$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer File: c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.cer (raw, json) Hash identifier: QiYlPhixIGkBpsIBs58uAe+85ptqHKsxtlutqq+45UA= Subject key identifier: 64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849EEAD6B368BB6A4A4F96DFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 00:45:37 +0000 Certificate not after: Wed 25 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 14409 IP: 199.66.136.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:ad:6b:36:8b:b6:a4:a4:f9:6d:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 22 00:45:37 2025 GMT Not After : Aug 25 00:45:37 2027 GMT Subject: CN=c0d3217d-8f05-40f5-8a63-23d6ec8c5a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:a6:ac:55:33:48:3f:af:ae:49:d8:0f:ef: 03:68:97:56:df:7d:21:90:fe:56:bd:2c:12:e4:2d: 0f:06:13:f2:9d:e6:0e:36:bd:6e:6b:3d:18:3b:2e: f7:ce:d3:b0:04:4e:c2:34:d8:31:31:12:94:a3:fe: 6f:45:11:8e:6b:62:5a:68:e8:06:8b:3d:4a:9c:4a: 08:5f:a1:3b:cf:69:1d:14:47:e2:cf:45:21:73:9b: e9:ad:87:51:8e:0a:55:d8:eb:3a:ec:75:83:27:2b: ba:b0:02:e9:b4:5e:48:3a:61:19:12:4f:fc:17:1f: 95:19:56:14:43:9f:c4:23:c9:af:b7:76:ba:df:83: 17:65:f2:b6:f2:1a:80:bd:ae:2c:80:65:05:04:c1: 2d:64:e4:5c:67:fb:8c:1e:7a:b1:e0:38:d8:c1:f5: 23:e0:ac:ef:bf:9a:80:f6:45:7f:02:ed:ab:76:0a: 65:55:77:5a:9d:85:c0:49:3e:85:69:22:dd:d7:8e: 6c:ac:89:0b:7e:06:3a:1b:75:2b:0d:b7:38:ec:6c: 0d:82:61:cf:03:cc:78:62:3c:f4:05:90:47:36:d3: be:a1:45:59:97:9b:7f:57:f2:75:8a:79:ae:d0:80: 2d:4a:e4:a0:c4:8d:fd:1a:87:02:c3:17:47:dc:30: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3B:A9:B8:1B:55:18:6F:F6:F9:43:EE:70:30:E3:D3:12:7C:EB:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74/c0d3217d-8f05-40f5-8a63-23d6ec8c5a74.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.66.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14409 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e0:bb:54:fa:c2:44:f9:dc:0e:a6:98:ab:00:d9:dc:41:90: e7:ec:6e:75:2c:13:29:3b:ce:df:44:6c:50:41:f0:2c:91:3b: a4:d3:ef:4e:da:5a:e6:5c:20:23:ce:0f:81:18:ed:87:18:c1: 9d:ac:f5:1c:a5:93:65:be:b3:17:e0:35:bc:08:2c:7b:14:15: 23:32:10:42:12:96:38:c2:55:4f:7f:28:2e:49:4c:ec:d7:4c: c1:e6:87:a1:15:9f:02:08:5d:46:a0:03:9f:eb:db:55:c2:ce: 24:3d:95:a2:06:7d:2e:3d:37:7b:bb:db:a3:5f:94:b5:7b:e4: 16:f4:90:c0:07:f2:c2:10:a2:4b:81:e7:6f:17:c1:5c:cd:d4: a7:32:66:2b:1a:31:9b:3a:d0:cc:3e:06:8e:7b:b5:41:ee:ab: ad:ef:38:f6:ee:d4:7d:8e:5b:d6:9d:df:36:2c:41:07:ca:1c: 33:56:04:9a:7b:0a:7e:f2:ec:8c:6f:c3:54:7d:5b:f9:26:02: e1:a3:7d:e8:74:b2:98:22:bd:87:c8:df:7d:f1:4d:b9:38:7b: d5:e9:bb:ff:bb:d9:91:13:21:e7:0a:5c:aa:79:78:8b:43:14: 56:1a:ab:1e:02:1a:01:5d:dc:b2:6b:25:78:7e:4f:9e:15:2a: b3:7b:12:8d -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEnurWs2i7akpPlt+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyMjAwNDUzN1oXDTI3MDgyNTAwNDUzN1owLzEtMCsGA1UEAxMk YzBkMzIxN2QtOGYwNS00MGY1LThhNjMtMjNkNmVjOGM1YTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkSmrFUzSD+vrknYD+8DaJdW330hkP5WvSwS 5C0PBhPyneYONr1uaz0YOy73ztOwBE7CNNgxMRKUo/5vRRGOa2JaaOgGiz1KnEoI X6E7z2kdFEfiz0Uhc5vprYdRjgpV2Os67HWDJyu6sALptF5IOmEZEk/8Fx+VGVYU Q5/EI8mvt3a634MXZfK28hqAva4sgGUFBMEtZORcZ/uMHnqx4DjYwfUj4Kzvv5qA 9kV/Au2rdgplVXdanYXAST6FaSLd145srIkLfgY6G3UrDbc47GwNgmHPA8x4Yjz0 BZBHNtO+oUVZl5t/V/J1inmu0IAtSuSgxI39GocCwxdH3DCkeQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFGQ7qbgbVRhv9vlD7nAw49MSfOsgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j MGQzMjE3ZC04ZjA1LTQwZjUtOGE2My0yM2Q2ZWM4YzVhNzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2MwZDMyMTdkLThmMDUtNDBmNS04 YTYzLTIzZDZlYzhjNWE3NC9jMGQzMjE3ZC04ZjA1LTQwZjUtOGE2My0yM2Q2ZWM4 YzVhNzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHQogwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OEkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAHuC7VPrCRPncDqaYqwDZ3EGQ5+xudSwTKTvO30RsUEHwLJE7 pNPvTtpa5lwgI84PgRjthxjBnaz1HKWTZb6zF+A1vAgsexQVIzIQQhKWOMJVT38o LklM7NdMweaHoRWfAghdRqADn+vbVcLOJD2VogZ9Lj03e7vbo1+UtXvkFvSQwAfy whCiS4HnbxfBXM3UpzJmKxoxmzrQzD4Gjnu1Qe6rre849u7UfY5b1p3fNixBB8oc M1YEmnsKfvLsjG/DVH1b+SYC4aN96HSymCK9h8jfffFNuTh71em7/7vZkRMh5wpc qnl4i0MUVhqrHgIaAV3csmsleH5PnhUqs3sSjQ== -----END CERTIFICATE-----Generated at Sun Jun 15 04:56:58 2025 by rpki-client