$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer File: d93ebc11-9f7f-462e-85a3-664fe8db4d07.cer (raw, json) Hash identifier: 15mR8bbtYYMwRIiqwIRKGagApIeon4GMEc+xd0DI0s8= Subject key identifier: 77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858493F192F52DFCFF3F533B62980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Mar 2025 03:20:30 +0000 Certificate not after: Wed 23 Jun 2027 03:20:30 +0000 Subordinate resources: IP: 23.186.200.0/24 IP: 2602:f846::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3f:19:2f:52:df:cf:f3:f5:33:b6:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 20 03:20:30 2025 GMT Not After : Jun 23 03:20:30 2027 GMT Subject: CN=d93ebc11-9f7f-462e-85a3-664fe8db4d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:f0:d2:cb:da:85:5b:6a:a5:33:68:ba:3c: 0b:fc:e4:90:db:31:11:9f:82:15:c0:0d:f9:ad:6c: 68:83:ad:2a:11:a7:81:fe:41:67:20:0f:5d:cf:5c: d5:d3:df:b4:c9:5c:d2:84:49:84:6a:2a:3c:3d:e4: 4b:8e:83:54:a0:7e:40:10:c5:00:40:f4:0e:00:2f: 8a:53:97:33:b4:56:02:81:db:b5:7a:99:01:1b:d2: 2f:82:e6:f7:b2:8c:48:f6:6a:23:9b:ce:4c:c7:3e: 3e:38:9f:e6:98:a6:ca:73:c3:30:26:8a:51:33:d7: a2:19:b7:81:27:5e:f4:7c:a3:75:9c:2b:6c:32:90: 7a:88:81:5f:81:a0:19:1d:d9:94:dd:58:0b:ef:aa: f5:6b:bb:56:21:e7:9d:9b:78:49:b6:42:25:51:ed: 67:ff:1b:c1:f6:35:66:ae:47:46:16:0c:65:62:fa: 36:27:26:c2:fd:26:ad:cb:dc:b4:ea:e0:15:d4:64: cc:a4:80:f7:6c:23:a6:93:45:23:51:d4:69:53:bb: fe:3b:05:b9:93:7f:09:11:fc:6d:60:14:5f:dd:13: 36:9e:72:84:bb:80:d9:2f:4a:d8:ef:bc:82:50:8f: 23:fd:35:7a:65:92:c4:f9:1e:db:41:83:3a:06:31: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7E:1B:19:A4:DD:3D:86:A0:B1:1B:40:75:B9:41:23:B6:85:5A:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d93ebc11-9f7f-462e-85a3-664fe8db4d07/d93ebc11-9f7f-462e-85a3-664fe8db4d07.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.186.200.0/24 IPv6: 2602:f846::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7b:1e:63:7e:3d:0e:7d:01:e1:1f:b0:72:65:48:aa:f3:39: f7:7c:9d:13:1e:ed:36:b4:51:28:e7:a6:b1:01:be:79:87:f1: 40:9d:31:30:15:f9:fe:6e:78:9b:61:cb:c9:23:78:73:65:11: e9:16:d7:bb:bb:66:5f:63:41:3f:df:8d:4c:c3:a7:7a:bc:83: bd:d8:1a:fe:c4:d2:b2:09:22:3e:72:af:f5:34:2a:8b:9b:97: cf:3e:c0:78:75:06:70:9b:59:1b:63:9c:71:7a:77:0e:94:65: 3a:ae:2f:72:26:ef:fe:da:10:41:66:da:12:a1:52:c1:2b:20: 22:99:ab:cd:12:e5:2a:ad:f6:fb:86:55:2b:2f:af:41:9b:3b: 02:71:9d:a2:d7:28:ed:6e:15:8f:75:6f:6b:84:76:07:9e:8f: 5f:60:f5:6c:8a:49:9f:62:d2:0c:8d:e2:d0:ab:a1:7e:e0:97: 15:f6:cb:6d:af:7b:51:e2:15:16:86:71:0c:d1:48:e0:f4:1a: 52:78:fb:bf:61:6d:dd:06:a2:d7:57:66:2b:9b:36:e9:95:20: bd:ab:8c:f3:2c:3a:4b:71:d0:8c:3a:43:1a:6b:97:18:e6:bd: 89:a7:43:f0:d6:ad:b6:35:e8:25:84:6b:57:81:fc:65:ef:9b: 67:95:b4:bc -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEk/GS9S38/z9TO2KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMyMDAzMjAzMFoXDTI3MDYyMzAzMjAzMFowLzEtMCsGA1UEAxMk ZDkzZWJjMTEtOWY3Zi00NjJlLTg1YTMtNjY0ZmU4ZGI0ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDrw0svahVtqpTNoujwL/OSQ2zERn4IVwA35 rWxog60qEaeB/kFnIA9dz1zV09+0yVzShEmEaio8PeRLjoNUoH5AEMUAQPQOAC+K U5cztFYCgdu1epkBG9Ivgub3soxI9mojm85Mxz4+OJ/mmKbKc8MwJopRM9eiGbeB J170fKN1nCtsMpB6iIFfgaAZHdmU3VgL76r1a7tWIeedm3hJtkIlUe1n/xvB9jVm rkdGFgxlYvo2JybC/Saty9y06uAV1GTMpID3bCOmk0UjUdRpU7v+OwW5k38JEfxt YBRf3RM2nnKEu4DZL0rY77yCUI8j/TV6ZZLE+R7bQYM6BjHZlwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHd+Gxmk3T2GoLEbQHW5QSO2hVrtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k OTNlYmMxMS05ZjdmLTQ2MmUtODVhMy02NjRmZThkYjRkMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q5M2ViYzExLTlmN2YtNDYyZS04 NWEzLTY2NGZlOGRiNGQwNy9kOTNlYmMxMS05ZjdmLTQ2MmUtODVhMy02NjRmZThk YjRkMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXusgwDgQCAAIwCAMGACYC+EYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAl7HmN+PQ59AeEfsHJlSKrzOfd8nRMe7Ta0USjnprEBvnmH8UCdMTAV+f5ueJth y8kjeHNlEekW17u7Zl9jQT/fjUzDp3q8g73YGv7E0rIJIj5yr/U0Koubl88+wHh1 BnCbWRtjnHF6dw6UZTquL3Im7/7aEEFm2hKhUsErICKZq80S5Sqt9vuGVSsvr0Gb OwJxnaLXKO1uFY91b2uEdgeej19g9WyKSZ9i0gyN4tCroX7glxX2y22ve1HiFRaG cQzRSOD0GlJ4+79hbd0GotdXZiubNumVIL2rjPMsOktx0Iw6QxprlxjmvYmnQ/DW rbY16CWEa1eB/GXvm2eVtLw= -----END CERTIFICATE-----Generated at Tue May 6 03:23:36 2025 by rpki-client