$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer File: a92da870-be06-471e-89b6-f5063eb7350b.cer (raw, json) Hash identifier: PJhnqlo/+towAl0kmKPADwy9S5iiH9IRk1TjhkF/G1s= Subject key identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849C4CD221F3390B3E52B137200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 May 2025 00:45:34 +0000 Certificate not after: Tue 10 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 397050 IP: 168.149.192.0/19 IP: 199.45.168.0/21 IP: 204.144.152.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:cd:22:1f:33:90:b3:e5:2b:13:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 7 00:45:34 2025 GMT Not After : Aug 10 00:45:34 2027 GMT Subject: CN=a92da870-be06-471e-89b6-f5063eb7350b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:87:88:76:f9:1f:35:35:18:0a:a0:07:f9:08: ee:58:2b:e6:7c:b5:30:83:22:49:35:39:e5:d6:80: b0:01:be:98:c0:a8:31:9d:39:7d:34:62:2b:d1:8b: 61:12:93:df:77:67:eb:b6:4a:3f:44:e7:f3:8f:35: 82:09:af:f2:ff:89:93:e9:23:fd:28:a5:40:4e:80: fd:24:c3:44:84:8d:ea:d1:0f:dc:a3:48:41:19:8c: 2e:e5:40:02:31:03:cd:4b:d6:5c:7e:51:01:7a:48: b6:69:83:d0:cc:70:5c:e3:c9:ea:0b:fb:67:2d:50: 3f:80:a3:52:0f:48:23:8a:c6:62:4c:d8:a5:c0:30: 37:17:de:00:a1:6c:f0:c6:74:41:8c:f1:bb:75:32: bb:5f:20:6f:17:2e:07:57:8d:2c:94:65:57:d3:32: 12:d6:51:0b:e6:9c:d8:6b:95:53:43:5e:9e:11:39: f9:af:0e:e7:94:01:41:e9:dc:08:a4:24:10:8f:90: 91:1f:3e:34:62:73:6e:88:f4:45:16:bd:dc:78:f2: a2:8b:5f:bf:b7:ba:21:4b:0a:83:28:08:c6:23:ea: 44:5c:9e:06:c5:78:ca:d7:33:b4:49:38:c9:10:30: 80:3b:7d:9a:46:15:1c:6a:fb:b6:28:88:f1:ad:96: ae:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 168.149.192.0/19 199.45.168.0/21 204.144.152.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397050 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:50:95:82:b0:1e:0d:cf:a6:b3:33:41:fa:a6:c3:ee:0b:cb: 74:95:16:8a:5f:04:c8:46:01:3f:a4:30:a7:38:b2:0d:af:d3: cd:c5:85:4b:0a:f6:5e:91:0c:b8:e0:0a:d6:51:3a:f9:b3:83: 75:b1:75:0f:b5:9f:ff:9a:e3:ed:ad:a2:40:59:11:54:aa:2f: bb:aa:66:bc:87:ed:2e:ab:3d:46:e0:4c:ad:b8:3b:9f:c2:f9: b8:ad:d4:dc:03:da:c4:10:f3:89:83:41:f9:8f:25:b5:cb:46: 5e:35:7f:98:28:24:fa:06:c0:19:91:f3:2b:af:58:17:2d:d0: 54:c2:4d:ff:c5:55:f1:1c:7d:fc:df:05:25:ed:f7:69:1e:77: 8e:c4:b3:b3:10:7a:d3:e9:33:1a:d2:b0:a3:d6:25:cb:7b:50: cd:d6:f3:02:5f:81:5f:77:b9:41:3e:3f:19:d6:08:ab:91:42: a4:57:93:38:08:00:0e:87:f2:77:24:91:ab:57:a5:e9:75:2f: 50:8e:5d:07:0c:3b:4b:bb:33:11:86:04:45:5f:6c:ca:d3:b5: bd:73:f9:80:ec:73:3e:7f:26:1f:7f:3d:57:dc:1b:9a:11:a0: 4f:4d:cd:69:3d:9a:72:af:17:95:8d:ae:f4:3b:f5:cf:26:67: 95:2c:6b:2a -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEnEzSIfM5Cz5SsTcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNzAwNDUzNFoXDTI3MDgxMDAwNDUzNFowLzEtMCsGA1UEAxMk YTkyZGE4NzAtYmUwNi00NzFlLTg5YjYtZjUwNjNlYjczNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoeIdvkfNTUYCqAH+QjuWCvmfLUwgyJJNTnl 1oCwAb6YwKgxnTl9NGIr0YthEpPfd2frtko/ROfzjzWCCa/y/4mT6SP9KKVAToD9 JMNEhI3q0Q/co0hBGYwu5UACMQPNS9ZcflEBeki2aYPQzHBc48nqC/tnLVA/gKNS D0gjisZiTNilwDA3F94AoWzwxnRBjPG7dTK7XyBvFy4HV40slGVX0zIS1lEL5pzY a5VTQ16eETn5rw7nlAFB6dwIpCQQj5CRHz40YnNuiPRFFr3cePKii1+/t7ohSwqD KAjGI+pEXJ4GxXjK1zO0STjJEDCAO32aRhUcavu2KIjxrZauDQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFKd0LkkVuXAv6LdgUO16pN0Uo3SmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h OTJkYTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2M2ViNzM1MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2E5MmRhODcwLWJlMDYtNDcxZS04 OWI2LWY1MDYzZWI3MzUwYi9hOTJkYTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2M2Vi NzM1MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAWolcADBAPHLagDBAPMkJgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBg76MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH1QlYKwHg3PprMzQfqmw+4Ly3SVFopf BMhGAT+kMKc4sg2v083FhUsK9l6RDLjgCtZROvmzg3WxdQ+1n/+a4+2tokBZEVSq L7uqZryH7S6rPUbgTK24O5/C+bit1NwD2sQQ84mDQfmPJbXLRl41f5goJPoGwBmR 8yuvWBct0FTCTf/FVfEcffzfBSXt92ked47Es7MQetPpMxrSsKPWJct7UM3W8wJf gV93uUE+PxnWCKuRQqRXkzgIAA6H8nckkatXpel1L1COXQcMO0u7MxGGBEVfbMrT tb1z+YDscz5/Jh9/PVfcG5oRoE9NzWk9mnKvF5WNrvQ79c8mZ5Usayo= -----END CERTIFICATE-----Generated at Fri May 9 04:54:19 2025 by rpki-client