$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.cer File: 6c1a499f-4f56-4480-b4b2-2c31a96f1edc.cer (raw, json) Hash identifier: W4/spTZuvcCvJG0KQ2STaSRtYOAv5de1VFGQZAcpuNo= Subject key identifier: 44:52:EC:83:7B:0F:3B:5E:B8:85:38:17:C9:CE:8E:F3:89:5E:BE:7D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848DFE86D9B04944CFE180C8920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Feb 2025 01:00:28 +0000 Certificate not after: Thu 20 May 2027 00:00:28 +0000 Subordinate resources: AS: 26313 IP: 23.134.148.0/24 IP: 2602:f6f4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:e8:6d:9b:04:94:4c:fe:18:0c:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 14 01:00:28 2025 GMT Not After : May 20 00:00:28 2027 GMT Subject: CN=6c1a499f-4f56-4480-b4b2-2c31a96f1edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:ee:c2:3c:57:c4:00:f9:17:ff:d2:23:7a: a8:44:ad:25:05:f4:17:3d:2c:aa:83:ac:f1:08:16: 92:e6:8d:0c:6d:69:78:46:65:a7:f9:96:a7:e8:eb: 3b:0d:13:61:09:fe:47:3b:bb:fe:c0:0b:95:79:20: ab:5c:d1:0a:b5:e2:32:44:36:55:8b:5a:30:26:be: 78:fd:a0:6b:7e:d0:ba:fb:3a:c2:1d:ef:7b:73:83: c0:8e:3c:49:0e:d3:db:0b:99:04:25:6a:e8:91:b5: b4:8f:dd:1b:a0:50:37:b1:6b:dc:50:8b:59:f1:53: 12:da:38:44:9f:04:c3:80:e6:08:6b:24:08:73:1f: 53:0d:64:1d:17:60:b2:b4:8f:bd:2c:76:6b:43:89: 3f:2c:e0:15:99:35:ee:7e:19:ca:4c:58:92:c9:7b: 1a:be:e2:b6:10:d1:a2:1d:9b:78:b6:c8:eb:0c:54: 2d:11:81:5e:1e:71:31:6c:b8:38:bd:31:bc:74:74: 1b:0d:1b:df:e5:84:41:6e:e3:a5:82:1c:e8:13:52: 54:9b:ae:bb:fb:47:3c:af:af:71:08:d1:d6:0e:28: a9:05:35:b1:6b:c3:7a:07:ad:96:18:2e:ed:00:51: e9:37:cf:c2:d4:5c:57:38:7b:61:88:26:2d:38:3f: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:52:EC:83:7B:0F:3B:5E:B8:85:38:17:C9:CE:8E:F3:89:5E:BE:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6c1a499f-4f56-4480-b4b2-2c31a96f1edc/6c1a499f-4f56-4480-b4b2-2c31a96f1edc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.148.0/24 IPv6: 2602:f6f4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26313 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:58:97:34:a5:79:34:ef:21:6d:43:15:36:bb:b0:ca:d4:1f: 1e:5d:c8:b8:30:3b:5d:ca:57:d1:0e:5f:ea:a3:ba:d2:bd:0e: 1a:b5:ee:fb:1d:15:81:29:aa:66:7d:dc:ac:96:a2:8e:71:4b: 37:dc:d6:2a:79:ce:d9:41:89:19:11:e6:d0:16:f5:4e:46:0f: c0:6e:91:4b:7b:f3:05:c9:8f:f6:6a:a0:2f:ba:3d:a5:db:86: a7:7b:d3:af:b2:91:29:f6:d1:ef:38:92:df:aa:4e:08:97:5d: 17:7b:eb:c1:4c:cc:2e:53:ad:ba:36:7e:b2:97:d1:86:49:f6: da:fe:48:b8:34:be:2e:2d:e0:8c:a5:1a:a1:c6:88:ab:02:53: c9:9b:25:1d:21:a1:90:69:4e:1e:d8:05:3d:69:33:24:f1:77: c2:7f:45:2c:5c:d2:e3:03:56:b4:1d:f3:82:e6:9d:d0:51:a9: a3:15:70:36:3e:af:1f:73:7d:1e:0f:55:15:49:b0:e1:3e:5e: fe:65:a2:6c:65:1c:ff:09:2b:77:cb:85:a0:0d:b7:d4:17:1a: ff:29:cb:f1:2d:4b:66:e8:11:99:94:98:3a:2d:7f:b0:fb:9b: 64:e4:ee:71:ef:27:5d:a1:00:28:29:35:11:c0:61:a5:d5:de: 4c:0e:de:94 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjf6G2bBJRM/hgMiSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxNDAxMDAyOFoXDTI3MDUyMDAwMDAyOFowLzEtMCsGA1UEAxMk NmMxYTQ5OWYtNGY1Ni00NDgwLWI0YjItMmMzMWE5NmYxZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uPuwjxXxAD5F//SI3qoRK0lBfQXPSyqg6zx CBaS5o0MbWl4RmWn+Zan6Os7DRNhCf5HO7v+wAuVeSCrXNEKteIyRDZVi1owJr54 /aBrftC6+zrCHe97c4PAjjxJDtPbC5kEJWrokbW0j90boFA3sWvcUItZ8VMS2jhE nwTDgOYIayQIcx9TDWQdF2CytI+9LHZrQ4k/LOAVmTXufhnKTFiSyXsavuK2ENGi HZt4tsjrDFQtEYFeHnExbLg4vTG8dHQbDRvf5YRBbuOlghzoE1JUm667+0c8r69x CNHWDiipBTWxa8N6B62WGC7tAFHpN8/C1FxXOHthiCYtOD+UuQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFERS7IN7DzteuIU4F8nOjvOJXr59MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 YzFhNDk5Zi00ZjU2LTQ0ODAtYjRiMi0yYzMxYTk2ZjFlZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzZjMWE0OTlmLTRmNTYtNDQ4MC1i NGIyLTJjMzFhOTZmMWVkYy82YzFhNDk5Zi00ZjU2LTQ0ODAtYjRiMi0yYzMxYTk2 ZjFlZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhpQwDgQCAAIwCAMGBCYC9vQAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmbJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGdYlzSleTTvIW1DFTa7sMrUHx5d yLgwO13KV9EOX+qjutK9Dhq17vsdFYEpqmZ93KyWoo5xSzfc1ip5ztlBiRkR5tAW 9U5GD8BukUt78wXJj/ZqoC+6PaXbhqd706+ykSn20e84kt+qTgiXXRd768FMzC5T rbo2frKX0YZJ9tr+SLg0vi4t4IylGqHGiKsCU8mbJR0hoZBpTh7YBT1pMyTxd8J/ RSxc0uMDVrQd84LmndBRqaMVcDY+rx9zfR4PVRVJsOE+Xv5lomxlHP8JK3fLhaAN t9QXGv8py/EtS2boEZmUmDotf7D7m2Tk7nHvJ12hACgpNRHAYaXV3kwO3pQ= -----END CERTIFICATE-----Generated at Thu May 8 19:01:58 2025 by rpki-client