$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0.cer File: b6fd9206-247a-4078-aca1-d3717a7d7ee0.cer (raw, json) Hash identifier: f6l0AiIq2u779DA4bLg+cgUKX5IpNc+OGo1YvDot8Tk= Subject key identifier: B2:7F:A2:54:04:79:6A:89:1A:C4:70:A5:86:82:F5:14:4B:74:35:CA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858482698470F496A3108015AEDE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/b6fd9206-247a-4078-aca1-d3717a7d7ee0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Dec 2024 15:54:26 +0000 Certificate not after: Thu 04 Mar 2027 05:06:41 +0000 Subordinate resources: AS: 15289 IP: 23.129.236.0/24 IP: 2602:f78c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:26:98:47:0f:49:6a:31:08:01:5a:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 9 15:54:26 2024 GMT Not After : Mar 4 05:06:41 2027 GMT Subject: CN=b6fd9206-247a-4078-aca1-d3717a7d7ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:4b:1f:94:cd:0c:a0:d9:f2:8d:97:80:ea: 86:b4:38:39:86:28:71:b9:f6:6b:b4:b8:9b:b3:b6: 6e:01:82:b7:df:89:30:9b:d8:dd:e1:e0:5e:4d:f0: ff:27:64:7a:2f:29:fb:db:91:5c:a2:8a:57:70:6b: 48:8e:cf:35:c6:16:3e:71:be:86:52:07:19:24:1d: 82:2a:2d:41:76:59:96:1f:62:48:d4:01:d7:95:a1: 5b:18:86:45:90:c0:83:11:9f:99:14:48:bc:23:7e: 74:ec:06:6a:fe:2c:94:3e:48:92:58:1c:e5:63:26: 07:41:1c:11:e6:73:e6:97:74:a9:91:b0:94:d3:cd: 2c:a7:32:68:0f:d0:67:52:4c:54:e0:a5:f5:f6:71: f4:4d:55:7a:c7:22:ac:90:d9:f7:19:94:04:64:f5: e8:06:d9:7d:ee:43:00:cc:fb:2d:24:c8:68:af:fc: da:9a:67:04:0c:ec:7f:13:ca:9f:02:7f:cf:c2:4c: 36:0a:1e:5a:0f:0f:5a:53:c3:2f:a0:8d:97:d1:25: 4f:25:d0:53:8b:b5:ed:59:2d:d8:b9:a1:2d:37:58: 83:43:0d:9e:93:29:88:f2:2b:14:d1:69:13:82:7a: ed:25:b6:b8:21:3c:f2:28:a6:13:34:b9:62:05:c8: 0e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7F:A2:54:04:79:6A:89:1A:C4:70:A5:86:82:F5:14:4B:74:35:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/b6fd9206-247a-4078-aca1-d3717a7d7ee0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.129.236.0/24 IPv6: 2602:f78c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15289 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:60:ed:4e:2d:02:7f:32:35:cc:aa:ed:16:ce:7b:2f:ae:ab: 9a:ec:5c:48:6e:2d:5e:f2:98:6f:2b:12:d6:9e:af:3f:2a:31: 4c:c4:fc:1e:cc:83:82:4e:94:ac:de:22:4c:5a:57:3d:fb:52: 63:e0:82:31:69:3f:b4:51:2a:0a:a8:d7:ee:c0:e8:6b:84:ed: cb:84:81:22:44:0f:b7:78:53:cc:8a:9d:22:71:b4:fe:be:62: 80:06:7c:21:7f:ba:a4:4f:a6:41:30:ee:7b:12:61:3d:df:e7: f7:ea:cd:db:23:52:ed:94:dd:37:dc:d5:a2:6b:6f:06:de:2a: 86:e7:7c:43:91:64:b5:37:fb:75:0a:97:b3:2f:2d:0c:55:6b: 12:1e:e3:68:89:08:40:0d:32:8d:45:0d:c0:25:e6:64:15:d7: d6:5a:10:ca:ac:fc:f8:7b:c4:0f:02:fb:87:02:f9:f4:43:a3: 8d:b8:ff:cf:e3:85:11:f7:41:4b:6e:24:da:2f:9d:d1:55:de: dc:d1:28:dc:89:69:d0:09:27:a5:00:de:d9:a2:4f:b6:d4:b4: 5c:b2:54:75:72:c9:f2:47:f4:c4:65:b7:39:5d:1e:81:88:0d: 55:e1:fc:a2:28:8d:91:f4:07:3c:ff:8b:a6:bf:36:fb:71:e9: 3e:8d:80:bd -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEgmmEcPSWoxCAFa7eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwOTE1NTQyNloXDTI3MDMwNDA1MDY0MVowLzEtMCsGA1UEAxMk YjZmZDkyMDYtMjQ3YS00MDc4LWFjYTEtZDM3MTdhN2Q3ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBZLH5TNDKDZ8o2XgOqGtDg5hihxufZrtLib s7ZuAYK334kwm9jd4eBeTfD/J2R6Lyn725FcoopXcGtIjs81xhY+cb6GUgcZJB2C Ki1BdlmWH2JI1AHXlaFbGIZFkMCDEZ+ZFEi8I3507AZq/iyUPkiSWBzlYyYHQRwR 5nPml3SpkbCU080spzJoD9BnUkxU4KX19nH0TVV6xyKskNn3GZQEZPXoBtl97kMA zPstJMhor/zammcEDOx/E8qfAn/Pwkw2Ch5aDw9aU8MvoI2X0SVPJdBTi7XtWS3Y uaEtN1iDQw2ekymI8isU0WkTgnrtJba4ITzyKKYTNLliBcgOrwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLJ/olQEeWqJGsRwpYaC9RRLdDXKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NmZkOTIwNi0yNDdhLTQwNzgtYWNhMS1kMzcxN2E3ZDdlZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I2ZmQ5MjA2LTI0N2EtNDA3OC1h Y2ExLWQzNzE3YTdkN2VlMC9iNmZkOTIwNi0yNDdhLTQwNzgtYWNhMS1kMzcxN2E3 ZDdlZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgewwDgQCAAIwCAMGBCYC94wAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAju5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAApg7U4tAn8yNcyq7RbOey+uq5rs XEhuLV7ymG8rEtaerz8qMUzE/B7Mg4JOlKzeIkxaVz37UmPggjFpP7RRKgqo1+7A 6GuE7cuEgSJED7d4U8yKnSJxtP6+YoAGfCF/uqRPpkEw7nsSYT3f5/fqzdsjUu2U 3Tfc1aJrbwbeKobnfEORZLU3+3UKl7MvLQxVaxIe42iJCEANMo1FDcAl5mQV19Za EMqs/Ph7xA8C+4cC+fRDo424/8/jhRH3QUtuJNovndFV3tzRKNyJadAJJ6UA3tmi T7bUtFyyVHVyyfJH9MRltzldHoGIDVXh/KIojZH0Bzz/i6a/Nvtx6T6NgL0= -----END CERTIFICATE-----Generated at Wed May 7 14:19:08 2025 by rpki-client