$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113.cer File: d62d30fc-63d0-466b-a17e-056470f3c113.cer (raw, json) Hash identifier: SMbbZ8LzMocjCj8UJxti4p3QrUvnyXjLfkuDVZsUM4k= Subject key identifier: 3C:82:71:C7:7B:4C:5F:D1:3A:D1:2F:89:C3:56:96:F2:80:31:66:CE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858486C3BC8E3BDA2D1B79D1B2B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/d62d30fc-63d0-466b-a17e-056470f3c113.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Jan 2025 14:34:39 +0000 Certificate not after: Thu 08 Apr 2027 13:34:39 +0000 Subordinate resources: AS: 401556 IP: 23.131.228.0/24 IP: 2602:f74f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:3b:c8:e3:bd:a2:d1:b7:9d:1b:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 3 14:34:39 2025 GMT Not After : Apr 8 13:34:39 2027 GMT Subject: CN=d62d30fc-63d0-466b-a17e-056470f3c113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:8c:62:ce:d4:10:61:37:90:28:75:e9:ed: f0:25:46:82:ea:5e:46:bd:a9:07:70:b5:e1:7f:2e: 7f:18:27:72:54:1e:47:c3:16:94:fe:e7:e6:7b:d1: b2:d2:44:a2:de:5a:b6:02:6e:77:04:d4:9a:6e:f0: ea:9e:75:d8:8c:46:09:1a:fb:ee:33:c8:8c:65:a4: c3:b3:ee:31:c9:04:64:d9:e4:40:b6:d3:de:d9:10: ef:1f:85:5c:73:87:df:93:ae:0b:90:d1:da:6b:e9: 5d:0a:d5:3b:7d:e0:50:a3:c7:98:bb:fe:dc:4b:54: b9:28:38:e1:54:f1:e2:25:d4:fd:a1:aa:df:4d:45: 9d:31:a9:32:0a:d1:99:19:00:bb:90:31:ef:f0:b9: 80:da:7c:ef:eb:01:64:60:6b:82:2e:11:f3:63:95: 1a:af:27:5f:26:cb:33:64:0d:91:d5:31:86:9e:d2: 6a:54:86:f2:ed:af:7e:71:4e:0a:05:21:f8:a2:7a: 62:fc:97:32:89:7c:3b:3c:a6:d8:22:d9:7e:39:03: bf:35:db:c3:fd:cb:cf:ae:da:c0:95:25:01:b7:11: 85:74:6c:2c:28:28:a7:3a:d2:d5:4c:49:a4:09:c9: ef:84:ab:a7:43:9e:8a:9f:2d:de:2b:e5:0b:4a:80: 39:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:82:71:C7:7B:4C:5F:D1:3A:D1:2F:89:C3:56:96:F2:80:31:66:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d62d30fc-63d0-466b-a17e-056470f3c113/d62d30fc-63d0-466b-a17e-056470f3c113.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.228.0/24 IPv6: 2602:f74f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401556 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a8:a6:96:78:04:ce:a8:92:d9:e6:77:de:ea:c1:63:d6:b9: 1d:e8:12:1e:53:96:90:20:e3:f8:f7:1e:dd:25:56:fc:87:84: bb:ab:f5:1a:a2:a6:2b:29:0e:e2:5d:36:b8:1d:c6:16:7e:72: 83:23:2d:3d:e4:6b:b4:73:9c:92:27:ca:82:e0:2d:a0:05:ac: ec:ed:ff:73:2f:25:95:40:92:15:a7:7c:73:cd:76:48:a9:47: ee:ba:c5:05:8d:e4:f7:6a:f4:57:bb:73:47:d0:f6:0c:48:6b: b4:fb:01:56:a8:b1:fb:56:27:f7:01:17:2d:22:e2:92:34:6d: 9d:c7:c6:5b:87:cf:84:41:61:e1:0e:f7:39:70:f5:24:52:c3: a9:ed:1c:be:aa:a6:d5:87:12:19:7e:6b:54:c0:22:86:ef:c7: b9:b7:4f:cf:d9:a3:1d:9e:d3:89:2e:0d:b0:32:66:61:36:b7: 7a:a9:e4:86:dc:db:15:ef:81:87:15:09:24:af:a0:5d:1d:d3: 11:d6:a0:d5:92:62:96:b2:cf:58:e0:d7:7f:44:53:6c:78:35: 43:21:d2:c9:81:c7:cf:63:d9:17:6e:cc:e2:e1:c8:b5:b6:da: 53:55:b3:b1:f4:b7:4f:89:79:80:74:4a:c4:28:40:fd:20:ce: f4:f0:0f:de -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEhsO8jjvaLRt50bK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwMzE0MzQzOVoXDTI3MDQwODEzMzQzOVowLzEtMCsGA1UEAxMk ZDYyZDMwZmMtNjNkMC00NjZiLWExN2UtMDU2NDcwZjNjMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4OMYs7UEGE3kCh16e3wJUaC6l5GvakHcLXh fy5/GCdyVB5HwxaU/ufme9Gy0kSi3lq2Am53BNSabvDqnnXYjEYJGvvuM8iMZaTD s+4xyQRk2eRAttPe2RDvH4Vcc4ffk64LkNHaa+ldCtU7feBQo8eYu/7cS1S5KDjh VPHiJdT9oarfTUWdMakyCtGZGQC7kDHv8LmA2nzv6wFkYGuCLhHzY5UarydfJssz ZA2R1TGGntJqVIby7a9+cU4KBSH4onpi/JcyiXw7PKbYItl+OQO/NdvD/cvPrtrA lSUBtxGFdGwsKCinOtLVTEmkCcnvhKunQ56Kny3eK+ULSoA5xwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDyCccd7TF/ROtEvicNWlvKAMWbOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k NjJkMzBmYy02M2QwLTQ2NmItYTE3ZS0wNTY0NzBmM2MxMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q2MmQzMGZjLTYzZDAtNDY2Yi1h MTdlLTA1NjQ3MGYzYzExMy9kNjJkMzBmYy02M2QwLTQ2NmItYTE3ZS0wNTY0NzBm M2MxMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg+QwDgQCAAIwCAMGBCYC908AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYglDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFqKaWeATOqJLZ5nfe6sFj1rkd 6BIeU5aQIOP49x7dJVb8h4S7q/UaoqYrKQ7iXTa4HcYWfnKDIy095Gu0c5ySJ8qC 4C2gBazs7f9zLyWVQJIVp3xzzXZIqUfuusUFjeT3avRXu3NH0PYMSGu0+wFWqLH7 Vif3ARctIuKSNG2dx8Zbh8+EQWHhDvc5cPUkUsOp7Ry+qqbVhxIZfmtUwCKG78e5 t0/P2aMdntOJLg2wMmZhNrd6qeSG3NsV74GHFQkkr6BdHdMR1qDVkmKWss9Y4Nd/ RFNseDVDIdLJgcfPY9kXbszi4ci1ttpTVbOx9LdPiXmAdErEKED9IM708A/e -----END CERTIFICATE-----Generated at Mon May 5 18:07:47 2025 by rpki-client