$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer File: dac9cb7f-b46d-477e-8698-95f66c423aab.cer (raw, json) Hash identifier: qkdj6kHCTp3p7IUPnONkteE6Id/nB54JnTSKuwQtZfg= Subject key identifier: A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A3743313F0EE325D8CA391CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Jun 2025 00:45:36 +0000 Certificate not after: Mon 20 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 17160 IP: 104.247.116.0/24 IP: 2602:f93a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:43:31:3f:0e:e3:25:d8:ca:39:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 17 00:45:36 2025 GMT Not After : Sep 20 00:45:36 2027 GMT Subject: CN=dac9cb7f-b46d-477e-8698-95f66c423aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:fa:7e:3c:de:3e:eb:71:92:97:64:70:97: 08:8b:3b:d2:9e:86:5d:e2:5b:7e:bd:0a:e3:04:ba: 90:69:f3:38:7e:ab:a1:c6:ed:fd:8b:86:75:22:6e: 8e:78:6a:96:7b:d7:26:65:2d:72:03:61:ec:35:40: 4f:92:01:79:37:c7:4a:29:e8:ba:0c:05:cb:86:84: e8:e9:a0:2c:87:46:42:52:3c:3a:a5:4a:09:b8:cb: 5d:bc:89:c0:3b:cf:b8:d8:6a:40:18:c7:3b:f9:1b: 66:cd:f4:40:e5:d9:0f:44:08:50:dc:4b:d6:1f:5b: 43:28:2a:44:2e:b6:d3:5e:9e:4d:00:23:86:1a:2b: 1a:b5:df:e2:cb:a9:98:16:6a:db:64:87:95:15:bc: c9:19:9a:54:ec:c2:72:ac:48:1a:63:ba:47:84:d4: 0f:34:8d:ba:7b:f9:f4:cf:be:69:af:46:46:f7:8e: f7:a0:ce:08:0a:02:43:03:de:7c:15:5e:27:8e:d8: 65:95:c8:63:41:ff:da:81:62:24:9b:18:b9:0f:9b: c1:e6:49:9f:21:3c:ac:5d:94:a1:b0:50:f1:df:b1: 24:27:3d:af:a4:4c:ef:99:a9:50:c8:08:27:b5:a6: 4c:41:b0:43:1a:d7:28:07:74:8e:33:b4:67:b3:4c: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 104.247.116.0/24 IPv6: 2602:f93a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17160 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:bc:cb:db:fc:89:fd:78:81:32:27:90:5d:7b:3a:23:98:ed: ad:ba:2d:c7:2a:ff:cc:fb:09:1a:a7:3d:ba:2a:d8:ec:82:b7: 1d:85:ca:a4:58:3c:2a:82:c2:fb:bb:f2:f2:04:4f:3c:ba:3b: e4:ae:a7:49:11:54:c3:2b:94:dd:ae:5e:9f:bb:4e:6e:64:a1: 90:19:3f:09:48:ec:b6:5a:f4:00:aa:70:79:02:d4:97:cb:0b: 45:c4:53:82:09:42:94:b4:77:7b:9b:e2:76:14:db:e5:91:d9: a2:fa:bc:89:6d:f3:81:a9:2a:c1:32:7d:fd:91:4d:e5:c2:ff: 47:66:72:47:63:34:17:11:19:59:78:01:59:10:6a:0f:a8:cf: 4c:39:61:49:e4:46:9c:c2:09:36:f9:f7:38:a5:d6:b6:94:a6: 90:01:e5:96:51:0b:58:0f:82:ca:54:e0:46:53:86:c3:49:fb: 4c:60:cd:4e:08:e2:37:fe:90:a3:02:a5:26:98:53:bd:6f:a5: c6:80:29:95:99:00:35:dc:2b:64:cd:91:92:17:f6:6a:4e:5f: 39:a9:bc:1d:24:07:d9:07:3d:9b:05:e3:64:d4:c6:fa:a4:57: cb:a6:5b:37:95:e3:46:4a:b6:d7:9c:ca:16:a6:69:f4:44:77: 81:cb:a1:7c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEo3QzE/DuMl2Mo5HMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxNzAwNDUzNloXDTI3MDkyMDAwNDUzNlowLzEtMCsGA1UEAxMk ZGFjOWNiN2YtYjQ2ZC00NzdlLTg2OTgtOTVmNjZjNDIzYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu76fjzePutxkpdkcJcIizvSnoZd4lt+vQrj BLqQafM4fquhxu39i4Z1Im6OeGqWe9cmZS1yA2HsNUBPkgF5N8dKKei6DAXLhoTo 6aAsh0ZCUjw6pUoJuMtdvInAO8+42GpAGMc7+RtmzfRA5dkPRAhQ3EvWH1tDKCpE LrbTXp5NACOGGisatd/iy6mYFmrbZIeVFbzJGZpU7MJyrEgaY7pHhNQPNI26e/n0 z75pr0ZG9473oM4ICgJDA958FV4njthllchjQf/agWIkmxi5D5vB5kmfITysXZSh sFDx37EkJz2vpEzvmalQyAgntaZMQbBDGtcoB3SOM7Rns0xVlQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKlkcVvzwlL7BcVSO65nKWjLbjdwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k YWM5Y2I3Zi1iNDZkLTQ3N2UtODY5OC05NWY2NmM0MjNhYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2RhYzljYjdmLWI0NmQtNDc3ZS04 Njk4LTk1ZjY2YzQyM2FhYi9kYWM5Y2I3Zi1iNDZkLTQ3N2UtODY5OC05NWY2NmM0 MjNhYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABo93QwDgQCAAIwCAMGBCYC+ToAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkMIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIe8y9v8if14gTInkF17OiOY7a26 Lccq/8z7CRqnPboq2OyCtx2FyqRYPCqCwvu78vIETzy6O+Sup0kRVMMrlN2uXp+7 Tm5koZAZPwlI7LZa9ACqcHkC1JfLC0XEU4IJQpS0d3ub4nYU2+WR2aL6vIlt84Gp KsEyff2RTeXC/0dmckdjNBcRGVl4AVkQag+oz0w5YUnkRpzCCTb59zil1raUppAB 5ZZRC1gPgspU4EZThsNJ+0xgzU4I4jf+kKMCpSaYU71vpcaAKZWZADXcK2TNkZIX 9mpOXzmpvB0kB9kHPZsF42TUxvqkV8umWzeV40ZKttecyhamafREd4HLoXw= -----END CERTIFICATE-----Generated at Sun Jun 29 13:35:02 2025 by rpki-client