$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer File: 9af44307-21f9-411b-ba04-dedf105fd206.cer (raw, json) Hash identifier: BtjUt/ziOQFJAPHDOU77QWcvaAStPt3llzZzt19oAU8= Subject key identifier: 73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858492D373363CE19D075B0E901C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Mar 2025 17:36:25 +0000 Certificate not after: Wed 09 Jun 2027 21:10:12 +0000 Subordinate resources: AS: 54365 IP: 23.135.228.0/24 IP: 2602:f6c6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2d:37:33:63:ce:19:d0:75:b0:e9:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 13 17:36:25 2025 GMT Not After : Jun 9 21:10:12 2027 GMT Subject: CN=9af44307-21f9-411b-ba04-dedf105fd206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:1e:3c:f5:32:8f:77:a1:a9:8c:40:f4:37: a7:17:80:74:61:9e:39:dd:3e:43:e5:48:bc:c9:de: 07:48:2d:aa:f0:b8:6c:d2:c1:ca:dd:39:95:35:73: de:1d:34:27:c0:28:27:8a:85:ab:b9:c3:a1:54:11: 45:1f:a1:33:2a:b7:67:ce:b4:59:99:17:48:c2:61: 2f:05:bb:5d:84:47:0b:12:f6:38:16:8a:be:47:7c: d8:be:be:8c:7b:fc:5c:ce:d1:ad:1a:c4:85:40:86: 88:46:0c:3e:fc:a0:0d:fd:91:4a:66:20:d0:a3:e0: b5:31:82:39:29:07:f1:96:75:9a:4b:ab:3d:be:ef: d7:e0:f0:ba:74:7d:ae:7d:63:6e:cb:ae:82:e0:15: c2:81:cc:61:59:fa:37:54:e7:51:55:1a:d3:96:57: 84:f0:ab:da:22:b5:fb:5f:b3:12:a0:ae:32:f2:cf: c2:7e:93:87:17:07:f8:99:33:13:c3:74:da:10:48: 6e:19:78:fb:d7:12:62:99:7f:82:5b:1f:7e:c4:36: 68:6a:6e:21:94:cb:f1:3c:d5:bc:31:a8:d6:82:78: 41:78:93:c3:bf:bd:09:59:1a:4a:8e:bd:e7:d7:50: 42:bf:00:4c:49:7f:6c:ea:61:f5:77:e4:f4:17:0d: b9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.228.0/24 IPv6: 2602:f6c6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54365 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b1:e2:4c:16:f5:76:40:38:9e:b4:ba:3a:4e:d0:d4:d8:f0: de:ca:30:8e:df:f1:a6:5f:74:b9:be:9e:23:37:31:6a:cc:fc: 62:df:60:96:a1:9f:af:34:bc:ad:9b:a5:b9:c1:e0:f1:89:16: 55:f1:7f:72:95:7c:03:5b:b5:61:13:41:aa:9f:aa:f4:59:11: 83:f5:3e:1c:a0:a5:f4:83:af:14:32:f9:26:28:e3:93:b2:54: 5e:4a:7d:6a:8c:78:37:06:e4:12:35:44:8c:dc:be:a3:01:d4: 45:67:b1:e2:04:f2:ac:8a:27:8a:7e:34:ae:89:6f:c1:a6:a2: 1e:06:09:4c:a8:7e:44:62:48:08:ef:0c:60:92:eb:e2:54:6d: 6c:23:b2:46:f6:27:8c:42:9c:0a:ed:3b:e9:90:d7:da:15:a6: eb:5c:f7:f2:15:cb:5a:89:16:43:1c:d7:88:f5:e0:77:90:a2: de:55:c4:d8:ab:10:56:4a:46:fe:56:c8:d5:82:7a:7b:eb:80: 57:f3:87:d2:f8:27:e8:ce:e3:ce:21:28:c6:78:96:5b:9b:7d: 76:5a:0b:07:64:ae:34:8f:c5:0f:08:ac:a7:c2:cd:62:74:cb: 5a:f2:16:7c:a8:1a:5e:51:f4:30:ec:26:48:6c:d6:1e:74:df: ff:4f:bc:6e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEktNzNjzhnQdbDpAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxMzE3MzYyNVoXDTI3MDYwOTIxMTAxMlowLzEtMCsGA1UEAxMk OWFmNDQzMDctMjFmOS00MTFiLWJhMDQtZGVkZjEwNWZkMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwwePPUyj3ehqYxA9DenF4B0YZ453T5D5Ui8 yd4HSC2q8Lhs0sHK3TmVNXPeHTQnwCgnioWrucOhVBFFH6EzKrdnzrRZmRdIwmEv BbtdhEcLEvY4Foq+R3zYvr6Me/xcztGtGsSFQIaIRgw+/KAN/ZFKZiDQo+C1MYI5 KQfxlnWaS6s9vu/X4PC6dH2ufWNuy66C4BXCgcxhWfo3VOdRVRrTlleE8KvaIrX7 X7MSoK4y8s/CfpOHFwf4mTMTw3TaEEhuGXj71xJimX+CWx9+xDZoam4hlMvxPNW8 MajWgnhBeJPDv70JWRpKjr3n11BCvwBMSX9s6mH1d+T0Fw25bQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHM5JHpRzPsy4o/bzdA9jjKD9+lJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 YWY0NDMwNy0yMWY5LTQxMWItYmEwNC1kZWRmMTA1ZmQyMDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzlhZjQ0MzA3LTIxZjktNDExYi1i YTA0LWRlZGYxMDVmZDIwNi85YWY0NDMwNy0yMWY5LTQxMWItYmEwNC1kZWRmMTA1 ZmQyMDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXh+QwDgQCAAIwCAMGACYC9sYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDUXTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5seJMFvV2QDietLo6TtDU2PDe yjCO3/GmX3S5vp4jNzFqzPxi32CWoZ+vNLytm6W5weDxiRZV8X9ylXwDW7VhE0Gq n6r0WRGD9T4coKX0g68UMvkmKOOTslReSn1qjHg3BuQSNUSM3L6jAdRFZ7HiBPKs iieKfjSuiW/BpqIeBglMqH5EYkgI7wxgkuviVG1sI7JG9ieMQpwK7TvpkNfaFabr XPfyFctaiRZDHNeI9eB3kKLeVcTYqxBWSkb+VsjVgnp764BX84fS+CfozuPOISjG eJZbm312WgsHZK40j8UPCKynws1idMta8hZ8qBpeUfQw7CZIbNYedN//T7xu -----END CERTIFICATE-----Generated at Tue Jul 1 15:27:34 2025 by rpki-client