$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer File: d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer (raw, json) Hash identifier: FVIMw4v/K08aXksdDubLMoxm1lwingB2ihIDmmZ4dtQ= Subject key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487859F0AC03F3C417945623F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 22:45:06 +0000 Certificate not after: Mon 12 Apr 2027 21:45:06 +0000 Subordinate resources: AS: 401328 IP: 23.131.20.0/24 IP: 2602:f769::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:78:59:f0:ac:03:f3:c4:17:94:56:23:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 7 22:45:06 2025 GMT Not After : Apr 12 21:45:06 2027 GMT Subject: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:61:23:b9:8c:34:64:15:9a:f0:d9:d9:b2:48: 38:f0:ea:46:60:0a:11:01:4a:37:0d:b6:9f:3a:66: f9:a4:0e:ee:01:43:8c:70:a7:fd:e4:db:c4:a8:42: c5:61:0a:9f:1a:c6:9b:8f:f5:31:b2:d4:b8:02:6d: 9c:46:b5:91:4c:34:f0:02:d6:61:ab:ab:8c:12:4c: 2d:0a:37:59:03:6e:97:66:33:4f:bd:d1:aa:fd:43: a5:78:30:ad:3c:e0:c0:5f:d7:bb:ab:e4:f5:b3:be: 2b:48:da:31:82:b9:d3:97:08:b5:10:e2:70:25:6d: d8:f9:28:08:78:23:9c:d4:af:da:44:c9:15:68:35: 56:00:8e:10:d9:d9:94:6b:f2:a2:a4:4f:bc:e9:80: a8:21:37:80:f0:33:32:68:61:f3:ce:f6:0f:5f:35: aa:f3:c2:13:00:0d:09:83:96:7b:96:bf:eb:17:2b: 1c:1f:79:48:16:a7:a5:c2:20:a5:ba:4b:ca:2f:f0: ed:8b:a0:73:73:d3:19:63:9c:73:5f:35:1b:64:d0: e7:4d:0c:a1:35:ee:e4:84:1c:07:c1:e6:53:8e:0e: 14:54:41:3e:be:64:d3:aa:0a:28:38:ef:7f:5f:8c: 66:14:d3:18:c0:89:63:1b:79:3b:d0:df:2f:b5:26: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.20.0/24 IPv6: 2602:f769::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b7:0a:2a:65:a1:ab:a3:f0:43:da:30:9e:62:4a:51:2e:0e: 7a:bf:bb:73:5d:89:8c:1c:f6:06:ec:79:db:d9:1d:8d:f0:0a: 19:72:35:e3:94:b4:65:e1:45:46:23:8b:c6:32:57:36:83:e7: fb:9f:39:3d:d1:66:ea:ff:8e:bc:2e:cc:dd:bd:8b:c4:f3:ad: 7b:f5:b8:c3:48:23:01:00:f6:32:aa:a7:d3:f3:39:65:95:75: a8:76:7a:03:cf:79:af:16:e6:6a:c8:2e:65:f6:8b:bc:94:80: 79:3c:d4:ae:6a:b1:7c:37:63:e9:9d:bf:27:e6:bc:dd:6b:3e: c8:b1:c6:49:66:2a:5a:31:62:d0:d7:6e:94:58:ce:6b:47:97: fb:ac:f6:96:9d:0c:4d:f2:67:34:43:ee:69:b1:17:bb:56:89: 8b:d5:b7:7e:eb:c3:74:21:a4:fd:ae:5e:44:d5:4b:ab:99:9f: c1:37:ac:f7:a5:b6:f4:21:af:79:97:77:5b:d2:17:71:f6:b0: 08:aa:d9:77:d2:04:b9:22:51:20:fa:e9:a1:d4:49:77:ee:4f: c2:43:1d:5d:26:b0:a4:ef:f8:ab:36:21:4a:7f:20:f8:23:00: 21:0c:8b:e1:1c:a5:ec:6a:f3:a2:2c:2d:f0:41:ef:14:4d:2c: ca:bf:fb:6b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEh4WfCsA/PEF5RWI/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwNzIyNDUwNloXDTI3MDQxMjIxNDUwNlowLzEtMCsGA1UEAxMk ZDY4YTJkMWQtMmMzNi00YTFkLTg4YTctMGMzMGQyNTdmMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWEjuYw0ZBWa8NnZskg48OpGYAoRAUo3Dbaf Omb5pA7uAUOMcKf95NvEqELFYQqfGsabj/UxstS4Am2cRrWRTDTwAtZhq6uMEkwt CjdZA26XZjNPvdGq/UOleDCtPODAX9e7q+T1s74rSNoxgrnTlwi1EOJwJW3Y+SgI eCOc1K/aRMkVaDVWAI4Q2dmUa/KipE+86YCoITeA8DMyaGHzzvYPXzWq88ITAA0J g5Z7lr/rFyscH3lIFqelwiClukvKL/Dti6Bzc9MZY5xzXzUbZNDnTQyhNe7khBwH weZTjg4UVEE+vmTTqgooOO9/X4xmFNMYwIljG3k70N8vtSb1nQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLUPUIGNOAfgITnR+NGeICPuYLsqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k NjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1N2YzODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q2OGEyZDFkLTJjMzYtNGExZC04 OGE3LTBjMzBkMjU3ZjM4Ni9kNjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1 N2YzODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgxQwDgQCAAIwCAMGBCYC92kAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfsDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAftwoqZaGro/BD2jCeYkpRLg56 v7tzXYmMHPYG7Hnb2R2N8AoZcjXjlLRl4UVGI4vGMlc2g+f7nzk90Wbq/468Lszd vYvE86179bjDSCMBAPYyqqfT8zlllXWodnoDz3mvFuZqyC5l9ou8lIB5PNSuarF8 N2Ppnb8n5rzdaz7IscZJZipaMWLQ126UWM5rR5f7rPaWnQxN8mc0Q+5psRe7VomL 1bd+68N0IaT9rl5E1UurmZ/BN6z3pbb0Ia95l3db0hdx9rAIqtl30gS5IlEg+umh 1El37k/CQx1dJrCk7/irNiFKfyD4IwAhDIvhHKXsavOiLC3wQe8UTSzKv/tr -----END CERTIFICATE-----Generated at Tue May 6 06:07:27 2025 by rpki-client