: 216.9.112.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:db:22:97:fd:0a:1d:d3:94:48:c6:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 15 00:45:33 2025 GMT Not After : Aug 18 00:45:33 2027 GMT Subject: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:8d:23:1c:45:8c:b3:39:44:1c:29:a8:ed: 55:8b:f3:8f:6b:d4:08:67:c0:84:7d:60:35:3d:16: 64:aa:1b:a7:01:70:b1:20:e8:e5:ae:4c:bd:51:fe: 14:b7:03:bc:f9:cd:97:01:c9:7c:39:1c:4f:47:ae: 27:d2:84:05:f7:5d:7f:88:2d:19:8e:94:ea:5d:96: 74:4b:0f:60:84:7a:73:59:d5:84:1f:c8:b7:f2:48: 41:b5:2b:29:4c:fa:1f:b8:4b:ea:de:c4:83:46:85: 13:31:67:db:2b:32:27:5a:98:b0:9d:80:ce:fb:4c: 33:74:07:9a:e7:be:08:0c:29:ab:02:e4:d7:54:81: 44:6f:77:63:72:2c:e9:e2:8e:e5:a3:9f:6e:f7:45: 32:92:44:9a:9c:0d:61:8a:9e:15:bb:b0:33:0e:a0: f2:ed:3e:e6:1f:df:b4:3a:86:9f:8a:78:2d:47:6e: a1:52:6a:45:8b:53:75:6f:6a:13:29:ba:d0:bc:4b: fc:13:70:c9:4e:c1:26:8c:03:73:62:54:47:70:d4: bf:d6:b0:70:1f:bf:4c:3a:ab:4d:80:87:85:05:cf: af:ce:3a:72:c4:10:8f:bc:59:c5:e6:e6:12:a0:96: 09:8b:c5:83:39:89:ee:97:35:0f:66:44:4b:97:78: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 192.252.0.0/21 207.231.176.0/20 208.65.4.0/22 216.9.112.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13743 21521 25813 36277 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a4:17:c9:54:e9:76:e7:dc:cb:59:ac:7a:a6:69:7b:04:ad: d8:1a:61:f3:11:7d:9c:01:82:23:61:86:b0:a2:df:19:f5:d3: b0:44:e6:6b:b3:82:09:c1:74:ba:a5:1f:79:18:8d:17:fd:08: 9f:b7:bb:98:a8:93:84:51:a6:86:29:00:70:b6:e7:b8:92:cf: 73:5e:be:d3:0a:ae:be:31:8e:b6:03:b1:8d:42:1e:dd:1b:51: 0c:86:a3:31:65:56:06:32:04:96:60:f4:d9:e9:51:41:bf:47: 1b:30:66:17:9b:44:ff:26:5c:c5:4a:33:20:aa:26:89:7e:34: 6e:a3:cf:25:95:b9:8c:4a:86:eb:3d:55:4e:7d:66:9f:4a:cf: 62:e6:b6:bf:2f:af:12:b1:5d:74:93:0e:82:26:78:c5:e4:5b: b0:3c:d5:51:99:8e:04:4b:b8:f8:9e:38:53:20:4d:9f:1b:dd: 08:0f:9d:31:9f:89:df:f0:e4:cd:d1:7d:25:11:d2:50:f3:f2: 76:96:c0:ea:5e:e7:a7:e1:20:da:d7:65:df:49:bf:1d:ab:63: 10:ff:b2:d0:eb:d9:97:ed:3e:76:e3:dc:7d:5e:68:d9:0e:af: ff:4d:a3:24:8f:eb:2e:00:bd:e9:44:cf:53:f7:67:70:e4:ef: 33:1d:31:76 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEnbIpf9Ch3TlEjGwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxNTAwNDUzM1oXDTI3MDgxODAwNDUzM1owLzEtMCsGA1UEAxMk YjJjOTQ1OTItNzNlOS00NTJlLWFkODgtYWFmYzhlM2VlN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiCNIxxFjLM5RBwpqO1Vi/OPa9QIZ8CEfWA1 PRZkqhunAXCxIOjlrky9Uf4UtwO8+c2XAcl8ORxPR64n0oQF911/iC0ZjpTqXZZ0 Sw9ghHpzWdWEH8i38khBtSspTPofuEvq3sSDRoUTMWfbKzInWpiwnYDO+0wzdAea 574IDCmrAuTXVIFEb3djcizp4o7lo59u90UykkSanA1hip4Vu7AzDqDy7T7mH9+0 OoafingtR26hUmpFi1N1b2oTKbrQvEv8E3DJTsEmjANzYlRHcNS/1rBwH79MOqtN gIeFBc+vzjpyxBCPvFnF5uYSoJYJi8WDOYnulzUPZkRLl3g3wQIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFItYs5uEJvB17DmLwPE9QB79d08ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i MmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUzZWU3YTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2IyYzk0NTkyLTczZTktNDUyZS1h ZDg4LWFhZmM4ZTNlZTdhNS9iMmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUz ZWU3YTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAPA/AADBATP57ADBALQQQQDBATYCXAwJgYIKwYB BQUHAQgBAf8EFzAVoBMwEQICNa8CAlQRAgJk1QIDAI21MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAImkF8lU 6Xbn3MtZrHqmaXsErdgaYfMRfZwBgiNhhrCi3xn107BE5muzggnBdLqlH3kYjRf9 CJ+3u5iok4RRpoYpAHC257iSz3NevtMKrr4xjrYDsY1CHt0bUQyGozFlVgYyBJZg 9NnpUUG/RxswZhebRP8mXMVKMyCqJol+NG6jzyWVuYxKhus9VU59Zp9Kz2Lmtr8v rxKxXXSTDoImeMXkW7A81VGZjgRLuPieOFMgTZ8b3QgPnTGfid/w5M3RfSUR0lDz 8naWwOpe56fhINrXZd9Jvx2rYxD/stDr2ZftPnbj3H1eaNkOr/9NoySP6y4AvelE z1P3Z3Dk7zMdMXY= -----END CERTIFICATE-----Generated at Sun Jun 15 05:14:07 2025 by rpki-client