$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b.cer File: 3d248cf6-52d0-4253-94f4-31abcc5d194b.cer (raw, json) Hash identifier: A+3/l+bwf75EQk3eumqcs1XGLnz8BkmTed6JUbeg0eE= Subject key identifier: 60:EB:5B:15:2B:62:BA:18:BC:16:C3:81:94:71:92:8C:5F:59:77:DA Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285848BB6A7A80CAD8103C40651980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/3d248cf6-52d0-4253-94f4-31abcc5d194b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Jan 2025 23:17:35 +0000 Certificate not after: Thu 06 May 2027 22:17:35 +0000 Subordinate resources: AS: 40268 IP: 23.171.232.0/24 IP: 2602:f97d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:6a:7a:80:ca:d8:10:3c:40:65:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 31 23:17:35 2025 GMT Not After : May 6 22:17:35 2027 GMT Subject: CN=3d248cf6-52d0-4253-94f4-31abcc5d194b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:0e:43:2f:a0:f3:a1:24:58:48:ee:0d:8e: 91:11:c6:79:7c:d5:88:a5:54:42:b2:48:f8:a4:ed: 5f:d3:85:39:79:bb:58:2e:5f:b5:60:ac:96:37:27: 3a:57:2d:ef:35:ed:56:2b:07:44:46:65:22:4d:52: 3e:da:6d:e7:3c:da:1c:d9:ab:2d:82:8d:dd:07:26: cc:e8:96:bf:c2:52:7b:94:63:f6:fc:c8:ba:66:62: fc:58:3f:55:bd:20:7f:fa:f8:4d:80:ac:50:87:af: 17:9c:c1:17:20:03:2b:5a:6b:79:4b:5e:54:ae:92: 49:44:c7:39:73:9a:54:59:23:90:56:a1:a3:fd:97: b5:4a:cb:92:20:c2:ac:47:b6:66:6b:9c:f2:32:64: a9:6c:71:4a:5e:55:1f:76:25:6e:30:d0:9f:76:3d: 5a:a7:a9:26:6b:78:1f:c2:d8:43:f4:75:e0:f2:6f: c1:16:32:0d:b9:5b:27:36:29:60:1b:ba:fd:d3:39: aa:a6:b8:99:38:3b:68:aa:7a:15:de:ae:cd:f0:5d: d6:90:e5:9a:f4:93:dd:95:f9:ea:5f:66:bf:c5:9e: 90:77:76:60:d3:42:34:b7:80:40:98:7e:1f:45:30: a9:77:34:7a:9e:30:9b:f4:d8:f0:be:72:21:29:c9: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EB:5B:15:2B:62:BA:18:BC:16:C3:81:94:71:92:8C:5F:59:77:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3d248cf6-52d0-4253-94f4-31abcc5d194b/3d248cf6-52d0-4253-94f4-31abcc5d194b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.171.232.0/24 IPv6: 2602:f97d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40268 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e5:6e:1e:65:cb:21:43:f4:c6:9c:51:c0:04:f9:fa:b6:e1: 52:b3:61:3d:db:cf:1f:c2:fe:19:2c:e9:55:f6:fb:ac:a8:25: b1:6b:d7:81:82:07:6e:fa:dd:17:a3:67:7e:a1:b6:94:b0:50: 5f:4f:96:b9:f7:e4:73:eb:a2:b3:b2:22:8a:2d:a4:ab:d2:96: 44:28:2f:91:d6:a1:55:63:40:29:bf:34:3c:5f:41:35:f2:b2: 79:f0:64:76:fc:57:53:12:4b:2a:1c:3d:6e:44:3e:e7:0c:37: 1d:91:0f:fe:11:d4:03:00:48:86:59:da:9c:4f:2b:ae:0b:44: 9f:b0:cf:ee:01:0f:3c:db:45:5c:36:0f:e5:17:08:2b:52:37: 53:ed:c9:58:05:2b:8f:41:ae:1e:90:26:24:83:1d:c3:6e:87: f5:ad:a9:62:ff:b1:b8:5f:83:91:95:eb:c6:52:99:7c:67:2d: 69:c1:c4:26:10:3c:93:55:d7:0c:bb:8e:96:ae:e5:cc:aa:3b: 69:d8:35:fc:b4:3d:ff:dd:28:dc:55:ec:50:70:5b:bf:2f:5b: 4d:b5:06:fc:26:3a:07:d8:b4:00:0e:42:92:94:1a:aa:26:1d: 4b:d3:35:5e:cf:32:5d:2e:57:9f:0e:71:27:5f:0a:40:bb:74: ee:ed:b4:0c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEi7anqAytgQPEBlGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDEzMTIzMTczNVoXDTI3MDUwNjIyMTczNVowLzEtMCsGA1UEAxMk M2QyNDhjZjYtNTJkMC00MjUzLTk0ZjQtMzFhYmNjNWQxOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY0OQy+g86EkWEjuDY6REcZ5fNWIpVRCskj4 pO1f04U5ebtYLl+1YKyWNyc6Vy3vNe1WKwdERmUiTVI+2m3nPNoc2astgo3dBybM 6Ja/wlJ7lGP2/Mi6ZmL8WD9VvSB/+vhNgKxQh68XnMEXIAMrWmt5S15UrpJJRMc5 c5pUWSOQVqGj/Ze1SsuSIMKsR7Zma5zyMmSpbHFKXlUfdiVuMNCfdj1ap6kma3gf wthD9HXg8m/BFjINuVsnNilgG7r90zmqpriZODtoqnoV3q7N8F3WkOWa9JPdlfnq X2a/xZ6Qd3Zg00I0t4BAmH4fRTCpdzR6njCb9NjwvnIhKclYoQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGDrWxUrYroYvBbDgZRxkoxfWXfaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z ZDI0OGNmNi01MmQwLTQyNTMtOTRmNC0zMWFiY2M1ZDE5NGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzNkMjQ4Y2Y2LTUyZDAtNDI1My05 NGY0LTMxYWJjYzVkMTk0Yi8zZDI0OGNmNi01MmQwLTQyNTMtOTRmNC0zMWFiY2M1 ZDE5NGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXq+gwDgQCAAIwCAMGBCYC+X0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCdTDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/5W4eZcshQ/TGnFHABPn6tuFS s2E9288fwv4ZLOlV9vusqCWxa9eBggdu+t0Xo2d+obaUsFBfT5a59+Rz66KzsiKK LaSr0pZEKC+R1qFVY0ApvzQ8X0E18rJ58GR2/FdTEksqHD1uRD7nDDcdkQ/+EdQD AEiGWdqcTyuuC0SfsM/uAQ8820VcNg/lFwgrUjdT7clYBSuPQa4ekCYkgx3Dbof1 rali/7G4X4ORlevGUpl8Zy1pwcQmEDyTVdcMu46WruXMqjtp2DX8tD3/3SjcVexQ cFu/L1tNtQb8JjoH2LQADkKSlBqqJh1L0zVezzJdLlefDnEnXwpAu3Tu7bQM -----END CERTIFICATE-----Generated at Fri Apr 4 19:56:35 2025 by rpki-client