$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f.cer File: 7fc1763a-202c-4a11-8d74-3d052b92bf6f.cer (raw, json) Hash identifier: MTo8EFgrLD+jpltcxKa9Zm0B4yKI6ahQ1ypdkWQYDCE= Subject key identifier: 38:8D:A3:97:5F:F3:55:6A:88:B4:5A:77:BD:4F:29:C7:58:17:11:EE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584902E1621B488B03125A37AF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/7fc1763a-202c-4a11-8d74-3d052b92bf6f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 13:39:34 +0000 Certificate not after: Tue 01 Jun 2027 12:39:34 +0000 Subordinate resources: IP: 23.135.44.0/24 IP: 2602:f6d9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:e1:62:1b:48:8b:03:12:5a:37:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 26 13:39:34 2025 GMT Not After : Jun 1 12:39:34 2027 GMT Subject: CN=7fc1763a-202c-4a11-8d74-3d052b92bf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:3d:ee:5f:cc:1e:2a:e6:cb:7d:4a:65:e0: de:33:a5:fd:f4:99:d5:9c:cc:41:4e:f9:eb:05:c4: 42:a6:d1:60:7e:19:43:00:e6:88:f3:4b:ba:82:37: 24:1d:e2:58:2b:63:e3:10:96:3c:32:65:cf:84:f6: b2:59:ff:7e:dd:87:7b:20:26:04:49:ef:d6:d0:92: 89:45:e8:98:13:88:03:cf:f7:f6:ac:d0:5c:e2:5c: 23:f8:be:3f:b5:e8:71:a2:88:e0:ed:24:a8:b5:67: b0:60:cb:7d:90:e6:04:d7:e9:e8:35:7c:81:f7:6f: 27:a1:9b:61:b0:72:28:10:e5:e1:6e:be:6f:ae:df: e7:5a:60:0b:77:18:30:73:84:d0:06:54:1d:73:36: bb:54:da:fb:10:e6:9e:ee:5c:b2:71:d2:e1:10:53: 57:d5:52:b6:c7:1d:3e:99:6e:77:db:0b:c2:55:ea: e7:29:ab:85:56:3e:97:b6:99:a8:01:f6:71:26:ee: 7e:65:f9:84:40:97:56:8a:37:d7:90:e5:55:ee:26: 03:2f:10:f2:eb:fc:be:79:5f:94:ea:a4:9a:cf:94: e0:6c:5e:53:cf:a8:f3:13:0d:e8:4f:1c:40:76:af: c6:07:6f:25:2f:52:22:40:56:f9:80:85:0f:7a:7b: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:A3:97:5F:F3:55:6A:88:B4:5A:77:BD:4F:29:C7:58:17:11:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7fc1763a-202c-4a11-8d74-3d052b92bf6f/7fc1763a-202c-4a11-8d74-3d052b92bf6f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.44.0/24 IPv6: 2602:f6d9::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fb:9b:6f:8e:e5:7a:47:71:eb:7b:e9:4d:b5:a8:58:f6:46: 97:a7:72:e8:7b:dc:6a:c8:96:4d:a6:28:ce:7d:13:ff:d7:5b: c6:ed:01:9c:7c:78:4c:6f:42:d2:8f:21:54:b1:3a:fe:e0:18: cf:4b:bc:67:ae:c9:c4:ff:ed:e5:ee:3c:d9:ff:4e:a4:70:24: 80:d9:37:50:4d:cb:07:27:1f:c5:b2:2e:07:f5:72:2a:71:7d: 3f:c3:93:75:2e:a9:bc:16:6e:01:a4:9a:a9:c7:31:6e:d7:64: e9:00:52:fa:3d:1c:29:fc:40:a4:a5:a0:3d:62:30:3c:44:ec: 82:48:a0:8c:49:45:c5:33:7c:b1:b1:11:12:2f:25:39:14:52: 10:4a:21:2a:32:78:64:0c:29:14:77:eb:f2:2a:a9:c8:3d:52: 2b:ef:71:41:b9:0f:80:7d:5a:67:d9:09:fd:fc:29:f6:dc:18: 09:9d:90:6c:4a:33:df:41:f7:70:85:7b:7f:7f:fb:73:e6:bd: 0d:fb:52:7d:59:04:73:8e:b1:e4:f0:ef:6e:2b:f3:4c:e7:33: 85:e0:fb:4a:2a:e8:d2:86:0e:4a:4a:ba:4e:f5:a6:7d:e7:34: a5:0c:88:31:e5:32:b2:67:1f:9a:ec:88:5c:64:ff:6e:36:58: af:74:de:38 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEkC4WIbSIsDElo3rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNjEzMzkzNFoXDTI3MDYwMTEyMzkzNFowLzEtMCsGA1UEAxMk N2ZjMTc2M2EtMjAyYy00YTExLThkNzQtM2QwNTJiOTJiZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolk97l/MHirmy31KZeDeM6X99JnVnMxBTvnr BcRCptFgfhlDAOaI80u6gjckHeJYK2PjEJY8MmXPhPayWf9+3Yd7ICYESe/W0JKJ ReiYE4gDz/f2rNBc4lwj+L4/tehxoojg7SSotWewYMt9kOYE1+noNXyB928noZth sHIoEOXhbr5vrt/nWmALdxgwc4TQBlQdcza7VNr7EOae7lyycdLhEFNX1VK2xx0+ mW532wvCVernKauFVj6XtpmoAfZxJu5+ZfmEQJdWijfXkOVV7iYDLxDy6/y+eV+U 6qSaz5TgbF5Tz6jzEw3oTxxAdq/GB28lL1IiQFb5gIUPenv0yQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDiNo5df81VqiLRad71PKcdYFxHuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 ZmMxNzYzYS0yMDJjLTRhMTEtOGQ3NC0zZDA1MmI5MmJmNmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdmYzE3NjNhLTIwMmMtNGExMS04 ZDc0LTNkMDUyYjkyYmY2Zi83ZmMxNzYzYS0yMDJjLTRhMTEtOGQ3NC0zZDA1MmI5 MmJmNmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhywwDgQCAAIwCAMGACYC9tkAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHD7m2+O5XpHcet76U21qFj2Rpencuh73GrIlk2mKM59E//XW8btAZx8eExvQtKP IVSxOv7gGM9LvGeuycT/7eXuPNn/TqRwJIDZN1BNywcnH8WyLgf1cipxfT/Dk3Uu qbwWbgGkmqnHMW7XZOkAUvo9HCn8QKSloD1iMDxE7IJIoIxJRcUzfLGxERIvJTkU UhBKISoyeGQMKRR36/Iqqcg9UivvcUG5D4B9WmfZCf38KfbcGAmdkGxKM99B93CF e39/+3PmvQ37Un1ZBHOOseTw724r80znM4Xg+0oq6NKGDkpKuk71pn3nNKUMiDHl MrJnH5rsiFxk/242WK903jg= -----END CERTIFICATE-----Generated at Sun Jun 29 15:59:03 2025 by rpki-client