$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer File: deaf388e-6941-424e-9f96-abe06598e29c.cer (raw, json) Hash identifier: A1ZAO0J5Hj+k09jAtJrqA+0r7+yNw1Rfr4EeqiHdHxU= Subject key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849D3617ECF04FFE647A8535640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 May 2025 06:05:50 +0000 Certificate not after: Sun 15 Aug 2027 06:05:50 +0000 Subordinate resources: AS: 401371 IP: 23.138.188.0/24 IP: 2602:f652::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d3:61:7e:cf:04:ff:e6:47:a8:53:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 12 06:05:50 2025 GMT Not After : Aug 15 06:05:50 2027 GMT Subject: CN=deaf388e-6941-424e-9f96-abe06598e29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:af:d0:51:47:60:51:2b:29:24:84:85:2c: ff:6f:23:6f:fe:23:83:f1:ff:10:21:a2:14:b1:0a: 4c:81:9b:76:97:19:b6:e9:05:c4:be:f4:bc:5f:f7: b2:81:3d:09:44:14:27:a7:27:13:74:74:32:27:78: 63:52:b2:4f:2d:c9:d0:97:d5:17:02:45:ef:a9:3c: 12:bb:86:a3:21:63:b5:bd:b0:2c:85:2e:11:cd:66: d4:f7:d6:a2:e1:d0:db:fa:42:16:67:9b:e5:ef:16: c0:5e:d6:33:47:12:4b:31:7b:33:24:9e:d8:11:45: cb:e2:78:5f:7f:2d:b9:f1:56:0b:70:8b:a9:bf:28: 38:69:93:93:73:b8:0e:a7:d7:72:fc:ae:10:05:9f: 78:0b:bd:a2:4f:eb:45:4c:96:dc:bb:f0:4a:b2:46: c8:03:2c:ed:81:18:c0:b7:99:de:86:72:4f:03:9d: dc:a5:cc:05:5a:1d:f4:0d:d0:3f:d0:d9:89:7d:e7: b4:5e:f8:76:3e:d7:e8:73:6a:88:4a:51:9d:c0:90: 10:f1:5f:1f:4b:53:01:3f:99:fb:21:91:be:34:ea: 4e:9e:d0:e1:c8:8c:83:6c:ef:09:84:eb:3e:7a:b6: aa:73:e3:6f:42:f2:96:3a:41:29:c0:8d:a5:c7:e9: d7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.138.188.0/24 IPv6: 2602:f652::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401371 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a8:8f:f1:32:4a:db:01:5f:5e:4a:c9:dd:69:a8:bd:56:9d: f3:ee:c4:4d:68:d3:41:d5:98:45:a4:c2:a9:ea:25:02:90:a7: 19:37:be:cd:f2:86:02:26:cc:81:bc:93:14:a7:aa:68:06:66: 47:5a:6e:62:6d:df:87:33:d8:53:71:08:13:08:9e:85:f7:26: 5e:31:48:38:fc:f4:07:aa:13:d8:1b:51:e9:61:c8:c9:87:fe: 5d:ed:f5:5d:e9:58:58:3a:6b:9e:01:00:2f:5e:d2:de:89:2d: 1b:d6:20:35:03:34:74:8c:c2:ad:7d:d2:1b:65:02:42:76:f9: e0:f1:27:0e:f9:39:73:ff:60:b9:dd:ef:14:74:eb:82:a7:48: 40:f7:80:e4:b1:7a:33:82:10:c7:2e:e6:fd:e7:0f:c2:bf:40: db:0f:a4:c4:6d:54:78:34:d1:25:f0:72:0f:70:d2:2a:2f:a9: 23:d5:54:6c:4d:2b:86:9a:01:ed:75:c7:66:16:e0:de:70:dd: b2:db:b8:c3:2e:31:db:7b:7c:8a:11:41:6f:9a:d8:be:ba:a5: 83:f4:98:bc:14:ab:49:2d:72:52:32:ad:21:76:72:8d:7e:b1: 6b:7b:a6:81:d7:3f:90:cb:85:55:8b:9e:5f:a6:3a:9c:d6:69: ee:da:7e:2f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEnTYX7PBP/mR6hTVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUxMjA2MDU1MFoXDTI3MDgxNTA2MDU1MFowLzEtMCsGA1UEAxMk ZGVhZjM4OGUtNjk0MS00MjRlLTlmOTYtYWJlMDY1OThlMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVWv0FFHYFErKSSEhSz/byNv/iOD8f8QIaIU sQpMgZt2lxm26QXEvvS8X/eygT0JRBQnpycTdHQyJ3hjUrJPLcnQl9UXAkXvqTwS u4ajIWO1vbAshS4RzWbU99ai4dDb+kIWZ5vl7xbAXtYzRxJLMXszJJ7YEUXL4nhf fy258VYLcIupvyg4aZOTc7gOp9dy/K4QBZ94C72iT+tFTJbcu/BKskbIAyztgRjA t5nehnJPA53cpcwFWh30DdA/0NmJfee0Xvh2Ptfoc2qISlGdwJAQ8V8fS1MBP5n7 IZG+NOpOntDhyIyDbO8JhOs+eraqc+NvQvKWOkEpwI2lx+nXdQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNPMijKn3dLwBSIFYIGKmbn2EsVnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9k ZWFmMzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUwNjU5OGUyOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2RlYWYzODhlLTY5NDEtNDI0ZS05 Zjk2LWFiZTA2NTk4ZTI5Yy9kZWFmMzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUwNjU5 OGUyOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXirwwDgQCAAIwCAMGACYC9lIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYf2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSqI/xMkrbAV9eSsndaai9Vp3z 7sRNaNNB1ZhFpMKp6iUCkKcZN77N8oYCJsyBvJMUp6poBmZHWm5ibd+HM9hTcQgT CJ6F9yZeMUg4/PQHqhPYG1HpYcjJh/5d7fVd6VhYOmueAQAvXtLeiS0b1iA1AzR0 jMKtfdIbZQJCdvng8ScO+Tlz/2C53e8UdOuCp0hA94DksXozghDHLub95w/Cv0Db D6TEbVR4NNEl8HIPcNIqL6kj1VRsTSuGmgHtdcdmFuDecN2y27jDLjHbe3yKEUFv mti+uqWD9Ji8FKtJLXJSMq0hdnKNfrFre6aB1z+Qy4VVi55fpjqc1mnu2n4v -----END CERTIFICATE-----Generated at Tue May 13 22:48:30 2025 by rpki-client