$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer File: 21f498b5-84f8-4255-a971-76e62e3a212d.cer (raw, json) Hash identifier: GJ0keEuxtBsU+BEqMDIBfC6SSxYU4eKPKY4YwQJIwOk= Subject key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858494BC7175BD9F7DB0E32AEF040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 16:20:36 +0000 Certificate not after: Sun 27 Jun 2027 16:20:36 +0000 Subordinate resources: AS: 29803 IP: 23.136.100.0/24 IP: 2602:f6ab::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:c7:17:5b:d9:f7:db:0e:32:ae:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 24 16:20:36 2025 GMT Not After : Jun 27 16:20:36 2027 GMT Subject: CN=21f498b5-84f8-4255-a971-76e62e3a212d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:90:16:f4:0f:5c:66:36:22:6e:d2:64:3c: 2b:67:9d:76:1c:c7:c2:9c:55:0a:72:bc:33:b4:a3: 98:39:cc:0e:e9:d8:d8:74:d2:a6:0f:f9:63:22:5e: 95:a3:bf:46:55:87:4f:55:0d:f7:b6:14:eb:8f:06: c1:3a:2b:18:20:e2:cb:7d:66:3d:2e:fb:cc:a6:0c: ec:af:f3:ac:6d:2e:8e:8b:a3:e1:1b:bb:dd:20:2e: 4f:4c:94:42:61:dd:0a:cf:30:51:af:03:d1:ea:52: f6:ed:f1:70:fc:71:f3:dc:9b:0d:26:40:75:f0:1f: 00:9b:4b:bd:df:16:df:9b:df:83:9f:d3:0f:ac:11: 75:cf:3d:1c:c3:f6:e8:f4:4e:d3:ca:26:df:c8:2f: 1f:a0:69:49:df:a2:76:8b:33:31:51:4a:33:54:c1: 0a:3e:88:72:ea:33:a6:c6:1e:6d:c6:08:ed:96:6d: 13:7c:96:33:46:fc:91:20:01:44:82:78:61:8e:97: 31:53:5b:0c:d0:8c:97:39:71:28:23:4e:95:e2:31: a1:ea:47:cf:b2:df:9a:98:55:1d:bd:8a:25:99:d0: a5:76:8c:6b:cf:57:56:da:f3:18:4b:3d:d7:72:4f: 9f:3a:62:d7:46:ff:1a:ac:38:26:c1:c4:30:71:67: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.100.0/24 IPv6: 2602:f6ab::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29803 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fa:6e:72:3d:51:a5:3b:2e:cf:bf:c6:bc:1c:50:ee:5a:dd: bf:c8:19:3a:08:ef:69:81:cc:47:7f:86:68:0d:8f:7f:7e:b9: 50:9d:5f:10:b0:2a:30:3c:6c:16:ad:65:35:f1:50:fe:10:69: 69:1e:95:7b:28:0d:3c:97:8e:08:3d:b3:62:4f:e3:3f:35:af: fd:13:3c:62:46:13:99:ba:5e:73:57:07:d2:1a:45:f4:7a:cf: cc:2d:2b:e3:e4:ef:dc:11:94:b8:e5:7b:67:e3:0f:27:c9:38: 5a:0d:37:0b:50:52:5c:e3:98:4d:08:0a:c0:36:9a:35:6f:f4: a0:0a:28:7d:1b:a8:ec:4d:bf:5f:71:07:9d:6c:d3:d9:b8:10: b5:63:2e:6c:e9:57:d8:2c:4b:23:04:6f:b7:c0:54:48:b4:1f: 32:49:30:af:49:41:e6:af:48:1a:6f:c0:02:10:f9:99:23:f9: f8:80:7f:d3:10:25:d0:f9:77:a8:02:1c:a3:1a:38:81:96:57: 31:59:03:04:77:85:cb:16:87:8b:af:cf:70:f9:0d:d4:fa:6a: f8:f6:3d:db:26:f5:71:09:3c:73:11:b7:56:b4:a1:84:12:57: b5:0b:a9:18:ad:a0:37:c8:26:74:ea:85:e2:95:7f:d4:1d:6d: 2d:5f:69:04 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWElLxxdb2ffbDjKu8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNDE2MjAzNloXDTI3MDYyNzE2MjAzNlowLzEtMCsGA1UEAxMk MjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2EyMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUeQFvQPXGY2Im7SZDwrZ512HMfCnFUKcrwz tKOYOcwO6djYdNKmD/ljIl6Vo79GVYdPVQ33thTrjwbBOisYIOLLfWY9LvvMpgzs r/OsbS6Oi6PhG7vdIC5PTJRCYd0KzzBRrwPR6lL27fFw/HHz3JsNJkB18B8Am0u9 3xbfm9+Dn9MPrBF1zz0cw/bo9E7TyibfyC8foGlJ36J2izMxUUozVMEKPohy6jOm xh5txgjtlm0TfJYzRvyRIAFEgnhhjpcxU1sM0IyXOXEoI06V4jGh6kfPst+amFUd vYolmdCldoxrz1dW2vMYSz3Xck+fOmLXRv8arDgmwcQwcWf1aQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJoEffM4hO+d220g2SCtXdQGZXfdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y MWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzIxZjQ5OGI1LTg0ZjgtNDI1NS1h OTcxLTc2ZTYyZTNhMjEyZC8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUz YTIxMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiGQwDgQCAAIwCAMGACYC9qsAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnRrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADf6bnI9UaU7Ls+/xrwcUO5a3b/I GToI72mBzEd/hmgNj39+uVCdXxCwKjA8bBatZTXxUP4QaWkelXsoDTyXjgg9s2JP 4z81r/0TPGJGE5m6XnNXB9IaRfR6z8wtK+Pk79wRlLjle2fjDyfJOFoNNwtQUlzj mE0ICsA2mjVv9KAKKH0bqOxNv19xB51s09m4ELVjLmzpV9gsSyMEb7fAVEi0HzJJ MK9JQeavSBpvwAIQ+Zkj+fiAf9MQJdD5d6gCHKMaOIGWVzFZAwR3hcsWh4uvz3D5 DdT6avj2Pdsm9XEJPHMRt1a0oYQSV7ULqRitoDfIJnTqheKVf9QdbS1faQQ= -----END CERTIFICATE-----Generated at Fri Apr 4 16:22:02 2025 by rpki-client