$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer File: 383bd50b-b192-44bd-9349-351225a13a33.cer (raw, json) Hash identifier: o/FKc/XnCIW0vr0fJq62cCtFOdNzfie5ot3DfrxaIgM= Subject key identifier: 3A:B8:A2:5D:35:14:DD:1F:7C:28:FD:B3:CC:34:59:89:B7:E2:58:DA Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858494624AEB91E0047127F627EE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Mar 2025 15:54:19 +0000 Certificate not after: Fri 25 Jun 2027 15:54:19 +0000 Subordinate resources: AS: 396064 IP: 23.136.20.0/24 IP: 2602:f6ba::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:46:24:ae:b9:1e:00:47:12:7f:62:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 22 15:54:19 2025 GMT Not After : Jun 25 15:54:19 2027 GMT Subject: CN=383bd50b-b192-44bd-9349-351225a13a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:41:30:88:32:02:05:f2:cd:c9:98:42:8f: 5d:7f:5e:e5:c5:7e:fa:de:54:56:dc:70:67:86:e5: e1:6e:df:38:78:a4:ef:81:c3:e0:05:f6:85:b0:1e: 82:de:f0:ce:60:73:fb:15:c0:63:79:b3:2b:4c:2d: e2:55:78:37:bc:09:64:bf:97:54:18:f7:40:50:32: 5f:47:ba:a3:a2:9f:5b:d5:b7:c6:7f:9c:0b:a3:0a: 43:ab:5f:d2:16:17:f6:ff:ce:5f:5e:ed:9d:ab:d0: 0d:84:b2:0e:bf:3b:46:84:07:74:4d:4f:9b:e1:74: 05:d8:13:90:63:cb:a2:4d:a0:27:87:80:3f:89:43: 23:0b:30:2b:8a:b6:c7:d0:e8:aa:f3:68:26:57:b7: bb:f2:b1:55:2e:40:30:c4:14:6b:26:5c:ee:61:7c: c8:a5:4b:41:d3:74:0b:2d:d6:a0:b9:60:4e:a9:df: f7:d1:1e:ed:19:5e:54:1d:7e:9d:10:a8:22:f8:73: de:98:4f:77:88:67:0c:66:e1:aa:e4:11:82:fd:68: ec:fe:5d:d1:17:a1:d9:69:73:d5:f4:5f:8a:e2:d1: d1:a5:cb:2b:11:0d:84:47:89:aa:d5:f9:66:8f:b4: 7f:6f:df:da:23:f4:a0:8d:90:88:20:1b:83:bb:25: a3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B8:A2:5D:35:14:DD:1F:7C:28:FD:B3:CC:34:59:89:B7:E2:58:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.20.0/24 IPv6: 2602:f6ba::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396064 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:86:fa:d3:12:d3:29:ce:c7:23:98:d5:33:d5:28:4e:6e:35: dd:9f:43:c2:22:f9:08:6c:6e:dd:dd:b4:44:5c:03:43:85:74: e8:2b:02:54:27:c3:86:eb:bd:af:4f:8e:d7:ef:e9:d7:df:eb: 65:98:f8:1d:31:e9:f2:62:4a:42:8f:e3:9d:b8:78:20:c8:a4: 30:55:63:11:bf:54:2b:77:ed:77:87:a6:41:06:6a:75:ac:97: d6:9f:f0:69:35:dc:a7:c4:1c:0c:08:4e:ae:57:7a:07:45:1f: d6:14:5f:5f:4b:b3:af:ca:33:29:31:4c:a5:26:0b:e7:91:4a: f6:fa:5a:34:2f:b1:b1:bd:90:21:74:9e:d9:5b:ce:b2:24:31: 81:35:12:15:86:b3:ec:6f:02:bd:79:ba:f0:84:c8:2f:cd:3a: bf:bd:be:9b:b4:a3:ad:18:7f:17:5a:de:41:09:14:9a:8d:e8: bd:6d:f9:a8:07:29:5a:20:22:c3:18:b9:39:7b:b7:06:ae:ac: 60:5c:b8:eb:a1:45:a9:f0:96:75:f7:6c:a5:1d:e3:82:cc:04: 20:e6:9e:5b:ae:d9:61:f9:33:23:aa:45:f5:6f:df:8b:d8:b4: b2:e8:f1:99:9d:cd:47:7d:b5:e2:37:8b:8e:c4:78:00:82:42: 9e:f5:e1:7b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElGJK65HgBHEn9ifuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyMjE1NTQxOVoXDTI3MDYyNTE1NTQxOVowLzEtMCsGA1UEAxMk MzgzYmQ1MGItYjE5Mi00NGJkLTkzNDktMzUxMjI1YTEzYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+NBMIgyAgXyzcmYQo9df17lxX763lRW3HBn huXhbt84eKTvgcPgBfaFsB6C3vDOYHP7FcBjebMrTC3iVXg3vAlkv5dUGPdAUDJf R7qjop9b1bfGf5wLowpDq1/SFhf2/85fXu2dq9ANhLIOvztGhAd0TU+b4XQF2BOQ Y8uiTaAnh4A/iUMjCzArirbH0Oiq82gmV7e78rFVLkAwxBRrJlzuYXzIpUtB03QL LdaguWBOqd/30R7tGV5UHX6dEKgi+HPemE93iGcMZuGq5BGC/Wjs/l3RF6HZaXPV 9F+K4tHRpcsrEQ2ER4mq1flmj7R/b9/aI/SgjZCIIBuDuyWjsQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDq4ol01FN0ffCj9s8w0WYm34ljaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8z ODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0zNTEyMjVhMTNhMzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzM4M2JkNTBiLWIxOTItNDRiZC05 MzQ5LTM1MTIyNWExM2EzMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0zNTEyMjVh MTNhMzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiBQwDgQCAAIwCAMGACYC9roAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYLIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4hvrTEtMpzscjmNUz1ShObjXd n0PCIvkIbG7d3bREXANDhXToKwJUJ8OG672vT47X7+nX3+tlmPgdMenyYkpCj+Od uHggyKQwVWMRv1Qrd+13h6ZBBmp1rJfWn/BpNdynxBwMCE6uV3oHRR/WFF9fS7Ov yjMpMUylJgvnkUr2+lo0L7GxvZAhdJ7ZW86yJDGBNRIVhrPsbwK9ebrwhMgvzTq/ vb6btKOtGH8XWt5BCRSajei9bfmoBylaICLDGLk5e7cGrqxgXLjroUWp8JZ192yl HeOCzAQg5p5brtlh+TMjqkX1b9+L2LSy6PGZnc1HfbXiN4uOxHgAgkKe9eF7 -----END CERTIFICATE-----Generated at Fri Apr 4 06:15:34 2025 by rpki-client