$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9200673-92d2-4564-8bc2-ce80a8371b1c.cer File: f9200673-92d2-4564-8bc2-ce80a8371b1c.cer (raw, json) Hash identifier: D+e9vEEQZJWYyYgeV2paSWshAYGT+Xdd7w3HlMojL9w= Subject key identifier: B9:4C:17:2B:9F:01:01:46:79:E5:A3:FF:F9:D8:09:C6:92:42:3B:F8 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A31ADD4BC171A027579418380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9200673-92d2-4564-8bc2-ce80a8371b1c/f9200673-92d2-4564-8bc2-ce80a8371b1c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9200673-92d2-4564-8bc2-ce80a8371b1c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Jun 2025 00:45:37 +0000 Certificate not after: Sat 18 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 23371 IP: 198.47.8.0 -- 198.47.12.255 IP: 2620:90:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:ad:d4:bc:17:1a:02:75:79:41:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 15 00:45:37 2025 GMT Not After : Sep 18 00:45:37 2027 GMT Subject: CN=f9200673-92d2-4564-8bc2-ce80a8371b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:26:ea:f3:aa:3c:ad:31:56:fd:3c:5a:8a: 0e:3c:4c:b0:32:b4:78:2a:1d:ab:ce:ab:68:68:2b: 05:dd:2f:8b:05:e6:e7:8f:72:a5:7f:f1:98:51:c6: e0:4f:7e:a8:13:25:9f:e9:b7:3b:da:57:db:50:50: c5:e6:e3:c8:b7:56:c4:bb:c9:6e:81:05:4b:8f:ee: c6:96:5d:5f:3d:4e:48:2d:24:2e:9f:ce:11:e9:9b: b0:c1:59:bd:ba:d6:bf:aa:91:e7:d7:a4:00:a4:f7: 5d:9e:ac:ea:7b:bf:1d:ed:ee:e7:08:8e:bb:4f:6e: 5d:e8:db:5e:c2:f7:c4:29:40:8e:2c:6b:31:52:66: 9f:4c:a6:05:62:b5:fc:7c:fa:41:bd:a2:d8:22:a8: f5:a1:c8:8d:11:be:fe:58:2b:15:05:41:e7:55:2b: ba:93:55:23:75:88:0e:a7:94:31:cf:f9:09:57:83: 38:2c:c3:83:ae:71:1c:1b:c7:e8:74:8e:36:4d:83: ba:7e:2b:75:4f:0b:02:b0:8a:75:e1:92:b4:3f:0f: 12:0e:3d:cb:95:a0:a1:63:a1:54:23:33:0a:49:53: 99:db:f3:e3:5b:cb:4e:30:43:c0:f2:1e:a9:c3:09: 86:9c:50:de:b1:0d:07:94:51:83:69:92:fb:57:f0: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4C:17:2B:9F:01:01:46:79:E5:A3:FF:F9:D8:09:C6:92:42:3B:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9200673-92d2-4564-8bc2-ce80a8371b1c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9200673-92d2-4564-8bc2-ce80a8371b1c/f9200673-92d2-4564-8bc2-ce80a8371b1c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.47.8.0-198.47.12.255 IPv6: 2620:90:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23371 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:af:a7:88:13:08:37:3a:78:0f:2a:bf:52:77:5d:7f:27:33: 3f:37:47:a3:b7:f7:c8:d6:83:d4:05:9d:97:ee:bb:31:2e:d3: 1f:7f:fa:e4:b8:06:ba:21:af:c0:09:c0:78:f4:f0:5a:2f:bd: 9c:88:b9:3b:51:23:1c:b8:b3:50:52:a0:1a:f3:11:57:7e:c2: a1:45:03:9b:9a:98:a1:f7:f4:db:3b:dc:64:25:be:9d:28:98: d7:00:70:a5:9d:35:42:bf:48:02:00:93:73:60:b4:3a:0d:55: 94:12:db:6f:c4:fd:28:77:61:6f:af:b1:b5:81:21:24:fd:56: fc:cb:01:05:c4:86:90:5c:1c:8d:0d:e7:8f:99:a3:25:47:d7: 48:66:2b:41:53:de:ed:c4:6c:91:1a:1a:12:e5:4d:a4:c2:49: 68:19:8c:3f:6c:e8:ae:ba:c5:d1:c6:e9:49:d2:17:71:c1:fb: 41:ec:c7:4b:56:4c:53:35:cc:93:f9:f5:d9:f8:8e:e9:0f:ad: 45:06:84:d9:ad:2b:95:9c:b2:d9:70:83:71:4c:f4:d8:df:83: 56:da:e1:33:f3:68:6f:fc:a0:40:51:6b:27:4f:5c:7a:19:72: 50:f6:7c:0e:a2:bb:d1:da:48:72:9f:70:b5:25:95:e8:f1:f3: 95:a9:d5:fb -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEoxrdS8FxoCdXlBg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxNTAwNDUzN1oXDTI3MDkxODAwNDUzN1owLzEtMCsGA1UEAxMk ZjkyMDA2NzMtOTJkMi00NTY0LThiYzItY2U4MGE4MzcxYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJQm6vOqPK0xVv08WooOPEywMrR4Kh2rzqto aCsF3S+LBebnj3Klf/GYUcbgT36oEyWf6bc72lfbUFDF5uPIt1bEu8lugQVLj+7G ll1fPU5ILSQun84R6ZuwwVm9uta/qpHn16QApPddnqzqe78d7e7nCI67T25d6Nte wvfEKUCOLGsxUmafTKYFYrX8fPpBvaLYIqj1ociNEb7+WCsVBUHnVSu6k1UjdYgO p5Qxz/kJV4M4LMODrnEcG8fodI42TYO6fit1TwsCsIp14ZK0Pw8SDj3LlaChY6FU IzMKSVOZ2/PjW8tOMEPA8h6pwwmGnFDesQ0HlFGDaZL7V/BB2wIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFLlMFyufAQFGeeWj//nYCcaSQjv4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m OTIwMDY3My05MmQyLTQ1NjQtOGJjMi1jZTgwYTgzNzFiMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y5MjAwNjczLTkyZDItNDU2NC04 YmMyLWNlODBhODM3MWIxYy9mOTIwMDY3My05MmQyLTQ1NjQtOGJjMi1jZTgwYTgz NzFiMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMBQEAgABMA4wDAMEA8YvCAMEAMYvDDAPBAIAAjAJAwcAJiAAkIAA MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAltLMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC6vp4gTCDc6eA8q v1J3XX8nMz83R6O398jWg9QFnZfuuzEu0x9/+uS4Brohr8AJwHj08FovvZyIuTtR Ixy4s1BSoBrzEVd+wqFFA5uamKH39Ns73GQlvp0omNcAcKWdNUK/SAIAk3NgtDoN VZQS22/E/Sh3YW+vsbWBIST9VvzLAQXEhpBcHI0N54+ZoyVH10hmK0FT3u3EbJEa GhLlTaTCSWgZjD9s6K66xdHG6UnSF3HB+0Hsx0tWTFM1zJP59dn4jukPrUUGhNmt K5Wcstlwg3FM9Njfg1ba4TPzaG/8oEBRaydPXHoZclD2fA6iu9HaSHKfcLUllejx 85Wp1fs= -----END CERTIFICATE-----Generated at Sun Jun 15 05:08:07 2025 by rpki-client