$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer File: 8b2c8fdb-4736-46fb-9328-319b0c9b78d0.cer (raw, json) Hash identifier: WtDxUh8/yli1mCSewto2Vbu24nHHxXxSahC7uaCC68c= Subject key identifier: CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848EBA0A076350943D5D41F8880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 05:45:30 +0000 Certificate not after: Mon 24 May 2027 04:45:30 +0000 Subordinate resources: IP: 23.133.236.0/24 IP: 2602:f6ff::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:a0:a0:76:35:09:43:d5:d4:1f:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 18 05:45:30 2025 GMT Not After : May 24 04:45:30 2027 GMT Subject: CN=8b2c8fdb-4736-46fb-9328-319b0c9b78d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:83:fa:7f:35:a9:37:59:3b:bd:25:06:74:9e: f4:4a:c3:4d:1e:32:d8:98:53:91:ae:da:eb:42:c2: db:4b:8e:bb:a0:05:7a:85:00:e0:84:68:7d:a5:b5: 9a:06:a2:22:8a:5b:09:d6:66:96:30:c2:ab:0c:e4: 67:01:3f:9d:1e:44:53:f3:d4:43:73:c7:dc:ae:bd: 4b:d6:9a:a1:f0:4e:2d:6e:9a:29:f0:50:62:7a:4c: bd:3e:19:d7:54:a9:65:64:fe:3f:c8:50:37:d9:20: 0a:c0:d5:a7:bc:0f:0e:72:0d:09:fe:11:65:c7:8d: 39:3b:c5:07:60:fc:4c:19:19:3c:32:17:9e:0b:7c: f0:59:90:87:f0:75:08:01:5e:b4:d7:e0:85:2c:45: 81:27:dc:6a:12:e7:2f:c5:4b:97:c8:68:2f:49:16: 2b:97:22:6b:25:dd:c3:e0:25:75:4d:84:a0:c8:d3: ff:0e:41:32:df:64:d7:bd:6e:8a:98:40:66:7c:a4: 94:dd:03:ea:94:58:05:86:8a:0a:ab:27:f3:20:d8: 00:bc:35:7a:0e:dd:d8:88:e2:f0:89:52:81:ed:f4: ac:c4:52:3f:e8:e2:fc:20:93:a3:b6:f2:da:98:75: 29:df:49:bf:f0:73:e4:84:27:58:ff:eb:26:81:09: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:06:B6:DF:BC:04:1C:66:02:1E:AC:E2:8A:F8:42:2E:40:ED:95:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8b2c8fdb-4736-46fb-9328-319b0c9b78d0/8b2c8fdb-4736-46fb-9328-319b0c9b78d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.236.0/24 IPv6: 2602:f6ff::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2c:5f:6e:92:26:92:69:dd:f2:47:47:a8:5e:d6:6f:b9:15: 72:6d:00:d1:75:38:bd:37:3e:5f:83:60:31:45:fe:cc:02:5a: b0:51:f1:ad:0c:2b:5d:e4:46:0c:97:84:7c:b2:67:f1:d3:27: 01:09:73:ec:30:b5:15:a0:23:b3:b3:16:e2:a0:4a:0f:99:f4: 48:d9:7b:a1:7d:e5:22:d7:47:42:53:8a:79:66:ed:28:a1:19: d0:36:69:f3:9e:d9:61:f8:c6:79:e3:76:04:4c:77:27:a0:12: e9:db:ae:d3:32:0a:91:dd:9c:86:19:d6:ee:8f:07:88:e2:61: 16:3d:3b:98:b7:da:c9:8f:00:b0:22:39:e5:d3:4c:d8:2a:ca: f5:f0:35:bf:3d:c4:b2:c1:6a:06:bf:87:c0:77:7b:31:64:8c: 35:4b:ae:7c:af:57:07:52:3b:76:94:78:ec:3d:32:d5:42:01: ac:c2:b1:97:21:e2:a1:96:71:8d:81:2a:4b:c3:98:92:62:96: b9:c6:84:9f:dd:98:a8:b7:d2:2a:55:66:49:d7:27:85:4d:14: 74:6a:0a:c6:07:44:72:b2:e9:af:3d:27:d7:63:fd:83:a9:14: 4b:69:da:26:bd:62:60:00:fe:ea:01:1b:d9:ff:f6:22:10:76: a9:8f:74:3d -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEjroKB2NQlD1dQfiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxODA1NDUzMFoXDTI3MDUyNDA0NDUzMFowLzEtMCsGA1UEAxMk OGIyYzhmZGItNDczNi00NmZiLTkzMjgtMzE5YjBjOWI3OGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYP6fzWpN1k7vSUGdJ70SsNNHjLYmFORrtrr QsLbS467oAV6hQDghGh9pbWaBqIiilsJ1maWMMKrDORnAT+dHkRT89RDc8fcrr1L 1pqh8E4tbpop8FBieky9PhnXVKllZP4/yFA32SAKwNWnvA8Ocg0J/hFlx405O8UH YPxMGRk8MheeC3zwWZCH8HUIAV601+CFLEWBJ9xqEucvxUuXyGgvSRYrlyJrJd3D 4CV1TYSgyNP/DkEy32TXvW6KmEBmfKSU3QPqlFgFhooKqyfzINgAvDV6Dt3YiOLw iVKB7fSsxFI/6OL8IJOjtvLamHUp30m/8HPkhCdY/+smgQlZKwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMoGtt+8BBxmAh6s4or4Qi5A7ZXJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 YjJjOGZkYi00NzM2LTQ2ZmItOTMyOC0zMTliMGM5Yjc4ZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzhiMmM4ZmRiLTQ3MzYtNDZmYi05 MzI4LTMxOWIwYzliNzhkMC84YjJjOGZkYi00NzM2LTQ2ZmItOTMyOC0zMTliMGM5 Yjc4ZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhewwDgQCAAIwCAMGACYC9v8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AF4sX26SJpJp3fJHR6he1m+5FXJtANF1OL03Pl+DYDFF/swCWrBR8a0MK13kRgyX hHyyZ/HTJwEJc+wwtRWgI7OzFuKgSg+Z9EjZe6F95SLXR0JTinlm7SihGdA2afOe 2WH4xnnjdgRMdyegEunbrtMyCpHdnIYZ1u6PB4jiYRY9O5i32smPALAiOeXTTNgq yvXwNb89xLLBaga/h8B3ezFkjDVLrnyvVwdSO3aUeOw9MtVCAazCsZch4qGWcY2B KkvDmJJilrnGhJ/dmKi30ipVZknXJ4VNFHRqCsYHRHKy6a89J9dj/YOpFEtp2ia9 YmAA/uoBG9n/9iIQdqmPdD0= -----END CERTIFICATE-----Generated at Tue May 6 15:05:27 2025 by rpki-client