$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.cer File: 52ad4e40-188e-440b-bc90-aa9cef5dc1c4.cer (raw, json) Hash identifier: Sn/zxfnN31Q1O3tBYVAffjjt8vLYyoXyzF6+8Zdl6Fg= Subject key identifier: 52:A7:C5:8F:82:02:99:51:EC:93:79:31:9B:CB:44:7C:3C:B2:59:F1 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858493346761126CEB40047F54F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Mar 2025 21:42:01 +0000 Certificate not after: Fri 18 Jun 2027 21:42:01 +0000 Subordinate resources: AS: 394674 IP: 23.135.244.0/24 IP: 2604:7e0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:33:46:76:11:26:ce:b4:00:47:f5:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 15 21:42:01 2025 GMT Not After : Jun 18 21:42:01 2027 GMT Subject: CN=52ad4e40-188e-440b-bc90-aa9cef5dc1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e7:1e:04:4c:c9:9e:5f:07:cb:a5:07:d9:2d: b2:12:e7:df:75:a0:1f:94:12:71:6e:be:c6:da:65: 8a:96:53:93:96:91:83:a2:78:24:83:f2:4b:0c:b1: 34:54:68:f7:07:06:9c:3f:61:2e:85:38:60:c0:18: ab:b3:8b:9b:f0:c2:e8:c0:ec:66:5a:73:5b:e7:65: 20:29:86:52:7c:f9:18:f9:83:9d:ee:b7:e2:84:35: b7:77:24:b5:2d:90:59:de:d6:57:11:5c:15:20:07: f4:23:fb:61:0e:5d:72:84:49:68:af:c2:50:3e:f0: d9:a0:24:2c:d9:56:86:16:1a:e9:46:c3:b5:25:36: a0:45:07:b4:05:a0:5c:92:04:84:06:93:5d:5c:9d: e9:53:9c:b0:75:7e:74:5b:bf:c6:c2:ab:db:fc:5c: 80:ab:b1:b4:ef:f4:4f:4c:04:de:86:e9:c6:1b:ff: 70:11:5d:6b:fd:48:b4:04:89:dd:8a:e2:12:09:09: 07:3b:4c:b3:91:e6:c9:7b:92:6e:61:18:4b:45:6c: b7:29:be:d4:55:28:7f:6b:57:cc:40:b2:f6:52:28: fd:0b:f4:02:af:da:39:af:20:c4:af:66:56:03:7d: d3:76:e0:7e:51:25:30:da:e7:f5:34:bc:12:71:03: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A7:C5:8F:82:02:99:51:EC:93:79:31:9B:CB:44:7C:3C:B2:59:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52ad4e40-188e-440b-bc90-aa9cef5dc1c4/52ad4e40-188e-440b-bc90-aa9cef5dc1c4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.135.244.0/24 IPv6: 2604:7e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394674 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d6:d0:07:9f:d9:7c:56:5e:89:5c:03:4b:5d:bc:8a:16:38: a5:70:f8:ed:6c:0e:ce:51:87:c0:07:6b:a1:a6:44:f7:ad:89: 59:11:d5:14:12:09:e6:5d:51:f2:3c:01:76:28:a6:96:b1:36: 4b:2e:ec:ba:98:f6:39:53:4b:8c:8a:13:7e:7e:89:98:1c:6b: 7c:6e:95:d9:36:ae:96:1d:95:d8:eb:63:c2:51:0c:67:d3:c7: de:3e:bc:9e:18:94:12:52:ef:7b:dd:78:97:d9:7f:94:53:48: 65:0c:39:d6:1e:8a:34:98:83:43:f8:62:4f:b5:00:96:59:3f: 3b:38:42:8b:e6:e9:52:e4:44:db:f7:49:d5:28:b6:fd:f9:80: fa:c3:f5:00:4b:72:9e:9b:59:06:85:fe:a4:40:5e:f6:c9:ff: 87:94:15:c2:c2:4e:30:92:c0:7c:fa:4e:8d:71:a0:71:62:eb: 7c:5a:11:df:a0:bf:dd:e0:ba:32:41:6c:bf:f7:12:bd:c5:02: 1d:13:55:fa:45:df:17:1a:bf:4a:5b:27:d7:7e:4a:be:7d:1c: a5:eb:58:d6:29:40:12:01:1a:76:eb:c5:8a:8c:bc:aa:74:41: be:14:c5:61:80:f7:39:57:a9:fa:d8:10:09:a5:41:af:a2:74: 2f:4a:35:fa -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkzRnYRJs60AEf1T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI1MDMxNTIxNDIwMVoXDTI3MDYxODIxNDIwMVowLzEtMCsGA1UEAxMk NTJhZDRlNDAtMTg4ZS00NDBiLWJjOTAtYWE5Y2VmNWRjMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eceBEzJnl8Hy6UH2S2yEuffdaAflBJxbr7G 2mWKllOTlpGDongkg/JLDLE0VGj3BwacP2EuhThgwBirs4ub8MLowOxmWnNb52Ug KYZSfPkY+YOd7rfihDW3dyS1LZBZ3tZXEVwVIAf0I/thDl1yhElor8JQPvDZoCQs 2VaGFhrpRsO1JTagRQe0BaBckgSEBpNdXJ3pU5ywdX50W7/Gwqvb/FyAq7G07/RP TATehunGG/9wEV1r/Ui0BIndiuISCQkHO0yzkebJe5JuYRhLRWy3Kb7UVSh/a1fM QLL2Uij9C/QCr9o5ryDEr2ZWA33TduB+USUw2uf1NLwScQO3tQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFKnxY+CAplR7JN5MZvLRHw8slnxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81 MmFkNGU0MC0xODhlLTQ0MGItYmM5MC1hYTljZWY1ZGMxYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzUyYWQ0ZTQwLTE4OGUtNDQwYi1i YzkwLWFhOWNlZjVkYzFjNC81MmFkNGU0MC0xODhlLTQ0MGItYmM5MC1hYTljZWY1 ZGMxYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXh/QwDQQCAAIwBwMFACYEB+AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgWyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEfW0Aef2XxWXolcA0tdvIoWOKVw +O1sDs5Rh8AHa6GmRPetiVkR1RQSCeZdUfI8AXYoppaxNksu7LqY9jlTS4yKE35+ iZgca3xuldk2rpYdldjrY8JRDGfTx94+vJ4YlBJS73vdeJfZf5RTSGUMOdYeijSY g0P4Yk+1AJZZPzs4Qovm6VLkRNv3SdUotv35gPrD9QBLcp6bWQaF/qRAXvbJ/4eU FcLCTjCSwHz6To1xoHFi63xaEd+gv93gujJBbL/3Er3FAh0TVfpF3xcav0pbJ9d+ Sr59HKXrWNYpQBIBGnbrxYqMvKp0Qb4UxWGA9zlXqfrYEAmlQa+idC9KNfo= -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:56 2025 by rpki-client