$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45.cer File: f621e93b-af72-4dc7-bd05-abfaefba3c45.cer (raw, json) Hash identifier: /ZXzwEWnt4L2uXWDYO0e/fN1BXXIoehgomJT6vSAC9A= Subject key identifier: E6:F1:FC:72:E1:B1:35:44:57:C1:9E:A3:77:37:55:64:3F:30:15:D2 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848F8857E12F8C97A2508A5E3A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/f621e93b-af72-4dc7-bd05-abfaefba3c45.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Feb 2025 20:36:20 +0000 Certificate not after: Fri 28 May 2027 19:36:20 +0000 Subordinate resources: AS: 40958 IP: 23.135.12.0/24 IP: 2602:81b:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f8:85:7e:12:f8:c9:7a:25:08:a5:e3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 22 20:36:20 2025 GMT Not After : May 28 19:36:20 2027 GMT Subject: CN=f621e93b-af72-4dc7-bd05-abfaefba3c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cc:30:2f:94:81:fd:2c:4c:63:4b:e3:ad:dd: 06:d0:fb:27:f9:a4:0a:68:7e:92:c1:21:6b:de:2c: 4a:a5:09:c4:40:b4:54:54:f0:38:46:a6:0a:7f:b6: d5:5c:11:e0:26:1f:f0:75:29:0d:b3:ec:aa:ac:2f: 5c:96:c7:be:22:d2:e7:86:1e:9b:9d:9a:83:09:e0: 4d:90:06:a7:01:24:32:3b:bd:65:69:f2:41:9b:c4: f8:04:9a:c3:10:38:82:e5:ec:a4:2b:aa:70:3a:0d: 3e:04:37:2f:6f:eb:04:7c:b8:2a:72:5d:22:77:94: d6:56:e2:7d:04:d1:89:66:2c:dc:d5:90:a5:12:a0: 6a:42:68:54:03:26:6d:f4:ec:13:c5:97:08:22:53: c8:72:ca:14:a0:73:c1:33:9a:c8:79:68:cc:1a:b5: af:8b:bd:f6:8d:a9:30:9d:9e:03:a9:10:85:66:f7: 1e:51:78:d4:77:74:c8:64:0b:6f:8d:3d:02:5c:f1: ce:d4:37:11:b8:cf:de:3c:07:6a:ee:90:23:f0:2b: 56:93:a9:f9:b8:68:e1:b5:f0:48:b3:9c:8e:23:18: e5:c1:85:33:28:a2:b9:73:3f:e0:7e:60:fb:c0:ef: 88:db:9c:43:e6:23:59:40:31:be:f4:de:e4:0a:05: 6b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F1:FC:72:E1:B1:35:44:57:C1:9E:A3:77:37:55:64:3F:30:15:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f621e93b-af72-4dc7-bd05-abfaefba3c45/f621e93b-af72-4dc7-bd05-abfaefba3c45.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.12.0/24 IPv6: 2602:81b:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40958 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e6:62:87:d1:c8:4f:6c:8f:94:4c:3a:1d:ad:d9:92:7f:17: c8:07:b3:bf:c7:b5:fe:7f:db:a1:27:f6:60:c9:7c:6f:6f:b3: 1c:89:40:9d:1e:71:fa:d0:d9:b3:06:07:d9:be:d7:8d:77:14: fb:36:d4:aa:62:94:4d:04:82:92:05:f3:4f:34:fd:5b:8c:d7: 7a:59:39:3a:10:8c:1a:f5:8f:bf:c8:53:66:62:80:9a:e0:a1: e4:8e:05:f3:d6:5c:95:f6:72:b2:5c:13:21:de:51:fc:35:8c: 6f:c1:cd:1f:12:d4:78:20:4a:ed:81:5e:83:ac:af:5b:e7:7d: 3e:96:33:2d:6a:c6:8a:8c:1e:d6:09:6a:ae:c2:6d:79:69:86: 7f:f2:3e:aa:4e:61:f2:45:43:03:0a:69:9d:b2:df:f0:cb:7d: 90:ee:50:b6:bb:6e:a2:d5:70:57:be:90:53:24:2d:6a:c5:3a: da:56:27:d9:a1:6e:52:b8:3d:06:a3:27:c5:01:89:3c:7f:b8: 40:79:a4:56:16:99:ae:27:3f:2e:83:1d:1c:e1:6f:d8:1d:f8: d4:24:2b:dd:60:2d:cc:14:fd:68:3b:59:85:da:c2:be:d8:74: 97:1c:98:48:b6:fd:41:dd:46:48:95:6b:03:f8:ca:ad:68:c2: 7c:7c:4d:f7 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEj4hX4S+Ml6JQil46AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyMjIwMzYyMFoXDTI3MDUyODE5MzYyMFowLzEtMCsGA1UEAxMk ZjYyMWU5M2ItYWY3Mi00ZGM3LWJkMDUtYWJmYWVmYmEzYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcwwL5SB/SxMY0vjrd0G0Psn+aQKaH6SwSFr 3ixKpQnEQLRUVPA4RqYKf7bVXBHgJh/wdSkNs+yqrC9clse+ItLnhh6bnZqDCeBN kAanASQyO71lafJBm8T4BJrDEDiC5eykK6pwOg0+BDcvb+sEfLgqcl0id5TWVuJ9 BNGJZizc1ZClEqBqQmhUAyZt9OwTxZcIIlPIcsoUoHPBM5rIeWjMGrWvi732jakw nZ4DqRCFZvceUXjUd3TIZAtvjT0CXPHO1DcRuM/ePAdq7pAj8CtWk6n5uGjhtfBI s5yOIxjlwYUzKKK5cz/gfmD7wO+I25xD5iNZQDG+9N7kCgVr+wIDAQABo4IELDCC BCgwHQYDVR0OBBYEFObx/HLhsTVEV8Geo3c3VWQ/MBXSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m NjIxZTkzYi1hZjcyLTRkYzctYmQwNS1hYmZhZWZiYTNjNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y2MjFlOTNiLWFmNzItNGRjNy1i ZDA1LWFiZmFlZmJhM2M0NS9mNjIxZTkzYi1hZjcyLTRkYzctYmQwNS1hYmZhZWZi YTNjNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXhwwwDwQCAAIwCQMHBCYCCBsgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAn/4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJuZih9HIT2yPlEw6Ha3Zkn8X yAezv8e1/n/boSf2YMl8b2+zHIlAnR5x+tDZswYH2b7XjXcU+zbUqmKUTQSCkgXz TzT9W4zXelk5OhCMGvWPv8hTZmKAmuCh5I4F89ZclfZyslwTId5R/DWMb8HNHxLU eCBK7YFeg6yvW+d9PpYzLWrGiowe1glqrsJteWmGf/I+qk5h8kVDAwppnbLf8Mt9 kO5QtrtuotVwV76QUyQtasU62lYn2aFuUrg9BqMnxQGJPH+4QHmkVhaZric/LoMd HOFv2B341CQr3WAtzBT9aDtZhdrCvth0lxyYSLb9Qd1GSJVrA/jKrWjCfHxN9w== -----END CERTIFICATE-----Generated at Mon May 5 19:35:32 2025 by rpki-client