$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef.cer File: 5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef.cer (raw, json) Hash identifier: lm15UqwrnqyuwbSzikNLPvd5PyHwwyc32eYHwdiqlw8= Subject key identifier: EC:9C:7B:91:36:F2:C7:2C:F9:90:FF:FB:50:43:0E:7F:8A:8C:7F:BE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A4538A11FB1BD61CCEBB59840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Jun 2025 00:45:36 +0000 Certificate not after: Sat 25 Sep 2027 00:45:36 +0000 Subordinate resources: IP: 74.80.234.0/24 IP: 2602:fad0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:38:a1:1f:b1:bd:61:cc:eb:b5:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 22 00:45:36 2025 GMT Not After : Sep 25 00:45:36 2027 GMT Subject: CN=5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:b0:a8:61:c8:b8:b3:73:7d:c5:01:5a:17: 78:c8:5a:ea:9d:47:9b:5f:85:46:67:39:c9:0c:62: 90:51:56:6b:59:1d:ca:ea:9c:f5:6d:58:d4:a5:b3: 21:a4:06:39:98:6e:d5:a5:e0:60:1e:58:c3:c0:4a: b4:83:cc:cc:fe:84:15:c6:21:e8:f7:7b:dd:62:99: 49:69:aa:0b:37:6a:5d:36:23:62:58:b1:04:f8:f1: e3:1f:74:41:52:e0:9d:fb:20:13:e6:d3:66:39:1c: 2e:56:7b:c7:c4:8f:1b:5a:44:24:c6:99:20:eb:da: 81:b4:b0:e3:15:55:05:8d:07:38:a9:3c:e5:85:0e: 04:bd:a8:0f:9c:4c:c3:53:24:d9:b8:25:d6:c8:a4: 2d:eb:2e:6c:95:57:41:7a:c3:61:c9:11:91:42:e3: e6:1c:40:23:ce:e4:8a:18:a4:21:d6:4b:46:0c:17: 77:5d:59:ca:05:df:50:00:44:a1:76:56:e3:2f:bb: 57:e2:49:26:7d:85:92:68:c8:2e:c9:db:f5:ff:e3: 9c:aa:f8:23:75:9c:3e:07:cf:8e:fe:07:e7:b5:e2: d3:c5:ef:a7:49:92:c6:aa:e4:b4:b8:b9:94:cf:78: 9c:22:88:e1:9e:a4:de:6b:af:22:4c:ee:75:f1:20: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9C:7B:91:36:F2:C7:2C:F9:90:FF:FB:50:43:0E:7F:8A:8C:7F:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 74.80.234.0/24 IPv6: 2602:fad0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e3:b4:aa:75:bd:12:3e:93:27:2d:68:ff:15:d3:99:5e:ca: 37:ef:c9:42:94:97:06:ea:82:07:13:90:82:aa:b6:a4:b8:da: 0a:e3:75:90:c4:b5:23:d9:25:b6:0e:97:30:94:87:df:6c:b0: 5c:5a:7c:5c:78:4f:b6:cb:3e:d1:ce:57:f2:93:bb:4b:31:44: 4a:89:d7:ae:88:b2:b4:21:8f:70:0c:f0:83:10:d7:6e:9b:6a: 35:61:ac:8b:49:e9:e6:e7:22:dc:9c:1e:69:cf:ee:d8:e0:38: 6f:c7:3a:2c:f7:a7:7f:b3:a1:15:f6:63:79:5b:20:f0:a6:79: 10:05:f7:e1:24:ba:e9:9e:44:f9:e6:dc:43:ff:a8:1d:e0:8b: 64:3e:f8:05:19:f9:e7:97:fc:22:ba:29:d5:1b:78:be:91:f3: be:c9:cf:f0:fc:a0:cf:42:95:4a:a5:9b:0e:96:ea:50:38:27: 85:c3:6e:5d:5a:c3:b1:cb:e2:89:16:35:e3:9c:1c:b4:10:cc: 13:a3:19:7c:48:f8:b9:15:49:6a:d0:ae:9f:cd:76:88:88:0d: 61:a3:32:23:42:af:81:9e:04:6d:fe:ce:d0:54:12:a1:61:c6: 26:fb:c0:d9:38:87:4e:f7:06:a3:a1:36:e9:26:74:34:07:3a: ea:eb:51:1c -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEpFOKEfsb1hzOu1mEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyMjAwNDUzNloXDTI3MDkyNTAwNDUzNlowLzEtMCsGA1UEAxMk NTc2NWRkNTUtZmE4My00ZGZhLThlOWMtYWUxYjA5NThkNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaywqGHIuLNzfcUBWhd4yFrqnUebX4VGZznJ DGKQUVZrWR3K6pz1bVjUpbMhpAY5mG7VpeBgHljDwEq0g8zM/oQVxiHo93vdYplJ aaoLN2pdNiNiWLEE+PHjH3RBUuCd+yAT5tNmORwuVnvHxI8bWkQkxpkg69qBtLDj FVUFjQc4qTzlhQ4EvagPnEzDUyTZuCXWyKQt6y5slVdBesNhyRGRQuPmHEAjzuSK GKQh1ktGDBd3XVnKBd9QAEShdlbjL7tX4kkmfYWSaMguydv1/+OcqvgjdZw+B8+O /gfnteLTxe+nSZLGquS0uLmUz3icIojhnqTea68iTO518SBn5wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOyce5E28scs+ZD/+1BDDn+KjH++MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 NzY1ZGQ1NS1mYTgzLTRkZmEtOGU5Yy1hZTFiMDk1OGQ0ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzU3NjVkZDU1LWZhODMtNGRmYS04 ZTljLWFlMWIwOTU4ZDRlZi81NzY1ZGQ1NS1mYTgzLTRkZmEtOGU5Yy1hZTFiMDk1 OGQ0ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABKUOowDgQCAAIwCAMGACYC+tAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AF7jtKp1vRI+kyctaP8V05leyjfvyUKUlwbqggcTkIKqtqS42grjdZDEtSPZJbYO lzCUh99ssFxafFx4T7bLPtHOV/KTu0sxREqJ166IsrQhj3AM8IMQ126bajVhrItJ 6ebnItycHmnP7tjgOG/HOiz3p3+zoRX2Y3lbIPCmeRAF9+EkuumeRPnm3EP/qB3g i2Q++AUZ+eeX/CK6KdUbeL6R877Jz/D8oM9ClUqlmw6W6lA4J4XDbl1aw7HL4okW NeOcHLQQzBOjGXxI+LkVSWrQrp/NdoiIDWGjMiNCr4GeBG3+ztBUEqFhxib7wNk4 h073BqOhNukmdDQHOurrURw= -----END CERTIFICATE-----Generated at Sun Jun 29 14:29:29 2025 by rpki-client