$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer File: 1b1fd062-f802-4363-ad37-7232f990c625.cer (raw, json) Hash identifier: cG76co3Gn2KlGEJz1D+PMKNZzWmAI+UeaKoE5mVvaRQ= Subject key identifier: D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A3FA33E33C7D77A44EBBA08E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Jun 2025 00:45:36 +0000 Certificate not after: Thu 23 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 397593 IP: 158.51.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:a3:3e:33:c7:d7:7a:44:eb:ba:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 20 00:45:36 2025 GMT Not After : Sep 23 00:45:36 2027 GMT Subject: CN=1b1fd062-f802-4363-ad37-7232f990c625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:13:4a:83:4c:1a:62:eb:d5:49:37:f5:f3: b9:73:29:35:5e:0b:29:e7:e1:c8:02:0d:d7:b9:e2: c9:cc:da:7f:f2:79:68:3f:e5:d9:01:2a:34:77:79: 0f:59:bb:8d:d3:54:fe:4b:76:d3:7d:92:47:b5:4c: fb:ce:77:45:20:23:36:62:72:2a:78:da:cd:bc:ea: 8d:0e:8e:14:f9:e4:e9:09:f5:16:fc:51:a2:61:1c: 4a:f2:9d:67:83:03:de:3e:b0:1f:7e:f2:93:bb:ef: 80:91:66:b1:98:69:a3:4a:69:cc:b3:d8:54:6d:88: 24:e9:05:69:c1:42:cc:e6:5a:77:d8:9b:41:71:e0: 0c:63:b5:8c:ab:55:33:08:89:04:f6:9d:89:aa:24: 87:1a:4e:62:ed:f7:eb:07:09:6b:11:d8:31:88:ba: ad:02:e0:29:ef:06:f7:f6:61:b1:8a:f4:c5:e8:95: cf:ea:3d:91:e6:b5:50:bb:a3:32:08:fa:8f:b6:e6: 03:00:df:b5:db:da:23:d7:a9:1a:c0:50:53:fc:8d: b3:43:91:ac:d1:01:00:a3:58:6e:ab:be:84:27:92: c4:51:6c:14:70:b7:58:03:0a:a0:9c:85:17:d1:34: 45:6b:1e:a6:11:b3:eb:05:a3:4f:80:e0:43:17:be: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 158.51.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397593 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:78:6b:03:00:ce:8b:f4:87:f6:93:ef:7b:71:54:2a:52:60: 3c:f6:45:9d:c1:e9:ce:61:b3:dc:85:ee:c2:d4:de:81:92:d0: 3c:0a:f3:8a:54:6e:be:c7:97:81:ff:c0:30:45:97:85:59:55: f4:42:8a:49:f7:04:70:e7:06:ea:86:90:d9:de:90:c4:bf:4c: 43:fa:2e:86:4a:6b:aa:2d:58:cb:3e:88:ba:23:15:e8:e0:a8: 72:09:03:9f:60:dc:cc:c2:2c:b3:f9:5c:2d:3f:b4:b1:d4:ab: 9c:d4:f7:52:45:45:f4:18:7e:49:c8:68:e4:7b:be:fb:c8:48: 2b:71:e0:cb:61:e6:82:aa:90:fe:31:b8:00:f4:f0:35:65:33: c3:46:17:ff:11:51:ff:88:90:dc:ec:76:ed:3f:02:81:48:7a: 5c:58:75:2c:81:09:c6:9f:8a:e1:37:1d:10:cc:b1:6f:e5:2f: 0c:98:1e:f3:48:04:55:2b:2f:28:17:55:71:e1:e5:f3:12:ba: bd:03:96:5c:b1:0f:f6:cd:b7:3b:ab:7e:70:2d:81:97:2a:30: 37:10:95:e6:81:2b:e7:7f:aa:7e:1e:7a:bf:f0:e8:26:64:bb: f6:c2:f7:b6:02:12:77:68:9f:7f:00:3e:25:4d:50:13:94:31: 61:a4:b4:db -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEo/oz4zx9d6ROu6COAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyMDAwNDUzNloXDTI3MDkyMzAwNDUzNlowLzEtMCsGA1UEAxMk MWIxZmQwNjItZjgwMi00MzYzLWFkMzctNzIzMmY5OTBjNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkgTSoNMGmLr1Uk39fO5cyk1Xgsp5+HIAg3X ueLJzNp/8nloP+XZASo0d3kPWbuN01T+S3bTfZJHtUz7zndFICM2YnIqeNrNvOqN Do4U+eTpCfUW/FGiYRxK8p1ngwPePrAffvKTu++AkWaxmGmjSmnMs9hUbYgk6QVp wULM5lp32JtBceAMY7WMq1UzCIkE9p2JqiSHGk5i7ffrBwlrEdgxiLqtAuAp7wb3 9mGxivTF6JXP6j2R5rVQu6MyCPqPtuYDAN+129oj16kawFBT/I2zQ5Gs0QEAo1hu q76EJ5LEUWwUcLdYAwqgnIUX0TRFax6mEbPrBaNPgOBDF747vQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNHJAfq4HsezdwK5T0G8BaXtlHvFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x YjFmZDA2Mi1mODAyLTQzNjMtYWQzNy03MjMyZjk5MGM2MjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzFiMWZkMDYyLWY4MDItNDM2My1h ZDM3LTcyMzJmOTkwYzYyNS8xYjFmZDA2Mi1mODAyLTQzNjMtYWQzNy03MjMyZjk5 MGM2MjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKeM7wwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhEZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJJ4awMAzov0h/aT73txVCpSYDz2RZ3B6c5hs9yF7sLU3oGS 0DwK84pUbr7Hl4H/wDBFl4VZVfRCikn3BHDnBuqGkNnekMS/TEP6LoZKa6otWMs+ iLojFejgqHIJA59g3MzCLLP5XC0/tLHUq5zU91JFRfQYfknIaOR7vvvISCtx4Mth 5oKqkP4xuAD08DVlM8NGF/8RUf+IkNzsdu0/AoFIelxYdSyBCcafiuE3HRDMsW/l LwyYHvNIBFUrLygXVXHh5fMSur0DllyxD/bNtzurfnAtgZcqMDcQleaBK+d/qn4e er/w6CZku/bC97YCEndon38APiVNUBOUMWGktNs= -----END CERTIFICATE-----Generated at Tue Jul 1 13:52:50 2025 by rpki-client