$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer File: 7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer (raw, json) Hash identifier: 9qZFmo1Jdr0EBMmVJYdPchBuD9vAKTWeOE+UvUX3+4Y= Subject key identifier: 15:5D:E3:65:EC:9A:09:84:15:D2:3B:71:3E:E9:1A:F8:E3:8C:5D:20 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848C3D47510656B3A8B73EDA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Feb 2025 23:37:35 +0000 Certificate not after: Sun 09 May 2027 22:37:35 +0000 Subordinate resources: AS: 10981 IP: 23.133.188.0/24 IP: 2602:f70d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c3:d4:75:10:65:6b:3a:8b:73:ed:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 3 23:37:35 2025 GMT Not After : May 9 22:37:35 2027 GMT Subject: CN=7660ad47-0d47-4fc7-b1cc-1d954b61bac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:cd:a6:01:74:d4:e2:32:9c:2d:1f:70:d7: 28:ba:17:ba:a3:fc:db:4a:65:e3:f6:ef:67:d5:71: a4:90:d6:ea:cb:03:30:6d:7d:50:06:1b:f5:de:c1: d6:78:39:e6:b2:ab:8c:4c:4a:5a:0c:6e:5e:1f:46: a6:4d:12:b8:8d:10:30:82:cd:d9:8e:a9:78:48:ad: 48:44:aa:52:9f:45:34:67:3f:bf:12:a1:ed:f0:af: 53:de:9c:5c:40:56:3f:98:ff:22:ff:9a:7e:23:0e: 8c:8a:4b:95:1d:21:3a:44:5f:e9:ef:70:75:f6:28: 27:fe:2d:67:62:88:fb:7e:de:2f:09:54:20:48:fd: b7:66:f8:e3:15:0c:8d:55:23:8f:21:1c:a5:a4:d2: b6:aa:2b:30:12:df:79:05:8a:76:29:be:24:7d:ec: 25:fb:fd:99:2e:b6:71:35:70:9b:1c:aa:bb:36:61: 54:49:02:5e:7a:88:64:6c:eb:02:bc:ed:c0:79:d0: a4:c0:ad:1b:9d:1e:f5:37:7e:ad:e4:f2:fc:aa:5b: 66:5f:91:6f:94:31:4a:d6:b1:44:12:4a:e5:29:7b: 8c:d6:01:e4:3c:bc:cb:58:f6:74:73:09:42:23:42: d8:f6:fc:65:7a:95:9d:98:8e:d9:fd:64:74:6b:2d: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5D:E3:65:EC:9A:09:84:15:D2:3B:71:3E:E9:1A:F8:E3:8C:5D:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.188.0/24 IPv6: 2602:f70d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10981 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:37:e4:89:fb:03:27:77:d2:b2:4d:2e:cd:22:bf:01:30:38: 78:05:cf:7d:4e:6d:e2:ab:06:9d:44:6b:43:54:dc:90:ce:5b: f5:62:4c:89:7b:9c:f3:1f:ff:2b:3d:b2:2e:3d:cc:8a:04:99: 7d:53:07:36:16:f1:bd:83:16:bf:b9:ac:7b:9e:44:57:4c:72: c8:3c:52:27:d2:a0:bb:32:42:d6:5c:9c:92:d2:94:18:01:40: e9:4c:5d:ee:b2:9c:b3:6d:f4:d5:ec:2c:11:8b:23:d8:df:e1: 8b:72:79:3e:36:00:f1:1d:d2:8f:e7:aa:db:46:0d:cd:d9:a2: da:a9:28:e1:a4:0b:7b:6b:10:90:13:c4:1a:e9:07:4b:13:b6: 55:0d:26:c1:dc:9f:dd:4b:81:fd:21:b3:34:41:e6:a5:bb:09: 2b:09:69:75:b4:2a:ab:cb:90:3b:77:ed:51:b1:f8:90:8b:12: 2d:72:93:bd:e8:5f:d7:3d:ff:2d:3e:cd:f4:1f:3d:58:d3:0d: 75:76:97:5c:67:4d:67:9e:37:26:8f:cd:84:1d:e3:a9:21:4f: 51:0e:b2:73:84:73:c1:ba:0a:78:65:e4:10:10:48:8a:6c:78: 17:74:d2:88:55:8a:40:36:73:d9:df:be:70:96:2a:ef:fc:38: a8:7d:73:72 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjD1HUQZWs6i3PtqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwMzIzMzczNVoXDTI3MDUwOTIyMzczNVowLzEtMCsGA1UEAxMk NzY2MGFkNDctMGQ0Ny00ZmM3LWIxY2MtMWQ5NTRiNjFiYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEfNpgF01OIynC0fcNcouhe6o/zbSmXj9u9n 1XGkkNbqywMwbX1QBhv13sHWeDnmsquMTEpaDG5eH0amTRK4jRAwgs3Zjql4SK1I RKpSn0U0Zz+/EqHt8K9T3pxcQFY/mP8i/5p+Iw6MikuVHSE6RF/p73B19ign/i1n Yoj7ft4vCVQgSP23ZvjjFQyNVSOPIRylpNK2qiswEt95BYp2Kb4kfewl+/2ZLrZx NXCbHKq7NmFUSQJeeohkbOsCvO3AedCkwK0bnR71N36t5PL8qltmX5FvlDFK1rFE EkrlKXuM1gHkPLzLWPZ0cwlCI0LY9vxlepWdmI7Z/WR0ay0FdQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBVd42XsmgmEFdI7cT7pGvjjjF0gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 NjYwYWQ0Ny0wZDQ3LTRmYzctYjFjYy0xZDk1NGI2MWJhYzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc2NjBhZDQ3LTBkNDctNGZjNy1i MWNjLTFkOTU0YjYxYmFjMi83NjYwYWQ0Ny0wZDQ3LTRmYzctYjFjYy0xZDk1NGI2 MWJhYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhbwwDgQCAAIwCAMGBCYC9w0AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAirlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKk35In7Ayd30rJNLs0ivwEwOHgF z31ObeKrBp1Ea0NU3JDOW/ViTIl7nPMf/ys9si49zIoEmX1TBzYW8b2DFr+5rHue RFdMcsg8UifSoLsyQtZcnJLSlBgBQOlMXe6ynLNt9NXsLBGLI9jf4YtyeT42APEd 0o/nqttGDc3ZotqpKOGkC3trEJATxBrpB0sTtlUNJsHcn91Lgf0hszRB5qW7CSsJ aXW0KqvLkDt37VGx+JCLEi1yk73oX9c9/y0+zfQfPVjTDXV2l1xnTWeeNyaPzYQd 46khT1EOsnOEc8G6Cnhl5BAQSIpseBd00ohVikA2c9nfvnCWKu/8OKh9c3I= -----END CERTIFICATE-----Generated at Fri May 9 02:45:05 2025 by rpki-client