$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer File: a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer (raw, json) Hash identifier: D+KrYEyGuWywBXhMstq26DOFHq4VPOgR83jmoVTx08U= Subject key identifier: F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849C09D1B64D599FE154F6983B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 May 2025 12:45:35 +0000 Certificate not after: Sun 08 Aug 2027 12:45:35 +0000 Subordinate resources: AS: 53654 IP: 23.171.24.0/24 IP: 2602:f98d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:9d:1b:64:d5:99:fe:15:4f:69:83:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 5 12:45:35 2025 GMT Not After : Aug 8 12:45:35 2027 GMT Subject: CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:4c:23:57:80:be:6b:47:2b:84:51:ae:c8: a9:71:6a:a4:de:22:db:88:4f:a4:c3:45:ee:be:c2: 87:3f:f5:a4:95:a9:a4:73:0f:86:47:e2:53:5b:d1: 6d:3c:c0:1d:87:63:62:d0:54:6a:6e:f8:8a:48:d0: 8a:32:b2:3b:c7:25:e2:9b:9f:56:cf:7f:9d:13:46: 77:14:f2:70:90:b8:0d:4e:b4:5d:21:f3:34:b1:33: 64:28:9a:bf:e7:ae:83:52:98:20:34:41:e8:6b:4c: d1:69:91:73:6e:6b:fd:5d:d6:c0:ff:e7:3d:30:a6: bb:f7:a8:a8:cd:ea:2f:83:3f:2a:78:e9:bd:da:11: 71:7d:71:5f:34:95:e0:26:1a:a1:c1:b7:a3:67:1e: df:16:e8:67:80:c3:70:c9:54:d6:f1:d3:f0:d4:89: b3:14:4d:4b:45:70:d8:29:26:fc:4d:ff:e7:c1:52: ce:a7:23:28:18:06:46:26:43:35:af:28:86:06:d4: 44:ef:bb:36:05:42:9a:0f:43:67:ee:92:ce:63:b9: 6a:ef:7b:4f:54:10:1a:7c:66:03:4d:d2:6c:48:aa: 54:c1:88:18:4e:58:55:25:6b:f1:1e:6c:6b:b0:ec: 2f:c4:5c:de:a5:69:89:65:f1:f1:e7:f8:73:07:e5: 49:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.171.24.0/24 IPv6: 2602:f98d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53654 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:61:9f:14:81:6f:7e:ac:24:4a:53:25:e9:db:2d:0c:2b:1c: 03:6b:68:86:06:5a:e3:bb:eb:de:af:9a:c9:57:b6:9b:5d:42: 7a:38:8e:bf:c5:67:6d:75:81:23:74:7c:3f:b9:5d:fe:be:f7: 6e:ba:8a:61:52:1f:fb:c8:e3:02:fb:18:e8:ae:5e:00:c3:a8: 92:cc:86:c7:38:e2:27:4c:7f:54:ad:10:c2:03:aa:39:cd:70: 76:90:81:7a:05:07:d6:20:e6:cb:0e:9f:ea:dd:f3:37:84:ed: 5a:83:fe:dc:7d:ba:cb:09:12:c9:43:40:87:df:ab:40:e9:fc: 19:ad:5f:b4:00:ab:0c:b0:f1:5b:41:2b:55:8e:61:ad:a1:af: b7:70:35:9f:3b:35:bb:d6:df:d1:aa:2f:64:aa:95:39:6e:e5: 1d:1f:cd:4e:26:e3:df:42:e7:6c:7e:56:89:06:85:bb:47:07: 7d:96:7b:94:0e:8f:74:2f:4c:17:f4:0a:a2:1e:e8:d4:77:a2: 7d:04:a5:ee:d4:31:87:37:d4:10:a9:40:21:20:4c:48:30:6e: cf:35:a7:56:5c:a1:50:a9:a4:ea:ef:f0:ab:e7:98:1f:93:2a: c0:37:b0:d5:c5:22:ac:83:30:dc:a7:88:6e:d4:0c:fb:98:48: f0:e3:fd:f1 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEnAnRtk1Zn+FU9pg7QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNTEyNDUzNVoXDTI3MDgwODEyNDUzNVowLzEtMCsGA1UEAxMk YTRmNmJjYWYtYzA2OC00NzM3LWJjZTQtMTVhNDg5ZGM1NGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh5MI1eAvmtHK4RRrsipcWqk3iLbiE+kw0Xu vsKHP/Wklamkcw+GR+JTW9FtPMAdh2Ni0FRqbviKSNCKMrI7xyXim59Wz3+dE0Z3 FPJwkLgNTrRdIfM0sTNkKJq/566DUpggNEHoa0zRaZFzbmv9XdbA/+c9MKa796io zeovgz8qeOm92hFxfXFfNJXgJhqhwbejZx7fFuhngMNwyVTW8dPw1ImzFE1LRXDY KSb8Tf/nwVLOpyMoGAZGJkM1ryiGBtRE77s2BUKaD0Nn7pLOY7lq73tPVBAafGYD TdJsSKpUwYgYTlhVJWvxHmxrsOwvxFzepWmJZfHx5/hzB+VJCQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPEMWqS3o27HlHLH3iMZKIuxk7OTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h NGY2YmNhZi1jMDY4LTQ3MzctYmNlNC0xNWE0ODlkYzU0ZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2E0ZjZiY2FmLWMwNjgtNDczNy1i Y2U0LTE1YTQ4OWRjNTRmOC9hNGY2YmNhZi1jMDY4LTQ3MzctYmNlNC0xNWE0ODlk YzU0ZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqxgwDgQCAAIwCAMGACYC+Y0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDRljBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAYZ8UgW9+rCRKUyXp2y0MKxwD a2iGBlrju+ver5rJV7abXUJ6OI6/xWdtdYEjdHw/uV3+vvduuophUh/7yOMC+xjo rl4Aw6iSzIbHOOInTH9UrRDCA6o5zXB2kIF6BQfWIObLDp/q3fM3hO1ag/7cfbrL CRLJQ0CH36tA6fwZrV+0AKsMsPFbQStVjmGtoa+3cDWfOzW71t/Rqi9kqpU5buUd H81OJuPfQudsflaJBoW7Rwd9lnuUDo90L0wX9AqiHujUd6J9BKXu1DGHN9QQqUAh IExIMG7PNadWXKFQqaTq7/Cr55gfkyrAN7DVxSKsgzDcp4hu1Az7mEjw4/3x -----END CERTIFICATE-----Generated at Sun May 11 03:48:50 2025 by rpki-client