$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer File: bce2ace0-971c-48f1-8361-962ad02d9618.cer (raw, json) Hash identifier: i71kyYYcHXfsxivbXDjCX5+LkvCXddbnHqP5ap5cvqw= Subject key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A5B8E13026E1298D8DED61080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Jun 2025 00:45:34 +0000 Certificate not after: Sun 03 Oct 2027 00:45:34 +0000 Subordinate resources: AS: 32943 IP: 23.175.168.0/24 IP: 2602:f937::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:8e:13:02:6e:12:98:d8:de:d6:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 30 00:45:34 2025 GMT Not After : Oct 3 00:45:34 2027 GMT Subject: CN=bce2ace0-971c-48f1-8361-962ad02d9618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:c3:56:5e:a1:3b:9f:de:91:76:e9:21:de: 96:de:75:47:a8:48:9f:7b:18:64:87:4c:d5:04:56: d2:59:0b:60:e5:91:43:20:7e:10:a3:cd:dd:a6:0f: 8f:86:5b:94:67:de:03:3a:c1:a8:ca:d8:1c:c8:18: ca:f9:12:4f:72:4a:cd:37:2b:83:0d:18:dc:86:2b: 31:f4:c5:5f:82:de:2e:21:63:54:1f:00:61:42:b2: 9b:de:eb:ba:4a:6f:4d:fd:f6:d1:35:0f:6c:84:8c: 9d:a5:ee:95:a5:62:97:ab:d7:e0:d3:25:e3:aa:b2: 5b:e4:2b:4e:f7:0d:fc:57:d9:ae:ee:4d:1f:9f:0a: aa:8f:dc:bf:37:23:0b:07:0d:7b:16:4a:40:e9:f3: 84:40:58:0a:8a:f7:9e:ce:f5:e8:8b:a1:f6:ef:1e: 18:49:81:96:a6:22:a3:d4:fd:40:41:d6:53:c9:81: f3:38:65:c0:18:28:7c:22:99:45:df:8b:7a:38:f7: 53:b1:44:6a:5a:37:6f:be:cb:7c:07:91:b3:1b:80: 5b:78:34:1e:89:18:74:3e:0e:0d:48:58:83:85:fa: cf:f0:79:d5:a9:5f:f6:96:a0:b3:f7:03:bb:48:a1: 54:f2:48:01:8a:00:5b:4b:3e:4c:e4:b9:07:41:72: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.175.168.0/24 IPv6: 2602:f937::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32943 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:26:3a:d3:0e:8c:02:b1:3b:19:d0:63:68:58:0a:2e:64:50: 01:3a:79:b2:10:00:27:3f:18:f8:c6:9c:8d:9f:93:23:94:4c: 64:81:fc:00:ea:f0:87:44:b5:70:c9:f5:7e:5b:42:c8:02:93: a8:cc:ec:5d:52:5c:b4:45:25:fd:85:be:d5:50:78:10:e0:dc: a5:35:58:da:c0:e6:01:c6:34:1d:56:de:e9:e4:c4:07:1b:25: 1d:ab:08:ee:8f:23:64:67:74:81:47:2a:de:16:67:e1:8d:1b: fd:fd:e8:b1:6c:f8:aa:67:3c:d9:fb:fc:4b:b1:d0:b9:e8:17: 05:ad:29:56:0e:1e:d1:e0:73:5b:60:3b:48:30:9e:86:97:85: 84:fc:00:59:d2:d4:75:59:f5:a3:85:87:f3:db:8c:f1:8c:13: 3e:d0:07:f3:b3:dd:18:c7:0f:62:eb:5b:93:2d:09:52:61:95: ef:52:46:72:3d:a7:8f:25:6f:67:bf:8f:17:1f:b8:2b:92:ea: a6:75:0a:77:b6:81:11:01:1c:86:20:af:d6:8e:4e:dc:88:fb: e0:11:fe:80:52:56:18:02:0c:13:ad:af:37:73:88:10:ba:db: 06:c9:a6:dd:9d:66:bb:df:9f:fe:1f:7b:1b:d0:50:df:78:fa: 39:ff:3c:1a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEpbjhMCbhKY2N7WEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYzMDAwNDUzNFoXDTI3MTAwMzAwNDUzNFowLzEtMCsGA1UEAxMk YmNlMmFjZTAtOTcxYy00OGYxLTgzNjEtOTYyYWQwMmQ5NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA7DVl6hO5/ekXbpId6W3nVHqEifexhkh0zV BFbSWQtg5ZFDIH4Qo83dpg+PhluUZ94DOsGoytgcyBjK+RJPckrNNyuDDRjchisx 9MVfgt4uIWNUHwBhQrKb3uu6Sm9N/fbRNQ9shIydpe6VpWKXq9fg0yXjqrJb5CtO 9w38V9mu7k0fnwqqj9y/NyMLBw17FkpA6fOEQFgKiveezvXoi6H27x4YSYGWpiKj 1P1AQdZTyYHzOGXAGCh8IplF34t6OPdTsURqWjdvvst8B5GzG4BbeDQeiRh0Pg4N SFiDhfrP8HnVqV/2lqCz9wO7SKFU8kgBigBbSz5M5LkHQXKERQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOCXDGhJRQipFmkBg852EZ6DqW9EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i Y2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAyZDk2MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2JjZTJhY2UwLTk3MWMtNDhmMS04 MzYxLTk2MmFkMDJkOTYxOC9iY2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAy ZDk2MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXr6gwDgQCAAIwCAMGBCYC+TcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCArzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDJjrTDowCsTsZ0GNoWAouZFAB OnmyEAAnPxj4xpyNn5MjlExkgfwA6vCHRLVwyfV+W0LIApOozOxdUly0RSX9hb7V UHgQ4NylNVjawOYBxjQdVt7p5MQHGyUdqwjujyNkZ3SBRyreFmfhjRv9/eixbPiq ZzzZ+/xLsdC56BcFrSlWDh7R4HNbYDtIMJ6Gl4WE/ABZ0tR1WfWjhYfz24zxjBM+ 0Afzs90Yxw9i61uTLQlSYZXvUkZyPaePJW9nv48XH7grkuqmdQp3toERARyGIK/W jk7ciPvgEf6AUlYYAgwTra83c4gQutsGyabdnWa735/+H3sb0FDfePo5/zwa -----END CERTIFICATE-----Generated at Mon Jun 30 20:35:27 2025 by rpki-client