$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer File: 9725766d-5d42-4fa1-a253-80bd88dabc8d.cer (raw, json) Hash identifier: PBIb7YgMo/HPIivcAlXszXgRhzcgDSZ0SvKlj/CyjpU= Subject key identifier: E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584967F0DFE389C51972A88E02E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Apr 2025 18:27:25 +0000 Certificate not after: Sun 17 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 25942 IP: 23.156.232.0/24 IP: 199.101.64.0/22 IP: 2602:2f1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:f0:df:e3:89:c5:19:72:a8:8e:02:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Apr 3 18:27:25 2025 GMT Not After : Jan 17 01:45:26 2027 GMT Subject: CN=9725766d-5d42-4fa1-a253-80bd88dabc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:9e:4c:f9:3c:66:47:71:4a:7b:23:53:81: 50:15:7f:92:cf:f0:8c:00:0d:02:f9:48:10:c4:f5: 25:99:ef:23:7c:6d:05:9d:93:a0:df:0a:19:06:4a: c7:5a:91:65:18:37:91:92:af:9e:54:81:e8:6a:1a: 85:51:bf:9d:be:cd:e1:5a:d4:95:dd:29:c0:04:9f: 92:36:9b:4d:c8:9a:1d:9c:6a:5e:a2:25:e6:06:e5: d8:92:c5:a9:cd:f9:d1:b7:8b:39:02:60:87:a0:ae: 9a:df:4a:30:74:33:57:4b:97:ae:20:ac:1e:6d:ae: f5:24:b6:81:52:dd:72:bb:74:40:ff:a6:61:41:bf: bb:db:56:b2:41:ee:c5:6b:48:0c:af:97:f1:98:9a: cb:ba:89:20:1f:08:52:87:3b:15:9f:3d:49:b2:b9: 9d:6a:fd:06:f3:3a:bf:97:80:3a:ef:53:8e:e0:f5: 9e:d9:8b:b6:ea:15:52:d5:3e:12:4e:6e:ef:df:1c: f3:64:bb:8b:bf:db:e5:1a:8b:25:1a:83:5c:6a:4d: e3:9d:52:f4:99:e6:9b:79:9f:ce:0d:c0:64:d9:e4: ab:f9:ad:0c:a2:8c:de:51:97:3b:52:62:d8:32:5a: b7:03:ae:35:4a:36:bb:97:43:fd:f4:56:21:a9:e9: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.156.232.0/24 199.101.64.0/22 IPv6: 2602:2f1::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25942 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:94:0b:0c:cb:d6:b6:38:ca:67:8a:1a:c2:18:8d:a4:f0:21: 1b:67:98:75:cf:c5:36:5d:b3:17:c4:3d:a2:27:df:2c:fa:18: e0:6b:a6:2d:a7:0f:a8:f4:c8:07:8c:24:9d:da:ea:e0:3b:8c: c8:bf:89:cf:bd:bd:fe:a1:48:02:65:8b:c5:dd:18:f3:f2:c1: 41:37:a2:26:e2:c3:be:24:a6:da:d6:dd:44:55:ac:50:37:bf: 1b:e8:7f:c6:8a:1e:20:2e:2e:d2:0c:6b:03:52:96:78:d0:81: c8:32:3e:0a:0b:23:49:3d:3c:b2:e5:da:f5:e5:ef:bd:74:60: 19:3d:0d:01:41:5c:5a:d7:ac:dd:a8:be:99:98:d8:ab:27:a1: 9d:f7:ef:eb:b2:78:88:a2:9c:6b:0e:43:5c:5b:63:76:3d:0c: 84:38:77:be:50:96:7f:50:97:bf:b6:0c:10:66:b1:9f:c8:af: dc:40:c0:86:57:91:17:8e:60:30:90:1a:83:3b:62:81:3e:b2: 01:43:09:c8:ef:f6:9e:f2:c2:cb:0f:00:c5:11:a0:ef:e0:0f: 12:6f:ce:55:11:32:0c:1c:28:f7:18:fc:8e:73:cf:60:a0:27: 64:8b:7e:20:e3:86:82:f7:fe:4e:31:f3:10:db:f5:ff:4d:b5: 3a:b1:66:52 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEln8N/jicUZcqiOAugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDQwMzE4MjcyNVoXDTI3MDExNzAxNDUyNlowLzEtMCsGA1UEAxMk OTcyNTc2NmQtNWQ0Mi00ZmExLWEyNTMtODBiZDg4ZGFiYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgaeTPk8ZkdxSnsjU4FQFX+Sz/CMAA0C+UgQ xPUlme8jfG0FnZOg3woZBkrHWpFlGDeRkq+eVIHoahqFUb+dvs3hWtSV3SnABJ+S NptNyJodnGpeoiXmBuXYksWpzfnRt4s5AmCHoK6a30owdDNXS5euIKweba71JLaB Ut1yu3RA/6ZhQb+721ayQe7Fa0gMr5fxmJrLuokgHwhShzsVnz1Jsrmdav0G8zq/ l4A671OO4PWe2Yu26hVS1T4STm7v3xzzZLuLv9vlGoslGoNcak3jnVL0meabeZ/O DcBk2eSr+a0MoozeUZc7UmLYMlq3A641Sja7l0P99FYhqekq0QIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOFdiYRwbw/HwgtyFk7A25oMYOUVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 NzI1NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJkODhkYWJjOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzk3MjU3NjZkLTVkNDItNGZhMS1h MjUzLTgwYmQ4OGRhYmM4ZC85NzI1NzY2ZC01ZDQyLTRmYTEtYTI1My04MGJkODhk YWJjOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXnOgDBALHZUAwDgQCAAIwCAMGBCYCAvEAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmVWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIGUCwzL1rY4ymeKGsIY jaTwIRtnmHXPxTZdsxfEPaIn3yz6GOBrpi2nD6j0yAeMJJ3a6uA7jMi/ic+9vf6h SAJli8XdGPPywUE3oibiw74kptrW3URVrFA3vxvof8aKHiAuLtIMawNSlnjQgcgy PgoLI0k9PLLl2vXl7710YBk9DQFBXFrXrN2ovpmY2KsnoZ337+uyeIiinGsOQ1xb Y3Y9DIQ4d75Qln9Ql7+2DBBmsZ/Ir9xAwIZXkReOYDCQGoM7YoE+sgFDCcjv9p7y wssPAMURoO/gDxJvzlURMgwcKPcY/I5zz2CgJ2SLfiDjhoL3/k4x8xDb9f9NtTqx ZlI= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:44 2025 by rpki-client