$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer File: 61078829-6930-46b0-9ac8-91898d36b056.cer (raw, json) Hash identifier: UIu5fDOIZrM524BNlxFY8zJlsaHbrsm4OSt67eDID1g= Subject key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A20EDB99DAC9CA9778799C080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Jun 2025 00:45:37 +0000 Certificate not after: Sun 12 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 32272 AS: 33548 IP: 23.227.96.0/19 IP: 64.203.112.0/20 IP: 66.235.116.0/22 IP: 67.204.32.0/19 IP: 104.200.32.0/20 IP: 104.247.128.0 -- 104.247.151.255 IP: 104.254.100.0/22 IP: 162.251.200.0/22 IP: 195.155.0.0/18 IP: 198.210.32.0/19 IP: 205.157.144.0/20 IP: 206.162.224.0/20 IP: 207.177.128.0/18 IP: 209.54.32.0/20 IP: 2606:6e80::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:20:ed:b9:9d:ac:9c:a9:77:87:99:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 9 00:45:37 2025 GMT Not After : Sep 12 00:45:37 2027 GMT Subject: CN=61078829-6930-46b0-9ac8-91898d36b056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d5:2b:be:2d:c9:6f:1e:d6:0d:46:34:d1:ef: 93:96:4e:fc:4f:db:a4:36:da:7e:a1:11:f9:cd:4f: 82:29:b8:f2:89:29:bc:2e:d1:4d:96:3b:b2:ea:be: d9:f3:0c:4b:ce:cf:8e:4d:c2:d4:df:4c:93:21:cd: 1a:98:e7:46:e1:98:93:12:9a:9f:61:a9:af:4c:1c: d9:96:0c:99:40:ae:7e:da:72:6a:32:8c:a4:dc:d3: 11:1c:5b:39:3a:74:c1:2c:7a:4a:5c:c8:02:c6:26: 29:c8:97:2f:8a:e5:3c:e5:4f:c7:7a:56:3d:72:d9: da:ed:b3:4c:e6:d1:af:85:99:ad:41:0f:11:c6:45: 78:1e:54:fc:db:8a:16:62:b3:81:dd:07:24:75:c1: d3:5a:73:11:a3:c3:a9:a5:dd:97:a4:d4:4c:d3:95: eb:5d:20:74:d9:75:31:24:23:4d:ac:27:21:6b:80: 15:59:61:4b:ef:f1:42:eb:a8:01:55:c9:f6:30:2b: c6:4e:e1:df:c9:cb:e7:a3:cc:81:61:d9:b6:a9:b9: fd:8b:b8:15:71:00:c9:cd:cc:b4:fb:b2:43:a7:15: b1:f2:8e:2a:73:21:9b:ca:b6:f2:3a:8b:0a:80:f2: 27:dd:50:3d:52:6a:a8:1f:94:f4:68:82:79:b1:96: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.96.0/19 64.203.112.0/20 66.235.116.0/22 67.204.32.0/19 104.200.32.0/20 104.247.128.0-104.247.151.255 104.254.100.0/22 162.251.200.0/22 195.155.0.0/18 198.210.32.0/19 205.157.144.0/20 206.162.224.0/20 207.177.128.0/18 209.54.32.0/20 IPv6: 2606:6e80::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32272 33548 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c3:90:73:41:1b:5a:e6:c9:55:5e:23:c0:07:e0:76:1c:c1: 77:c4:d0:53:c2:7b:98:5c:4f:40:b0:a9:b9:04:31:ee:a9:bb: 