$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer File: d884379a-447d-445c-b465-3fe894aa66ec.cer (raw, json) Hash identifier: vOEYjZPr5LUSW+wyf6FGxtiBE/SFBujCrwJMPVGJjBQ= Subject key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848F528EFA244B44390CDD3ABC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Feb 2025 15:42:25 +0000 Certificate not after: Thu 27 May 2027 13:58:13 +0000 Subordinate resources: AS: 40712 IP: 23.134.244.0/24 IP: 2602:f6e2::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f5:28:ef:a2:44:b4:43:90:cd:d3:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 21 15:42:25 2025 GMT Not After : May 27 13:58:13 2027 GMT Subject: CN=d884379a-447d-445c-b465-3fe894aa66ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:b1:54:9a:26:5b:b2:03:f1:63:6c:39:08: d1:cf:2f:67:1c:21:b3:67:48:23:65:f1:91:fc:7f: 73:ad:42:74:18:70:2e:01:b3:6c:cd:50:37:34:6a: 5a:29:64:ea:98:09:d2:8d:d1:00:45:e3:9c:07:1d: 9e:4b:f4:6c:99:1f:04:68:fe:fd:8a:49:eb:5c:2a: 03:ea:11:db:38:f2:5e:18:14:f7:ea:76:7b:68:b4: 45:da:55:90:fb:74:b7:d3:50:ef:c9:17:53:87:74: db:a3:45:db:e3:02:af:41:64:df:65:45:29:cc:eb: bc:05:dd:03:6d:d1:56:70:a8:6a:4e:a3:58:8b:29: e0:7e:96:0c:c1:a9:3e:37:27:9d:8f:46:aa:7e:30: ff:f2:96:ad:88:47:19:e1:55:7a:a3:06:cc:90:86: 94:2e:fc:3e:02:8f:db:46:3b:86:2b:a7:9c:1f:c1: 04:34:c0:91:8c:0a:1f:4a:e1:5b:4f:bf:ec:18:5d: 6e:ed:cd:cb:25:8c:bf:f3:a0:ba:ad:ae:4e:b4:6c: 20:21:d0:1b:90:23:3d:b0:98:c9:e2:b7:3a:a0:4e: ec:d7:da:ed:1e:4b:62:03:3e:ac:c9:4d:70:eb:ac: a2:3b:de:1d:1f:75:3b:a4:bc:84:13:9e:f9:0c:51: 6f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.244.0/24 IPv6: 2602:f6e2::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40712 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fe:6e:79:33:bd:61:39:8b:55:07:47:4f:e0:e6:83:19:6e: 94:ed:2b:b0:d9:c0:ed:f6:82:bb:a3:b3:66:e4:70:f2:4c:a6: 7e:08:cb:25:c5:f3:ec:8a:8b:51:78:4e:ab:55:1a:1a:ae:44: 12:8e:81:c2:05:02:1f:1e:83:dc:6c:96:46:7a:ef:14:81:b8: 6f:3b:08:68:06:50:92:d2:1e:9f:9e:26:1f:a0:18:be:61:e6: b4:62:96:22:a4:99:56:a2:c5:3d:b2:1d:59:ff:22:e9:be:ce: e8:ae:8c:96:c5:30:5e:fe:b8:13:bb:10:fb:5b:ec:7a:b2:33: ac:a7:02:a8:28:fa:45:d5:a4:18:92:60:7e:52:25:b7:02:64: 2f:ea:15:94:99:d1:ff:5f:89:d7:ef:8f:6c:be:70:f8:b2:45: 8e:fc:f8:98:b8:61:35:75:b5:ba:50:17:29:bc:6e:cf:b1:e7: a1:3a:a8:1d:b1:91:ea:1b:93:70:12:4d:11:6e:6b:c4:8e:eb: 4e:92:11:02:11:9d:41:6f:9c:df:ee:87:5c:89:7a:04:29:95: 83:ca:09:4f:c2:1a:87:95:f5:87:7f:a6:60:b6:61:91:f7:e9: 9c:9b:97:34:3a:5c:59:95:4c:58:d8:22:cb:b8:21:e1:7a:19: 05:ec:4c:8f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEj1KO+iRLRDkM3Tq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyMTE1NDIyNVoXDTI3MDUyNzEzNTgxM1owLzEtMCsGA1UEAxMk ZDg4NDM3OWEtNDQ3ZC00NDVjLWI0NjUtM2ZlODk0YWE2NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonqxVJomW7ID8WNsOQjRzy9nHCGzZ0gjZfGR /H9zrUJ0GHAuAbNszVA3NGpaKWTqmAnSjdEAReOcBx2eS/RsmR8EaP79iknrXCoD 6hHbOPJeGBT36nZ7aLRF2lWQ+3S301DvyRdTh3Tbo0Xb4wKvQWTfZUUpzOu8Bd0D bdFWcKhqTqNYiyngfpYMwak+Nyedj0aqfjD/8patiEcZ4VV6owbMkIaULvw+Ao/b RjuGK6ecH8EENMCRjAofSuFbT7/sGF1u7c3LJYy/86C6ra5OtGwgIdAbkCM9sJjJ 4rc6oE7s19rtHktiAz6syU1w66yiO94dH3U7pLyEE575DFFvXQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAmmP4N89GjOb+bgWU1HQR+Y4WacMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k ODg0Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4OTRhYTY2ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q4ODQzNzlhLTQ0N2QtNDQ1Yy1i NDY1LTNmZTg5NGFhNjZlYy9kODg0Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4OTRh YTY2ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhvQwDgQCAAIwCAMGBCYC9uIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCfCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI/m55M71hOYtVB0dP4OaDGW6U 7Suw2cDt9oK7o7Nm5HDyTKZ+CMslxfPsiotReE6rVRoarkQSjoHCBQIfHoPcbJZG eu8UgbhvOwhoBlCS0h6fniYfoBi+Yea0YpYipJlWosU9sh1Z/yLpvs7oroyWxTBe /rgTuxD7W+x6sjOspwKoKPpF1aQYkmB+UiW3AmQv6hWUmdH/X4nX749svnD4skWO /PiYuGE1dbW6UBcpvG7PseehOqgdsZHqG5NwEk0RbmvEjutOkhECEZ1Bb5zf7odc iXoEKZWDyglPwhqHlfWHf6ZgtmGR9+mcm5c0OlxZlUxY2CLLuCHhehkF7EyP -----END CERTIFICATE-----Generated at Sat May 10 10:34:56 2025 by rpki-client