$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer File: 02e3db6d-40b5-4639-a499-a02b80a4befe.cer (raw, json) Hash identifier: haYaPLlJ9TVuv9dXr9gfnnBNk3Oj1NLEVxWzJP3RlM4= Subject key identifier: CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A4D98AB110B754808EFF03E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 00:45:36 +0000 Certificate not after: Tue 28 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 62488 IP: 162.216.24.0/21 IP: 2604:cc80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:98:ab:11:0b:75:48:08:ef:f0:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 25 00:45:36 2025 GMT Not After : Sep 28 00:45:36 2027 GMT Subject: CN=02e3db6d-40b5-4639-a499-a02b80a4befe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3c:6b:72:78:97:e5:6e:14:25:24:ea:4d:f6: 0f:e7:b5:d0:17:0c:e2:03:be:88:8b:c7:2d:86:56: 0b:3a:43:f4:8e:b2:75:a5:21:6d:16:1d:0b:1d:04: 3d:4a:dc:a6:b3:08:fd:69:f9:af:34:e7:e4:69:47: cd:2e:f9:07:1e:0a:08:ce:89:23:8e:a9:91:7e:01: 92:f4:ac:92:ae:75:7c:5f:78:24:f2:ec:91:d5:2b: cc:11:79:e0:0a:25:04:c7:93:63:97:08:f8:98:ea: fc:be:b1:9d:96:84:61:fd:e4:bf:1f:9a:1d:5c:69: ca:cb:66:4b:dc:15:f3:72:33:b2:b0:bf:2f:75:4b: e9:44:ac:57:5e:2c:df:cf:ab:d9:46:2d:b6:ca:8b: 98:a8:c0:ac:6a:12:f0:45:9e:82:65:66:f2:2a:b7: f5:87:35:e1:1d:cc:c6:d3:09:92:37:7c:78:bf:d4: a9:b5:bf:29:62:90:50:96:d0:8c:bd:2f:bb:ef:4e: 6d:8d:0b:8a:f0:04:cc:9d:b0:4e:6d:4c:b9:80:4b: 1c:9c:ec:42:ad:62:ff:47:64:ad:65:d4:02:b9:41: 69:54:36:1a:e6:4a:9c:30:d1:9f:b4:fc:e0:f5:2b: dd:7c:f2:be:30:eb:0e:93:55:5f:57:de:d5:68:b9: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.216.24.0/21 IPv6: 2604:cc80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62488 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:06:18:c2:f0:4b:15:60:02:7d:78:c5:6a:74:3b:1e:5c:0c: 05:5c:08:82:2f:d2:ca:36:05:79:3b:0c:1f:61:05:11:05:2a: 70:38:f3:fd:c8:a8:c4:c8:1d:33:c7:b9:e9:03:fd:be:f5:68: b8:e1:01:83:4e:98:37:e9:8d:21:43:51:46:e0:75:ce:f6:ac: 89:ee:75:dd:a2:5f:81:66:97:e5:87:ec:21:a5:d0:eb:b3:29: f7:7b:36:20:aa:e2:f8:9c:7c:dd:2f:78:0e:dc:8e:c8:c4:e5: 91:f0:09:43:30:44:6c:9e:fa:64:44:35:d5:3c:a8:ed:17:3b: 35:17:79:d4:7f:1c:51:71:16:b1:28:fe:7a:f5:3e:3d:e2:99: 8c:09:a8:8f:b0:cb:c5:4c:21:b5:d6:1e:d0:80:4f:85:95:a8: ba:ea:56:c5:ed:99:df:6c:dd:3c:e0:ec:95:aa:13:24:24:c5: 12:cf:12:0a:77:40:63:db:c7:c2:43:ce:f2:11:a1:bd:bd:16: 3b:3c:29:38:e7:2d:f5:0d:27:bf:1a:9e:87:59:2e:93:f5:cb: a7:b2:8d:02:57:58:d3:b3:49:50:2d:75:53:1b:95:7a:6a:5e: 1a:87:42:b2:fd:38:14:61:0a:35:87:aa:6b:71:52:9c:40:71: 85:27:d1:f0 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpNmKsRC3VICO/wPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyNTAwNDUzNloXDTI3MDkyODAwNDUzNlowLzEtMCsGA1UEAxMk MDJlM2RiNmQtNDBiNS00NjM5LWE0OTktYTAyYjgwYTRiZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDxrcniX5W4UJSTqTfYP57XQFwziA76Ii8ct hlYLOkP0jrJ1pSFtFh0LHQQ9Stymswj9afmvNOfkaUfNLvkHHgoIzokjjqmRfgGS 9KySrnV8X3gk8uyR1SvMEXngCiUEx5Njlwj4mOr8vrGdloRh/eS/H5odXGnKy2ZL 3BXzcjOysL8vdUvpRKxXXizfz6vZRi22youYqMCsahLwRZ6CZWbyKrf1hzXhHczG 0wmSN3x4v9Sptb8pYpBQltCMvS+7705tjQuK8ATMnbBObUy5gEscnOxCrWL/R2St ZdQCuUFpVDYa5kqcMNGftPzg9SvdfPK+MOsOk1VfV97VaLkl6QIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFMxiCNMt6GtxK6HywIaotmKZge+yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w MmUzZGI2ZC00MGI1LTQ2MzktYTQ5OS1hMDJiODBhNGJlZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzAyZTNkYjZkLTQwYjUtNDYzOS1h NDk5LWEwMmI4MGE0YmVmZS8wMmUzZGI2ZC00MGI1LTQ2MzktYTQ5OS1hMDJiODBh NGJlZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOi2BgwDQQCAAIwBwMFACYEzIAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPQYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGwGGMLwSxVgAn14xWp0Ox5cDAVc CIIv0so2BXk7DB9hBREFKnA48/3IqMTIHTPHuekD/b71aLjhAYNOmDfpjSFDUUbg dc72rInudd2iX4Fml+WH7CGl0OuzKfd7NiCq4vicfN0veA7cjsjE5ZHwCUMwRGye +mRENdU8qO0XOzUXedR/HFFxFrEo/nr1Pj3imYwJqI+wy8VMIbXWHtCAT4WVqLrq VsXtmd9s3Tzg7JWqEyQkxRLPEgp3QGPbx8JDzvIRob29Fjs8KTjnLfUNJ78anodZ LpP1y6eyjQJXWNOzSVAtdVMblXpqXhqHQrL9OBRhCjWHqmtxUpxAcYUn0fA= -----END CERTIFICATE-----Generated at Sun Jun 29 12:30:03 2025 by rpki-client