$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9.cer File: 6b488e71-24cf-4f65-b75b-178c0739ead9.cer (raw, json) Hash identifier: gVRBLYXlqHYGgxXwNcfbz064GggUet6RYsV+R+dF0UE= Subject key identifier: 6E:37:FF:26:81:A2:A8:EB:02:DE:AF:AF:39:E5:C2:03:AD:E6:04:7B Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848E42C1F362B059B5903421600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/6b488e71-24cf-4f65-b75b-178c0739ead9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Feb 2025 13:40:05 +0000 Certificate not after: Fri 21 May 2027 12:40:05 +0000 Subordinate resources: AS: 401619 IP: 23.132.108.0/24 IP: 2602:f736::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e4:2c:1f:36:2b:05:9b:59:03:42:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 15 13:40:05 2025 GMT Not After : May 21 12:40:05 2027 GMT Subject: CN=6b488e71-24cf-4f65-b75b-178c0739ead9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:58:d4:d9:c6:99:27:0b:9a:a2:6f:08:f7: 6a:88:ee:45:0c:d7:dd:59:f3:88:31:bb:4f:39:21: 17:72:1d:05:7f:df:74:8f:3d:e7:b8:f6:fd:30:03: dc:7e:09:af:38:46:a8:60:04:32:00:fc:4f:4a:4e: c5:fc:fe:d5:7c:8c:e2:8d:f6:fb:51:62:14:be:a3: 14:aa:19:cf:30:95:71:55:eb:cd:7a:c9:06:2d:06: f1:bd:ec:5c:90:5b:2e:22:bc:6b:40:84:31:65:80: 11:7f:d7:2f:be:87:61:62:97:b0:15:c6:1e:25:fb: 92:71:76:aa:cf:1b:c2:86:32:64:9c:aa:b8:21:ec: 15:97:f1:f7:0b:1e:e7:79:d7:16:66:3f:be:4f:49: 5d:ab:e0:0e:48:11:af:3e:0c:a5:f4:3d:4e:c9:49: 7a:27:d5:fb:e2:b5:cf:59:2e:ac:64:69:2a:7e:d9: 46:e0:7b:71:02:d5:82:3e:54:af:3d:07:e7:fd:10: 42:98:fb:bc:0b:6c:98:c6:28:32:e8:3d:80:e8:dc: f6:e9:70:fd:0d:8f:7d:71:e5:54:aa:56:60:7f:06: 15:22:4d:b4:f0:dc:e4:e8:8a:76:a3:ad:9e:b8:be: c9:ac:ed:4d:e6:d0:42:23:c5:f4:7d:24:b0:bb:de: c0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:37:FF:26:81:A2:A8:EB:02:DE:AF:AF:39:E5:C2:03:AD:E6:04:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/6b488e71-24cf-4f65-b75b-178c0739ead9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.108.0/24 IPv6: 2602:f736::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401619 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:68:2d:c0:35:39:04:8b:90:04:d2:f0:a0:c1:c6:bc:09:2e: 51:8e:ec:fb:53:83:c5:58:df:a9:6d:9d:dd:7e:60:8a:ab:22: bf:c5:91:cb:71:37:0f:fd:a3:70:ab:00:18:d3:5c:61:42:a8: 3a:f5:30:ad:fa:98:f0:00:c3:16:92:cd:3e:d1:2b:51:24:6a: df:50:e0:42:4c:d9:3a:e9:d8:cb:0b:89:d5:d6:92:b4:36:a2: b7:5d:50:78:ba:75:7e:93:f3:e1:7d:ad:ac:fb:38:b6:eb:cd: 97:cb:09:31:f1:06:2d:d9:6c:a8:c7:60:2f:8a:d9:2d:ba:ed: fa:94:a3:1f:77:ba:8a:c4:0f:3f:60:19:02:b0:21:07:a2:c0: 40:e0:d0:fc:73:ae:09:dd:86:09:1b:e7:48:34:e0:19:8b:d2: fb:e8:fe:90:85:8d:fa:26:ef:87:9e:ba:5d:7f:22:12:3c:83: 1a:bd:f7:03:79:d8:d0:78:d4:85:52:7b:8c:07:18:f8:e3:9f: a8:f2:49:f8:51:3e:a0:8b:ca:53:6b:4f:5a:3a:a3:dc:c3:12: f7:13:9f:94:99:08:ab:1e:15:37:ea:fd:33:65:64:65:0f:92: ac:e2:61:ac:81:ef:04:00:8e:26:a2:3d:9c:7e:71:1a:89:eb: d1:cd:08:8d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjkLB82KwWbWQNCFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxNTEzNDAwNVoXDTI3MDUyMTEyNDAwNVowLzEtMCsGA1UEAxMk NmI0ODhlNzEtMjRjZi00ZjY1LWI3NWItMTc4YzA3MzllYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHxY1NnGmScLmqJvCPdqiO5FDNfdWfOIMbtP OSEXch0Ff990jz3nuPb9MAPcfgmvOEaoYAQyAPxPSk7F/P7VfIzijfb7UWIUvqMU qhnPMJVxVevNeskGLQbxvexckFsuIrxrQIQxZYARf9cvvodhYpewFcYeJfuScXaq zxvChjJknKq4IewVl/H3Cx7nedcWZj++T0ldq+AOSBGvPgyl9D1OyUl6J9X74rXP WS6sZGkqftlG4HtxAtWCPlSvPQfn/RBCmPu8C2yYxigy6D2A6Nz26XD9DY99ceVU qlZgfwYVIk208Nzk6Ip2o62euL7JrO1N5tBCI8X0fSSwu97AAwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFG43/yaBoqjrAt6vrznlwgOt5gR7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 YjQ4OGU3MS0yNGNmLTRmNjUtYjc1Yi0xNzhjMDczOWVhZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzZiNDg4ZTcxLTI0Y2YtNGY2NS1i NzViLTE3OGMwNzM5ZWFkOS82YjQ4OGU3MS0yNGNmLTRmNjUtYjc1Yi0xNzhjMDcz OWVhZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhGwwDgQCAAIwCAMGBCYC9zYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYg0zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCaC3ANTkEi5AE0vCgwca8CS5R juz7U4PFWN+pbZ3dfmCKqyK/xZHLcTcP/aNwqwAY01xhQqg69TCt+pjwAMMWks0+ 0StRJGrfUOBCTNk66djLC4nV1pK0NqK3XVB4unV+k/Phfa2s+zi2682Xywkx8QYt 2Wyox2Avitktuu36lKMfd7qKxA8/YBkCsCEHosBA4ND8c64J3YYJG+dINOAZi9L7 6P6QhY36Ju+HnrpdfyISPIMavfcDedjQeNSFUnuMBxj445+o8kn4UT6gi8pTa09a OqPcwxL3E5+UmQirHhU36v0zZWRlD5Ks4mGsge8EAI4moj2cfnEaievRzQiN -----END CERTIFICATE-----Generated at Sat May 10 22:17:20 2025 by rpki-client