$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424.cer File: dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424.cer (raw, json) Hash identifier: AykJG0kUjdIdhl7dFHL+9odzUCFaqXnnavGaLXyBeug= Subject key identifier: 75:0F:D3:BA:0F:6C:08:56:3C:DD:BE:91:19:79:FB:12:27:97:64:9C Authority key identifier: 0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73 Certificate issuer: /CN=88c69486-3e14-4f26-9f99-02cf7aaab7bf Certificate serial: 010D0C9F4328584844D343F1FAC3EC65B1080C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/750FD3BA0F6C08563CDDBE911979FB122797649C.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 20 Dec 2024 11:47:32 +0000 Certificate not after: Thu 25 Mar 2027 10:47:32 +0000 Subordinate resources: AS: 53427 IP: 23.128.100.0/24 IP: 2602:fa91::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:44:d3:43:f1:fa:c3:ec:65:b1:08:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c69486-3e14-4f26-9f99-02cf7aaab7bf Validity Not Before: Dec 20 11:47:32 2024 GMT Not After : Mar 25 10:47:32 2027 GMT Subject: CN=dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:4f:c9:13:a7:36:68:d8:e3:39:13:3e:32: 3a:26:4a:97:88:23:2c:52:db:bb:3b:99:e2:c8:da: 96:d7:7e:5b:e9:cb:28:3a:22:a4:d8:77:db:96:cc: 7c:3b:89:1b:e7:62:24:b4:5d:f5:63:e4:6b:71:85: b2:99:2a:b7:00:c1:91:f1:b5:4b:68:2a:00:fd:ff: f3:ae:d0:9a:fc:fc:ee:87:b9:bc:d6:37:df:c0:69: 53:55:2c:06:e5:7d:b1:d0:b7:d6:37:80:44:de:dd: 23:bb:84:76:d7:e8:0a:bd:87:0f:07:5a:41:55:f8: 52:cf:0b:4e:f5:af:e7:64:ae:b5:6e:2a:62:75:b0: d0:8b:d1:9c:34:9b:73:a5:ee:55:2f:59:8c:4b:0f: 93:ca:05:0d:c5:5f:ba:96:99:e6:11:6f:65:23:f2: 02:8c:4a:b6:b3:b3:57:84:6a:d6:d0:a7:da:75:97: 0e:33:6e:21:ca:64:b1:50:2a:f9:a8:d5:19:89:23: 1a:87:14:6f:b1:0c:e7:4d:a2:51:00:c3:1b:c4:3f: 94:08:e0:45:70:78:e8:32:26:e8:08:ad:f6:46:ef: 95:92:45:e7:5c:42:1f:7f:0b:19:c3:bf:b6:c4:03: a8:68:43:cc:f0:d9:49:63:1b:6d:4a:79:af:04:72: 42:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0F:D3:BA:0F:6C:08:56:3C:DD:BE:91:19:79:FB:12:27:97:64:9C Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/750FD3BA0F6C08563CDDBE911979FB122797649C.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.crl X509v3 Authority Key Identifier: keyid:0C:2C:DB:E8:97:EC:93:27:27:20:18:48:1B:6D:3F:C7:C6:39:BE:73 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer sbgp-ipAddrBlock: critical IPv4: 23.128.100.0/24 IPv6: 2602:fa91::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6e:dd:6a:3c:85:8b:37:60:c6:aa:49:29:d1:6d:fa:a6:fe: 0d:a5:00:2d:9a:ea:ab:be:18:32:a9:4c:60:e8:51:95:28:aa: 9a:a7:d2:19:e7:f5:e6:fd:f0:28:0d:15:e2:e4:55:49:91:4f: 