$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer File: 3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer (raw, json) Hash identifier: Sow4G8rm+UQQq/xyJji8zkwHzbE7lZho9RHvfpjZPN0= Subject key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487BBA1601EADDFAAF9FB0D640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jan 2025 03:46:15 +0000 Certificate not after: Wed 14 Apr 2027 02:46:15 +0000 Subordinate resources: AS: 401560 IP: 23.131.252.0/24 IP: 2602:f744::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:ba:16:01:ea:dd:fa:af:9f:b0:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 9 03:46:15 2025 GMT Not After : Apr 14 02:46:15 2027 GMT Subject: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:d5:29:b9:d3:fa:54:f3:d3:55:19:e8:0e: 07:21:eb:96:c3:9a:58:c1:9a:c9:24:db:5f:a5:f0: 7f:d0:1a:9d:88:ed:ca:e3:1b:08:2d:e7:c1:79:3e: ae:4e:a2:0f:06:11:b3:0a:ee:c8:46:ca:22:a9:36: 76:ee:dd:26:06:10:21:ca:8f:2a:1f:93:50:fe:b6: c9:41:3a:23:f7:65:52:f3:6d:9c:02:d2:71:b9:f9: c3:2c:fc:39:53:fc:8c:fd:92:79:03:f9:3c:70:6c: b3:55:bc:a4:54:3e:d2:1e:15:46:28:e2:9f:cb:a6: 5c:ac:c2:c0:79:e6:46:d5:41:4f:1a:5c:2d:8f:e9: 5c:0f:35:0f:e4:f5:56:d1:3b:e1:14:a3:d7:07:3c: 62:6c:c9:7d:04:f3:01:6f:4a:33:ee:fb:76:cd:6f: 5e:bc:44:cf:f9:33:c2:16:ef:b7:52:ea:41:a9:c1: 12:9b:7d:a8:63:74:12:29:50:69:ad:b0:b0:32:72: f5:76:57:48:e7:d5:13:b3:b9:a5:06:ee:62:a6:4f: ee:fb:81:2f:f7:60:92:da:e7:15:84:ee:dc:51:59: 3b:8d:47:39:38:67:96:1d:15:00:87:f5:89:0a:e7: ad:7b:e0:64:7a:44:48:a2:e6:b2:4e:38:f7:82:91: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.252.0/24 IPv6: 2602:f744::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401560 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:7c:21:ac:1b:b8:87:8d:b5:af:06:bf:36:49:da:ee:d6:fc: 05:4a:dd:f4:5c:28:cd:8a:52:f9:8a:85:c0:8c:31:44:bb:84: 35:4e:de:67:e5:4b:ac:83:e7:51:b6:37:54:68:51:41:55:02: 80:3d:cf:1e:3e:c3:74:2a:d1:02:d6:a3:6b:a8:e9:4d:85:f0: d1:c4:3b:b2:8a:60:c9:9a:a4:32:86:f1:2c:ca:c0:17:93:e4: 85:e3:66:85:f1:1e:86:e3:a9:6b:b2:19:42:92:3f:3e:cc:7e: 6a:3e:6e:ef:07:8a:b5:b7:a5:c0:28:1c:36:2e:20:a3:10:fc: 65:aa:d9:dc:4d:ed:cf:be:0a:17:89:3e:89:22:2e:6d:f2:91: e8:35:59:71:74:71:b5:0f:8b:69:0d:cf:14:86:22:97:08:43: 27:bf:32:d9:e1:d4:2b:22:8c:02:68:84:e3:1e:a0:bd:a9:94: 19:a6:6e:08:21:d8:92:31:30:1f:f8:d1:72:ca:1b:3d:e8:69: 10:88:8f:8a:64:2b:18:47:52:3c:78:68:73:64:8c:1f:ac:a4: 30:25:c6:5f:3b:ce:d8:b6:65:df:07:b3:33:cc:09:15:da:84: 7e:d8:f2:3f:e3:e1:b3:33:3a:5e:65:c0:15:25:4c:21:ee:d1: 8b:b7:18:c7 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEh7uhYB6t36r5+w1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwOTAzNDYxNVoXDTI3MDQxNDAyNDYxNVowLzEtMCsGA1UEAxMk M2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIwY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov/VKbnT+lTz01UZ6A4HIeuWw5pYwZrJJNtf pfB/0BqdiO3K4xsILefBeT6uTqIPBhGzCu7IRsoiqTZ27t0mBhAhyo8qH5NQ/rbJ QToj92VS822cAtJxufnDLPw5U/yM/ZJ5A/k8cGyzVbykVD7SHhVGKOKfy6ZcrMLA eeZG1UFPGlwtj+lcDzUP5PVW0TvhFKPXBzxibMl9BPMBb0oz7vt2zW9evETP+TPC Fu+3UupBqcESm32oY3QSKVBprbCwMnL1dldI59UTs7mlBu5ipk/u+4Ev92CS2ucV hO7cUVk7jUc5OGeWHRUAh/WJCuete+BkekRIouayTjj3gpEN6QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIU063s7fOs3LlKrkI6fy/0+ChafMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z YjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzNiNGE0NDFmLTVkMGItNDgxMy04 MzZlLTJhZWZkNTRiMGNhMS8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0 YjBjYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg/wwDgQCAAIwCAMGACYC90QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgmDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVfCGsG7iHjbWvBr82Sdru1vwF St30XCjNilL5ioXAjDFEu4Q1Tt5n5Uusg+dRtjdUaFFBVQKAPc8ePsN0KtEC1qNr qOlNhfDRxDuyimDJmqQyhvEsysAXk+SF42aF8R6G46lrshlCkj8+zH5qPm7vB4q1 t6XAKBw2LiCjEPxlqtncTe3PvgoXiT6JIi5t8pHoNVlxdHG1D4tpDc8UhiKXCEMn vzLZ4dQrIowCaITjHqC9qZQZpm4IIdiSMTAf+NFyyhs96GkQiI+KZCsYR1I8eGhz ZIwfrKQwJcZfO87YtmXfB7MzzAkV2oR+2PI/4+GzMzpeZcAVJUwh7tGLtxjH -----END CERTIFICATE-----Generated at Wed May 7 21:12:03 2025 by rpki-client