$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer File: f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer (raw, json) Hash identifier: 0cQzPXV537bJjp3RDQxAydj/ozF53vBRlsvtSlL0YUo= Subject key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584967754B33B1297F9B1049C3E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Apr 2025 14:18:25 +0000 Certificate not after: Tue 08 Dec 2026 01:45:25 +0000 Subordinate resources: AS: 40846 IP: 23.155.216.0/24 IP: 131.153.249.0/24 IP: 2602:2e4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:75:4b:33:b1:29:7f:9b:10:49:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Apr 3 14:18:25 2025 GMT Not After : Dec 8 01:45:25 2026 GMT Subject: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:2a:82:e6:b3:31:70:36:17:d8:06:c2:a3: 90:9b:a3:f8:59:a7:38:27:59:39:1a:a3:96:12:6d: ff:90:80:a1:65:67:c8:f7:d4:0e:ba:fa:2e:ed:75: 12:d2:3a:12:9f:18:37:2f:be:3c:f6:37:51:d4:02: 80:d4:a2:6e:1c:30:76:81:09:01:d5:ed:47:bf:fa: dd:a8:48:15:f1:ec:15:93:e2:8d:ae:15:7c:0b:69: d6:67:01:59:42:06:12:10:38:ca:f7:79:35:19:2e: b8:a7:fb:9e:8e:18:8e:ec:97:46:3e:15:08:b3:01: 94:cf:b6:1a:69:b9:d6:55:f4:d9:97:d3:30:97:97: cc:15:51:60:d0:75:5f:24:87:db:c1:8d:79:a0:31: 2e:64:ba:92:04:c4:c0:6a:d5:fa:fa:f7:1c:a3:10: a4:51:3a:e2:df:bf:b0:fc:c9:0b:a9:43:1a:07:46: 40:da:2b:1c:8b:0f:c8:de:32:3a:a3:26:2b:2f:c0: 23:7a:82:c0:99:ca:ff:1f:c9:99:ab:dd:fb:b0:07: a4:e9:e1:be:9f:0e:69:05:60:d4:27:c9:00:94:bd: 2e:c2:5f:4c:45:88:c7:a8:78:17:74:b7:11:95:4a: bf:80:68:c8:cc:41:16:b6:7c:f2:62:b0:ac:03:d2: a0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.155.216.0/24 131.153.249.0/24 IPv6: 2602:2e4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40846 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:25:2c:7b:32:bd:bf:e1:b8:2d:d4:cd:d5:09:48:fa:f3:31: b5:7d:2d:d6:da:ce:e9:46:f6:55:1c:6e:23:4d:03:04:96:05: 09:43:4c:28:f3:9b:d8:8e:d8:48:f9:6f:f5:32:19:e3:38:ea: 2f:aa:03:32:1c:bd:88:c5:b0:9f:c3:a6:af:96:18:e7:1f:7a: e8:b3:61:f4:b3:45:79:58:0a:c7:33:2c:7c:55:1e:b0:f5:c9: c4:cd:8c:5d:f9:ab:a7:d3:72:23:4b:7c:5e:df:54:70:15:ac: 9e:1b:d9:a9:55:da:cd:b1:f2:fb:eb:67:5e:cd:73:6a:82:56: df:d2:97:19:a7:6c:1f:90:28:e5:6a:6a:b9:fa:2d:1a:c3:12: 06:50:9b:2e:4b:9b:c0:0e:41:d7:71:e1:7d:d9:3d:ee:6d:71: fb:d7:36:f8:08:eb:e0:17:77:59:c0:07:12:af:42:43:46:a4: ea:92:92:69:99:c8:86:32:24:ef:d0:ba:70:c9:63:2d:4f:99: 53:28:26:26:d4:04:ca:7b:a3:90:76:f0:34:30:eb:68:6e:80: d6:b8:1c:a9:65:1c:64:ef:02:41:42:fb:bd:2d:c4:8b:12:e8: b8:0e:46:5a:a7:50:b6:eb:80:a6:0a:84:cd:f9:e0:6d:4a:5e: 9b:99:ed:47 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWElndUszsSl/mxBJw+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI1MDQwMzE0MTgyNVoXDTI2MTIwODAxNDUyNVowLzEtMCsGA1UEAxMk ZjYwMWJhNzAtMzgzZS00ZjVkLWFhY2ItN2U0NWUzM2FjNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBAqguazMXA2F9gGwqOQm6P4Wac4J1k5GqOW Em3/kIChZWfI99QOuvou7XUS0joSnxg3L7489jdR1AKA1KJuHDB2gQkB1e1Hv/rd qEgV8ewVk+KNrhV8C2nWZwFZQgYSEDjK93k1GS64p/uejhiO7JdGPhUIswGUz7Ya abnWVfTZl9Mwl5fMFVFg0HVfJIfbwY15oDEuZLqSBMTAatX6+vccoxCkUTri37+w /MkLqUMaB0ZA2isciw/I3jI6oyYrL8AjeoLAmcr/H8mZq937sAek6eG+nw5pBWDU J8kAlL0uwl9MRYjHqHgXdLcRlUq/gGjIzEEWtnzyYrCsA9KgAwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFGPk4QsrZXj8lgYjogMYZ4tUWfTaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m NjAxYmE3MC0zODNlLTRmNWQtYWFjYi03ZTQ1ZTMzYWM2YmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Y2MDFiYTcwLTM4M2UtNGY1ZC1h YWNiLTdlNDVlMzNhYzZiYS9mNjAxYmE3MC0zODNlLTRmNWQtYWFjYi03ZTQ1ZTMz YWM2YmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXm9gDBACDmfkwDgQCAAIwCAMGBCYCAuQAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCfjjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4JSx7Mr2/4bgt1M3V CUj68zG1fS3W2s7pRvZVHG4jTQMElgUJQ0wo85vYjthI+W/1MhnjOOovqgMyHL2I xbCfw6avlhjnH3ros2H0s0V5WArHMyx8VR6w9cnEzYxd+aun03IjS3xe31RwFaye G9mpVdrNsfL762dezXNqglbf0pcZp2wfkCjlamq5+i0awxIGUJsuS5vADkHXceF9 2T3ubXH71zb4COvgF3dZwAcSr0JDRqTqkpJpmciGMiTv0LpwyWMtT5lTKCYm1ATK e6OQdvA0MOtoboDWuBypZRxk7wJBQvu9LcSLEui4DkZap1C264CmCoTN+eBtSl6b me1H -----END CERTIFICATE-----Generated at Fri Apr 4 10:21:17 2025 by rpki-client