$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer File: 8785615b-4ba8-49c9-a63b-755d5560474a.cer (raw, json) Hash identifier: Y2ZafptOUg0aAxRRFPgVejjN5ExGn7jBeJ8LypotqsE= Subject key identifier: 9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584961CE0F7B69B9B0C21C4A9480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 13:42:25 +0000 Certificate not after: Thu 01 Jul 2027 14:25:58 +0000 Subordinate resources: IP: 23.136.196.0/24 IP: 2602:f6ac::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:ce:0f:7b:69:b9:b0:c2:1c:4a:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 1 13:42:25 2025 GMT Not After : Jul 1 14:25:58 2027 GMT Subject: CN=8785615b-4ba8-49c9-a63b-755d5560474a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:a5:42:0b:9b:a9:ee:48:31:63:33:55:60: 79:71:13:f8:5f:ba:2d:03:63:af:56:a7:47:e3:ac: c4:60:27:90:a9:b0:fc:76:64:c5:17:a4:a8:a8:f4: 98:3b:39:47:5e:a7:07:c6:9c:dd:53:40:c3:94:3b: 9f:ae:33:f6:3d:39:fc:19:31:f5:ca:6d:ca:4a:ed: 48:4c:57:51:a8:f8:ab:ec:8a:dc:9b:01:78:71:32: ba:de:f8:09:f2:e2:74:e8:59:68:d5:3b:cf:8a:ab: 07:08:f6:0e:cc:b4:f7:37:ec:95:a0:13:34:79:74: 3f:ad:a1:fe:84:ee:8f:d9:33:39:7f:45:02:ea:93: ae:10:ef:7c:1c:fa:4b:77:31:db:96:f3:f0:78:e2: 99:06:fb:00:0e:30:7f:9f:d3:75:18:62:26:b1:e6: 87:20:20:78:7b:de:60:bf:d3:2f:76:52:c0:d7:65: f6:85:c5:d6:34:77:6f:3f:f6:81:98:70:48:9e:e0: 0b:29:f9:bd:99:e6:dd:ee:f3:19:e3:f9:8a:3d:59: 82:cf:70:ac:8b:55:fd:d5:ea:5a:57:46:34:d4:9c: 86:8d:9e:37:90:d5:6c:3c:55:f0:da:9b:86:0e:08: f5:db:49:20:76:88:04:f3:58:a4:fe:d3:c2:35:ff: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.196.0/24 IPv6: 2602:f6ac::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:85:7b:52:d6:10:85:3b:e4:f0:f0:8d:76:10:72:c9:09:e9: f4:63:32:f0:07:b0:65:c6:4c:15:12:b5:06:d8:fa:8a:9d:32: 23:88:6a:0b:05:d9:6c:65:50:92:00:69:47:d3:07:57:db:bc: 6f:0b:7d:02:ba:5c:90:ab:ac:89:41:89:1f:55:88:00:d4:e3: 56:a6:6a:bf:61:64:2a:f3:ab:8b:7d:0a:3e:76:ba:36:59:80: c8:d5:01:3f:fa:63:05:80:34:a9:6d:54:99:e1:ae:86:81:78: d5:db:47:fa:b3:b9:bf:74:9c:05:8e:1c:33:73:5a:39:0a:c8: 69:25:c9:ca:d8:8c:a8:71:d3:e1:22:fd:42:6f:a0:69:74:cf: 99:ab:17:aa:ce:67:b7:b1:b6:38:93:bf:5a:ec:68:62:91:25: 65:b6:85:38:c8:0f:0d:37:b1:3f:98:9e:c4:b6:60:f3:2b:e7: 88:c3:ce:e2:34:01:be:44:12:3b:99:c1:22:fb:35:79:54:1c: 0b:f1:ac:84:9d:78:b2:f2:ed:31:5b:c5:58:49:3b:f4:5a:51: 2b:c3:23:5a:55:a3:09:36:c1:4d:1f:7e:b6:96:13:79:58:b2: d6:b0:ae:1d:7d:81:56:c6:37:86:a9:cb:ea:30:e3:8d:27:73: d4:fd:9c:2e -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWElhzg97abmwwhxKlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwMTEzNDIyNVoXDTI3MDcwMTE0MjU1OFowLzEtMCsGA1UEAxMk ODc4NTYxNWItNGJhOC00OWM5LWE2M2ItNzU1ZDU1NjA0NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiylQgubqe5IMWMzVWB5cRP4X7otA2OvVqdH 46zEYCeQqbD8dmTFF6SoqPSYOzlHXqcHxpzdU0DDlDufrjP2PTn8GTH1ym3KSu1I TFdRqPir7IrcmwF4cTK63vgJ8uJ06Flo1TvPiqsHCPYOzLT3N+yVoBM0eXQ/raH+ hO6P2TM5f0UC6pOuEO98HPpLdzHblvPweOKZBvsADjB/n9N1GGImseaHICB4e95g v9MvdlLA12X2hcXWNHdvP/aBmHBInuALKfm9mebd7vMZ4/mKPVmCz3Csi1X91epa V0Y01JyGjZ43kNVsPFXw2puGDgj120kgdogE81ik/tPCNf/KJQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFJoPfcdLc13WmoH7z2wAyNLEKNlWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84 Nzg1NjE1Yi00YmE4LTQ5YzktYTYzYi03NTVkNTU2MDQ3NGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzg3ODU2MTViLTRiYTgtNDljOS1h NjNiLTc1NWQ1NTYwNDc0YS84Nzg1NjE1Yi00YmE4LTQ5YzktYTYzYi03NTVkNTU2 MDQ3NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiMQwDgQCAAIwCAMGBCYC9qwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AA+Fe1LWEIU75PDwjXYQcskJ6fRjMvAHsGXGTBUStQbY+oqdMiOIagsF2WxlUJIA aUfTB1fbvG8LfQK6XJCrrIlBiR9ViADU41amar9hZCrzq4t9Cj52ujZZgMjVAT/6 YwWANKltVJnhroaBeNXbR/qzub90nAWOHDNzWjkKyGklycrYjKhx0+Ei/UJvoGl0 z5mrF6rOZ7extjiTv1rsaGKRJWW2hTjIDw03sT+YnsS2YPMr54jDzuI0Ab5EEjuZ wSL7NXlUHAvxrISdeLLy7TFbxVhJO/RaUSvDI1pVowk2wU0ffraWE3lYstawrh19 gVbGN4apy+ow440nc9T9nC4= -----END CERTIFICATE-----Generated at Fri Apr 4 20:20:53 2025 by rpki-client