$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc.cer File: 50de7142-1147-4734-8a6c-9f603bd048cc.cer (raw, json) Hash identifier: Dw1g4Fq6ikwOIH36GKQWgO5/iCfZtih1GTZ1BRfGu2M= Subject key identifier: D2:77:26:5D:18:58:4B:D9:CF:D4:6A:91:6B:A0:9E:97:D0:2D:CC:6C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849D427E39A574C86841926E590 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/50de7142-1147-4734-8a6c-9f603bd048cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 May 2025 12:45:34 +0000 Certificate not after: Sun 15 Aug 2027 12:45:34 +0000 Subordinate resources: AS: 40138 IP: 2620:95:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:27:e3:9a:57:4c:86:84:19:26:e5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 12 12:45:34 2025 GMT Not After : Aug 15 12:45:34 2027 GMT Subject: CN=50de7142-1147-4734-8a6c-9f603bd048cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:5b:d1:94:27:e1:f7:1b:b6:e7:60:c2:67: fc:56:8c:83:fe:0a:c8:ac:19:c9:7d:b1:14:aa:c0: 80:7e:dc:ab:ff:aa:de:8f:ae:79:b8:d9:0e:1b:d4: e2:77:8d:9f:27:f3:56:33:5d:25:9d:b3:91:70:f6: 69:15:be:34:5d:73:fb:c5:5b:e4:58:8b:f6:b1:27: 56:d6:59:46:2f:7d:52:35:f2:01:b8:78:06:52:84: cd:91:7e:48:94:f0:ea:92:88:e4:3c:f1:f5:08:6f: c9:47:29:58:09:d0:b2:0f:51:cc:66:5e:8e:d5:a0: 9d:39:43:5e:0e:50:aa:dd:ef:be:30:d5:17:e3:3c: 07:11:d9:9d:b2:6f:a6:11:d5:18:1f:d6:7c:0b:6d: 88:61:cc:33:f8:6c:b7:4c:0a:04:80:5f:cc:b1:a5: 3c:8f:f7:ec:a3:6b:2f:43:17:d7:ae:05:c9:c7:c2: 3f:9d:8b:48:09:54:05:25:87:18:9a:a6:fb:d0:6a: 90:fe:b2:5b:a6:28:55:51:22:d3:b0:19:f6:a9:14: 31:a9:d4:28:c5:3e:6d:c9:fc:c8:c6:73:d8:a9:3d: 46:82:bb:5a:71:eb:8e:a0:9c:a0:a3:78:f5:56:da: a5:8b:ac:48:21:99:31:ff:b2:12:6a:f4:43:b6:e1: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:77:26:5D:18:58:4B:D9:CF:D4:6A:91:6B:A0:9E:97:D0:2D:CC:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/50de7142-1147-4734-8a6c-9f603bd048cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2620:95:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40138 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f0:90:1f:71:b0:f6:53:65:98:3d:21:34:81:b7:f3:fe:7f: 99:2f:1a:83:b3:01:26:0c:74:35:a0:5d:f8:c1:c3:35:8b:e2: b3:e9:d7:61:a4:4b:00:f1:9a:72:65:3b:d2:20:89:54:2f:20: 47:a4:a9:7b:c9:80:a7:18:8f:88:44:88:26:df:51:a6:1f:27: 8f:a0:cd:09:53:9b:77:46:8e:ac:cf:d6:2b:61:36:7f:bf:72: a9:ed:2d:27:60:b8:c2:85:6f:17:54:b6:ea:7a:74:56:cc:11: b8:74:89:d6:39:c4:bf:44:94:6e:d3:b3:be:38:0d:43:28:32: 00:ff:07:25:69:2b:a0:12:fa:31:b9:e6:cf:4c:7d:b9:e4:13: 32:2b:24:ff:6d:a5:b0:9a:2e:f0:fa:00:63:5e:bb:b1:09:70: 79:36:a6:a7:6c:54:20:a5:a1:08:80:90:bf:b4:f6:71:69:68: ab:45:86:fd:5e:20:9a:13:1d:dd:55:b3:06:a6:a8:d3:a7:66: 03:95:bb:bd:da:12:84:ad:07:83:96:1b:76:5f:18:31:cc:77: da:78:df:77:10:b7:ff:9e:2b:58:24:d9:14:5c:0f:b9:16:ca: a4:f1:90:9b:88:17:43:46:a6:c1:88:84:85:62:6d:8c:95:6b: f9:a6:67:d4 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEnUJ+OaV0yGhBkm5ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUxMjEyNDUzNFoXDTI3MDgxNTEyNDUzNFowLzEtMCsGA1UEAxMk NTBkZTcxNDItMTE0Ny00NzM0LThhNmMtOWY2MDNiZDA0OGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Vb0ZQn4fcbtudgwmf8VoyD/grIrBnJfbEU qsCAftyr/6rej655uNkOG9Tid42fJ/NWM10lnbORcPZpFb40XXP7xVvkWIv2sSdW 1llGL31SNfIBuHgGUoTNkX5IlPDqkojkPPH1CG/JRylYCdCyD1HMZl6O1aCdOUNe DlCq3e++MNUX4zwHEdmdsm+mEdUYH9Z8C22IYcwz+Gy3TAoEgF/MsaU8j/fso2sv QxfXrgXJx8I/nYtICVQFJYcYmqb70GqQ/rJbpihVUSLTsBn2qRQxqdQoxT5tyfzI xnPYqT1GgrtaceuOoJygo3j1Vtqli6xIIZkx/7ISavRDtuGlEQIDAQABo4IEHjCC BBowHQYDVR0OBBYEFNJ3Jl0YWEvZz9RqkWugnpfQLcxsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 MGRlNzE0Mi0xMTQ3LTQ3MzQtOGE2Yy05ZjYwM2JkMDQ4Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzUwZGU3MTQyLTExNDctNDczNC04 YTZjLTlmNjAzYmQwNDhjYy81MGRlNzE0Mi0xMTQ3LTQ3MzQtOGE2Yy05ZjYwM2Jk MDQ4Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmIACVQAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAJzKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAF/wkB9xsPZTZZg9ITSBt/P+f5kvGoOzASYMdDWgXfjB wzWL4rPp12GkSwDxmnJlO9IgiVQvIEekqXvJgKcYj4hEiCbfUaYfJ4+gzQlTm3dG jqzP1ithNn+/cqntLSdguMKFbxdUtup6dFbMEbh0idY5xL9ElG7Ts744DUMoMgD/ ByVpK6AS+jG55s9MfbnkEzIrJP9tpbCaLvD6AGNeu7EJcHk2pqdsVCCloQiAkL+0 9nFpaKtFhv1eIJoTHd1VswamqNOnZgOVu73aEoStB4OWG3ZfGDHMd9p433cQt/+e K1gk2RRcD7kWyqTxkJuIF0NGpsGIhIVibYyVa/mmZ9Q= -----END CERTIFICATE-----Generated at Mon Jun 30 16:06:53 2025 by rpki-client