$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer File: fc70bf1a-d726-4a16-97fe-44fc23d06bce.cer (raw, json) Hash identifier: A5KOdffuV2XCFtCutefDOgMp1cDqthhm6czbWdoeIlo= Subject key identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858498B879B8F6FCC378921424180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Apr 2025 12:24:25 +0000 Certificate not after: Wed 13 May 2026 21:52:33 +0000 Subordinate resources: AS: 11075 IP: 46.33.20.0/24 IP: 2602:f985::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:87:9b:8f:6f:cc:37:89:21:42:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 16 12:24:25 2025 GMT Not After : May 13 21:52:33 2026 GMT Subject: CN=fc70bf1a-d726-4a16-97fe-44fc23d06bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:fe:a5:63:88:20:5b:ae:55:ea:88:ec:31: 73:4c:72:72:44:23:e8:4f:36:ce:0b:91:3d:dd:19: 29:58:6f:2b:8b:eb:e6:a7:92:47:b4:0c:c9:89:3b: b4:28:c5:6d:a6:29:78:c2:56:9e:aa:ed:85:54:8a: 04:c0:fe:b2:44:41:03:97:85:be:2c:0c:8f:c5:a5: 10:46:d7:12:3a:a4:70:db:d6:02:1e:8f:86:d3:8b: 92:e8:0f:75:16:e6:db:6b:30:29:3a:e0:c0:fe:bb: 91:32:a5:95:1c:b8:43:08:08:4f:c7:7e:38:a3:91: c0:d8:35:d4:d1:4c:f7:33:68:d1:ac:d3:4a:dd:35: f6:3d:cb:bb:77:c5:d4:63:49:b5:42:6d:35:5a:75: c0:94:d0:bf:18:c3:ad:ae:da:e1:29:95:3c:98:4d: 37:b6:fe:37:c6:1c:49:4a:f7:6a:67:f3:be:97:c8: 1b:e4:e8:c3:77:0e:43:a2:6b:79:a9:ba:63:de:46: 89:55:6b:46:62:7d:90:ca:20:3c:de:39:e1:ef:44: 24:33:cb:d2:0d:a2:06:2f:d7:a6:60:b5:fa:be:03: eb:63:e7:35:ed:03:e9:6d:76:c5:2a:f0:b2:90:10: 36:26:82:7d:a5:d3:29:b8:42:a9:a5:e7:25:29:1c: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7E:BE:BF:66:82:00:B0:12:53:A2:B6:74:4D:75:1F:D6:59:39:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fc70bf1a-d726-4a16-97fe-44fc23d06bce/fc70bf1a-d726-4a16-97fe-44fc23d06bce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 46.33.20.0/24 IPv6: 2602:f985::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11075 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e0:8a:65:25:4b:51:3b:1e:e7:98:c9:81:c8:89:8b:5e:32: 14:35:15:36:d3:da:7e:97:89:30:eb:1a:3f:be:05:d0:1d:3b: 54:cb:58:7d:e5:aa:9f:1c:20:34:15:34:4e:7f:44:36:7b:e5: 65:86:67:79:72:e4:cc:23:5a:9a:6d:c3:01:34:c0:30:17:1b: 55:c6:08:e5:d2:e4:3a:bb:ac:2c:92:79:b3:63:48:ca:6b:6d: 81:82:e2:9f:0a:fb:3a:e2:93:3d:c5:29:72:11:c6:6b:db:2b: d9:97:26:13:9c:c0:89:07:36:ed:8d:c9:eb:4c:d3:61:ce:7d: b6:65:f7:68:3c:51:1f:40:90:b0:dd:ba:5d:1f:09:8f:45:13: 98:0a:f6:df:59:db:f0:39:c0:48:89:10:82:24:eb:de:9d:b4: 48:ea:66:0e:40:79:a0:87:6c:8b:3a:7c:20:00:72:e5:32:b2: 61:f3:4b:14:f4:6b:67:5d:0a:60:f1:5b:08:e8:69:d1:79:99: b2:eb:bc:74:93:a6:aa:06:da:f0:9a:a9:67:03:7c:17:cb:40: e5:2d:63:bb:da:d1:d5:b9:5b:b9:6e:b9:75:ba:13:ac:9d:45: 7d:2a:c5:c9:cd:75:3e:45:19:a6:2d:17:73:cc:b8:10:1d:24: 22:78:47:01 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEmLh5uPb8w3iSFCQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDQxNjEyMjQyNVoXDTI2MDUxMzIxNTIzM1owLzEtMCsGA1UEAxMk ZmM3MGJmMWEtZDcyNi00YTE2LTk3ZmUtNDRmYzIzZDA2YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubf+pWOIIFuuVeqI7DFzTHJyRCPoTzbOC5E9 3RkpWG8ri+vmp5JHtAzJiTu0KMVtpil4wlaequ2FVIoEwP6yREEDl4W+LAyPxaUQ RtcSOqRw29YCHo+G04uS6A91FubbazApOuDA/ruRMqWVHLhDCAhPx344o5HA2DXU 0Uz3M2jRrNNK3TX2Pcu7d8XUY0m1Qm01WnXAlNC/GMOtrtrhKZU8mE03tv43xhxJ SvdqZ/O+l8gb5OjDdw5Domt5qbpj3kaJVWtGYn2QyiA83jnh70QkM8vSDaIGL9em YLX6vgPrY+c17QPpbXbFKvCykBA2JoJ9pdMpuEKppeclKRxRQwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIN+vr9mggCwElOitnRNdR/WWTmtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m YzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNkMDZiY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ZjNzBiZjFhLWQ3MjYtNGExNi05 N2ZlLTQ0ZmMyM2QwNmJjZS9mYzcwYmYxYS1kNzI2LTRhMTYtOTdmZS00NGZjMjNk MDZiY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAuIRQwDgQCAAIwCAMGACYC+YUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAitDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAILgimUlS1E7HueYyYHIiYteMhQ1 FTbT2n6XiTDrGj++BdAdO1TLWH3lqp8cIDQVNE5/RDZ75WWGZ3ly5MwjWpptwwE0 wDAXG1XGCOXS5Dq7rCySebNjSMprbYGC4p8K+zrikz3FKXIRxmvbK9mXJhOcwIkH Nu2NyetM02HOfbZl92g8UR9AkLDdul0fCY9FE5gK9t9Z2/A5wEiJEIIk696dtEjq Zg5AeaCHbIs6fCAAcuUysmHzSxT0a2ddCmDxWwjoadF5mbLrvHSTpqoG2vCaqWcD fBfLQOUtY7va0dW5W7luuXW6E6ydRX0qxcnNdT5FGaYtF3PMuBAdJCJ4RwE= -----END CERTIFICATE-----Generated at Sun Apr 27 03:20:58 2025 by rpki-client