$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer File: f80afed8-630c-4446-a972-f7554ab8ece0.cer (raw, json) Hash identifier: FhFkhMkCth1flIgHeWGDbWrERYI5RIdNU8Oi3424Js4= Subject key identifier: ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F43285849C926D7E06979CFD1D19F9200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 May 2025 14:09:34 +0000 Certificate not after: Wed 11 Aug 2027 14:09:34 +0000 Subordinate resources: AS: 22339 IP: 23.135.164.0/24 IP: 2602:f6ca::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:26:d7:e0:69:79:cf:d1:d1:9f:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: May 8 14:09:34 2025 GMT Not After : Aug 11 14:09:34 2027 GMT Subject: CN=f80afed8-630c-4446-a972-f7554ab8ece0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:74:b6:05:21:c1:5c:dd:1c:eb:cf:d9:90:db: 3d:e0:56:8b:6a:86:91:28:5a:05:e8:a4:e8:2b:74: 35:cd:dd:2a:d9:7f:7c:65:70:46:2e:65:a5:89:f8: ab:f3:8d:e4:08:a9:38:5f:aa:8d:b9:a2:0b:bb:a8: 52:14:14:a4:3b:d3:a0:23:3a:a6:61:ed:48:d7:cf: dd:a1:b2:7e:a3:24:d2:af:2e:d7:74:c5:17:4e:a1: 25:08:c9:85:0f:0c:c0:7b:17:13:22:23:50:9e:84: 33:b0:6a:de:73:92:26:29:84:66:09:75:c9:9e:20: fa:ad:49:54:07:9e:7d:57:2d:de:79:88:44:77:49: 27:16:ae:6c:05:4d:13:23:ad:62:bb:84:7d:4c:60: ef:65:c9:17:09:de:50:16:d7:ed:49:40:85:17:8d: a0:8f:83:62:f2:a8:94:73:81:ab:8e:8d:45:77:09: 3e:33:0f:ee:00:ad:e5:a7:55:29:a6:69:3c:17:11: 7f:f7:61:4c:73:f2:42:58:56:1a:2a:3d:48:22:60: 7f:eb:01:e3:de:6a:c3:69:7c:a1:63:2f:e5:61:37: 9d:f7:78:37:59:4b:51:e3:b9:1a:65:9d:8f:12:40: 39:81:47:ad:25:f8:f1:02:89:16:92:37:78:b1:30: a1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.135.164.0/24 IPv6: 2602:f6ca::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22339 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cf:6f:fd:f6:78:bc:57:88:b2:16:82:93:14:a9:94:c2:b3: 4f:84:20:61:0a:ea:42:5a:ca:87:f9:9c:1d:ef:e2:b0:d8:26: 5c:86:47:9a:65:8e:7b:4f:b4:3e:66:43:33:ad:15:ab:2f:ce: 43:a1:8c:ec:ab:6d:40:ba:35:40:92:10:b7:32:43:59:4e:5d: 78:b0:9b:58:3b:4a:0b:69:05:7f:96:fe:51:2c:39:d7:2d:87: 01:06:3d:d4:5a:c7:51:da:d2:e2:43:61:21:1c:8e:2e:66:d0: ee:84:21:5a:21:c2:f4:ba:10:cc:36:f0:c5:5b:90:66:6d:5a: 79:e9:1d:50:8d:84:b8:25:90:2c:08:5c:5a:fd:a2:5b:d9:6f: 40:b9:5f:97:79:98:40:ac:bf:59:65:23:b3:2a:ef:1b:9d:66: 03:83:94:b0:a6:14:07:a6:87:31:6c:a7:93:35:91:b2:88:22: 14:e0:cf:3f:bf:24:4f:1c:e6:85:44:7d:b6:ef:9d:15:bf:a8: d2:99:64:1b:20:24:d8:19:fb:fc:50:eb:00:1d:c1:0a:7e:2a: 7b:14:f7:f2:af:db:41:0b:f9:f1:1e:9e:48:a2:c7:f2:d9:bf: 13:50:cb:12:c0:48:89:c6:a6:e9:c7:a1:2c:4d:bf:b4:a3:b4: 62:6d:9f:5b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEnJJtfgaXnP0dGfkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDUwODE0MDkzNFoXDTI3MDgxMTE0MDkzNFowLzEtMCsGA1UEAxMk ZjgwYWZlZDgtNjMwYy00NDQ2LWE5NzItZjc1NTRhYjhlY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHS2BSHBXN0c68/ZkNs94FaLaoaRKFoF6KTo K3Q1zd0q2X98ZXBGLmWlifir843kCKk4X6qNuaILu6hSFBSkO9OgIzqmYe1I18/d obJ+oyTSry7XdMUXTqElCMmFDwzAexcTIiNQnoQzsGrec5ImKYRmCXXJniD6rUlU B559Vy3eeYhEd0knFq5sBU0TI61iu4R9TGDvZckXCd5QFtftSUCFF42gj4Ni8qiU c4Grjo1Fdwk+Mw/uAK3lp1Uppmk8FxF/92FMc/JCWFYaKj1IImB/6wHj3mrDaXyh Yy/lYTed93g3WUtR47kaZZ2PEkA5gUetJfjxAokWkjd4sTChAwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFO1GazcOXpPlgfnQ2rF2C7uJLk8nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9m ODBhZmVkOC02MzBjLTQ0NDYtYTk3Mi1mNzU1NGFiOGVjZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2Y4MGFmZWQ4LTYzMGMtNDQ0Ni1h OTcyLWY3NTU0YWI4ZWNlMC9mODBhZmVkOC02MzBjLTQ0NDYtYTk3Mi1mNzU1NGFi OGVjZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXh6QwDgQCAAIwCAMGACYC9soAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAldDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADXPb/32eLxXiLIWgpMUqZTCs0+E IGEK6kJayof5nB3v4rDYJlyGR5pljntPtD5mQzOtFasvzkOhjOyrbUC6NUCSELcy Q1lOXXiwm1g7SgtpBX+W/lEsOdcthwEGPdRax1Ha0uJDYSEcji5m0O6EIVohwvS6 EMw28MVbkGZtWnnpHVCNhLglkCwIXFr9olvZb0C5X5d5mECsv1llI7Mq7xudZgOD lLCmFAemhzFsp5M1kbKIIhTgzz+/JE8c5oVEfbbvnRW/qNKZZBsgJNgZ+/xQ6wAd wQp+KnsU9/Kv20EL+fEenkiix/LZvxNQyxLASInGpunHoSxNv7SjtGJtn1s= -----END CERTIFICATE-----Generated at Mon May 12 20:42:56 2025 by rpki-client