$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer File: 17624d03-2126-49cd-8e8c-c3d5089ac686.cer (raw, json) Hash identifier: UX4+uoiDJp6mWEnDey/gn89YqTcKAxxOyMPawhfek6s= Subject key identifier: 32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584A6F18E0E91223DDF79B498F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 00:45:37 +0000 Certificate not after: Sun 10 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 14923 IP: 23.178.248.0/24 IP: 2602:f92b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:18:e0:e9:12:23:dd:f7:9b:49:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jul 7 00:45:37 2025 GMT Not After : Oct 10 00:45:37 2027 GMT Subject: CN=17624d03-2126-49cd-8e8c-c3d5089ac686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:6d:2e:b9:9d:9f:b6:7a:ee:52:33:ce:f0: af:db:09:53:35:c5:20:7e:70:25:56:0a:c8:db:a8: 55:14:f5:5c:36:68:24:60:f1:da:f9:4e:8f:99:5e: 93:e6:14:c5:8c:0e:80:f8:5f:d0:3a:6f:27:0a:80: d7:38:64:8b:7c:65:e9:32:00:3f:ed:91:2b:4e:01: b1:50:8a:9e:37:fb:9f:5b:eb:56:3e:60:7d:05:4d: 6f:37:c2:1c:4a:52:88:5a:23:80:74:f4:94:1f:bd: c5:9f:74:fa:bf:1c:53:c5:5e:18:6f:ce:12:0d:c3: e4:dd:a3:e6:2b:4c:3a:8f:4e:6c:f1:f8:1d:a5:a9: a7:29:dd:05:b7:75:35:14:fa:70:ab:b4:55:e3:7b: b6:09:05:4d:40:e0:96:cb:35:b8:cc:09:8a:ed:e6: f9:ad:b8:73:a8:75:6d:00:16:53:1b:77:55:03:f0: 7f:fc:21:e9:09:b7:6f:10:6a:04:ad:2e:6e:46:5a: de:05:df:76:d0:0f:4c:7e:51:b9:26:a0:71:ac:de: 59:85:51:6d:df:f5:12:15:d0:3a:2b:8d:8f:e0:de: c2:58:d3:9b:3c:b4:b4:aa:9d:11:a6:b5:01:21:c3: f4:f6:6e:b9:76:65:86:00:66:62:f4:04:55:3a:a3: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.178.248.0/24 IPv6: 2602:f92b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14923 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9b:ac:c9:cc:e0:28:b8:e1:90:37:9d:da:a6:a7:d6:67:b0: 17:9d:1a:19:8b:bd:46:50:7e:ba:08:ae:27:82:0e:e6:cf:c5: ed:ce:6f:0e:ef:7a:54:c5:fc:a7:d7:14:79:8d:00:45:bd:4b: 40:fd:9d:f9:b5:10:b3:f0:7d:3d:7b:72:f4:c0:92:f4:33:13: 85:1e:e3:89:d6:51:f1:3b:0e:65:39:09:c0:35:ea:dd:5c:24: 03:5e:32:0a:7a:05:a0:83:39:9d:dc:55:11:94:ed:96:aa:10: da:a8:0d:27:be:5c:bf:29:d1:9c:39:b6:b5:53:4f:80:e3:6c: 5b:dd:a0:da:0c:e6:01:ba:c3:d2:13:1c:d9:f8:bd:4a:2f:22: 5c:bf:9e:00:54:cf:64:99:fe:b5:fb:a9:9a:59:a1:0e:9a:da: 07:d3:c6:0c:db:b0:c4:29:a9:28:8f:c1:2f:d1:e6:15:87:62: 1d:40:42:5b:aa:15:92:eb:db:f6:64:a3:8d:c5:88:38:5f:23: 80:bf:a3:93:1a:e7:cd:ab:cc:f3:a7:f8:af:75:58:3d:9c:f9: 9f:f8:2f:16:8d:37:99:2d:e4:70:86:46:02:55:0e:6a:b2:71: d3:97:f6:42:a8:09:cc:cc:92:bf:21:3f:2c:1e:f4:36:13:03: e1:e4:8f:b6 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpvGODpEiPd95tJj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDcwNzAwNDUzN1oXDTI3MTAxMDAwNDUzN1owLzEtMCsGA1UEAxMk MTc2MjRkMDMtMjEyNi00OWNkLThlOGMtYzNkNTA4OWFjNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dVtLrmdn7Z67lIzzvCv2wlTNcUgfnAlVgrI 26hVFPVcNmgkYPHa+U6PmV6T5hTFjA6A+F/QOm8nCoDXOGSLfGXpMgA/7ZErTgGx UIqeN/ufW+tWPmB9BU1vN8IcSlKIWiOAdPSUH73Fn3T6vxxTxV4Yb84SDcPk3aPm K0w6j05s8fgdpamnKd0Ft3U1FPpwq7RV43u2CQVNQOCWyzW4zAmK7eb5rbhzqHVt ABZTG3dVA/B//CHpCbdvEGoErS5uRlreBd920A9MflG5JqBxrN5ZhVFt3/USFdA6 K42P4N7CWNObPLS0qp0RprUBIcP09m65dmWGAGZi9ARVOqPAlQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDJ8hjEV6wqCKdIOC2RG54QPc1enMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x NzYyNGQwMy0yMTI2LTQ5Y2QtOGU4Yy1jM2Q1MDg5YWM2ODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzE3NjI0ZDAzLTIxMjYtNDljZC04 ZThjLWMzZDUwODlhYzY4Ni8xNzYyNGQwMy0yMTI2LTQ5Y2QtOGU4Yy1jM2Q1MDg5 YWM2ODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXsvgwDgQCAAIwCAMGACYC+SsAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjpLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADybrMnM4Ci44ZA3ndqmp9ZnsBed GhmLvUZQfroIrieCDubPxe3Obw7velTF/KfXFHmNAEW9S0D9nfm1ELPwfT17cvTA kvQzE4Ue44nWUfE7DmU5CcA16t1cJANeMgp6BaCDOZ3cVRGU7ZaqENqoDSe+XL8p 0Zw5trVTT4DjbFvdoNoM5gG6w9ITHNn4vUovIly/ngBUz2SZ/rX7qZpZoQ6a2gfT xgzbsMQpqSiPwS/R5hWHYh1AQluqFZLr2/Zko43FiDhfI4C/o5Ma582rzPOn+K91 WD2c+Z/4LxaNN5kt5HCGRgJVDmqycdOX9kKoCczMkr8hPywe9DYTA+Hkj7Y= -----END CERTIFICATE-----Generated at Thu Jul 31 08:05:27 2025 by rpki-client