$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer File: ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer (raw, json) Hash identifier: yD5nBDTqCZPQEqp7dW02BMCzYeRuEYGaPpPsFTu77Xs= Subject key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A374331635F6BDC7A2149BEF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Jun 2025 00:45:36 +0000 Certificate not after: Mon 20 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 399525 IP: 23.185.176.0/24 IP: 2602:fc9e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:43:31:63:5f:6b:dc:7a:21:49:be:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 17 00:45:36 2025 GMT Not After : Sep 20 00:45:36 2027 GMT Subject: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:25:cd:2d:be:e1:73:17:91:81:29:59:e4: fe:b7:ec:41:08:4f:1b:5f:50:e4:1f:dd:02:43:c2: 53:98:8d:70:b0:da:3f:f7:7e:cd:58:7f:5c:4c:fe: 51:6d:9a:a8:39:14:6c:2d:f1:73:8e:19:32:1b:0f: 09:22:83:44:9b:c4:62:1a:fc:7a:61:81:46:4c:73: f4:dc:5d:ef:7e:f2:f1:51:45:1e:28:78:83:25:6f: f2:53:f1:af:4b:4f:d9:26:04:3d:ce:a4:dd:59:13: 57:02:17:9f:72:c9:9d:20:32:25:43:45:5a:91:83: 1f:6f:ac:db:a7:da:09:84:56:cd:56:ec:d2:37:89: 85:17:07:1b:2d:63:a8:6b:fc:a1:a9:34:93:eb:05: c4:31:bb:2f:fb:23:04:09:53:2a:9f:cd:f6:eb:63: f0:75:fb:7e:3f:4a:99:8c:14:66:42:b7:9b:41:32: 79:11:1e:c1:35:db:6e:a1:1a:99:f5:d8:50:ba:c3: f2:a5:7e:af:7e:7e:47:36:e1:5f:08:2b:76:1f:20: db:15:eb:a6:9d:be:99:7a:7b:17:bd:2d:e2:7f:48: 10:97:47:cc:18:fd:f1:c5:9a:1d:82:de:07:5a:4e: 81:20:42:84:4c:7c:c6:d1:10:65:1c:23:3b:74:3c: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.185.176.0/24 IPv6: 2602:fc9e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399525 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:37:1d:8b:98:00:23:ed:cf:65:70:c4:c3:a4:cd:b0:02:ee: 57:24:ef:5f:42:e2:cd:77:0c:43:b5:9e:f5:9a:74:3f:f7:6a: 39:38:ef:33:4d:ec:41:97:f5:10:2b:96:1e:45:a1:78:ce:87: 1b:a2:ca:18:09:33:14:1a:a0:56:75:8d:1b:15:08:71:73:c7: a5:97:8b:7b:72:cf:98:9f:23:4e:46:8b:bf:f5:47:90:c9:5b: 68:e9:a0:c5:fb:b6:45:a4:56:29:9c:fe:72:23:1b:1a:41:6b: 60:f3:a2:0e:7d:2b:d9:22:03:3c:5f:ce:87:1c:62:e4:94:8d: ef:f0:4d:45:4b:0c:76:5b:8c:6e:70:e1:a1:0b:4e:5a:cd:f0: 1c:b8:c8:c8:e8:6d:23:74:a3:60:25:31:78:17:d1:73:d1:57: 36:00:e0:9b:98:66:84:1f:f8:54:e3:60:82:81:9b:7f:72:cd: e9:6c:8c:da:ec:7b:8c:dd:cb:42:46:25:f0:ff:dd:33:35:96: 5b:4c:46:b1:91:da:35:d6:6a:f8:f6:87:64:1e:a6:ee:64:1a: 03:8a:89:dd:5b:93:ad:f5:28:39:64:2f:54:e8:77:4b:fb:dc: 01:64:bc:24:dd:1f:9b:60:22:15:8f:80:7e:f8:bc:28:df:3b: 0c:56:e1:a6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEo3QzFjX2vceiFJvvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYxNzAwNDUzNloXDTI3MDkyMDAwNDUzNlowLzEtMCsGA1UEAxMk ZWYxMjM5ZTYtM2FlNy00M2JlLTk2NmItMmY1Yjk2NzFjMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlMlzS2+4XMXkYEpWeT+t+xBCE8bX1DkH90C Q8JTmI1wsNo/937NWH9cTP5RbZqoORRsLfFzjhkyGw8JIoNEm8RiGvx6YYFGTHP0 3F3vfvLxUUUeKHiDJW/yU/GvS0/ZJgQ9zqTdWRNXAhefcsmdIDIlQ0VakYMfb6zb p9oJhFbNVuzSN4mFFwcbLWOoa/yhqTST6wXEMbsv+yMECVMqn83262Pwdft+P0qZ jBRmQrebQTJ5ER7BNdtuoRqZ9dhQusPypX6vfn5HNuFfCCt2HyDbFeumnb6ZensX vS3if0gQl0fMGP3xxZodgt4HWk6BIEKETHzG0RBlHCM7dDwvlQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPy9G7KKWe22u1Sdg8nMvKxDt7TJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l ZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3MWMyOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2VmMTIzOWU2LTNhZTctNDNiZS05 NjZiLTJmNWI5NjcxYzI5ZC9lZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3 MWMyOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXubAwDgQCAAIwCAMGACYC/J4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYYpTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJNx2LmAAj7c9lcMTDpM2wAu5X JO9fQuLNdwxDtZ71mnQ/92o5OO8zTexBl/UQK5YeRaF4zocbosoYCTMUGqBWdY0b FQhxc8ell4t7cs+YnyNORou/9UeQyVto6aDF+7ZFpFYpnP5yIxsaQWtg86IOfSvZ IgM8X86HHGLklI3v8E1FSwx2W4xucOGhC05azfAcuMjI6G0jdKNgJTF4F9Fz0Vc2 AOCbmGaEH/hU42CCgZt/cs3pbIza7HuM3ctCRiXw/90zNZZbTEaxkdo11mr49odk HqbuZBoDiondW5Ot9Sg5ZC9U6HdL+9wBZLwk3R+bYCIVj4B++Lwo3zsMVuGm -----END CERTIFICATE-----Generated at Sun Jun 29 13:44:45 2025 by rpki-client