$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer File: 3d9879da-145f-4f21-a7c3-da6b59a01625.cer (raw, json) Hash identifier: bpm4u63kK0QbjlMKfgZbwlnEOpZDB1xY80UdUWoKca8= Subject key identifier: 20:E6:59:D4:F9:42:52:0A:6E:BE:B6:CB:78:83:6D:26:EC:FA:4D:E4 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849C4CD21EA9EC4EBD0D7DB9900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 May 2025 00:45:34 +0000 Certificate not after: Tue 10 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 46766 IP: 23.170.72.0/24 IP: 2602:f9a2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:cd:21:ea:9e:c4:eb:d0:d7:db:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 7 00:45:34 2025 GMT Not After : Aug 10 00:45:34 2027 GMT Subject: CN=3d9879da-145f-4f21-a7c3-da6b59a01625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:05:4e:af:7d:fe:02:2d:1a:e4:a2:fa:52: e0:e9:e9:d5:ac:2f:59:44:ad:c6:de:e8:06:1d:17: 50:f2:84:79:b4:cc:5f:b0:d0:13:79:ff:fd:3b:d1: 9b:ad:59:ca:e5:8f:14:bd:d1:c1:73:16:2d:fa:33: 48:f6:f4:0d:91:2e:10:55:5c:b8:20:9a:28:b7:60: c9:8a:04:12:11:8c:42:17:81:35:66:10:7a:45:e3: ce:97:e2:d4:1b:df:2e:30:4e:9d:32:e5:25:9b:d2: 9e:09:d9:c9:42:9a:28:fc:c1:b6:2e:de:ab:b5:aa: 9d:10:b2:5d:02:e5:ee:39:3a:da:b0:22:d3:52:a2: 53:23:c4:80:3c:01:55:fb:9c:98:a0:de:78:cc:ba: 16:ef:29:cc:24:11:97:f5:cf:d1:f1:7d:32:ae:8f: 9a:1b:28:e8:6f:94:11:b6:98:40:5f:35:4e:d8:e3: bb:e0:07:41:52:fc:3c:1a:33:4e:d6:56:4d:a9:02: d7:a6:40:a3:bb:87:77:8c:9c:bb:78:00:c2:ce:12: ca:2d:45:54:9d:2f:d5:24:d8:ed:6b:43:85:72:4c: 8b:fa:df:14:0d:51:61:b5:de:f8:cb:ac:f3:4e:de: ec:15:0c:fa:9c:6d:d8:27:82:01:34:3c:01:1d:b6: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E6:59:D4:F9:42:52:0A:6E:BE:B6:CB:78:83:6D:26:EC:FA:4D:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.72.0/24 IPv6: 2602:f9a2::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e2:c8:f9:f4:7b:e2:2a:f7:af:4f:32:dc:46:bf:5d:e2:e3: c3:39:d3:ea:16:f6:d7:0f:00:c2:0a:4c:8e:6a:df:1a:3b:28: de:81:b3:25:4e:a7:4b:f6:36:99:c2:d5:34:ef:2b:da:ae:f3: 40:ac:b6:b1:18:06:69:c8:11:06:38:07:7d:ee:fe:5a:69:a1: 5a:8d:ed:ab:3c:4d:a4:ab:be:80:03:98:5b:87:8a:4d:41:f1: 8b:65:aa:14:21:86:b2:73:fb:8b:07:09:ba:50:45:b7:3b:bc: 78:34:f0:8e:97:ca:70:51:3b:ee:98:c2:00:e8:60:9e:56:28: 97:8c:2b:dd:dd:5f:69:bb:61:e9:e4:29:bb:ca:7e:0c:12:87: 4f:83:ef:93:00:ac:b2:16:2c:85:ba:8e:10:22:3a:25:3d:03: ce:54:43:2c:4c:86:a0:5e:65:7d:56:df:d7:f4:d8:90:e4:03: 99:36:d8:f0:40:fb:9d:1d:be:73:6f:71:ac:2e:17:98:67:5e: 3b:2b:77:c2:46:fb:05:b2:be:17:15:53:f6:b6:0f:c9:78:40: 30:e6:b1:ed:6d:0c:81:59:04:2f:73:76:16:2d:75:ce:f8:ef: f1:40:07:c5:ab:d9:0d:57:87:db:0e:0b:31:3b:da:62:78:c6: f5:1b:b3:3b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEnEzSHqnsTr0NfbmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNzAwNDUzNFoXDTI3MDgxMDAwNDUzNFowLzEtMCsGA1UEAxMk M2Q5ODc5ZGEtMTQ1Zi00ZjIxLWE3YzMtZGE2YjU5YTAxNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9cFTq99/gItGuSi+lLg6enVrC9ZRK3G3ugG HRdQ8oR5tMxfsNATef/9O9GbrVnK5Y8UvdHBcxYt+jNI9vQNkS4QVVy4IJoot2DJ igQSEYxCF4E1ZhB6RePOl+LUG98uME6dMuUlm9KeCdnJQpoo/MG2Lt6rtaqdELJd AuXuOTrasCLTUqJTI8SAPAFV+5yYoN54zLoW7ynMJBGX9c/R8X0yro+aGyjob5QR tphAXzVO2OO74AdBUvw8GjNO1lZNqQLXpkCju4d3jJy7eADCzhLKLUVUnS/VJNjt a0OFckyL+t8UDVFhtd74y6zzTt7sFQz6nG3YJ4IBNDwBHbabJwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCDmWdT5QlIKbr62y3iDbSbs+k3kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1kYTZiNTlhMDE2MjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNkOTg3OWRhLTE0NWYtNGYyMS1h N2MzLWRhNmI1OWEwMTYyNS8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1kYTZiNTlh MDE2MjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqkgwDgQCAAIwCAMGACYC+aIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC2rjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh4sj59HviKvevTzLcRr9d4uPD OdPqFvbXDwDCCkyOat8aOyjegbMlTqdL9jaZwtU07yvarvNArLaxGAZpyBEGOAd9 7v5aaaFaje2rPE2kq76AA5hbh4pNQfGLZaoUIYayc/uLBwm6UEW3O7x4NPCOl8pw UTvumMIA6GCeViiXjCvd3V9pu2Hp5Cm7yn4MEodPg++TAKyyFiyFuo4QIjolPQPO VEMsTIagXmV9Vt/X9NiQ5AOZNtjwQPudHb5zb3GsLheYZ147K3fCRvsFsr4XFVP2 tg/JeEAw5rHtbQyBWQQvc3YWLXXO+O/xQAfFq9kNV4fbDgsxO9pieMb1G7M7 -----END CERTIFICATE-----Generated at Fri May 9 20:30:51 2025 by rpki-client