$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc.cer File: aa2f92fe-a911-49e5-8901-3a0d957cbbfc.cer (raw, json) Hash identifier: zbk/IvBmrLoRL1RR5wiMI6DiZLNqfIWoZIFDiO1szWs= Subject key identifier: 58:B8:09:6C:B9:35:A1:5A:98:64:7E:63:4A:F0:FE:F7:AC:E2:E4:E8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858486403555C0177CEC675A7AE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc/aa2f92fe-a911-49e5-8901-3a0d957cbbfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Dec 2024 15:54:26 +0000 Certificate not after: Thu 25 Mar 2027 15:14:11 +0000 Subordinate resources: AS: 30002 IP: 23.131.148.0/24 IP: 2602:f754::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:64:03:55:5c:01:77:ce:c6:75:a7:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Dec 31 15:54:26 2024 GMT Not After : Mar 25 15:14:11 2027 GMT Subject: CN=aa2f92fe-a911-49e5-8901-3a0d957cbbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:3f:a9:84:f4:8c:f6:6c:e2:d3:88:19:1f: 31:bf:a2:ac:a2:14:6d:53:5c:a5:3f:aa:4d:a8:22: 7c:99:9f:75:92:d9:b9:48:bd:c3:02:4d:11:59:38: 17:91:34:2d:27:e1:5d:6b:c4:7c:d9:35:34:21:d5: cd:19:fd:e9:11:1e:97:ec:92:3c:a2:e3:80:93:76: c6:a2:d7:00:56:33:f8:64:59:3f:82:98:c0:c3:e0: b4:ea:c0:1b:fc:95:9e:18:4b:74:d1:ad:c2:e2:e3: a1:74:4a:0c:6a:b6:f1:92:be:29:ab:55:a7:8d:94: d4:36:af:83:89:e0:db:b7:0e:8f:8d:a2:15:d8:fa: 08:5e:57:8e:1a:e1:66:a0:b9:32:26:7e:b8:d9:d6: 7a:33:32:3c:97:14:0f:02:3d:03:86:ef:5d:ca:0e: 95:da:5b:0a:35:e4:c1:1e:9e:1f:81:7b:6e:78:44: 13:5b:83:9b:f0:4f:ba:a3:3b:08:e7:93:f9:ce:9b: ea:f6:b2:25:54:f5:f2:ea:d2:35:fd:91:ad:cf:eb: 54:3c:22:2f:d8:25:91:82:c2:51:48:f0:0e:30:56: a0:49:d5:df:bf:cc:35:0e:72:86:bc:76:2f:e0:76: cd:57:21:9d:e5:e6:55:4a:4f:73:fa:6d:28:84:fb: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B8:09:6C:B9:35:A1:5A:98:64:7E:63:4A:F0:FE:F7:AC:E2:E4:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa2f92fe-a911-49e5-8901-3a0d957cbbfc/aa2f92fe-a911-49e5-8901-3a0d957cbbfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.131.148.0/24 IPv6: 2602:f754::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30002 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:69:ca:e8:69:a7:d6:43:71:3e:bd:c7:af:54:ab:37:2d:43: 9d:7d:7a:d4:05:15:bd:8c:65:68:c8:ae:a2:97:1d:74:e5:f8: ee:64:96:49:7a:a7:94:4d:f7:55:63:3a:5f:54:c5:70:2f:82: 52:0e:fd:6a:c7:67:d0:95:48:60:5d:b7:72:21:f3:ba:ca:12: ff:00:2a:70:55:5e:22:d9:32:9d:80:57:48:3a:91:6f:33:4d: d4:a9:7d:5f:c5:17:69:19:cc:f4:1c:fb:43:82:46:96:9d:a7: 4e:e5:b1:90:a6:08:51:02:de:0e:fa:fe:d2:fc:c6:97:e9:60: fc:c9:3b:17:8e:5b:92:6f:ff:5a:15:ec:3b:a3:29:2e:93:25: 0e:6a:9b:1b:8b:68:32:fc:4e:c1:29:67:66:39:fb:50:53:07: 4c:7d:be:51:45:7a:04:32:01:db:c5:38:37:71:e6:57:75:73: 1c:80:93:46:3d:94:33:05:59:9a:aa:42:4a:d8:b0:32:1e:ea: 29:28:42:27:16:b5:6e:a3:11:c0:86:00:76:b3:ea:9d:cb:ca: 60:f5:09:22:98:6c:34:c9:35:45:b6:ab:04:b4:f1:4a:8f:81: 6d:aa:82:71:d3:44:ec:67:ca:7c:fd:80:7c:8b:40:ea:80:32: 62:68:76:ac -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEhkA1VcAXfOxnWnroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTIzMTE1NTQyNloXDTI3MDMyNTE1MTQxMVowLzEtMCsGA1UEAxMk YWEyZjkyZmUtYTkxMS00OWU1LTg5MDEtM2EwZDk1N2NiYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4M/qYT0jPZs4tOIGR8xv6KsohRtU1ylP6pN qCJ8mZ91ktm5SL3DAk0RWTgXkTQtJ+Fda8R82TU0IdXNGf3pER6X7JI8ouOAk3bG otcAVjP4ZFk/gpjAw+C06sAb/JWeGEt00a3C4uOhdEoMarbxkr4pq1WnjZTUNq+D ieDbtw6PjaIV2PoIXleOGuFmoLkyJn642dZ6MzI8lxQPAj0Dhu9dyg6V2lsKNeTB Hp4fgXtueEQTW4Ob8E+6ozsI55P5zpvq9rIlVPXy6tI1/ZGtz+tUPCIv2CWRgsJR SPAOMFagSdXfv8w1DnKGvHYv4HbNVyGd5eZVSk9z+m0ohPuDawIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFi4CWy5NaFamGR+Y0rw/ves4uToMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h YTJmOTJmZS1hOTExLTQ5ZTUtODkwMS0zYTBkOTU3Y2JiZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FhMmY5MmZlLWE5MTEtNDllNS04 OTAxLTNhMGQ5NTdjYmJmYy9hYTJmOTJmZS1hOTExLTQ5ZTUtODkwMS0zYTBkOTU3 Y2JiZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg5QwDgQCAAIwCAMGBCYC91QAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnUyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFBpyuhpp9ZDcT69x69UqzctQ519 etQFFb2MZWjIrqKXHXTl+O5klkl6p5RN91VjOl9UxXAvglIO/WrHZ9CVSGBdt3Ih 87rKEv8AKnBVXiLZMp2AV0g6kW8zTdSpfV/FF2kZzPQc+0OCRpadp07lsZCmCFEC 3g76/tL8xpfpYPzJOxeOW5Jv/1oV7DujKS6TJQ5qmxuLaDL8TsEpZ2Y5+1BTB0x9 vlFFegQyAdvFODdx5ld1cxyAk0Y9lDMFWZqqQkrYsDIe6ikoQicWtW6jEcCGAHaz 6p3LymD1CSKYbDTJNUW2qwS08UqPgW2qgnHTROxnynz9gHyLQOqAMmJodqw= -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:56 2025 by rpki-client