$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245.cer File: 461640c3-4830-4680-b242-767100bf2245.cer (raw, json) Hash identifier: gGfa5nlK8yQzmLMhvyvwiUtscfpvnkRuWn0ID5Iw0gc= Subject key identifier: 1A:80:FB:FD:2F:17:A7:C1:7C:D0:B6:ED:EC:E2:3C:BB:7D:05:47:B5 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849E9180E2956175601282C2640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 May 2025 00:45:38 +0000 Certificate not after: Mon 23 Aug 2027 00:45:38 +0000 Subordinate resources: AS: 62807 IP: 128.254.168.0/22 IP: 192.84.255.0/24 IP: 198.54.182.0/24 IP: 2602:80d::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:18:0e:29:56:17:56:01:28:2c:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 20 00:45:38 2025 GMT Not After : Aug 23 00:45:38 2027 GMT Subject: CN=461640c3-4830-4680-b242-767100bf2245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:3c:a2:4f:c4:74:d9:8b:c7:3d:eb:52:90: fd:f5:cd:4d:38:93:2c:39:24:14:90:df:5f:fd:17: fe:0a:b5:c0:8b:ea:fe:64:74:bf:7f:00:81:a4:77: 42:a3:2c:6b:5b:b1:14:8d:f1:57:28:f5:2b:35:27: c8:69:65:e5:3d:73:1b:1d:95:5e:dc:92:f7:65:5a: f6:a5:d2:53:ba:9f:1a:0f:5c:26:f7:85:20:30:47: 46:77:d7:8c:03:f5:60:b5:88:d8:49:b3:de:a0:a4: 37:f1:62:c2:2f:52:9d:bf:6a:63:fe:03:87:15:aa: 05:5f:4c:35:7c:ab:f6:2b:f7:c2:87:1e:23:52:65: 57:ab:03:5a:29:28:78:15:c8:15:03:eb:1a:e6:b0: 44:b6:16:27:21:97:e1:30:50:4f:1b:99:7a:a4:32: 53:5e:2d:b2:3e:cc:2b:70:f9:50:72:54:9c:94:38: 39:a0:22:91:86:87:6d:b0:3f:a9:1f:68:1f:2a:c3: d9:d1:a8:4e:28:db:21:4c:7f:14:ae:a0:db:f2:fd: d7:ef:ac:33:83:97:27:b4:22:11:92:a9:3a:ed:9e: 5f:35:72:a9:25:62:f4:59:4a:3d:3e:e5:8a:1c:ff: 30:03:9a:bc:5c:e0:3f:23:40:6f:0c:63:2a:67:d4: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:80:FB:FD:2F:17:A7:C1:7C:D0:B6:ED:EC:E2:3C:BB:7D:05:47:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/461640c3-4830-4680-b242-767100bf2245/461640c3-4830-4680-b242-767100bf2245.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.168.0/22 192.84.255.0/24 198.54.182.0/24 IPv6: 2602:80d::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62807 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:44:3f:0c:8a:9b:69:0f:5c:cf:34:d9:30:ef:f1:97:2c:f0: 99:ce:a2:f9:d1:de:b8:ac:dd:a1:7e:ea:2a:9f:76:e4:7f:6d: eb:89:72:66:b8:06:b2:50:f5:71:a2:4f:ae:60:b0:13:b5:68: c1:e9:24:75:ab:74:48:a4:c8:ad:cf:ee:cf:cd:64:b2:d4:71: b4:17:ca:9a:96:de:c3:75:90:d2:b7:42:28:26:9a:2c:4a:2e: bc:22:dc:52:4f:4b:32:8c:0f:1a:cc:c0:99:14:b8:c3:f3:e4: 28:6a:06:2b:35:f1:60:33:1e:ae:a6:f8:67:b3:ae:df:7a:5e: 2a:59:ab:8c:e4:08:b4:bb:05:8f:90:f6:43:71:17:be:88:ef: 29:9e:86:b5:5b:8d:f3:ab:d6:f1:9b:db:83:f2:e2:0d:6c:32: df:ae:71:84:58:7b:81:29:ad:33:e9:b7:cb:16:c0:13:44:d9: 07:15:17:f7:c6:86:7f:c9:89:55:a2:6e:08:4d:e3:69:77:70: 43:fc:f2:d4:1e:37:34:c3:a0:62:dd:0b:3a:9f:a6:c9:b9:b0: 20:ed:ba:db:24:ef:02:b1:0a:5e:cc:32:db:a5:df:d2:3f:8c: a0:fe:4d:ff:b1:2c:a3:d9:ec:f5:51:16:ab:15:36:9e:68:d2: 1c:62:65:e4 -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWEnpGA4pVhdWASgsJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUyMDAwNDUzOFoXDTI3MDgyMzAwNDUzOFowLzEtMCsGA1UEAxMk NDYxNjQwYzMtNDgzMC00NjgwLWIyNDItNzY3MTAwYmYyMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumg8ok/EdNmLxz3rUpD99c1NOJMsOSQUkN9f /Rf+CrXAi+r+ZHS/fwCBpHdCoyxrW7EUjfFXKPUrNSfIaWXlPXMbHZVe3JL3ZVr2 pdJTup8aD1wm94UgMEdGd9eMA/VgtYjYSbPeoKQ38WLCL1Kdv2pj/gOHFaoFX0w1 fKv2K/fChx4jUmVXqwNaKSh4FcgVA+sa5rBEthYnIZfhMFBPG5l6pDJTXi2yPswr cPlQclSclDg5oCKRhodtsD+pH2gfKsPZ0ahOKNshTH8UrqDb8v3X76wzg5cntCIR kqk67Z5fNXKpJWL0WUo9PuWKHP8wA5q8XOA/I0BvDGMqZ9TOfQIDAQABo4IEODCC BDQwHQYDVR0OBBYEFBqA+/0vF6fBfNC27eziPLt9BUe1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 NjE2NDBjMy00ODMwLTQ2ODAtYjI0Mi03NjcxMDBiZjIyNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQ2MTY0MGMzLTQ4MzAtNDY4MC1i MjQyLTc2NzEwMGJmMjI0NS80NjE2NDBjMy00ODMwLTQ2ODAtYjI0Mi03NjcxMDBi ZjIyNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBAKA/qgDBADAVP8DBADGNrYwDwQCAAIwCQMHBCYC CA0AADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA9VcwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa0Q/DIqb aQ9czzTZMO/xlyzwmc6i+dHeuKzdoX7qKp925H9t64lyZrgGslD1caJPrmCwE7Vo wekkdat0SKTIrc/uz81kstRxtBfKmpbew3WQ0rdCKCaaLEouvCLcUk9LMowPGszA mRS4w/PkKGoGKzXxYDMerqb4Z7Ou33peKlmrjOQItLsFj5D2Q3EXvojvKZ6GtVuN 86vW8Zvbg/LiDWwy365xhFh7gSmtM+m3yxbAE0TZBxUX98aGf8mJVaJuCE3jaXdw Q/zy1B43NMOgYt0LOp+mybmwIO262yTvArEKXswy26Xf0j+MoP5N/7Eso9ns9VEW qxU2nmjSHGJl5A== -----END CERTIFICATE-----Generated at Wed Jul 2 21:51:21 2025 by rpki-client