$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer File: 1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer (raw, json) Hash identifier: 4dyDAIKsG7dv6PQA1pDszaAvPWd5BVqKDHnl9PR4wNc= Subject key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858495110ECD3C1599787CD5B54F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Mar 2025 13:48:24 +0000 Certificate not after: Sat 02 Jan 2027 15:16:34 +0000 Subordinate resources: AS: 394106 IP: 23.136.124.0/24 IP: 2602:f6a6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:51:10:ec:d3:c1:59:97:87:cd:5b:54:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Mar 26 13:48:24 2025 GMT Not After : Jan 2 15:16:34 2027 GMT Subject: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d3:ab:ce:e5:b9:9d:59:d8:cf:19:b2:c9:df: 43:51:9f:ba:38:0b:6b:08:dd:53:3e:c8:fa:9f:cf: 6f:19:30:7a:79:b1:dd:2f:a5:44:63:9e:24:df:40: 0e:cb:7d:33:9e:22:d9:1b:f4:29:55:a2:a8:7a:aa: 51:0c:f2:f9:cd:d7:b6:dd:7d:ca:fb:bb:44:cb:3e: 79:c5:4a:01:71:3d:d5:60:0d:f4:a3:38:25:c2:3a: 5c:5a:c4:f6:72:83:26:73:76:94:c1:d2:1e:92:5b: 7a:66:c1:52:8f:1a:60:8f:19:35:81:45:aa:61:dd: 0a:3e:06:1c:27:8a:32:71:12:41:2b:d5:f6:ac:cb: 76:73:df:4d:af:4b:ab:06:49:73:b0:f9:6d:ca:ee: 00:51:5c:fb:da:d7:79:8f:44:02:00:7b:6c:e7:a3: f3:93:4a:01:47:78:c8:c6:ae:e0:1d:83:79:27:97: 0e:e8:03:e3:83:d7:05:1a:2a:4c:39:e3:bd:21:67: 12:48:97:72:38:fc:e5:61:4f:2c:ab:70:bf:f4:e3: 7b:4d:53:b3:f7:84:36:e0:3c:7a:c6:87:bc:fa:82: 45:b0:d4:ee:81:92:21:1c:1e:87:70:56:86:e2:ca: fc:cd:0a:2f:10:a9:97:4d:85:21:b8:5c:e2:69:2a: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.136.124.0/24 IPv6: 2602:f6a6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394106 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3b:26:9e:aa:be:ab:3c:fd:c2:de:f5:42:6f:42:92:27:f5: 97:cc:0b:10:c8:d0:b5:ec:07:34:9a:11:55:27:17:37:2f:e4: 9b:04:65:39:d6:d6:98:00:4f:51:70:56:d5:11:b9:3c:77:b2: 6e:3b:06:05:62:15:ed:5d:41:f2:21:b9:65:ad:35:59:49:00: cd:ee:8f:ea:cb:8b:5d:57:ce:6f:89:bc:ef:d7:63:26:2c:4d: 50:e3:37:0a:75:d7:26:7a:06:81:3e:c1:0c:88:7b:8b:1c:3d: 1e:62:1f:ec:73:c9:00:15:ed:76:33:b5:d0:f0:8a:af:84:48: 06:19:c7:cb:72:dd:e2:5d:4d:ae:89:2c:69:c6:17:e2:6a:c8: 66:de:db:14:3f:da:90:f8:a5:50:a0:c1:69:37:8f:2e:97:7b: e9:b8:be:ac:22:3d:11:03:24:c3:98:59:e4:c4:f7:47:a5:67: 43:31:94:3c:ea:dd:8c:fe:0e:83:82:d8:0c:38:74:37:70:38: 80:c8:41:ef:44:10:58:ed:0e:a5:7c:9f:a4:0d:43:e4:bb:cb: b2:ff:06:03:be:48:b9:a2:f3:62:82:bf:69:22:a8:a5:b1:88: 79:94:a3:88:66:3d:7f:ef:36:b3:5b:ff:2a:17:df:c2:84:ea: 09:e0:39:b6 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElREOzTwVmXh81bVPIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDMyNjEzNDgyNFoXDTI3MDEwMjE1MTYzNFowLzEtMCsGA1UEAxMk MWQyZTY2OWUtOGQ1ZC00YjM5LWE2OGYtNGY1MzZjYzJmNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69OrzuW5nVnYzxmyyd9DUZ+6OAtrCN1TPsj6 n89vGTB6ebHdL6VEY54k30AOy30zniLZG/QpVaKoeqpRDPL5zde23X3K+7tEyz55 xUoBcT3VYA30ozglwjpcWsT2coMmc3aUwdIeklt6ZsFSjxpgjxk1gUWqYd0KPgYc J4oycRJBK9X2rMt2c99Nr0urBklzsPltyu4AUVz72td5j0QCAHts56Pzk0oBR3jI xq7gHYN5J5cO6APjg9cFGipMOeO9IWcSSJdyOPzlYU8sq3C/9ON7TVOz94Q24Dx6 xoe8+oJFsNTugZIhHB6HcFaG4sr8zQovEKmXTYUhuFziaSrBCQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCs9ox06fY4X30i9bKxKYtJfVL4QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x ZDJlNjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUzNmNjMmY1NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzFkMmU2NjllLThkNWQtNGIzOS1h NjhmLTRmNTM2Y2MyZjU0Ni8xZDJlNjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUzNmNj MmY1NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiHwwDgQCAAIwCAMGACYC9qYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYDejBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCOyaeqr6rPP3C3vVCb0KSJ/WX zAsQyNC17Ac0mhFVJxc3L+SbBGU51taYAE9RcFbVEbk8d7JuOwYFYhXtXUHyIbll rTVZSQDN7o/qy4tdV85vibzv12MmLE1Q4zcKddcmegaBPsEMiHuLHD0eYh/sc8kA Fe12M7XQ8IqvhEgGGcfLct3iXU2uiSxpxhfiashm3tsUP9qQ+KVQoMFpN48ul3vp uL6sIj0RAyTDmFnkxPdHpWdDMZQ86t2M/g6DgtgMOHQ3cDiAyEHvRBBY7Q6lfJ+k DUPku8uy/wYDvki5ovNigr9pIqilsYh5lKOIZj1/7zazW/8qF9/ChOoJ4Dm2 -----END CERTIFICATE-----Generated at Fri Apr 4 10:24:49 2025 by rpki-client