$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer File: 5f20811b-fdcf-49f5-81f7-9d8385a53aec.cer (raw, json) Hash identifier: YwOh5OcXL6umfLLJW6a4AnAQHjgXundvBf7nasKJGRg= Subject key identifier: DB:05:12:99:A8:AC:BF:2A:24:F3:63:6E:F5:68:7D:95:4B:61:85:69 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858496FBA5A3C9CBFFA33EB72EE40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Apr 2025 13:24:02 +0000 Certificate not after: Sat 10 Jul 2027 13:24:02 +0000 Subordinate resources: IP: 23.179.152.0/24 IP: 2602:f8d8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:ba:5a:3c:9c:bf:fa:33:eb:72:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 6 13:24:02 2025 GMT Not After : Jul 10 13:24:02 2027 GMT Subject: CN=5f20811b-fdcf-49f5-81f7-9d8385a53aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:d4:38:f0:99:3a:c6:56:9a:9b:0f:e3:5d: 8c:cf:bb:4b:39:60:1a:4a:31:0f:c7:60:56:de:11: 84:24:0f:d7:4b:d6:62:c5:bc:6a:97:6e:69:fe:9e: f8:16:2d:90:fb:50:c2:ce:47:ef:2f:ec:68:96:90: a3:fc:07:42:a9:fe:d3:6c:0a:c4:99:0b:d8:1c:94: da:a3:79:37:08:75:c8:42:dc:78:3b:b4:a5:b0:67: 8b:06:70:4c:0f:67:08:05:b8:bb:68:58:52:75:4e: 3b:8e:78:51:7d:c2:7a:bc:6c:1f:2e:ab:83:fa:69: 01:c2:47:60:5e:b5:47:98:82:6e:3d:5e:57:74:8e: f0:00:26:cc:62:e3:ec:7a:29:6d:25:8c:f8:6e:c1: f6:3d:fd:3a:32:24:69:1d:1e:b4:b8:49:65:bb:04: 24:91:74:78:9a:72:62:18:07:fe:9f:36:ce:56:f3: 1a:31:ff:ff:be:23:fa:93:eb:29:23:40:12:05:cf: 6d:93:5d:dd:a7:b2:f4:4e:58:4e:5b:f7:ed:0e:5c: d4:dd:04:f7:b9:5d:0c:38:a5:7d:1a:ee:56:8e:ab: e5:97:08:38:c6:f7:22:32:21:89:ec:c4:db:35:0c: cf:9b:17:cc:ef:f3:9e:61:bc:58:7f:37:2e:2c:e8: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:05:12:99:A8:AC:BF:2A:24:F3:63:6E:F5:68:7D:95:4B:61:85:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f20811b-fdcf-49f5-81f7-9d8385a53aec/5f20811b-fdcf-49f5-81f7-9d8385a53aec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.179.152.0/24 IPv6: 2602:f8d8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7b:77:90:cd:66:98:af:16:ac:e7:65:8c:2c:ec:9b:8b:60: f7:53:e2:23:33:39:75:5e:62:51:d5:4f:0d:1c:35:4d:1c:50: d5:99:0c:53:12:a8:09:fd:f3:e5:4d:83:6e:15:9f:1c:e1:2b: 97:85:4e:95:d3:b8:38:d9:cd:cc:11:82:43:5c:bf:68:c1:f4: 1c:ab:76:10:cf:5c:8c:f7:70:7e:d3:31:f1:97:ec:92:5a:72: 41:e2:f6:05:5f:9f:0d:fc:aa:78:5d:c2:76:e9:f0:12:9d:77: 88:3e:d9:e5:e7:00:16:52:d0:d5:53:f5:c6:e1:c9:8c:a8:2e: 5d:f0:e0:a8:58:16:66:e6:e4:ac:e2:ba:d6:08:1c:73:b1:08: 88:c7:30:20:63:fe:98:94:2e:5d:9c:78:0b:4f:3a:82:27:01: 98:90:ef:71:e4:95:93:24:d4:e3:44:7d:8a:89:14:66:1f:45: e8:a7:03:eb:23:37:17:78:43:55:61:83:38:a5:55:b9:7e:e6: 80:96:36:da:b7:43:8d:44:0a:87:35:97:60:85:f4:52:38:b1: b4:50:12:e6:26:67:8b:78:3b:99:22:19:a7:87:44:2b:7b:8b: 46:2e:dc:4b:64:4a:0b:c3:99:39:3b:f7:92:fd:c8:14:b3:04: af:ab:ab:1e -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWElvulo8nL/6M+ty7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwNjEzMjQwMloXDTI3MDcxMDEzMjQwMlowLzEtMCsGA1UEAxMk NWYyMDgxMWItZmRjZi00OWY1LTgxZjctOWQ4Mzg1YTUzYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9bUOPCZOsZWmpsP412Mz7tLOWAaSjEPx2BW 3hGEJA/XS9Zixbxql25p/p74Fi2Q+1DCzkfvL+xolpCj/AdCqf7TbArEmQvYHJTa o3k3CHXIQtx4O7SlsGeLBnBMD2cIBbi7aFhSdU47jnhRfcJ6vGwfLquD+mkBwkdg XrVHmIJuPV5XdI7wACbMYuPseiltJYz4bsH2Pf06MiRpHR60uElluwQkkXR4mnJi GAf+nzbOVvMaMf//viP6k+spI0ASBc9tk13dp7L0TlhOW/ftDlzU3QT3uV0MOKV9 Gu5Wjqvllwg4xvciMiGJ7MTbNQzPmxfM7/OeYbxYfzcuLOh0kQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFNsFEpmorL8qJPNjbvVofZVLYYVpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 ZjIwODExYi1mZGNmLTQ5ZjUtODFmNy05ZDgzODVhNTNhZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzVmMjA4MTFiLWZkY2YtNDlmNS04 MWY3LTlkODM4NWE1M2FlYy81ZjIwODExYi1mZGNmLTQ5ZjUtODFmNy05ZDgzODVh NTNhZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXs5gwDgQCAAIwCAMGACYC+NgAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACh7d5DNZpivFqznZYws7JuLYPdT4iMzOXVeYlHVTw0cNU0cUNWZDFMSqAn98+VN g24VnxzhK5eFTpXTuDjZzcwRgkNcv2jB9ByrdhDPXIz3cH7TMfGX7JJackHi9gVf nw38qnhdwnbp8BKdd4g+2eXnABZS0NVT9cbhyYyoLl3w4KhYFmbm5KziutYIHHOx CIjHMCBj/piULl2ceAtPOoInAZiQ73HklZMk1ONEfYqJFGYfReinA+sjNxd4Q1Vh gzilVbl+5oCWNtq3Q41ECoc1l2CF9FI4sbRQEuYmZ4t4O5kiGaeHRCt7i0Yu3Etk SgvDmTk795L9yBSzBK+rqx4= -----END CERTIFICATE-----Generated at Mon Apr 21 02:48:13 2025 by rpki-client