$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer File: 3e08da12-c2b8-4581-b1af-e8322645d15e.cer (raw, json) Hash identifier: 49bhCwFjrQCKCDHFw/wYDV1fjCxCHgkrgsJLz8fc6S4= Subject key identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A4968A1F9B38526BAEF8D1E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Jun 2025 12:45:36 +0000 Certificate not after: Sun 26 Sep 2027 12:45:36 +0000 Subordinate resources: AS: 398448 IP: 208.93.120.0/22 IP: 2607:a340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:68:a1:f9:b3:85:26:ba:ef:8d:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 23 12:45:36 2025 GMT Not After : Sep 26 12:45:36 2027 GMT Subject: CN=3e08da12-c2b8-4581-b1af-e8322645d15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:5f:62:19:3e:c2:26:a6:f2:33:95:97:b7: 72:96:3f:52:d4:90:de:59:13:38:4b:1a:b6:ae:60: 30:25:d9:4e:54:8e:f0:d1:77:32:af:8e:72:2d:83: e2:af:78:d9:9b:96:0b:73:35:00:08:0f:66:c0:00: 17:01:22:6d:f3:d7:dc:6e:f8:bd:6f:8b:e6:94:df: d0:ca:1f:44:24:c4:83:ff:44:80:6e:81:7f:96:93: b6:fc:da:29:42:e3:c4:bd:c2:b3:bf:bf:c9:8b:7f: d1:62:c7:41:47:76:27:29:42:7c:f9:95:40:43:32: e4:82:93:d1:79:2d:2a:62:9b:21:13:d5:12:77:38: 1c:93:e1:39:ff:97:cc:3b:94:16:5d:cd:fd:07:54: 17:57:b4:40:87:46:4b:7c:7f:9e:fa:77:84:4c:16: 2f:bb:16:1c:db:55:9a:b7:89:23:b7:5e:36:62:22: 22:95:01:9b:ac:d3:3a:a7:85:af:4b:36:81:8d:f0: 25:25:d3:64:3f:a1:55:86:1d:17:21:94:bb:7d:60: 69:49:75:06:b7:52:68:cb:b8:c0:87:37:48:1c:01: a4:03:d7:3e:3c:5a:d2:39:39:32:6c:5b:83:61:3c: fc:e8:e5:cc:42:c4:54:73:89:03:a0:cf:15:8f:25: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 208.93.120.0/22 IPv6: 2607:a340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398448 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:80:a4:cb:e0:74:af:7a:04:71:6d:c2:5c:ea:f6:c5:36:fb: c8:7e:61:22:0c:06:9f:9a:70:19:62:8d:6a:27:78:d7:51:58: 69:19:7d:e0:31:8d:e9:08:a1:7b:22:e6:1f:a4:8d:77:c8:5d: 98:0f:e1:8f:36:fe:1e:ce:88:6c:35:e4:50:ee:06:d8:9e:ee: 5d:24:03:a9:ec:f5:17:fb:2a:b5:37:73:e4:d0:28:47:b4:b5: 84:de:1b:c8:a4:7e:d3:19:67:c2:82:75:65:81:89:c9:17:1b: 3c:96:21:1b:6c:5e:40:df:00:e2:00:ad:dd:c7:4e:bd:65:90: 0d:3d:8f:0a:e7:2c:af:a9:cb:e6:6e:ff:8e:a7:22:cc:e9:69: 5c:32:65:e0:78:81:89:4f:1d:9b:34:cb:34:83:74:0e:4f:89: 80:95:b9:18:43:94:c8:33:45:83:12:a9:a3:e5:75:c6:a5:51: 80:bb:f5:47:39:5e:33:da:80:6b:fe:26:15:e3:51:b4:0f:38: a2:43:b0:14:d1:3e:3d:d5:dc:86:78:4e:5b:b4:20:10:01:bd: 32:8d:de:cf:27:c7:ae:c1:9e:36:ef:4e:f9:8f:f6:fa:00:ff: d9:b7:77:ed:fb:c5:50:16:4b:77:dc:a9:85:f4:1e:ef:99:de: 5d:15:3c:48 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpJaKH5s4Umuu+NHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyMzEyNDUzNloXDTI3MDkyNjEyNDUzNlowLzEtMCsGA1UEAxMk M2UwOGRhMTItYzJiOC00NTgxLWIxYWYtZTgzMjI2NDVkMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuFfYhk+wiam8jOVl7dylj9S1JDeWRM4Sxq2 rmAwJdlOVI7w0Xcyr45yLYPir3jZm5YLczUACA9mwAAXASJt89fcbvi9b4vmlN/Q yh9EJMSD/0SAboF/lpO2/NopQuPEvcKzv7/Ji3/RYsdBR3YnKUJ8+ZVAQzLkgpPR eS0qYpshE9USdzgck+E5/5fMO5QWXc39B1QXV7RAh0ZLfH+e+neETBYvuxYc21Wa t4kjt142YiIilQGbrNM6p4WvSzaBjfAlJdNkP6FVhh0XIZS7fWBpSXUGt1Joy7jA hzdIHAGkA9c+PFrSOTkybFuDYTz86OXMQsRUc4kDoM8VjyXuTwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFI9PK1jaXlcyViv3lzMYMjwXKQ1GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZTA4ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMyMjY0NWQxNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNlMDhkYTEyLWMyYjgtNDU4MS1i MWFmLWU4MzIyNjQ1ZDE1ZS8zZTA4ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMyMjY0 NWQxNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALQXXgwDQQCAAIwBwMFACYHo0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhRwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEaApMvgdK96BHFtwlzq9sU2+8h+ YSIMBp+acBlijWoneNdRWGkZfeAxjekIoXsi5h+kjXfIXZgP4Y82/h7OiGw15FDu Btie7l0kA6ns9Rf7KrU3c+TQKEe0tYTeG8ikftMZZ8KCdWWBickXGzyWIRtsXkDf AOIArd3HTr1lkA09jwrnLK+py+Zu/46nIszpaVwyZeB4gYlPHZs0yzSDdA5PiYCV uRhDlMgzRYMSqaPldcalUYC79Uc5XjPagGv+JhXjUbQPOKJDsBTRPj3V3IZ4Tlu0 IBABvTKN3s8nx67BnjbvTvmP9voA/9m3d+37xVAWS3fcqYX0Hu+Z3l0VPEg= -----END CERTIFICATE-----Generated at Sun Jun 29 20:28:36 2025 by rpki-client