08:88:31:a8:96:59:23:65:06:ed:06:6c:b3:25:5f:f2:97:d5: ba:b9:0c:4c:c3:d3:6c:b2:29:5f:16:df:d9:80:62:86:59:cf: 43:2e:22:6b:36:73:42:54:a2:c3:c6:58:c1:32:2d:5c:8d:04: eb:a8:8a:ac:a1:f9:58:cb:8c:ed:ae:86:ff:85:cf:ec:23:45: 26:fd:4b:1b:55:14:33:88:dd:20:46:b4:51:e2:1a:44:db:23: 58:9d:ed:94:1e:cb:71:1d:be:d4:29:11:28:e2:70:3c:35:6c: 06:a0:5a:82:21:e3:a0:ca:a0:6c:89:5e:eb:b8:67:e4:a5:c2: b0:aa:14:2d:54:97:24:8d:9e:cb:d5:a4:41:96:14:5e:b0:64: 01:b6:d1:79:7c:c1:e9:18:df:66:93:5f:eb:80:2e:77:29:91: e6:d7:5b:03:99:2b:b4:34:15:83:51:36:fa:40:53:21:40:f2: 01:f6:83:91:3b:1d:a2:bd:99:65:50:e5:cb:d5:8c:7c:eb:2e: 93:d7:dc:c9 -----BEGIN CERTIFICATE----- MIIGzTCCBbWgAwIBAgIUAQ0Mn0MoWEhE00Px+sPsZbEIDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhjNjk0ODYtM2UxNC00ZjI2LTlmOTktMDJjZjdhYWFi N2JmMB4XDTI0MTIyMDExNDczMloXDTI3MDMyNTEwNDczMlowPTE7MDkGA1UEAxMy ZGQ5ZDlmZTVjYzEzZmM4MzYwYWFlYjEzYjVlNzIzMmFkZDhiYTE3ZGU2Y2RkYWQ0 MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5A0/JE6c2aNjjORM+ MjomSpeIIyxS27s7meLI2pbXflvpyyg6IqTYd9uWzHw7iRvnYiS0XfVj5GtxhbKZ KrcAwZHxtUtoKgD9//Ou0Jr8/O6HubzWN9/AaVNVLAblfbHQt9Y3gETe3SO7hHbX 6Aq9hw8HWkFV+FLPC071r+dkrrVuKmJ1sNCL0Zw0m3Ol7lUvWYxLD5PKBQ3FX7qW meYRb2Uj8gKMSrazs1eEatbQp9p1lw4zbiHKZLFQKvmo1RmJIxqHFG+xDOdNolEA wxvEP5QI4EVweOgyJugIrfZG75WSRedcQh9/CxnDv7bEA6hoQ8zw2UljG21Kea8E ckJVAgMBAAGjggPRMIIDzTAdBgNVHQ4EFgQUdQ/Tug9sCFY83b6RGXn7EieXZJww ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZmMGQ1 MTBhNjVkMTEvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZmMGQ1MTBhNjVkMTEv MC83NTBGRDNCQTBGNkMwODU2M0NEREJFOTExOTc5RkIxMjI3OTc2NDlDLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNj Yy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg4YzY5NDg2LTNlMTQtNGYyNi05Zjk5 LTAyY2Y3YWFhYjdiZi84OGM2OTQ4Ni0zZTE0LTRmMjYtOWY5OS0wMmNmN2FhYWI3 YmYuY3JsMB8GA1UdIwQYMBaAFAws2+iX7JMnJyAYSBttP8fGOb5zMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMt YmRhNy0xYmUyMDQ5MzNhZTUvODhjNjk0ODYtM2UxNC00ZjI2LTlmOTktMDJjZjdh YWFiN2JmLmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEABeAZDAOBAIA AjAIAwYAJgL6kQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANCzMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAlu3Wo8hYs3YMaqSSnRbfqm/g2lAC2a6qu+GDKpTGDoUZUoqpqn0hnn9eb98CgN FeLkVUmRTwiIMaiWWSNlBu0GbLMlX/KX1bq5DEzD02yyKV8W39mAYoZZz0MuIms2 c0JUosPGWMEyLVyNBOuoiqyh+VjLjO2uhv+Fz+wjRSb9SxtVFDOI3SBGtFHiGkTb I1id7ZQey3EdvtQpESjicDw1bAagWoIh46DKoGyJXuu4Z+SlwrCqFC1UlySNnsvV pEGWFF6wZAG20Xl8wekY32aTX+uALncpkebXWwOZK7Q0FYNRNvpAUyFA8gH2g5E7 HaK9mWVQ5cvVjHzrLpPX3Mk= -----END CERTIFICATE-----Generated at Sun Apr 6 13:31:46 2025 by rpki-client