$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34.cer File: d4d337ac-64ad-496d-856c-8c2412a7cb34.cer (raw, json) Hash identifier: 1vS6/YP4M+8OSOaAb/WSKQ5/WLwk4rSSCnrulcQq1As= Subject key identifier: 81:6B:03:A6:F5:63:B4:5E:A8:F9:F2:85:57:30:10:96:3B:65:08:7F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849B6D7B6F39E7864370CA9D9B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 May 2025 00:45:35 +0000 Certificate not after: Thu 05 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 46227 IP: 162.245.54.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:d7:b6:f3:9e:78:64:37:0c:a9:d9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 2 00:45:35 2025 GMT Not After : Aug 5 00:45:35 2027 GMT Subject: CN=d4d337ac-64ad-496d-856c-8c2412a7cb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fb:c4:53:8c:3c:de:3c:7d:c0:bc:a3:d2:67: 37:f3:ba:55:cb:e5:5b:f7:dd:47:c6:96:8a:ab:1a: 28:6c:ea:92:2b:d3:31:a9:c3:af:a9:64:86:a7:5d: 19:f9:c8:29:44:60:f1:1b:3a:91:1d:3a:12:05:1f: 7a:0f:8f:9c:7c:3b:87:56:29:89:aa:8a:a5:65:8c: e6:b1:ff:c0:fe:0a:e4:53:4f:ee:6b:ff:3d:11:bc: 0e:41:de:30:7b:47:71:74:c6:88:a7:94:32:39:29: 10:15:c5:8d:47:bc:e5:32:95:02:80:34:64:58:73: 5b:9a:f9:37:2e:d0:b8:9a:2c:71:5f:05:90:50:42: 15:1e:fb:3d:df:e6:18:5a:32:d0:60:90:6e:e5:86: 25:6f:fc:08:29:d8:97:d9:02:f2:f1:2e:e6:0c:15: dd:d1:e5:e9:8a:05:52:d9:f9:fe:78:31:ab:cd:7e: cf:e4:16:27:36:2d:c0:d9:bc:f9:77:2b:c7:bf:b4: c6:fc:23:e6:7d:51:bd:67:7c:87:8e:b2:95:74:7e: 87:6d:c7:5a:f1:13:88:66:e6:32:b3:d5:3e:78:d7: 75:33:0c:a4:79:e5:c2:d1:38:05:68:d6:65:8a:a7: db:b7:ae:d8:ee:64:7c:a9:42:63:ab:14:39:6b:31: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6B:03:A6:F5:63:B4:5E:A8:F9:F2:85:57:30:10:96:3B:65:08:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d4d337ac-64ad-496d-856c-8c2412a7cb34/d4d337ac-64ad-496d-856c-8c2412a7cb34.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.245.54.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46227 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4d:ba:b6:e5:4b:b2:d0:e4:08:f1:f0:35:27:d2:43:4f:e1: 8a:82:81:3f:3d:e2:90:28:79:27:4a:b4:8b:89:31:74:e8:9c: 28:3b:01:b9:18:0b:d4:7a:3a:fd:03:c0:32:08:e0:97:a3:57: b1:d0:34:6c:77:ef:ce:0a:7d:b9:de:aa:5a:e0:30:86:79:20: eb:8d:fd:ba:02:38:16:10:d4:b7:0c:cf:ed:ca:b5:5f:5c:3a: b3:26:e3:a3:60:88:07:b0:7c:c8:cd:bb:e4:65:7b:08:87:6e: 6b:f6:c4:77:ed:38:83:5e:cb:40:11:a9:a1:3b:6a:76:48:4c: 9f:54:64:b1:f9:f5:43:b3:49:7a:8d:ee:a5:06:57:68:c4:1d: b1:57:be:7b:bc:c9:09:71:a4:31:52:b6:a7:72:73:b6:92:fe: c3:a7:76:86:04:06:97:b5:8e:96:56:ee:e4:86:af:61:28:90: 73:27:a3:54:40:44:ff:f7:79:42:6a:ae:c1:c8:1d:76:95:70: 38:56:45:0a:2f:07:85:f8:c1:da:f5:1e:d4:b4:d2:b6:d9:27: 47:f3:d5:e6:89:17:4e:15:e0:d5:c2:9d:33:db:0a:d6:8b:0a: b4:48:e5:cf:b5:45:57:df:9f:a6:94:de:5b:d5:c0:d8:2b:50: 25:c2:4b:37 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEm217bznnhkNwyp2bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwMjAwNDUzNVoXDTI3MDgwNTAwNDUzNVowLzEtMCsGA1UEAxMk ZDRkMzM3YWMtNjRhZC00OTZkLTg1NmMtOGMyNDEyYTdjYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfvEU4w83jx9wLyj0mc387pVy+Vb991HxpaK qxoobOqSK9MxqcOvqWSGp10Z+cgpRGDxGzqRHToSBR96D4+cfDuHVimJqoqlZYzm sf/A/grkU0/ua/89EbwOQd4we0dxdMaIp5QyOSkQFcWNR7zlMpUCgDRkWHNbmvk3 LtC4mixxXwWQUEIVHvs93+YYWjLQYJBu5YYlb/wIKdiX2QLy8S7mDBXd0eXpigVS 2fn+eDGrzX7P5BYnNi3A2bz5dyvHv7TG/CPmfVG9Z3yHjrKVdH6Hbcda8ROIZuYy s9U+eNd1MwykeeXC0TgFaNZliqfbt67Y7mR8qUJjqxQ5azEDvwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIFrA6b1Y7ReqPnyhVcwEJY7ZQh/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k NGQzMzdhYy02NGFkLTQ5NmQtODU2Yy04YzI0MTJhN2NiMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Q0ZDMzN2FjLTY0YWQtNDk2ZC04 NTZjLThjMjQxMmE3Y2IzNC9kNGQzMzdhYy02NGFkLTQ5NmQtODU2Yy04YzI0MTJh N2NiMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGi9TYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALSTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHBNurblS7LQ5Ajx8DUn0kNP4YqCgT894pAoeSdKtIuJMXTo nCg7AbkYC9R6Ov0DwDII4JejV7HQNGx3784KfbneqlrgMIZ5IOuN/boCOBYQ1LcM z+3KtV9cOrMm46NgiAewfMjNu+RlewiHbmv2xHftOINey0ARqaE7anZITJ9UZLH5 9UOzSXqN7qUGV2jEHbFXvnu8yQlxpDFStqdyc7aS/sOndoYEBpe1jpZW7uSGr2Eo kHMno1RARP/3eUJqrsHIHXaVcDhWRQovB4X4wdr1HtS00rbZJ0fz1eaJF04V4NXC nTPbCtaLCrRI5c+1RVffn6aU3lvVwNgrUCXCSzc= -----END CERTIFICATE-----Generated at Sun May 11 15:27:47 2025 by rpki-client