$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer File: 37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer (raw, json) Hash identifier: katLkXUkY4LB5DxmxKpsZamhHH8I3shGqqWd4+ZxLyA= Subject key identifier: C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858491C2CA6A66D067AAB5568A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Mar 2025 15:06:25 +0000 Certificate not after: Sat 08 May 2027 19:01:28 +0000 Subordinate resources: AS: 398862 IP: 23.135.196.0/24 IP: 2602:f98e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1c:2c:a6:a6:6d:06:7a:ab:55:68:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 7 15:06:25 2025 GMT Not After : May 8 19:01:28 2027 GMT Subject: CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:98:33:06:96:98:f7:19:86:53:36:91:5b:43: ab:b1:06:e4:1f:c8:2c:cc:9a:fc:6a:20:e9:6a:ae: b3:ee:80:37:65:61:1c:0e:ec:29:ab:6c:2d:17:74: fb:51:43:0a:bc:f1:0b:fb:12:b7:3f:2d:6a:81:74: 19:85:d0:3c:f2:21:3b:29:7a:ed:58:97:e8:4b:dc: f5:2f:97:75:13:63:c7:37:00:9f:84:bc:f0:6b:34: 95:93:06:28:6b:ec:ac:12:9a:ff:2e:4a:3f:c2:6e: b3:be:9b:bf:8a:1e:9a:6d:e2:54:36:98:d7:68:fd: b8:15:3a:aa:b8:c6:4a:c7:a2:39:fb:e5:70:c2:b7: a1:bb:fb:2c:a2:80:cd:ad:29:53:e3:df:17:5c:4b: ec:12:7a:87:2e:9c:e1:03:e8:e5:81:e4:7a:d3:32: 32:47:ca:bd:50:0c:41:e4:23:3d:19:cc:89:68:79: 0b:63:20:8e:93:69:6e:3b:4e:13:00:d3:39:64:98: 8e:ae:8e:74:66:91:43:e9:9c:3c:3b:4e:da:4d:ec: 34:e1:39:80:5b:35:89:3e:c1:98:36:ef:51:a1:89: d6:40:22:ab:42:1e:e1:4b:8d:e3:27:81:7b:3a:e6: 89:04:76:48:d2:99:76:b4:07:2c:57:79:fb:bf:a6: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.196.0/24 IPv6: 2602:f98e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398862 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d7:29:73:9c:00:b4:40:88:93:14:92:98:60:ad:55:3b:f1: 8b:ae:5e:e5:42:26:1c:6a:6d:91:cd:b5:46:2c:58:6e:12:95: c1:c7:7f:8a:1f:0e:b2:33:65:61:02:ea:c7:2e:66:02:40:81: c6:68:a6:2a:46:9d:a2:b1:4d:b0:84:40:c2:3c:65:51:f1:6e: 50:85:d4:d8:b1:0c:e1:28:f5:b7:7e:12:cd:fd:81:5c:e4:b4: 3f:f8:e3:2e:a1:4c:ac:0d:19:86:78:6a:e9:77:8a:c2:e3:b0: ad:78:34:b4:3e:e9:42:96:9b:aa:ed:2a:12:84:17:95:75:e1: 69:b4:c9:06:66:c5:d6:f6:8d:69:0e:b1:7e:3b:55:42:eb:a8: cc:bf:21:93:5f:81:46:c6:dc:db:e3:09:34:be:a6:58:b2:84: ce:12:ef:f9:4b:f1:fe:c5:3b:23:b2:04:7e:12:cd:4e:ac:08: b2:a5:97:10:9b:55:9a:cb:1b:79:03:1f:cb:d8:f9:f9:6a:e1: b3:ef:e5:bd:94:01:ab:8f:f9:3d:d6:01:0c:54:12:3c:0b:a7: 84:e3:ba:e0:da:5e:8f:e3:4b:ba:51:b0:50:bd:6e:61:f0:00: b3:44:9e:23:d7:e6:52:21:73:44:0f:8b:bf:5d:1a:bf:f1:c9: 02:e8:1a:e6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEkcLKambQZ6q1VopoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNzE1MDYyNVoXDTI3MDUwODE5MDEyOFowLzEtMCsGA1UEAxMk MzdkZjdiNmItNGIwYi00OWFlLWI2NzQtYTVhODhkOTI4MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZgzBpaY9xmGUzaRW0OrsQbkH8gszJr8aiDp aq6z7oA3ZWEcDuwpq2wtF3T7UUMKvPEL+xK3Py1qgXQZhdA88iE7KXrtWJfoS9z1 L5d1E2PHNwCfhLzwazSVkwYoa+ysEpr/Lko/wm6zvpu/ih6abeJUNpjXaP24FTqq uMZKx6I5++Vwwrehu/ssooDNrSlT498XXEvsEnqHLpzhA+jlgeR60zIyR8q9UAxB 5CM9GcyJaHkLYyCOk2luO04TANM5ZJiOro50ZpFD6Zw8O07aTew04TmAWzWJPsGY Nu9RoYnWQCKrQh7hS43jJ4F7OuaJBHZI0pl2tAcsV3n7v6bpaQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMKHR8VWv9pZMwgrthuKFGsV8yPnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z N2RmN2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4OGQ5MjgwZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzM3ZGY3YjZiLTRiMGItNDlhZS1i Njc0LWE1YTg4ZDkyODBmNC8zN2RmN2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4OGQ5 MjgwZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXh8QwDgQCAAIwCAMGACYC+Y4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYWDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz1ylznAC0QIiTFJKYYK1VO/GL rl7lQiYcam2RzbVGLFhuEpXBx3+KHw6yM2VhAurHLmYCQIHGaKYqRp2isU2whEDC PGVR8W5QhdTYsQzhKPW3fhLN/YFc5LQ/+OMuoUysDRmGeGrpd4rC47CteDS0PulC lpuq7SoShBeVdeFptMkGZsXW9o1pDrF+O1VC66jMvyGTX4FGxtzb4wk0vqZYsoTO Eu/5S/H+xTsjsgR+Es1OrAiypZcQm1Wayxt5Ax/L2Pn5auGz7+W9lAGrj/k91gEM VBI8C6eE47rg2l6P40u6UbBQvW5h8ACzRJ4j1+ZSIXNED4u/XRq/8ckC6Brm -----END CERTIFICATE-----Generated at Thu May 8 05:21:04 2025 by rpki-client