$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691.cer File: a36c31cd-64fa-4048-853b-eaea17e56691.cer (raw, json) Hash identifier: LyZx45yv+JUio2HKmp9pfoAoCDdxGo//OI7TnLQfTdw= Subject key identifier: A5:13:77:4D:79:8F:E9:10:52:7B:6E:77:46:2D:CD:9F:FE:40:C0:FD Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A4F4772E55BEA3C04865B7580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Jun 2025 15:13:35 +0000 Certificate not after: Tue 28 Sep 2027 15:13:35 +0000 Subordinate resources: IP: 23.139.244.0/24 IP: 2602:f620::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:47:72:e5:5b:ea:3c:04:86:5b:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 25 15:13:35 2025 GMT Not After : Sep 28 15:13:35 2027 GMT Subject: CN=a36c31cd-64fa-4048-853b-eaea17e56691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:12:68:b3:3c:52:6d:0a:9c:c7:ae:91:88: de:b0:0a:16:69:a0:61:02:79:d3:1d:0a:0d:1e:18: fe:44:86:e6:ad:ab:c2:83:2f:b3:a7:dd:36:9f:94: ab:49:5e:da:a2:cd:68:d1:23:14:6d:d7:04:99:df: 92:82:6c:c6:14:cd:29:9c:2a:e2:cb:79:5d:fb:57: 98:33:47:a3:9a:cc:6f:2c:4e:bd:0a:7e:31:a9:b9: 86:e3:33:02:92:ce:b6:e7:a6:bf:da:c0:97:76:a8: 07:8b:43:a8:62:3e:b2:02:70:e6:d6:74:e8:17:cc: 1c:00:95:21:36:06:72:9b:63:0a:70:e1:cb:c2:29: 79:7f:85:98:c1:10:54:b9:17:76:88:3d:be:ec:4b: ab:33:e8:50:9b:47:82:49:c9:65:39:69:97:cb:57: 93:1a:1d:cc:46:d8:f9:87:45:b6:1c:12:15:76:6b: 5f:8c:04:36:31:9a:ce:75:34:d4:c2:2d:6b:1c:e7: 00:0a:e2:64:ab:52:92:8e:c5:86:dc:ac:a6:c3:93: f0:fd:43:e1:70:16:b2:c1:48:0c:4d:0b:44:f9:03: a5:a8:a5:f0:8d:c0:0b:b4:9d:7e:85:33:66:72:b6: a2:01:da:22:c4:34:6c:37:11:c6:92:ba:ec:85:7c: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:13:77:4D:79:8F:E9:10:52:7B:6E:77:46:2D:CD:9F:FE:40:C0:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.139.244.0/24 IPv6: 2602:f620::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4a:42:88:f0:c0:6d:82:d5:a4:18:b9:aa:fc:89:07:05:af: 24:d5:98:8d:db:9c:93:ae:ee:82:fc:13:16:dc:59:e4:6e:e9: 75:02:59:a4:7d:dd:72:43:13:ea:20:fc:33:67:00:a1:6e:cf: 32:7c:a9:ac:1d:f5:63:ef:60:87:03:aa:be:b1:60:cd:cc:e1: bc:ce:d0:8e:43:a7:fc:49:02:10:a6:db:4c:aa:8a:1f:d9:1b: 8b:fa:0d:86:d2:42:e1:1f:a0:d8:f0:01:24:68:47:e0:de:49: 14:99:8e:67:73:c6:9b:79:86:93:6f:03:a5:66:26:6e:f5:2c: 31:fb:a9:f4:ad:14:b7:c4:4d:9e:a1:8e:03:a1:3e:c5:98:e5: 0f:b0:8f:3b:c3:eb:c2:6a:ce:e2:e6:c0:f1:84:f2:62:af:ad: f2:59:5c:3f:8b:53:2d:f2:ba:c3:3d:d6:a6:88:31:43:30:87: d6:26:26:e3:3e:03:da:7a:84:65:ec:50:7d:b3:04:40:f8:ec: f7:ca:71:1c:b6:10:7c:b3:8b:1b:c7:cb:76:b6:ad:b1:71:0b: 83:d9:0d:63:72:7f:9f:0e:e4:28:82:48:32:6a:26:bf:58:42: b3:2a:29:47:85:b7:85:86:2c:14:8a:92:7e:0d:99:1c:83:e5: dc:ed:f8:74 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEpPR3LlW+o8BIZbdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyNTE1MTMzNVoXDTI3MDkyODE1MTMzNVowLzEtMCsGA1UEAxMk YTM2YzMxY2QtNjRmYS00MDQ4LTg1M2ItZWFlYTE3ZTU2NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+4SaLM8Um0KnMeukYjesAoWaaBhAnnTHQoN Hhj+RIbmravCgy+zp902n5SrSV7aos1o0SMUbdcEmd+SgmzGFM0pnCriy3ld+1eY M0ejmsxvLE69Cn4xqbmG4zMCks6256a/2sCXdqgHi0OoYj6yAnDm1nToF8wcAJUh NgZym2MKcOHLwil5f4WYwRBUuRd2iD2+7EurM+hQm0eCScllOWmXy1eTGh3MRtj5 h0W2HBIVdmtfjAQ2MZrOdTTUwi1rHOcACuJkq1KSjsWG3Kymw5Pw/UPhcBaywUgM TQtE+QOlqKXwjcALtJ1+hTNmcraiAdoixDRsNxHGkrrshXykswIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKUTd015j+kQUntud0YtzZ/+QMD9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h MzZjMzFjZC02NGZhLTQwNDgtODUzYi1lYWVhMTdlNTY2OTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2EzNmMzMWNkLTY0ZmEtNDA0OC04 NTNiLWVhZWExN2U1NjY5MS9hMzZjMzFjZC02NGZhLTQwNDgtODUzYi1lYWVhMTdl NTY2OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXi/QwDgQCAAIwCAMGACYC9iAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEtKQojwwG2C1aQYuar8iQcFryTVmI3bnJOu7oL8ExbcWeRu6XUCWaR93XJDE+og /DNnAKFuzzJ8qawd9WPvYIcDqr6xYM3M4bzO0I5Dp/xJAhCm20yqih/ZG4v6DYbS QuEfoNjwASRoR+DeSRSZjmdzxpt5hpNvA6VmJm71LDH7qfStFLfETZ6hjgOhPsWY 5Q+wjzvD68JqzuLmwPGE8mKvrfJZXD+LUy3yusM91qaIMUMwh9YmJuM+A9p6hGXs UH2zBED47PfKcRy2EHyzixvHy3a2rbFxC4PZDWNyf58O5CiCSDJqJr9YQrMqKUeF t4WGLBSKkn4NmRyD5dzt+HQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:00:11 2025 by rpki-client