$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363.cer File: 8335f7cc-1a69-4b40-8900-117660939363.cer (raw, json) Hash identifier: sfr1o5QHQozx16NbJ6+7cQ+DU6vx5umvKprQ7/MsinQ= Subject key identifier: 0D:1A:4E:3F:8C:01:64:8C:90:49:62:E4:5F:91:CC:C8:57:4F:65:4A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A268318476180939CE232EF20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Jun 2025 00:45:37 +0000 Certificate not after: Tue 14 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 395865 IP: 64.93.64.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:83:18:47:61:80:93:9c:e2:32:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 11 00:45:37 2025 GMT Not After : Sep 14 00:45:37 2027 GMT Subject: CN=8335f7cc-1a69-4b40-8900-117660939363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:c3:f8:a2:ad:36:5e:83:91:40:4d:f4:ad: 3d:1a:8f:cb:d4:43:38:8b:7b:6b:ac:74:16:b9:e4: bc:82:f0:2a:6e:95:dd:13:92:6c:f0:6b:ee:bd:c5: 3e:0c:4b:aa:d1:fa:ed:5e:df:b9:65:72:4c:cb:71: 8a:0f:81:c9:c9:17:b5:7a:d6:49:5a:a6:04:c1:a0: d2:1e:0b:ab:5e:37:fc:93:bc:6c:0a:a3:c9:69:46: fb:c2:ad:f0:9c:fb:3f:3e:dc:04:ff:38:19:51:9f: d7:25:1d:49:35:88:6b:29:ee:c0:4b:7f:66:82:2f: cd:15:9e:47:1b:9d:9b:bd:c1:16:2d:d5:aa:23:39: d6:e1:61:88:e3:78:54:9a:45:4d:49:f5:46:76:99: 71:1e:ea:6c:fb:d5:6e:88:31:fa:6e:ed:19:4f:89: 9b:9f:e4:66:3c:9c:bb:93:1e:f7:fb:d0:b7:d2:a2: e9:8a:ac:15:67:3c:2b:73:34:fd:84:de:65:62:3f: 54:4a:b3:4f:02:47:6b:22:a1:1d:4b:56:c9:64:50: 65:20:82:64:06:ee:b1:b8:4b:8d:36:88:bc:7b:57: 66:05:da:11:94:4b:2d:7f:a6:ca:b4:59:ee:3f:b2: 27:0a:1d:44:c7:76:c0:66:db:10:15:ac:2f:b5:54: e2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1A:4E:3F:8C:01:64:8C:90:49:62:E4:5F:91:CC:C8:57:4F:65:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8335f7cc-1a69-4b40-8900-117660939363/8335f7cc-1a69-4b40-8900-117660939363.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 64.93.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395865 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f0:a9:8c:6c:90:bd:36:fb:5d:ae:f9:4b:05:91:ca:4b:1c: bc:c2:af:cc:06:90:e2:ac:5e:93:0a:25:3d:2c:d0:1d:36:2a: 26:d5:7d:33:1d:11:3e:e7:8e:ed:de:14:0f:3a:8f:e5:ee:42: a5:45:a5:17:02:75:3d:16:2d:03:b0:42:89:d7:8e:29:99:43: 93:d2:35:b4:bb:fc:91:c0:18:a0:90:3e:01:ac:92:93:91:7e: 88:53:5d:b0:38:da:da:46:d2:e5:83:6f:bd:74:dd:84:ec:f7: 9e:fb:f5:64:5a:53:3b:86:47:5d:28:ed:28:26:6d:73:26:a0: 89:40:f4:0a:fe:df:ec:4e:c0:31:38:f0:96:03:4a:17:91:cc: a8:c2:10:22:3e:31:2c:ca:e8:1e:48:ee:e6:5f:aa:f2:fa:d1: 49:08:9c:b7:28:7c:e8:0f:94:57:d0:81:15:5b:de:82:87:56: 64:54:65:99:51:15:3a:d8:88:51:94:79:86:c1:7e:6b:b2:b0: 95:f6:88:da:32:77:ca:04:4a:67:cf:70:1b:cd:08:82:89:59: ab:ca:24:c7:d5:b8:22:fa:9e:82:33:38:ed:d4:dc:a6:fc:0b: 71:01:04:8c:73:81:5e:3e:8e:b9:c5:97:39:d5:be:82:e6:6c: 38:a5:01:7f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEomgxhHYYCTnOIy7yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxMTAwNDUzN1oXDTI3MDkxNDAwNDUzN1owLzEtMCsGA1UEAxMk ODMzNWY3Y2MtMWE2OS00YjQwLTg5MDAtMTE3NjYwOTM5MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEPD+KKtNl6DkUBN9K09Go/L1EM4i3trrHQW ueS8gvAqbpXdE5Js8GvuvcU+DEuq0frtXt+5ZXJMy3GKD4HJyRe1etZJWqYEwaDS HgurXjf8k7xsCqPJaUb7wq3wnPs/PtwE/zgZUZ/XJR1JNYhrKe7AS39mgi/NFZ5H G52bvcEWLdWqIznW4WGI43hUmkVNSfVGdplxHups+9VuiDH6bu0ZT4mbn+RmPJy7 kx73+9C30qLpiqwVZzwrczT9hN5lYj9USrNPAkdrIqEdS1bJZFBlIIJkBu6xuEuN Noi8e1dmBdoRlEstf6bKtFnuP7InCh1Ex3bAZtsQFawvtVTiDQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFA0aTj+MAWSMkEli5F+RzMhXT2VKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 MzM1ZjdjYy0xYTY5LTRiNDAtODkwMC0xMTc2NjA5MzkzNjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzgzMzVmN2NjLTFhNjktNGI0MC04 OTAwLTExNzY2MDkzOTM2My84MzM1ZjdjYy0xYTY5LTRiNDAtODkwMC0xMTc2NjA5 MzkzNjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJAXUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgpZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADrwqYxskL02+12u+UsFkcpLHLzCr8wGkOKsXpMKJT0s0B02 KibVfTMdET7nju3eFA86j+XuQqVFpRcCdT0WLQOwQonXjimZQ5PSNbS7/JHAGKCQ PgGskpORfohTXbA42tpG0uWDb7103YTs95779WRaUzuGR10o7SgmbXMmoIlA9Ar+ 3+xOwDE48JYDSheRzKjCECI+MSzK6B5I7uZfqvL60UkInLcofOgPlFfQgRVb3oKH VmRUZZlRFTrYiFGUeYbBfmuysJX2iNoyd8oESmfPcBvNCIKJWavKJMfVuCL6noIz OO3U3Kb8C3EBBIxzgV4+jrnFlznVvoLmbDilAX8= -----END CERTIFICATE-----Generated at Mon Jun 30 19:56:11 2025 by rpki-client