$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer File: 9caf23fc-9cbc-4f40-aea8-07653211f665.cer (raw, json) Hash identifier: bDXTVc+rOtn7cAaIPw3y/fbH4p0GaTZy2QZtfNITbo8= Subject key identifier: 4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848EBA284E95D9CBB59B68E0200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 05:49:18 +0000 Certificate not after: Mon 24 May 2027 04:49:18 +0000 Subordinate resources: IP: 23.134.36.0/24 IP: 2602:f6fa::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:a2:84:e9:5d:9c:bb:59:b6:8e:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 18 05:49:18 2025 GMT Not After : May 24 04:49:18 2027 GMT Subject: CN=9caf23fc-9cbc-4f40-aea8-07653211f665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:d6:50:31:28:b7:9a:7c:ec:b2:a8:13:0d: a1:9e:07:ce:13:10:31:eb:82:86:ec:70:94:95:0d: 75:d1:4a:be:3b:8b:9d:0a:87:b2:a6:8a:66:b2:57: ef:b1:ac:4f:fc:5f:13:8c:2e:50:8f:77:1d:65:e4: ee:49:c5:62:d0:0a:70:42:5c:bf:77:70:29:75:b2: 0f:5f:f7:db:3e:6b:03:25:61:d4:e1:e0:a4:51:d6: 90:8d:07:8d:14:c0:9f:85:42:7e:66:e7:89:7a:61: 99:95:c6:d6:22:4b:6b:23:27:0b:55:ee:2c:79:de: b8:c9:74:de:7a:b2:9a:6f:f7:e9:5c:93:11:59:1a: 9b:b9:69:e4:08:47:9f:06:e6:78:90:89:c4:04:ac: 4b:67:79:3f:63:ef:df:58:fe:f7:e6:45:4e:ef:9b: 89:0c:68:24:79:95:bc:cb:16:d9:04:b5:6b:d7:12: 9f:65:cd:8e:5e:08:17:47:8b:d2:ea:54:2d:3f:a9: f4:bc:d7:c9:8e:90:ca:36:db:d1:09:84:20:95:a5: c6:74:40:68:80:b0:6f:61:79:b0:05:bc:c0:4f:4a: 3b:14:7f:b4:3d:00:b9:1e:f3:b5:56:8f:13:4b:05: 96:64:91:0c:ba:d6:41:42:c4:dc:83:d2:64:b2:9d: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.36.0/24 IPv6: 2602:f6fa::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:78:c4:3a:77:57:b0:49:f4:02:10:9c:02:f1:ba:47:79:33: ad:0d:45:11:8f:12:21:35:05:8b:b4:b4:98:47:ac:07:37:38: ab:60:70:e6:22:6d:f0:bd:e2:f3:5e:95:f9:59:ea:44:af:1b: 79:f6:28:d9:ff:47:27:0c:e5:00:b7:9c:00:11:43:24:b2:6b: e8:13:19:93:3b:91:d0:ce:8d:96:0d:3d:2c:51:84:f5:73:88: 37:e5:38:94:ed:3b:24:a9:f7:df:ed:85:10:41:f6:25:24:93: de:fd:7b:38:58:8f:f1:e5:da:b4:a5:d2:63:bd:99:46:30:7e: 9a:e6:73:7c:0b:42:b6:fb:ec:44:04:86:ca:9c:9f:aa:c5:60: fd:ae:80:a0:b8:6b:c2:4f:a0:8c:6e:21:e9:c4:0f:4f:35:49: 0b:51:37:f6:ab:d9:41:f8:2f:4a:52:eb:21:1e:51:61:97:bf: 5d:b9:1b:1c:b4:d3:24:77:09:88:7a:78:35:87:98:13:50:d8: 19:31:0a:dc:68:a1:a0:0f:a2:ef:6d:31:ef:05:89:b9:5b:64: a4:95:f5:ac:c2:e3:52:86:20:ef:2b:3f:f6:d9:89:d7:03:13: f6:08:f6:16:97:52:d2:aa:f9:29:e0:02:8a:f3:e7:73:fe:c9: 32:1b:ac:a5 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEjrooTpXZy7WbaOAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxODA1NDkxOFoXDTI3MDUyNDA0NDkxOFowLzEtMCsGA1UEAxMk OWNhZjIzZmMtOWNiYy00ZjQwLWFlYTgtMDc2NTMyMTFmNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrHWUDEot5p87LKoEw2hngfOExAx64KG7HCU lQ110Uq+O4udCoeypopmslfvsaxP/F8TjC5Qj3cdZeTuScVi0ApwQly/d3ApdbIP X/fbPmsDJWHU4eCkUdaQjQeNFMCfhUJ+ZueJemGZlcbWIktrIycLVe4sed64yXTe erKab/fpXJMRWRqbuWnkCEefBuZ4kInEBKxLZ3k/Y+/fWP735kVO75uJDGgkeZW8 yxbZBLVr1xKfZc2OXggXR4vS6lQtP6n0vNfJjpDKNtvRCYQglaXGdEBogLBvYXmw BbzAT0o7FH+0PQC5HvO1Vo8TSwWWZJEMutZBQsTcg9Jksp3lfQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFEzsk7GhjvXIUAKuV0CY8yGYcx3PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 Y2FmMjNmYy05Y2JjLTRmNDAtYWVhOC0wNzY1MzIxMWY2NjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzljYWYyM2ZjLTljYmMtNGY0MC1h ZWE4LTA3NjUzMjExZjY2NS85Y2FmMjNmYy05Y2JjLTRmNDAtYWVhOC0wNzY1MzIx MWY2NjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhiQwDgQCAAIwCAMGACYC9voAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJN4xDp3V7BJ9AIQnALxukd5M60NRRGPEiE1BYu0tJhHrAc3OKtgcOYibfC94vNe lflZ6kSvG3n2KNn/RycM5QC3nAARQySya+gTGZM7kdDOjZYNPSxRhPVziDflOJTt OySp99/thRBB9iUkk979ezhYj/Hl2rSl0mO9mUYwfprmc3wLQrb77EQEhsqcn6rF YP2ugKC4a8JPoIxuIenED081SQtRN/ar2UH4L0pS6yEeUWGXv125Gxy00yR3CYh6 eDWHmBNQ2BkxCtxooaAPou9tMe8FiblbZKSV9azC41KGIO8rP/bZidcDE/YI9haX UtKq+SngAorz53P+yTIbrKU= -----END CERTIFICATE-----Generated at Sat May 10 07:25:16 2025 by rpki-client