$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer File: 61078829-6930-46b0-9ac8-91898d36b056.cer (raw, json) Hash identifier: tTuMEwS9zKHZ9Ya2oIC2B4EHruf4eWSIeVYWU4RW0BE= Subject key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858495125C825F36EBA09ECB10B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Mar 2025 14:30:26 +0000 Certificate not after: Mon 08 Jun 2026 21:14:16 +0000 Subordinate resources: AS: 32272 AS: 33548 IP: 23.227.96.0/19 IP: 64.203.112.0/20 IP: 66.235.116.0/22 IP: 67.204.32.0/19 IP: 104.200.32.0/20 IP: 104.247.128.0 -- 104.247.151.255 IP: 104.254.100.0/22 IP: 162.251.200.0/22 IP: 195.155.0.0/18 IP: 198.210.32.0/19 IP: 205.157.144.0/20 IP: 206.162.224.0/20 IP: 207.177.128.0/18 IP: 209.54.32.0/20 IP: 2606:6e80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:25:c8:25:f3:6e:ba:09:ec:b1:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 26 14:30:26 2025 GMT Not After : Jun 8 21:14:16 2026 GMT Subject: CN=61078829-6930-46b0-9ac8-91898d36b056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d5:2b:be:2d:c9:6f:1e:d6:0d:46:34:d1:ef: 93:96:4e:fc:4f:db:a4:36:da:7e:a1:11:f9:cd:4f: 82:29:b8:f2:89:29:bc:2e:d1:4d:96:3b:b2:ea:be: d9:f3:0c:4b:ce:cf:8e:4d:c2:d4:df:4c:93:21:cd: 1a:98:e7:46:e1:98:93:12:9a:9f:61:a9:af:4c:1c: d9:96:0c:99:40:ae:7e:da:72:6a:32:8c:a4:dc:d3: 11:1c:5b:39:3a:74:c1:2c:7a:4a:5c:c8:02:c6:26: 29:c8:97:2f:8a:e5:3c:e5:4f:c7:7a:56:3d:72:d9: da:ed:b3:4c:e6:d1:af:85:99:ad:41:0f:11:c6:45: 78:1e:54:fc:db:8a:16:62:b3:81:dd:07:24:75:c1: d3:5a:73:11:a3:c3:a9:a5:dd:97:a4:d4:4c:d3:95: eb:5d:20:74:d9:75:31:24:23:4d:ac:27:21:6b:80: 15:59:61:4b:ef:f1:42:eb:a8:01:55:c9:f6:30:2b: c6:4e:e1:df:c9:cb:e7:a3:cc:81:61:d9:b6:a9:b9: fd:8b:b8:15:71:00:c9:cd:cc:b4:fb:b2:43:a7:15: b1:f2:8e:2a:73:21:9b:ca:b6:f2:3a:8b:0a:80:f2: 27:dd:50:3d:52:6a:a8:1f:94:f4:68:82:79:b1:96: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.96.0/19 64.203.112.0/20 66.235.116.0/22 67.204.32.0/19 104.200.32.0/20 104.247.128.0-104.247.151.255 104.254.100.0/22 162.251.200.0/22 195.155.0.0/18 198.210.32.0/19 205.157.144.0/20 206.162.224.0/20 207.177.128.0/18 209.54.32.0/20 IPv6: 2606:6e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32272 33548 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:3b:c9:df:69:57:76:b8:17:c5:f8:04:d5:3b:a6:e3:bc:71: c6:cf:0b:3e:66:8a:26:c2:8d:e1:e4:36:09:1b:cb:fb:8a:5e: 