$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d.cer File: 713e9415-01be-4e53-a6d3-2fe0b3bd335d.cer (raw, json) Hash identifier: 4IGFY+oYiCNpjt9bs5uGuZhuupidWIkl4hZkXPs2pdc= Subject key identifier: 48:22:83:97:A4:52:28:6C:A5:C8:CF:42:5F:BE:2A:9D:21:7E:B9:76 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584845B0116EE308A247D4085420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/713e9415-01be-4e53-a6d3-2fe0b3bd335d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Dec 2024 19:12:25 +0000 Certificate not after: Tue 01 Dec 2026 16:45:50 +0000 Subordinate resources: AS: 401227 IP: 23.131.36.0/24 IP: 2602:f77e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:45:b0:11:6e:e3:08:a2:47:d4:08:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 20 19:12:25 2024 GMT Not After : Dec 1 16:45:50 2026 GMT Subject: CN=713e9415-01be-4e53-a6d3-2fe0b3bd335d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5a:4e:30:24:bc:cf:75:6d:c0:ef:66:9c:0a: 65:40:f2:09:db:85:22:ff:39:a4:50:49:4d:27:20: b5:c7:f5:a1:bf:a0:8a:da:94:c1:df:99:56:ef:74: eb:32:8a:29:b7:0e:d7:6a:99:9d:58:61:8e:be:25: f4:cc:34:b5:13:c8:58:55:2f:c3:c1:df:d1:5b:9b: 51:eb:63:5f:04:47:77:09:79:ee:1f:a0:b3:a0:56: f7:90:b8:cf:32:76:12:1b:34:c3:f1:46:dc:5a:9d: 28:8c:8b:e3:19:64:dc:be:1b:70:14:ea:a3:8a:4e: 87:99:ca:87:36:57:50:a4:70:43:5f:4a:33:e4:68: 76:af:96:bb:d5:93:57:7a:05:72:bc:80:bf:0c:4e: 63:6f:f4:0b:0a:8a:7e:a6:f9:26:dc:01:34:a2:89: 77:44:76:85:a9:38:5d:68:84:4c:b0:18:f2:98:0f: ff:42:c5:b2:a1:14:b8:6f:c6:e8:52:e3:e1:18:33: cf:3d:ec:d7:4e:e2:bd:c1:28:15:b1:20:21:76:62: 30:cb:72:70:74:db:46:08:a0:6f:81:96:cf:08:41: 86:ed:81:8c:de:f6:19:d9:a5:51:7f:cc:4e:f8:63: 3a:56:89:cc:44:b1:23:be:50:65:a9:d7:ca:68:ec: 73:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:22:83:97:A4:52:28:6C:A5:C8:CF:42:5F:BE:2A:9D:21:7E:B9:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/713e9415-01be-4e53-a6d3-2fe0b3bd335d/713e9415-01be-4e53-a6d3-2fe0b3bd335d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.131.36.0/24 IPv6: 2602:f77e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401227 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:38:94:0c:52:9c:d6:32:e0:e3:f4:b1:6d:04:60:bc:4d:c0: 03:24:3e:49:97:53:d7:9b:18:83:b2:92:c6:1f:d7:15:d0:52: 82:50:e6:ef:82:01:d8:e5:c1:60:80:5e:72:a6:35:5d:54:e0: 75:83:e5:c0:04:2e:7b:dc:96:d2:20:c9:d6:a7:74:55:bf:01: 01:4d:b6:08:f1:42:29:bd:fa:66:99:96:05:12:a8:d1:0b:88: 9a:b9:11:24:23:ec:be:6a:01:89:52:78:69:13:c0:e1:b1:3b: ac:a5:98:6b:7b:ad:61:c6:18:de:bc:84:94:fe:54:fd:6d:fc: d1:3a:2e:33:b3:64:21:c2:28:56:9c:ec:c6:a8:54:0b:0f:bb: 76:89:70:f4:27:5e:5d:b0:4c:16:ea:1d:c7:6d:78:40:50:4f: 6d:30:d1:aa:d8:88:6e:62:d5:13:8c:a0:e0:e8:a5:33:cc:d2: 0e:de:d7:9b:58:ba:7d:fb:11:fa:7d:70:a3:80:3b:7c:ad:e5: a4:38:4f:46:d3:d3:3b:7e:8f:bd:0b:5d:8f:47:a0:ce:14:86: b7:b5:73:2a:f2:51:4f:48:b8:38:62:0a:69:36:b0:91:e3:9f: 7f:66:49:af:8d:6c:98:c4:e3:4f:a8:78:ef:72:c1:d6:65:34: 4c:31:0b:e7 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEhFsBFu4wiiR9QIVCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTIyMDE5MTIyNVoXDTI2MTIwMTE2NDU1MFowLzEtMCsGA1UEAxMk NzEzZTk0MTUtMDFiZS00ZTUzLWE2ZDMtMmZlMGIzYmQzMzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFpOMCS8z3VtwO9mnAplQPIJ24Ui/zmkUElN JyC1x/Whv6CK2pTB35lW73TrMooptw7XapmdWGGOviX0zDS1E8hYVS/Dwd/RW5tR 62NfBEd3CXnuH6CzoFb3kLjPMnYSGzTD8UbcWp0ojIvjGWTcvhtwFOqjik6HmcqH NldQpHBDX0oz5Gh2r5a71ZNXegVyvIC/DE5jb/QLCop+pvkm3AE0ool3RHaFqThd aIRMsBjymA//QsWyoRS4b8boUuPhGDPPPezXTuK9wSgVsSAhdmIwy3JwdNtGCKBv gZbPCEGG7YGM3vYZ2aVRf8xO+GM6VonMRLEjvlBlqdfKaOxzBwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEgig5ekUihspcjPQl++Kp0hfrl2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83 MTNlOTQxNS0wMWJlLTRlNTMtYTZkMy0yZmUwYjNiZDMzNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzcxM2U5NDE1LTAxYmUtNGU1My1h NmQzLTJmZTBiM2JkMzM1ZC83MTNlOTQxNS0wMWJlLTRlNTMtYTZkMy0yZmUwYjNi ZDMzNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgyQwDgQCAAIwCAMGACYC934AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfSzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpOJQMUpzWMuDj9LFtBGC8TcAD JD5Jl1PXmxiDspLGH9cV0FKCUObvggHY5cFggF5ypjVdVOB1g+XABC573JbSIMnW p3RVvwEBTbYI8UIpvfpmmZYFEqjRC4iauREkI+y+agGJUnhpE8DhsTuspZhre61h xhjevISU/lT9bfzROi4zs2QhwihWnOzGqFQLD7t2iXD0J15dsEwW6h3HbXhAUE9t MNGq2IhuYtUTjKDg6KUzzNIO3tebWLp9+xH6fXCjgDt8reWkOE9G09M7fo+9C12P R6DOFIa3tXMq8lFPSLg4YgppNrCR459/ZkmvjWyYxONPqHjvcsHWZTRMMQvn -----END CERTIFICATE-----Generated at Thu Feb 6 18:59:47 2025 by rpki-client