$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a.cer File: 0b6916e5-2238-46bc-9e75-63363cc71a0a.cer (raw, json) Hash identifier: TIQN8YX/cPYDkq9WkHZPk22VS/5VYPws7JVQgFi/pAQ= Subject key identifier: 9F:A9:3A:33:C1:81:A1:D6:03:0F:94:A9:27:BC:23:65:64:99:D5:53 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A58C3689775700232AEFE3640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/0b6916e5-2238-46bc-9e75-63363cc71a0a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Jun 2025 00:45:37 +0000 Certificate not after: Sat 02 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 26635 IP: 198.133.170.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:c3:68:97:75:70:02:32:ae:fe:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jun 29 00:45:37 2025 GMT Not After : Oct 2 00:45:37 2027 GMT Subject: CN=0b6916e5-2238-46bc-9e75-63363cc71a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:c1:0c:63:af:3b:56:ef:02:3b:06:ae:01: 9a:09:1f:13:73:38:94:47:6f:61:ec:c0:67:73:4a: e6:bd:4d:ae:fd:b1:23:b9:3e:00:f3:1a:cc:f4:0e: 26:e8:1c:c4:04:a2:35:27:7f:5b:a1:ea:1e:ab:52: 78:fd:fb:2d:44:9a:dd:b5:75:ef:23:47:f1:11:1c: c1:7e:3f:9c:b7:fb:06:a5:c4:bf:bf:98:98:02:6f: 06:63:66:da:20:69:3d:c8:ce:a3:0f:5e:24:10:36: 08:ca:f1:07:94:04:00:f4:05:e2:67:f8:f6:ad:05: 67:fd:fb:65:76:aa:9e:f1:48:02:c7:48:7a:2f:49: 73:44:07:86:5d:c3:ec:4c:3c:4a:05:7b:c2:af:a2: e4:c4:c0:67:c6:73:66:60:6c:c6:c8:e7:8b:48:a6: c4:dd:88:6f:9a:f8:a8:04:cc:a6:6f:e6:4d:67:42: cd:a6:37:b1:82:b8:8b:d8:6c:7c:c9:99:87:cd:81: 82:ad:09:5e:10:06:d3:9f:57:d9:4c:ac:78:c5:16: da:e9:9d:ed:4a:33:60:63:9c:22:04:ca:e7:b3:e1: 9d:dc:35:e4:b0:a1:2b:a4:90:24:c2:6d:2e:53:56: b8:68:53:5a:b4:01:26:cd:63:93:43:c3:7f:d7:43: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A9:3A:33:C1:81:A1:D6:03:0F:94:A9:27:BC:23:65:64:99:D5:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0b6916e5-2238-46bc-9e75-63363cc71a0a/0b6916e5-2238-46bc-9e75-63363cc71a0a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.133.170.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26635 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e8:4d:35:fe:69:f2:5a:e0:78:c8:e4:a5:8b:07:20:18:af: f1:6a:9f:a3:0f:26:8a:ff:b2:3a:6b:ff:94:e9:91:17:36:f3: 68:26:23:50:ca:60:57:59:d4:5c:89:cf:15:1f:9c:62:b7:d5: 3f:b4:60:03:47:65:21:5f:32:7c:b1:8a:09:b6:53:a9:18:9a: 71:ae:0c:d6:f6:b5:04:3e:7e:e3:95:8a:97:7b:4e:cf:17:aa: ae:8e:41:5a:07:8e:13:b7:ad:55:f9:74:dd:ab:d8:6f:f0:a6: db:12:d8:eb:48:24:51:d6:21:39:8e:f7:ef:88:85:fe:1c:70: cb:0f:6d:22:34:5a:fa:4e:71:81:22:07:44:61:01:22:31:c5: 08:c6:c0:c9:5f:03:3f:62:12:87:49:b5:1f:15:cc:05:80:fc: 14:0a:41:13:3a:d1:bb:82:eb:32:6d:98:b9:f6:99:42:9c:20: 25:72:2c:b8:37:36:cc:cf:03:8d:20:2d:f1:80:a0:1e:bc:c9: d9:6a:7f:22:4b:12:b0:12:e7:90:d9:ef:92:32:0b:e4:e0:87: e5:3e:9b:32:03:a9:91:de:49:a1:ff:94:84:ee:66:09:a4:40: ec:d2:25:07:ed:a6:67:d4:7b:8a:4e:8c:a2:0f:c1:4c:ee:85: 33:48:d7:20 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEpYw2iXdXACMq7+NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDYyOTAwNDUzN1oXDTI3MTAwMjAwNDUzN1owLzEtMCsGA1UEAxMk MGI2OTE2ZTUtMjIzOC00NmJjLTllNzUtNjMzNjNjYzcxYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvETBDGOvO1bvAjsGrgGaCR8TcziUR29h7MBn c0rmvU2u/bEjuT4A8xrM9A4m6BzEBKI1J39boeoeq1J4/fstRJrdtXXvI0fxERzB fj+ct/sGpcS/v5iYAm8GY2baIGk9yM6jD14kEDYIyvEHlAQA9AXiZ/j2rQVn/ftl dqqe8UgCx0h6L0lzRAeGXcPsTDxKBXvCr6LkxMBnxnNmYGzGyOeLSKbE3Yhvmvio BMymb+ZNZ0LNpjexgriL2Gx8yZmHzYGCrQleEAbTn1fZTKx4xRba6Z3tSjNgY5wi BMrns+Gd3DXksKErpJAkwm0uU1a4aFNatAEmzWOTQ8N/10MtPwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJ+pOjPBgaHWAw+UqSe8I2VkmdVTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w YjY5MTZlNS0yMjM4LTQ2YmMtOWU3NS02MzM2M2NjNzFhMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzBiNjkxNmU1LTIyMzgtNDZiYy05 ZTc1LTYzMzYzY2M3MWEwYS8wYjY5MTZlNS0yMjM4LTQ2YmMtOWU3NS02MzM2M2Nj NzFhMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGhaowGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC aAswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAi+hNNf5p8lrgeMjkpYsHIBiv8Wqfow8miv+yOmv/lOmRFzbz aCYjUMpgV1nUXInPFR+cYrfVP7RgA0dlIV8yfLGKCbZTqRiaca4M1va1BD5+45WK l3tOzxeqro5BWgeOE7etVfl03avYb/Cm2xLY60gkUdYhOY7374iF/hxwyw9tIjRa +k5xgSIHRGEBIjHFCMbAyV8DP2ISh0m1HxXMBYD8FApBEzrRu4LrMm2YufaZQpwg JXIsuDc2zM8DjSAt8YCgHrzJ2Wp/IksSsBLnkNnvkjIL5OCH5T6bMgOpkd5Jof+U hO5mCaRA7NIlB+2mZ9R7ik6Mog/BTO6FM0jXIA== -----END CERTIFICATE-----Generated at Mon Jun 30 20:49:17 2025 by rpki-client