$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer File: e0cdac38-6681-4b09-b992-31d2030b8796.cer (raw, json) Hash identifier: vt5NE+K+agB147slFxJJYW1/U8BSMmdV8a5ruacYZKg= Subject key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A0D62EAF238532DA4685C5700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Jun 2025 00:45:35 +0000 Certificate not after: Sun 05 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 12255 AS: 14762 IP: 138.133.0.0/16 IP: 192.207.147.0 -- 192.207.150.255 IP: 198.176.188.0/22 IP: 198.178.217.0 -- 198.178.220.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:62:ea:f2:38:53:2d:a4:68:5c:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 2 00:45:35 2025 GMT Not After : Sep 5 00:45:35 2027 GMT Subject: CN=e0cdac38-6681-4b09-b992-31d2030b8796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:fa:ce:cc:73:34:60:a5:43:e3:de:13:87: 53:ed:be:9a:4b:df:5e:aa:2b:dc:d4:36:f6:c7:44: c9:1f:aa:20:ac:61:90:ef:bf:d1:e5:9b:34:6d:53: 99:af:42:3e:c2:d6:e4:1e:68:8f:2c:0d:dd:57:86: 8c:1e:78:86:94:75:83:d0:f3:8b:4c:0a:ad:6b:15: 7f:06:ec:df:66:3e:29:dd:39:5e:0a:27:97:9d:c4: b6:ac:36:d9:fb:22:6b:3f:f8:3e:0f:62:c4:3c:ac: ad:18:32:91:d5:d4:ae:c2:7f:5d:0d:12:bf:1a:88: 35:f8:8a:82:2c:3a:db:69:4f:71:ff:48:f9:5c:d6: 11:0b:5e:bc:ef:18:29:84:ae:5d:e4:60:ad:3f:8f: 6b:61:c7:ae:17:7a:12:70:e0:6b:fe:8b:e0:5f:3d: ad:05:ac:a2:e6:0a:b0:8d:a7:46:6d:7f:ba:cf:7d: 05:10:4e:d5:3d:77:b0:06:ef:17:54:a1:0c:14:c1: 30:3d:48:d0:82:8a:78:93:67:b2:07:96:71:67:c9: fa:bc:5e:15:72:e5:79:62:64:1f:82:62:a1:89:ca: d2:b8:ea:15:0d:a4:76:51:71:bf:f4:47:49:85:ae: 16:37:7a:70:75:0d:07:7b:26:4d:8d:2a:98:5a:d2: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 138.133.0.0/16 192.207.147.0-192.207.150.255 198.176.188.0/22 198.178.217.0-198.178.220.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12255 14762 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ec:a4:39:2d:81:97:7c:e1:5a:23:97:dd:71:44:44:50:c0: 18:4d:08:d7:5f:48:ee:54:6f:e2:c0:e9:8e:e5:21:e4:85:6e: 9c:1d:28:f0:c4:2c:37:56:69:d4:e3:63:31:f7:f2:82:ee:58: 3d:f6:29:51:93:77:aa:04:07:35:69:e5:4c:01:de:ff:7f:1c: 62:e1:5f:ab:0d:19:fa:d1:62:7e:18:44:1a:f7:d8:94:66:d8: 6e:ee:96:71:8b:88:00:9d:ad:a8:8f:7e:d7:0f:b9:dc:d1:ef: f8:d0:0f:0a:61:e0:59:0a:e8:ad:44:e6:ac:fe:d9:3b:26:99: 04:9f:02:7b:b6:80:6a:a3:54:f5:57:15:f8:c1:fc:0c:99:75: 57:24:39:64:a6:91:5b:46:09:b7:0f:20:0c:53:cf:70:62:53: 33:b8:51:8d:a7:ad:f5:0d:35:47:ea:39:59:e7:2a:db:45:fc: e2:80:50:84:5f:70:76:d6:bf:7d:dd:1e:b9:81:ba:c6:0b:16: 97:e0:bb:01:fd:91:34:b1:82:ae:c4:9d:c1:bb:a0:2a:de:c2: d8:fa:5d:b8:ba:23:51:2d:1c:8f:b3:06:4e:48:e6:a1:a5:d1: ed:1c:34:49:84:9d:98:b3:06:61:ee:09:4b:79:ce:cb:93:2f: 94:bd:18:a9 -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEoNYuryOFMtpGhcVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYwMjAwNDUzNVoXDTI3MDkwNTAwNDUzNVowLzEtMCsGA1UEAxMk ZTBjZGFjMzgtNjY4MS00YjA5LWI5OTItMzFkMjAzMGI4Nzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTL6zsxzNGClQ+PeE4dT7b6aS99eqivc1Db2 x0TJH6ogrGGQ77/R5Zs0bVOZr0I+wtbkHmiPLA3dV4aMHniGlHWD0POLTAqtaxV/ BuzfZj4p3TleCieXncS2rDbZ+yJrP/g+D2LEPKytGDKR1dSuwn9dDRK/Gog1+IqC LDrbaU9x/0j5XNYRC1687xgphK5d5GCtP49rYceuF3oScOBr/ovgXz2tBayi5gqw jadGbX+6z30FEE7VPXewBu8XVKEMFMEwPUjQgop4k2eyB5ZxZ8n6vF4VcuV5YmQf gmKhicrSuOoVDaR2UXG/9EdJha4WN3pwdQ0HeyZNjSqYWtKrwwIDAQABo4IEPzCC BDswHQYDVR0OBBYEFK5QpPOgXrhnLAM5uMmrvCtrFzQ5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l MGNkYWMzOC02NjgxLTRiMDktYjk5Mi0zMWQyMDMwYjg3OTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2UwY2RhYzM4LTY2ODEtNGIwOS1i OTkyLTMxZDIwMzBiODc5Ni9lMGNkYWMzOC02NjgxLTRiMDktYjk5Mi0zMWQyMDMw Yjg3OTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMC0EAgABMCcDAwCKhTAMAwQAwM+TAwQAwM+WAwQCxrC8MAwDBADG stkDBADGstwwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICL98CAjmqMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAXspDktgZd84Vojl91xRERQwBhNCNdfSO5Ub+LA6Y7lIeSFbpwdKPDELDdWadTj YzH38oLuWD32KVGTd6oEBzVp5UwB3v9/HGLhX6sNGfrRYn4YRBr32JRm2G7ulnGL iACdraiPftcPudzR7/jQDwph4FkK6K1E5qz+2TsmmQSfAnu2gGqjVPVXFfjB/AyZ dVckOWSmkVtGCbcPIAxTz3BiUzO4UY2nrfUNNUfqOVnnKttF/OKAUIRfcHbWv33d HrmBusYLFpfguwH9kTSxgq7EncG7oCrewtj6Xbi6I1EtHI+zBk5I5qGl0e0cNEmE nZizBmHuCUt5zsuTL5S9GKk= -----END CERTIFICATE-----Generated at Tue Jul 1 19:11:31 2025 by rpki-client