$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer File: 70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer (raw, json) Hash identifier: PYdtBfVqTWxYuVsZ+eE16RSomUWeMKsXwxi0ZgoZA/M= Subject key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A4538A13818C728765B573140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Jun 2025 00:45:36 +0000 Certificate not after: Sat 25 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 395185 IP: 23.137.184.0/24 IP: 2620:ac:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:38:a1:38:18:c7:28:76:5b:57:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 22 00:45:36 2025 GMT Not After : Sep 25 00:45:36 2027 GMT Subject: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:3c:3f:ad:fe:dc:42:c4:ac:02:5c:45:86: 5e:30:b3:6c:ed:31:f7:96:f8:3a:bd:16:e2:bf:06: 7a:78:e5:87:14:38:f2:5b:eb:15:ef:83:6d:f7:82: 2c:03:36:53:53:e7:99:33:a8:9e:76:52:b1:1c:e3: e8:e6:54:3b:2f:95:70:b2:d0:ff:1e:a5:be:0b:6c: 02:cc:1b:32:5a:26:4f:7d:23:c5:66:4d:cc:e9:8a: 77:8f:80:f8:f7:5a:a9:f1:99:dc:8c:e5:f4:57:26: d5:ea:0f:a9:c7:ba:d0:96:32:8c:fd:b8:61:0f:8a: 76:62:22:9c:12:61:40:6d:0e:37:81:a9:21:e9:db: fb:51:d5:0e:bd:ad:f0:73:50:1f:65:a2:26:75:81: 06:bc:c7:03:f2:08:5c:f7:e2:14:cc:08:36:c1:c2: 98:86:3e:69:7d:95:68:be:c0:e3:12:cc:4a:13:4c: 66:b0:c8:84:e3:8f:e9:39:58:59:66:19:4f:1d:af: 4d:09:dd:39:c4:c8:f0:7b:97:c6:a0:01:d6:32:b0: aa:17:fc:b3:b1:74:85:c4:4e:81:21:2a:61:bf:b4: 9f:38:2d:bb:30:36:3c:e8:31:ac:68:ac:32:a4:14: 90:11:fe:f9:5f:6d:ca:8b:e5:dd:3a:77:c2:39:2a: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.137.184.0/24 IPv6: 2620:ac:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395185 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ec:36:be:47:f3:8c:a0:e9:b9:be:cc:a9:9e:32:3f:ff:cb: 77:ee:45:9a:2c:a0:40:9c:f6:c5:1b:c2:db:cd:5c:14:72:a1: a5:76:6d:d5:12:c4:76:40:e3:97:aa:4e:ee:fc:c7:91:55:90: d6:e7:02:8b:99:38:0f:91:14:39:88:60:2e:bf:c4:b5:36:98: b3:ab:92:30:1b:98:f4:1c:3a:8c:b1:0c:a0:3f:8e:23:68:94: 9a:97:79:45:69:02:e0:79:66:c8:d3:e2:d0:7e:02:d3:82:80: 77:4f:1e:c5:50:ad:8a:f5:4a:0c:f7:ea:58:33:c1:b1:9a:0a: 37:c9:e6:41:db:91:7a:96:df:08:fc:c3:12:12:24:e3:ab:41: f9:bd:16:f2:e2:22:fb:69:14:fb:3f:1f:89:44:13:32:2e:dd: f3:96:c3:5a:85:46:20:d6:ee:77:47:66:95:08:23:49:10:9a: 96:bb:9f:d1:6a:1a:36:9c:5f:5c:1c:ca:f8:e5:5c:b8:0c:be: fa:51:e7:bc:6a:11:bb:66:2f:56:13:9f:53:23:c6:58:15:9a: 12:73:d1:79:8b:97:91:18:c4:75:47:98:be:10:e6:43:73:7d: b0:f1:3f:c9:6e:01:e2:e7:e7:6a:cd:f9:e8:12:72:14:93:3b: cf:81:34:2b -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEpFOKE4GMcodltXMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyMjAwNDUzNloXDTI3MDkyNTAwNDUzNlowLzEtMCsGA1UEAxMk NzBjMWJmNjgtOWRjOS00ZDBmLWExN2ItM2QwZjg0NWJiZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6U8P63+3ELErAJcRYZeMLNs7TH3lvg6vRbi vwZ6eOWHFDjyW+sV74Nt94IsAzZTU+eZM6iedlKxHOPo5lQ7L5VwstD/HqW+C2wC zBsyWiZPfSPFZk3M6Yp3j4D491qp8ZncjOX0VybV6g+px7rQljKM/bhhD4p2YiKc EmFAbQ43gakh6dv7UdUOva3wc1AfZaImdYEGvMcD8ghc9+IUzAg2wcKYhj5pfZVo vsDjEsxKE0xmsMiE44/pOVhZZhlPHa9NCd05xMjwe5fGoAHWMrCqF/yzsXSFxE6B ISphv7SfOC27MDY86DGsaKwypBSQEf75X23Ki+XdOnfCOSqonQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFDO8BmBVfvkrGv6fAuLm9uitJjHgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1YmJkMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzcwYzFiZjY4LTlkYzktNGQwZi1h MTdiLTNkMGY4NDViYmQwZi83MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1 YmJkMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXibgwDwQCAAIwCQMHACYgAKygADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGB7EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMew2vkfzjKDpub7MqZ4yP//L d+5FmiygQJz2xRvC281cFHKhpXZt1RLEdkDjl6pO7vzHkVWQ1ucCi5k4D5EUOYhg Lr/EtTaYs6uSMBuY9Bw6jLEMoD+OI2iUmpd5RWkC4HlmyNPi0H4C04KAd08exVCt ivVKDPfqWDPBsZoKN8nmQduRepbfCPzDEhIk46tB+b0W8uIi+2kU+z8fiUQTMi7d 85bDWoVGINbud0dmlQgjSRCalruf0WoaNpxfXBzK+OVcuAy++lHnvGoRu2YvVhOf UyPGWBWaEnPReYuXkRjEdUeYvhDmQ3N9sPE/yW4B4ufnas356BJyFJM7z4E0Kw== -----END CERTIFICATE-----Generated at Sun Jun 29 13:28:54 2025 by rpki-client