$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer File: f37ae11d-629c-4443-bc37-2c3eebd09453.cer (raw, json) Hash identifier: OjFNqxZJ8FhXT+sOcopJv6aL/yVrjFvb1kAPxhu7da0= Subject key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285849C20273BAB982DB9C9B59CC60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 May 2025 00:45:35 +0000 Certificate not after: Mon 09 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 7106 IP: 209.143.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:02:73:ba:b9:82:db:9c:9b:59:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 6 00:45:35 2025 GMT Not After : Aug 9 00:45:35 2027 GMT Subject: CN=f37ae11d-629c-4443-bc37-2c3eebd09453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:a8:4f:28:25:ac:d2:32:17:d2:c9:79:e1: 6c:1a:03:74:fc:90:d2:9c:53:c4:89:99:72:0d:ed: a5:8a:8b:a1:a4:c7:d8:19:4f:9f:11:1f:cd:a0:25: 8c:55:79:56:82:09:c1:79:64:6b:9f:77:71:f8:a5: d1:2d:17:c6:ea:7d:d9:11:a5:4e:46:4c:6f:64:2d: 06:6f:b6:bb:08:ee:77:cc:b6:7c:ad:33:b8:69:c1: 7b:1d:15:60:a6:4b:b8:34:41:03:18:05:90:d5:1e: ed:9f:ac:9e:c5:1d:fc:9b:3b:64:eb:9b:e4:3c:e9: 9b:aa:b0:97:f2:49:96:cb:70:65:a7:40:91:aa:45: 75:57:15:c3:df:7e:6f:c3:64:df:34:13:c0:d2:bb: 1f:65:2a:ac:83:ba:52:76:36:49:f6:d4:17:a4:d4: 75:51:0e:40:80:7e:e9:31:3d:9c:5f:bc:ca:14:f4: 50:f8:1a:9b:0c:f5:35:18:1b:d3:08:03:d3:28:5b: 32:c2:c9:15:6e:4c:f6:6d:4c:36:c9:6d:02:3c:d3: f5:b7:ff:ae:85:51:9c:75:76:e0:6f:82:0d:7e:57: e2:8b:83:21:f3:b2:d6:a2:2a:a8:84:cb:8e:ad:f5: cc:35:7f:29:63:e0:fb:67:6a:fb:b6:46:3f:36:f5: ac:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 209.143.0.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7106 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2a:2f:52:ca:75:a9:84:5a:6d:88:57:2c:ac:0c:10:25:8d: e9:b0:3a:64:08:3c:a1:d2:00:52:1f:0f:c9:b7:54:7f:56:64: 51:bd:fe:66:12:cb:7a:78:71:46:40:11:e8:77:ce:43:9e:6f: 93:9a:8f:66:47:42:e5:59:ab:0c:53:b1:17:5f:9a:7f:40:41: a4:53:69:a3:66:5e:a0:e3:12:fb:c8:1c:39:f0:bb:c3:57:a6: 38:ca:75:59:13:c5:89:9d:97:53:9a:76:4d:33:fa:ee:00:af: 9b:c5:77:76:da:2d:7d:20:29:95:11:df:37:c8:71:b6:0e:6b: 94:f5:6d:40:27:74:83:c2:1d:2a:c8:ee:84:1d:3f:e6:fa:87: c5:82:94:f3:14:62:51:88:19:e2:76:f9:88:c2:ab:b9:f2:70: ae:16:fb:61:08:5d:72:27:4d:5d:11:d2:94:8d:4e:9c:bf:39: d0:dd:43:4f:6c:62:33:de:7a:46:fc:35:98:99:27:84:c6:56: 9a:6b:93:69:37:44:24:c8:44:59:ad:af:73:a3:63:3c:2d:7a: 47:8c:a7:66:15:6a:a3:8c:70:86:c4:2c:af:1b:c1:aa:19:0b: 42:2d:31:37:78:fe:b1:38:ef:7d:16:17:b7:4b:fd:73:7a:3d: 6d:01:6a:ee -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEnCAnO6uYLbnJtZzGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDUwNjAwNDUzNVoXDTI3MDgwOTAwNDUzNVowLzEtMCsGA1UEAxMk ZjM3YWUxMWQtNjI5Yy00NDQzLWJjMzctMmMzZWViZDA5NDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaCoTyglrNIyF9LJeeFsGgN0/JDSnFPEiZly De2liouhpMfYGU+fER/NoCWMVXlWggnBeWRrn3dx+KXRLRfG6n3ZEaVORkxvZC0G b7a7CO53zLZ8rTO4acF7HRVgpku4NEEDGAWQ1R7tn6yexR38mztk65vkPOmbqrCX 8kmWy3Blp0CRqkV1VxXD335vw2TfNBPA0rsfZSqsg7pSdjZJ9tQXpNR1UQ5AgH7p MT2cX7zKFPRQ+BqbDPU1GBvTCAPTKFsywskVbkz2bUw2yW0CPNP1t/+uhVGcdXbg b4INflfii4Mh87LWoiqohMuOrfXMNX8pY+D7Z2r7tkY/NvWs3wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFc682H55cE7J+YhNuL3HaVq2rjkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m MzdhZTExZC02MjljLTQ0NDMtYmMzNy0yYzNlZWJkMDk0NTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2YzN2FlMTFkLTYyOWMtNDQ0My1i YzM3LTJjM2VlYmQwOTQ1My9mMzdhZTExZC02MjljLTQ0NDMtYmMzNy0yYzNlZWJk MDk0NTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAbRjwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC G8IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYiovUsp1qYRabYhXLKwMECWN6bA6ZAg8odIAUh8PybdUf1Zk Ub3+ZhLLenhxRkAR6HfOQ55vk5qPZkdC5VmrDFOxF1+af0BBpFNpo2ZeoOMS+8gc OfC7w1emOMp1WRPFiZ2XU5p2TTP67gCvm8V3dtotfSAplRHfN8hxtg5rlPVtQCd0 g8IdKsjuhB0/5vqHxYKU8xRiUYgZ4nb5iMKrufJwrhb7YQhdcidNXRHSlI1OnL85 0N1DT2xiM956Rvw1mJknhMZWmmuTaTdEJMhEWa2vc6NjPC16R4ynZhVqo4xwhsQs rxvBqhkLQi0xN3j+sTjvfRYXt0v9c3o9bQFq7g== -----END CERTIFICATE-----Generated at Thu May 8 07:15:42 2025 by rpki-client