$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/19304bfd-78c6-4528-8aa0-6e34ceb33043.cer File: 19304bfd-78c6-4528-8aa0-6e34ceb33043.cer (raw, json) Hash identifier: hAThVUnWDnvNueHDBYwWUd4vh1JWGgrM0h16z09gQws= Subject key identifier: 2A:51:73:1C:2F:5D:76:95:82:45:8C:C5:55:F8:4F:08:A1:26:2C:4A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849BF37C3CFF93D12ECCC90DD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/19304bfd-78c6-4528-8aa0-6e34ceb33043/19304bfd-78c6-4528-8aa0-6e34ceb33043.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/19304bfd-78c6-4528-8aa0-6e34ceb33043/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 May 2025 00:45:34 +0000 Certificate not after: Sun 08 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 30689 IP: 65.183.0.0/20 IP: 96.43.160.0/19 IP: 104.152.236.0/22 IP: 162.216.160.0/21 IP: 162.246.0.0/22 IP: 192.131.32.0/21 IP: 196.1.138.0/23 IP: 207.204.64.0/18 IP: 207.254.128.0/20 IP: 216.10.208.0/20 IP: 2600:1b00::/24 IP: 2607:fe00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:37:c3:cf:f9:3d:12:ec:cc:90:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 5 00:45:34 2025 GMT Not After : Aug 8 00:45:34 2027 GMT Subject: CN=19304bfd-78c6-4528-8aa0-6e34ceb33043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fa:a7:12:a8:0b:84:d3:79:7c:69:ec:17:a6: 2e:b6:57:bb:f6:ac:0e:48:80:a4:f2:3d:f8:46:eb: 63:f7:55:a8:8e:d5:d9:9c:5e:12:ed:43:e6:8d:aa: ee:a8:2f:39:5b:d7:75:51:ad:03:8a:17:dd:d7:0e: 48:66:96:71:6f:88:72:3f:74:04:4e:6f:ba:ed:16: 19:bb:c0:d2:ec:c3:56:fa:ec:b0:12:cc:94:87:8c: dd:62:2c:af:ce:c3:07:50:22:c4:49:e1:45:99:8a: d2:31:57:0f:36:2b:bf:7d:ff:ec:20:22:8b:a5:fa: ef:36:9c:f9:ce:9d:8e:2d:b0:99:31:d9:fc:2f:c2: a6:72:b1:17:49:1b:0e:f4:58:56:65:71:72:13:b4: ed:b9:94:59:c4:fb:c3:95:80:c5:63:8a:31:9b:59: 7d:51:82:18:c4:94:35:ec:ee:c5:bf:65:b1:34:a7: 69:7a:c8:d4:2c:88:ff:b0:22:46:e1:44:18:e1:1f: 04:55:10:b3:a7:bc:5d:dd:a2:95:a7:f6:e3:43:b0: 1d:e5:8a:65:0d:4a:92:7c:8e:5e:10:f3:3c:e7:89: c6:84:9a:f5:20:5d:28:b4:b6:03:33:1f:b9:50:77: 44:0d:36:4e:18:1d:6f:b6:8b:c2:98:45:27:62:16: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:51:73:1C:2F:5D:76:95:82:45:8C:C5:55:F8:4F:08:A1:26:2C:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/19304bfd-78c6-4528-8aa0-6e34ceb33043/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/19304bfd-78c6-4528-8aa0-6e34ceb33043/19304bfd-78c6-4528-8aa0-6e34ceb33043.