29:f9:4a:3f:6b:41:1d:54:81:d7:6b:14:42:b7:0f:82:d9:9e: 45:23:f4:89:f3:f9:6b:58:4f:b0:a3:ad:dc:b5:ba:d8:73:bb: e7:2a:8f:8d:c2:a1:24:83:2a:51:c8:c9:58:8c:5f:d1:29:b4: 52:4f:21:ab:2f:04:71:f9:6e:b0:91:19:4c:42:9b:19:1d:75: 7f:22:75:f7:5e:20:10:6e:a8:20:a1:e2:77:2a:a8:cb:b3:45: 18:95:3e:51:aa:0a:86:88:f1:98:50:79:96:50:e2:f2:f4:9c: 0f:05:b5:65:a9:4e:9b:53:e6:e4:1a:a8:7d:f6:73:3f:85:17: 3b:79:07:ec:06:cc:3e:d3:b4:ff:22:ad:ff:93:11:56:c9:25: fd:27:1c:1c:c1:08:9d:e9:b5:a0:0d:92:69:c6:28:d8:84:8d: f5:c0:57:a8:6b:2b:48:2e:ce:04:84:3f:d5:ec:b4:e3:e4:57: 5e:32:d1:0c:31:e9:28:90:c7:c9:c3:9a:08:c4:53:7d:11:58: f5:7e:d6:1d:0d:5a:20:b5:c4:ee:19:f8:df:16:91:59:a4:87: f3:2c:15:fa -----BEGIN CERTIFICATE----- MIIHczCCBlugAwIBAgIUAQ0Mn0MoWElRJcgl8266CeyxC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDMyNjE0MzAyNloXDTI2MDYwODIxMTQxNlowLzEtMCsGA1UEAxMk NjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZiMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNUrvi3Jbx7WDUY00e+Tlk78T9ukNtp+oRH5 zU+CKbjyiSm8LtFNljuy6r7Z8wxLzs+OTcLU30yTIc0amOdG4ZiTEpqfYamvTBzZ lgyZQK5+2nJqMoyk3NMRHFs5OnTBLHpKXMgCxiYpyJcviuU85U/HelY9ctna7bNM 5tGvhZmtQQ8RxkV4HlT824oWYrOB3QckdcHTWnMRo8Oppd2XpNRM05XrXSB02XUx JCNNrCcha4AVWWFL7/FC66gBVcn2MCvGTuHfycvno8yBYdm2qbn9i7gVcQDJzcy0 +7JDpxWx8o4qcyGbyrbyOosKgPIn3VA9UmqoH5T0aIJ5sZYsqwIDAQABo4IEhTCC BIEwHQYDVR0OBBYEFCBF1donu0uJTdSCuWagC8C2tlSgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzYxMDc4ODI5LTY5MzAtNDZiMC05 YWM4LTkxODk4ZDM2YjA1Ni82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQz NmIwNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwgYQGCCsGAQUF BwEHAQH/BHUwczBiBAIAATBcAwQFF+NgAwQEQMtwAwQCQut0AwQFQ8wgAwQEaMgg MAwDBAdo94ADBANo95ADBAJo/mQDBAKi+8gDBAbDmwADBAXG0iADBATNnZADBATO ouADBAbPsYADBATRNiAwDQQCAAIwBwMFACYGboAwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICfhACAwCDDDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNO8nfaVd2uBfF+ATVO6bjvHHGzws+Zoom wo3h5DYJG8v7il4p+Uo/a0EdVIHXaxRCtw+C2Z5FI/SJ8/lrWE+wo63ctbrYc7vn Ko+NwqEkgypRyMlYjF/RKbRSTyGrLwRx+W6wkRlMQpsZHXV/InX3XiAQbqggoeJ3 KqjLs0UYlT5RqgqGiPGYUHmWUOLy9JwPBbVlqU6bU+bkGqh99nM/hRc7eQfsBsw+ 07T/Iq3/kxFWySX9JxwcwQid6bWgDZJpxijYhI31wFeoaytILs4EhD/V7LTj5Fde MtEMMekokMfJw5oIxFN9EVj1ftYdDVogtcTuGfjfFpFZpIfzLBX6 -----END CERTIFICATE-----Generated at Thu Apr 3 23:04:56 2025 by rpki-client