$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553.cer File: ceabafc1-2de6-4194-a43b-862ad745c553.cer (raw, json) Hash identifier: L1CMMohZ6RuYAe8khMw7Q5vPOVKyRhXUujDCr7UiIYU= Subject key identifier: F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849B40D070B05553099CEB0AE68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 May 2025 00:45:34 +0000 Certificate not after: Wed 04 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 53740 IP: 23.159.32.0/23 IP: 98.142.180.0/24 IP: 2602:fe26::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:0d:07:0b:05:55:30:99:ce:b0:ae:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 1 00:45:34 2025 GMT Not After : Aug 4 00:45:34 2027 GMT Subject: CN=ceabafc1-2de6-4194-a43b-862ad745c553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:b4:3f:49:db:7f:2e:e0:32:a9:cf:79:9a: 85:9d:80:4b:5b:0f:a4:e5:eb:02:ab:41:17:24:dd: ce:6c:b0:72:12:5d:2e:48:c8:04:ef:17:b3:e5:0d: b7:51:03:17:e1:f0:ab:2d:94:31:7f:67:45:f9:f6: 08:26:a0:4c:c7:68:21:0e:8f:46:3d:f1:fb:f8:69: 2d:9d:71:0f:4a:6e:6f:6c:30:ab:87:f9:64:bc:7d: ce:22:39:ac:39:35:18:62:c7:61:fd:76:cd:67:03: 97:09:3f:9e:1b:75:e9:67:5c:9c:a8:56:49:39:83: e9:ca:ab:73:ce:15:7e:85:d2:7a:8d:33:b9:ba:33: e2:5e:9f:6d:c7:f6:b3:8a:a2:2d:68:96:1c:7c:25: 48:6a:fa:52:6a:a7:39:89:0b:ea:55:d4:e7:b0:18: 8f:99:94:a1:36:9d:1a:a2:78:f4:43:c7:9b:f9:df: a3:38:ab:9a:59:8a:77:37:4a:5d:84:5d:c2:2e:f1: 29:02:3e:e1:9f:66:15:fd:52:d5:4a:1b:3a:79:81: dc:2a:89:2c:79:41:13:8e:17:50:96:8f:a8:e8:a7: 00:5f:44:4f:81:49:68:57:07:e3:92:66:e9:27:7c: fc:b6:b9:0e:31:cb:cf:c9:00:02:4b:2f:79:a8:ff: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.159.32.0/23 98.142.180.0/24 IPv6: 2602:fe26::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53740 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2f:33:56:22:dc:c2:a4:40:67:0c:f8:22:9f:55:e5:24:c3: 79:aa:aa:54:7a:77:94:a0:d1:b8:4b:ea:37:d9:03:09:34:aa: 76:78:40:22:97:c4:c6:fd:0e:f8:8c:72:3e:ce:99:7a:96:ce: ba:3d:12:df:99:04:ad:73:da:7d:d2:3f:cc:24:e1:89:a2:8a: bb:6f:f8:07:c1:6e:44:1e:33:20:8e:48:08:9c:2c:15:fb:d5: 70:e9:46:ac:76:a8:63:82:09:09:db:ca:1f:7b:37:67:84:d2: 65:02:1d:97:e1:d8:14:bf:d3:e3:d6:5b:bf:8a:16:11:a9:d2: a4:aa:9e:f5:61:74:15:8d:13:df:06:30:b4:f3:2b:7e:8d:5f: 05:ea:5c:e9:24:99:7e:0b:91:76:90:a7:ad:26:1d:98:61:47: 09:8c:ad:4e:f2:19:42:a4:63:64:34:58:76:6a:0c:78:93:65: b5:6e:2e:ac:c7:c3:94:77:c6:2a:c1:58:8f:f4:42:fc:b1:23: 3c:c4:d9:24:85:80:8e:f0:69:49:72:72:76:50:56:bf:f9:06: 4b:99:44:25:d6:a4:84:0c:c5:5c:27:7c:98:b9:a6:dd:b5:35: a5:4d:49:63:a8:39:33:e8:fd:0e:9d:d3:ef:65:0e:00:f0:66: 56:f3:27:98 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEm0DQcLBVUwmc6wrmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwMTAwNDUzNFoXDTI3MDgwNDAwNDUzNFowLzEtMCsGA1UEAxMk Y2VhYmFmYzEtMmRlNi00MTk0LWE0M2ItODYyYWQ3NDVjNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAore0P0nbfy7gMqnPeZqFnYBLWw+k5esCq0EX JN3ObLByEl0uSMgE7xez5Q23UQMX4fCrLZQxf2dF+fYIJqBMx2ghDo9GPfH7+Gkt nXEPSm5vbDCrh/lkvH3OIjmsOTUYYsdh/XbNZwOXCT+eG3XpZ1ycqFZJOYPpyqtz zhV+hdJ6jTO5ujPiXp9tx/aziqItaJYcfCVIavpSaqc5iQvqVdTnsBiPmZShNp0a onj0Q8eb+d+jOKuaWYp3N0pdhF3CLvEpAj7hn2YV/VLVShs6eYHcKokseUETjhdQ lo+o6KcAX0RPgUloVwfjkmbpJ3z8trkOMcvPyQACSy95qP8G/wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFPgzJC+fL4EBsllgrBa3z7y0u1KMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j ZWFiYWZjMS0yZGU2LTQxOTQtYTQzYi04NjJhZDc0NWM1NTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2NlYWJhZmMxLTJkZTYtNDE5NC1h NDNiLTg2MmFkNzQ1YzU1My9jZWFiYWZjMS0yZGU2LTQxOTQtYTQzYi04NjJhZDc0 NWM1NTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXnyADBABijrQwDgQCAAIwCAMGBCYC/iYAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDR7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFLzNWItzCpEBnDPgi n1XlJMN5qqpUeneUoNG4S+o32QMJNKp2eEAil8TG/Q74jHI+zpl6ls66PRLfmQSt c9p90j/MJOGJooq7b/gHwW5EHjMgjkgInCwV+9Vw6UasdqhjggkJ28ofezdnhNJl Ah2X4dgUv9Pj1lu/ihYRqdKkqp71YXQVjRPfBjC08yt+jV8F6lzpJJl+C5F2kKet Jh2YYUcJjK1O8hlCpGNkNFh2agx4k2W1bi6sx8OUd8YqwViP9EL8sSM8xNkkhYCO 8GlJcnJ2UFa/+QZLmUQl1qSEDMVcJ3yYuabdtTWlTUljqDkz6P0OndPvZQ4A8GZW 8yeY -----END CERTIFICATE-----Generated at Sat May 10 16:49:11 2025 by rpki-client