$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55.cer File: d602ac0a-db45-4d15-8b0c-b3a0f533db55.cer (raw, json) Hash identifier: CQWp4MeHMQzqsvgVsWeaxhQxTj8T6ggD30gi9tZoszs= Subject key identifier: 17:A4:5E:B4:95:2B:C3:7C:B2:FA:D4:3B:3C:A4:03:00:7C:EC:A0:E2 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285848DCDAB8A3DE9B4C5DDAA896C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55/d602ac0a-db45-4d15-8b0c-b3a0f533db55.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 22:45:25 +0000 Certificate not after: Wed 08 Jul 2026 12:27:23 +0000 Subordinate resources: AS: 14468 IP: 192.107.45.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dc:da:b8:a3:de:9b:4c:5d:da:a8:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 12 22:45:25 2025 GMT Not After : Jul 8 12:27:23 2026 GMT Subject: CN=d602ac0a-db45-4d15-8b0c-b3a0f533db55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:99:5d:72:7c:40:f6:27:18:a3:11:10:9d: e5:26:61:84:59:20:9f:7b:3e:36:da:cd:69:05:b6: 67:11:aa:f4:10:c4:2c:22:9a:d4:06:a2:cd:b5:63: 1c:b0:f0:60:b6:6e:ff:b5:0f:5f:3d:28:ab:43:44: 61:ce:57:18:cc:ba:00:e8:1d:69:75:28:8d:cd:07: 59:8f:7a:34:1b:0f:14:a7:b5:15:f6:a0:e1:89:70: 89:08:81:e6:4c:fc:b1:3f:bd:e7:e8:33:4d:63:16: c2:81:dc:8c:15:3f:37:b2:fa:3b:aa:4e:be:d7:71: 7d:b9:77:c7:0b:9f:5b:30:b3:3b:4f:91:cd:b4:9a: 5e:96:14:f7:97:15:6c:56:52:0f:d2:43:fd:85:a6: 20:33:aa:97:bd:d7:fd:84:a1:b2:68:64:13:58:c1: 05:77:48:86:aa:0c:71:a1:3e:9a:df:19:e2:bd:dd: b1:38:23:c8:29:01:26:7a:2b:42:0e:ba:0c:65:c2: b6:a8:3b:46:e0:8c:c4:8d:4f:7f:7d:6e:f1:ea:b7: f0:35:63:8a:5a:80:47:be:ea:2b:2c:d3:97:9b:a2: 51:f9:e2:fc:c8:d2:63:98:95:4c:b4:d7:1c:3b:11: 02:4a:1d:a8:00:19:4a:f9:49:67:a2:56:29:e6:7a: 63:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A4:5E:B4:95:2B:C3:7C:B2:FA:D4:3B:3C:A4:03:00:7C:EC:A0:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d602ac0a-db45-4d15-8b0c-b3a0f533db55/d602ac0a-db45-4d15-8b0c-b3a0f533db55.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 192.107.45.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14468 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:44:af:92:35:88:61:c2:92:2a:d0:46:64:ad:98:d0:61:64: bb:a9:89:83:3f:96:a7:df:b9:f5:a5:20:df:1f:d4:c1:20:1f: bb:22:d6:1f:21:67:d8:0d:57:98:14:25:c8:a2:47:f0:b6:66: 37:e7:7b:0f:4d:d9:e3:95:21:ab:f1:a7:d3:f4:de:e0:ab:60: 0f:74:cd:dd:dd:9d:3c:d3:50:af:37:14:b6:ff:e0:23:79:43: 28:c3:c6:3d:89:48:7c:3b:8d:e7:0c:d1:07:ad:20:79:d9:90: 09:63:7b:35:f2:6d:73:31:a7:4e:8e:ac:e8:3f:b3:4a:0e:71: 88:17:7e:2a:a7:fe:7b:2a:a4:ab:b9:0b:a0:05:e9:5b:c6:fc: 17:aa:46:48:5e:a2:8d:f4:21:9c:01:ea:64:0b:85:ab:14:fb: cd:d6:d8:ab:32:9c:69:f1:6a:62:35:0e:04:6c:c2:fd:63:61: 8c:5b:a3:d3:3e:40:b7:d9:68:b0:24:ad:54:b3:62:a6:0d:f9: 3b:0f:22:65:5a:0a:79:eb:e1:cc:e1:43:41:34:65:d1:16:eb: df:41:51:e1:c6:af:ac:2c:d9:14:de:fb:68:5f:6d:4b:a9:a4: e4:34:f0:cf:1c:22:32:22:2a:68:33:31:2f:9f:91:41:92:23: 56:d3:96:ee -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEjc2rij3ptMXdqolsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDIxMjIyNDUyNVoXDTI2MDcwODEyMjcyM1owLzEtMCsGA1UEAxMk ZDYwMmFjMGEtZGI0NS00ZDE1LThiMGMtYjNhMGY1MzNkYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7WZXXJ8QPYnGKMREJ3lJmGEWSCfez422s1p BbZnEar0EMQsIprUBqLNtWMcsPBgtm7/tQ9fPSirQ0RhzlcYzLoA6B1pdSiNzQdZ j3o0Gw8Up7UV9qDhiXCJCIHmTPyxP73n6DNNYxbCgdyMFT83svo7qk6+13F9uXfH C59bMLM7T5HNtJpelhT3lxVsVlIP0kP9haYgM6qXvdf9hKGyaGQTWMEFd0iGqgxx oT6a3xnivd2xOCPIKQEmeitCDroMZcK2qDtG4IzEjU9/fW7x6rfwNWOKWoBHvuor LNOXm6JR+eL8yNJjmJVMtNccOxECSh2oABlK+UlnolYp5npj/QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFBekXrSVK8N8svrUOzykAwB87KDiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k NjAyYWMwYS1kYjQ1LTRkMTUtOGIwYy1iM2EwZjUzM2RiNTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Q2MDJhYzBhLWRiNDUtNGQxNS04 YjBjLWIzYTBmNTMzZGI1NS9kNjAyYWMwYS1kYjQ1LTRkMTUtOGIwYy1iM2EwZjUz M2RiNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAay0wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OIQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARUSvkjWIYcKSKtBGZK2Y0GFku6mJgz+Wp9+59aUg3x/UwSAf uyLWHyFn2A1XmBQlyKJH8LZmN+d7D03Z45Uhq/Gn0/Te4KtgD3TN3d2dPNNQrzcU tv/gI3lDKMPGPYlIfDuN5wzRB60gedmQCWN7NfJtczGnTo6s6D+zSg5xiBd+Kqf+ eyqkq7kLoAXpW8b8F6pGSF6ijfQhnAHqZAuFqxT7zdbYqzKcafFqYjUOBGzC/WNh jFuj0z5At9losCStVLNipg35Ow8iZVoKeevhzOFDQTRl0Rbr30FR4cavrCzZFN77 aF9tS6mk5DTwzxwiMiIqaDMxL5+RQZIjVtOW7g== -----END CERTIFICATE-----Generated at Thu Apr 3 22:37:19 2025 by rpki-client