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 65.183.0.0/20 96.43.160.0/19 104.152.236.0/22 162.216.160.0/21 162.246.0.0/22 192.131.32.0/21 196.1.138.0/23 207.204.64.0/18 207.254.128.0/20 216.10.208.0/20 IPv6: 2600:1b00::/24 2607:fe00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30689 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3c:a7:cd:07:01:96:57:c2:cd:92:d1:a1:6f:ba:a7:d8:e4: dd:84:d5:5a:b7:1b:38:5a:63:ea:f2:c6:69:d3:30:0c:db:fa: 23:75:8b:7c:69:a4:45:f5:ce:7d:1a:52:b3:76:4e:6f:ab:83: c6:bf:ce:1f:df:8a:23:64:0a:43:eb:c5:52:d6:dd:de:98:92: d6:5c:a2:2a:0b:53:75:57:14:b8:ac:92:ee:e9:0b:74:6f:86: 10:01:78:37:b5:66:3b:19:84:c5:86:18:33:87:65:36:40:17: 49:75:8f:46:6d:83:08:45:db:d9:7c:75:36:6e:7f:30:26:95: 0b:63:c7:96:b9:0f:b0:4f:77:88:ce:64:0b:8e:84:3a:ef:3a: aa:c1:9a:a9:a2:5d:35:dc:89:af:4d:0f:ed:f4:81:50:7c:ea: a8:42:ab:4b:69:ad:e3:51:23:9d:bf:7d:f3:94:e4:b5:e2:6e: ec:32:f6:91:51:e0:1b:f3:16:65:9c:bd:6b:08:86:68:67:0a: bd:c8:2a:5c:8e:98:ad:58:fd:05:7d:16:01:da:66:f6:eb:79: f4:93:78:cf:94:4e:53:72:b9:73:0f:5b:10:76:58:e7:b8:13: ad:2d:d9:05:ab:f5:c1:a5:0f:a6:36:46:21:3d:db:2c:11:c8: 7d:3a:2b:2c -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEm/N8PP+T0S7MyQ3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNTAwNDUzNFoXDTI3MDgwODAwNDUzNFowLzEtMCsGA1UEAxMk MTkzMDRiZmQtNzhjNi00NTI4LThhYTAtNmUzNGNlYjMzMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifqnEqgLhNN5fGnsF6Yutle79qwOSICk8j34 Rutj91WojtXZnF4S7UPmjaruqC85W9d1Ua0Dihfd1w5IZpZxb4hyP3QETm+67RYZ u8DS7MNW+uywEsyUh4zdYiyvzsMHUCLESeFFmYrSMVcPNiu/ff/sICKLpfrvNpz5 zp2OLbCZMdn8L8KmcrEXSRsO9FhWZXFyE7TtuZRZxPvDlYDFY4oxm1l9UYIYxJQ1 7O7Fv2WxNKdpesjULIj/sCJG4UQY4R8EVRCzp7xd3aKVp/bjQ7Ad5YplDUqSfI5e EPM854nGhJr1IF0otLYDMx+5UHdEDTZOGB1vtovCmEUnYhbsnwIDAQABo4IEZTCC BGEwHQYDVR0OBBYEFCpRcxwvXXaVgkWMxVX4TwihJixKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x OTMwNGJmZC03OGM2LTQ1MjgtOGFhMC02ZTM0Y2ViMzMwNDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzE5MzA0YmZkLTc4YzYtNDUyOC04 YWEwLTZlMzRjZWIzMzA0My8xOTMwNGJmZC03OGM2LTQ1MjgtOGFhMC02ZTM0Y2Vi MzMwNDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwagYIKwYBBQUH AQcBAf8EWzBZMEIEAgABMDwDBARBtwADBAVgK6ADBAJomOwDBAOi2KADBAKi9gAD BAPAgyADBAHEAYoDBAbPzEADBATP/oADBATYCtAwEwQCAAIwDQMEACYAGwMFACYH /gAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICd+EwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiTynzQcBllfC zZLRoW+6p9jk3YTVWrcbOFpj6vLGadMwDNv6I3WLfGmkRfXOfRpSs3ZOb6uDxr/O H9+KI2QKQ+vFUtbd3piS1lyiKgtTdVcUuKyS7ukLdG+GEAF4N7VmOxmExYYYM4dl NkAXSXWPRm2DCEXb2Xx1Nm5/MCaVC2PHlrkPsE93iM5kC46EOu86qsGaqaJdNdyJ r00P7fSBUHzqqEKrS2mt41Ejnb9985TkteJu7DL2kVHgG/MWZZy9awiGaGcKvcgq XI6YrVj9BX0WAdpm9ut59JN4z5ROU3K5cw9bEHZY57gTrS3ZBav1waUPpjZGIT3b LBHIfTorLA== -----END CERTIFICATE-----Generated at Sun May 11 10:47:39 2025 by rpki-client