$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer File: 0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer (raw, json) Hash identifier: pyohc4TvDGaaWeieAavRO36hLv5QAp09XcW2elhWm3s= Subject key identifier: B7:04:AF:64:46:1E:8E:22:DC:1C:BF:03:28:37:D5:CB:C0:8C:C8:0E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285848DA6971184EAE252F65E4A740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 01:45:33 +0000 Certificate not after: Tue 18 May 2027 00:45:33 +0000 Subordinate resources: AS: 14797 IP: 167.234.37.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:69:71:18:4e:ae:25:2f:65:e4:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 12 01:45:33 2025 GMT Not After : May 18 00:45:33 2027 GMT Subject: CN=0a403f6b-0f61-4db4-a8ff-0b4adc6a313b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:db:ee:3e:f1:99:1d:ed:b9:5b:30:e3:af:ce: 18:c0:c0:20:5f:e7:ed:a0:ff:f8:6e:3d:72:cc:04: 0b:0e:27:31:6a:85:ba:62:51:e6:ba:5c:bf:16:85: ea:f7:e0:0d:0b:29:9b:5a:0f:d9:e4:27:b7:4a:fe: 95:46:0f:38:56:6a:a1:b8:34:de:ce:ed:ea:1e:fa: 5f:7c:1d:1a:c2:d6:f6:4b:54:b3:51:b6:f3:cd:b1: 13:2d:2a:19:ff:7e:13:c2:9b:a6:a6:af:24:c2:60: 8b:96:32:bd:a6:46:41:6a:0f:b0:03:3b:6f:36:c3: 89:ea:af:56:4f:19:cf:25:a4:3a:2f:b9:6b:ba:89: 69:dd:61:97:c5:bf:99:6f:c4:fc:b8:e7:29:0d:7a: 42:60:80:53:07:77:36:e2:ae:73:22:a1:b1:a2:0a: ff:0e:85:38:b8:4c:3e:8f:d7:57:4e:a4:51:40:86: 8a:e2:16:51:9a:af:e7:a3:0c:9d:84:6d:d9:4e:ff: 8c:7b:a7:bf:33:9c:fb:2b:75:a4:8d:af:86:99:03: 3e:24:c1:5e:48:38:71:1d:e8:a3:ff:36:f5:cb:f4: d8:bf:0d:20:6e:d2:b5:bc:be:28:7e:c4:24:f6:db: ce:39:33:e8:f1:d7:be:db:52:c4:71:00:ff:c4:ba: b4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:04:AF:64:46:1E:8E:22:DC:1C:BF:03:28:37:D5:CB:C0:8C:C8:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 167.234.37.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14797 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:55:42:76:82:7a:1c:10:f7:c5:ac:fd:c8:54:51:0f:e5:d0: fd:16:9e:d4:49:d0:e0:4d:61:53:ad:cf:36:79:17:dd:81:0d: 1a:2f:d0:e1:a9:7a:ee:e1:a6:2c:43:84:59:d7:f7:85:f1:9d: dc:65:5c:09:64:8a:3d:0d:7c:90:e5:da:5d:7b:45:2e:fc:ec: 55:14:23:1b:26:c0:2d:26:91:e8:10:d7:01:a1:40:5d:34:b7: 3d:6a:9b:c1:b0:b0:09:77:1d:33:53:ae:da:ad:c1:6c:3a:6d: af:0b:4c:d3:41:db:b5:fe:4a:0b:7f:fc:37:a9:94:a6:76:b4: ca:8b:5e:e0:32:49:08:75:a9:4e:00:92:66:ea:4c:78:19:5e: f7:ee:79:60:93:e3:58:83:0d:ac:13:45:d9:4b:19:22:0e:37: 5b:f4:dd:a8:cb:be:72:c6:95:77:99:1d:e6:f2:c9:02:e7:40: a5:26:b7:36:e1:4b:98:81:13:39:e8:bb:82:ba:cd:ac:20:05: 22:89:26:4a:d6:62:52:d5:81:a4:7f:fa:59:ae:91:d5:18:e8: 42:98:c6:e9:cd:9e:d1:f4:bc:ed:37:94:cc:0a:8d:15:c3:e9: 5b:33:c6:e0:61:47:8c:8e:d4:dd:47:60:9d:4b:2c:ea:36:05: 7b:d2:32:d1 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEjaaXEYTq4lL2Xkp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDIxMjAxNDUzM1oXDTI3MDUxODAwNDUzM1owLzEtMCsGA1UEAxMk MGE0MDNmNmItMGY2MS00ZGI0LWE4ZmYtMGI0YWRjNmEzMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtvuPvGZHe25WzDjr84YwMAgX+ftoP/4bj1y zAQLDicxaoW6YlHmuly/FoXq9+ANCymbWg/Z5Ce3Sv6VRg84VmqhuDTezu3qHvpf fB0awtb2S1SzUbbzzbETLSoZ/34Twpumpq8kwmCLljK9pkZBag+wAztvNsOJ6q9W TxnPJaQ6L7lruolp3WGXxb+Zb8T8uOcpDXpCYIBTB3c24q5zIqGxogr/DoU4uEw+ j9dXTqRRQIaK4hZRmq/nowydhG3ZTv+Me6e/M5z7K3Wkja+GmQM+JMFeSDhxHeij /zb1y/TYvw0gbtK1vL4ofsQk9tvOOTPo8de+21LEcQD/xLq0lwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFLcEr2RGHo4i3By/Ayg31cvAjMgOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w YTQwM2Y2Yi0wZjYxLTRkYjQtYThmZi0wYjRhZGM2YTMxM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzBhNDAzZjZiLTBmNjEtNGRiNC1h OGZmLTBiNGFkYzZhMzEzYi8wYTQwM2Y2Yi0wZjYxLTRkYjQtYThmZi0wYjRhZGM2 YTMxM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACn6iUwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Oc0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKVVCdoJ6HBD3xaz9yFRRD+XQ/Rae1EnQ4E1hU63PNnkX3YEN Gi/Q4al67uGmLEOEWdf3hfGd3GVcCWSKPQ18kOXaXXtFLvzsVRQjGybALSaR6BDX AaFAXTS3PWqbwbCwCXcdM1Ou2q3BbDptrwtM00Hbtf5KC3/8N6mUpna0yote4DJJ CHWpTgCSZupMeBle9+55YJPjWIMNrBNF2UsZIg43W/TdqMu+csaVd5kd5vLJAudA pSa3NuFLmIETOei7grrNrCAFIokmStZiUtWBpH/6Wa6R1RjoQpjG6c2e0fS87TeU zAqNFcPpWzPG4GFHjI7U3UdgnUss6jYFe9Iy0Q== -----END CERTIFICATE-----Generated at Sun Jun 15 04:45:35 2025 by rpki-client