$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer File: bc3aa731-9547-4b21-8f65-60f3717ca369.cer (raw, json) Hash identifier: Qyp+E46e/33FcQUioOUfN8jOURbTi3EhO39NtmmatqU= Subject key identifier: 51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858496EAE2936F9A51B39CC3EF500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Apr 2025 04:23:39 +0000 Certificate not after: Sat 10 Jul 2027 04:23:39 +0000 Subordinate resources: IP: 23.182.136.0/24 IP: 2602:f89b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:ae:29:36:f9:a5:1b:39:cc:3e:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 6 04:23:39 2025 GMT Not After : Jul 10 04:23:39 2027 GMT Subject: CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:dd:73:73:31:43:6b:9d:24:30:11:e0:cf: d4:25:da:70:2b:6c:04:10:7b:e7:ac:d3:da:bb:92: 60:50:cc:c5:2f:6d:7e:38:d1:8f:69:84:2c:bb:c1: f5:3b:d1:70:87:1e:9a:f2:64:fd:27:2f:56:af:92: 97:38:b3:1c:36:2f:69:1e:c1:8c:b2:1e:a7:2d:a3: 93:15:75:75:0d:11:ba:e0:74:96:58:08:43:7d:fe: a0:e6:7d:c2:1b:cd:1b:c3:87:80:11:d2:6d:c6:15: d8:48:e6:c0:e4:b1:bb:3f:1a:e5:70:d1:10:63:61: f2:97:27:a4:77:0c:c2:bb:aa:64:f2:8a:f3:a1:4d: f3:7d:a5:53:5d:ba:fc:05:d8:00:46:9e:9e:ed:06: 2d:5e:23:58:89:1c:9d:e9:11:c8:9e:30:96:da:22: 91:47:f8:e0:3b:f1:bf:cf:ec:0a:ab:4f:a6:81:c1: c4:ad:1e:9d:69:28:d7:59:b9:45:5f:54:ea:69:f3: 4d:6e:83:40:5f:59:63:b4:09:e1:36:e6:99:2b:2b: 6d:8a:e8:39:21:d3:ca:97:24:bf:ba:97:b0:ec:78: 0c:dc:2f:72:17:ea:d4:76:60:40:f1:a6:9b:5c:80: 3d:dd:90:b2:8f:a9:11:01:67:b2:b2:94:f4:43:b7: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.182.136.0/24 IPv6: 2602:f89b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8c:62:1c:fd:48:89:54:b6:5c:ef:80:65:f8:db:1a:35:a0: 8e:62:6a:57:89:d4:2e:9d:85:f4:26:0a:17:34:cc:4f:fe:11: ea:6a:b7:90:59:bf:e2:44:e3:fa:39:96:4c:76:fa:2c:3d:cf: 21:1c:ed:b5:ec:79:1e:4d:d8:8c:72:5c:0a:13:03:77:b7:ee: 21:85:28:5c:cd:1d:56:b5:ce:64:24:7d:8c:ab:1a:a3:b6:5c: c3:66:8f:f7:73:04:ab:16:fe:ab:af:a0:a6:14:2d:df:b0:a9: 68:26:f9:6b:53:8b:0e:9f:5b:3c:ef:06:b5:93:0f:71:3d:9f: 22:c6:d2:42:03:50:46:76:1c:0b:05:3a:22:f4:85:57:00:94: d4:70:2e:8b:6f:54:67:20:38:7e:48:dc:f8:06:b1:4a:ed:15: 2f:5e:8c:b2:3d:25:90:fe:f8:1e:5d:ee:98:9b:40:56:ab:5d: 62:2b:61:b2:24:ce:5b:ea:96:cf:ea:f3:01:8c:96:39:c0:41: 94:81:8f:b7:f1:61:72:c7:5c:69:47:0c:44:68:57:52:cb:89: eb:6d:e7:5b:d4:18:bf:83:8c:08:bc:d4:c2:a7:bc:8e:44:90: 5e:d6:ea:23:72:86:5c:d2:ea:72:a5:f9:de:47:ca:10:63:e4: 42:f7:1d:86 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWElurik2+aUbOcw+9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwNjA0MjMzOVoXDTI3MDcxMDA0MjMzOVowLzEtMCsGA1UEAxMk YmMzYWE3MzEtOTU0Ny00YjIxLThmNjUtNjBmMzcxN2NhMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVLdc3MxQ2udJDAR4M/UJdpwK2wEEHvnrNPa u5JgUMzFL21+ONGPaYQsu8H1O9Fwhx6a8mT9Jy9Wr5KXOLMcNi9pHsGMsh6nLaOT FXV1DRG64HSWWAhDff6g5n3CG80bw4eAEdJtxhXYSObA5LG7PxrlcNEQY2Hylyek dwzCu6pk8orzoU3zfaVTXbr8BdgARp6e7QYtXiNYiRyd6RHInjCW2iKRR/jgO/G/ z+wKq0+mgcHErR6daSjXWblFX1TqafNNboNAX1ljtAnhNuaZKyttiug5IdPKlyS/ upew7HgM3C9yF+rUdmBA8aabXIA93ZCyj6kRAWeyspT0Q7e9pwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFFFBdrWMlLZ2i9haMFViRhfl/yf5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9i YzNhYTczMS05NTQ3LTRiMjEtOGY2NS02MGYzNzE3Y2EzNjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2JjM2FhNzMxLTk1NDctNGIyMS04 ZjY1LTYwZjM3MTdjYTM2OS9iYzNhYTczMS05NTQ3LTRiMjEtOGY2NS02MGYzNzE3 Y2EzNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXtogwDgQCAAIwCAMGACYC+JsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACCMYhz9SIlUtlzvgGX42xo1oI5ialeJ1C6dhfQmChc0zE/+Eepqt5BZv+JE4/o5 lkx2+iw9zyEc7bXseR5N2IxyXAoTA3e37iGFKFzNHVa1zmQkfYyrGqO2XMNmj/dz BKsW/quvoKYULd+wqWgm+WtTiw6fWzzvBrWTD3E9nyLG0kIDUEZ2HAsFOiL0hVcA lNRwLotvVGcgOH5I3PgGsUrtFS9ejLI9JZD++B5d7pibQFarXWIrYbIkzlvqls/q 8wGMljnAQZSBj7fxYXLHXGlHDERoV1LLiett51vUGL+DjAi81MKnvI5EkF7W6iNy hlzS6nKl+d5HyhBj5EL3HYY= -----END CERTIFICATE-----Generated at Tue May 13 09:03:58 2025 by rpki-client