09:13:ba:80:41:25:dc:9d:76:10:a3:ef:a8:ac:28:cf:ef:ee: ad:8d:8f:4f:60:c3:5f:1b:25:ae:15:93:77:cf:7d:5c:71:8e: b1:db:1d:02:89:33:3a:19:2a:e5:14:cc:75:da:55:47:95:75: 9a:68:b6:66:a6:f4:99:7c:8e:58:c8:f3:1c:51:4d:25:cc:0a: 2a:3f:2b:2f:fd:3a:64:84:56:f1:b0:41:ec:95:58:91:3e:35: 03:0b:b9:b0:d2:aa:05:ed:c4:c9:6b:52:2e:7f:3b:02:84:39: 2d:71:e8:84:4e:2c:d3:c1:66:53:8d:e7:ee:cd:a8:99:7e:49: b9:0d:18:ba:f5:8f:1a:bc:20:08:62:3b:2e:d7:de:06:ef:88: a4:c2:17:61:0f:31:3a:1e:ff:d7:c3:1e:3e:8a:19:e6:bf:a8: 1c:ea:f5:0e:b6:6f:75:a0:e5:d2:f6:f8:fd:79:71:fd:62:09: 43:22:7d:ad:c7:c1:4f:7e:31:fb:f4:ef:54:0c:bb:c7:09:7e: 7f:61:3c:b0:7a:35:df:4d:62:2f:b4:1e:e4:6f:28:cf:36:c1: ec:c8:2d:5e -----BEGIN CERTIFICATE----- MIIHczCCBlugAwIBAgIUAQ0Mn0MoWEog7bmdrJypd4eZwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwOTAwNDUzN1oXDTI3MDkxMjAwNDUzN1owLzEtMCsGA1UEAxMk NjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZiMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNUrvi3Jbx7WDUY00e+Tlk78T9ukNtp+oRH5 zU+CKbjyiSm8LtFNljuy6r7Z8wxLzs+OTcLU30yTIc0amOdG4ZiTEpqfYamvTBzZ lgyZQK5+2nJqMoyk3NMRHFs5OnTBLHpKXMgCxiYpyJcviuU85U/HelY9ctna7bNM 5tGvhZmtQQ8RxkV4HlT824oWYrOB3QckdcHTWnMRo8Oppd2XpNRM05XrXSB02XUx JCNNrCcha4AVWWFL7/FC66gBVcn2MCvGTuHfycvno8yBYdm2qbn9i7gVcQDJzcy0 +7JDpxWx8o4qcyGbyrbyOosKgPIn3VA9UmqoH5T0aIJ5sZYsqwIDAQABo4IEhTCC BIEwHQYDVR0OBBYEFCBF1donu0uJTdSCuWagC8C2tlSgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzYxMDc4ODI5LTY5MzAtNDZiMC05 YWM4LTkxODk4ZDM2YjA1Ni82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQz NmIwNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwgYQGCCsGAQUF BwEHAQH/BHUwczBiBAIAATBcAwQFF+NgAwQEQMtwAwQCQut0AwQFQ8wgAwQEaMgg MAwDBAdo94ADBANo95ADBAJo/mQDBAKi+8gDBAbDmwADBAXG0iADBATNnZADBATO ouADBAbPsYADBATRNiAwDQQCAAIwBwMFBCYGboAwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICfhACAwCDDDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAww5BzQRta5slVXiPAB+B2HMF3xNBTwnuY XE9AsKm5BDHuqbsJE7qAQSXcnXYQo++orCjP7+6tjY9PYMNfGyWuFZN3z31ccY6x 2x0CiTM6GSrlFMx12lVHlXWaaLZmpvSZfI5YyPMcUU0lzAoqPysv/TpkhFbxsEHs lViRPjUDC7mw0qoF7cTJa1IufzsChDktceiETizTwWZTjefuzaiZfkm5DRi69Y8a vCAIYjsu194G74ikwhdhDzE6Hv/Xwx4+ihnmv6gc6vUOtm91oOXS9vj9eXH9YglD In2tx8FPfjH79O9UDLvHCX5/YTywejXfTWIvtB7kbyjPNsHsyC1e -----END CERTIFICATE-----Generated at Tue Jul 1 15:31:25 2025 by rpki-client