$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer File: 0a080168-c146-41c6-9367-391cd429b856.cer (raw, json) Hash identifier: 0xACBPU8nHG+ImVFMIuJ0CNq+H6xIGNECJelRnAo7OM= Subject key identifier: BC:13:03:11:05:E8:9A:AE:C7:8F:16:55:AE:52:34:73:64:71:50:A1 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858486499B55A632CDA40FFB82480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Dec 2024 20:57:26 +0000 Certificate not after: Sun 04 Apr 2027 13:07:26 +0000 Subordinate resources: AS: 401551 IP: 23.131.172.0/24 IP: 2602:f752::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:64:99:b5:5a:63:2c:da:40:ff:b8:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 31 20:57:26 2024 GMT Not After : Apr 4 13:07:26 2027 GMT Subject: CN=0a080168-c146-41c6-9367-391cd429b856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:40:bc:65:84:b3:b1:85:fd:d9:a6:ad:0d: 79:31:c8:c7:24:d3:03:14:2c:0d:e2:37:95:16:c5: 4d:8f:83:47:b0:ad:a3:ee:45:d0:61:f0:ef:8d:c3: 0b:8b:42:4b:33:88:df:37:30:77:55:12:1f:3e:8e: 49:aa:a0:93:29:e5:6b:02:05:0c:6b:91:8a:6f:d1: a3:b9:ab:e3:6e:1a:4d:eb:e7:8e:f1:74:82:d6:dc: e1:c0:98:26:b5:40:e8:07:c0:77:2e:d2:9a:05:1b: f5:df:8e:f3:a3:9b:95:3c:9d:82:30:f4:71:0e:86: a1:14:40:31:ce:02:20:db:3f:0b:1f:92:e9:1a:69: b1:54:a6:4f:b2:f9:94:4a:ec:4b:19:15:70:86:71: 19:2a:d6:bb:82:dc:4c:6f:aa:db:19:09:e6:63:4c: 46:44:87:6c:30:7e:20:bf:13:89:d9:82:e4:c9:d2: 8b:e8:2f:51:61:6a:30:a3:d5:28:a8:b8:fe:6e:72: 76:8c:7c:3c:e3:c9:05:f7:ac:81:85:0b:ff:77:39: dd:ac:ed:4d:ed:2c:d0:1f:55:0c:92:88:db:f3:60: 3a:05:1b:90:a2:ab:f2:91:ce:35:5e:2d:79:fc:9e: b6:d6:27:fe:4c:54:29:f4:02:52:69:56:58:d3:3f: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:13:03:11:05:E8:9A:AE:C7:8F:16:55:AE:52:34:73:64:71:50:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.172.0/24 IPv6: 2602:f752::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401551 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:26:3e:69:56:48:92:df:34:5b:4b:1e:a5:ba:6f:06:76:2d: 5b:1f:32:de:9c:be:fb:af:56:3a:b5:df:35:7d:52:9e:eb:7c: 07:45:d8:6f:7a:7f:ed:4a:c1:f4:27:0d:e3:0b:25:7e:17:20: c1:9a:39:19:89:42:75:a3:8c:f0:92:c3:1b:08:84:1e:c6:cf: c4:26:59:6a:27:9d:06:49:5a:4d:1b:0f:6e:e2:5e:e2:19:53: 41:fa:5e:73:2c:a7:41:24:fe:6c:f0:32:93:45:e5:1c:b3:88: 14:9c:9c:3b:f1:70:94:60:2f:db:4d:02:da:11:6e:f0:23:bd: 6d:54:e0:69:ff:1c:d3:43:44:51:0a:69:1e:bd:e5:ed:b7:5a: c8:87:ab:6d:c2:0f:c8:3c:8b:df:8c:02:ec:a7:4d:66:08:09: 62:18:4f:09:91:cf:8e:b3:d2:1e:b9:77:00:fc:5d:bb:e7:a0: 54:a8:25:ff:e7:06:0a:e0:bd:f8:0b:66:b5:54:bf:c5:2e:24: cb:4e:c7:30:3c:3e:21:0e:79:29:f3:5a:7a:f2:ca:11:67:b9: ad:1c:c4:8b:81:74:f6:b5:20:0b:4f:84:84:f7:51:5a:b7:9d: 0f:2e:a3:89:7e:54:72:06:ab:9f:46:a0:e8:f3:11:53:3b:0a: 0a:e6:f4:48 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEhkmbVaYyzaQP+4JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIzMTIwNTcyNloXDTI3MDQwNDEzMDcyNlowLzEtMCsGA1UEAxMk MGEwODAxNjgtYzE0Ni00MWM2LTkzNjctMzkxY2Q0MjliODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno5AvGWEs7GF/dmmrQ15McjHJNMDFCwN4jeV FsVNj4NHsK2j7kXQYfDvjcMLi0JLM4jfNzB3VRIfPo5JqqCTKeVrAgUMa5GKb9Gj uavjbhpN6+eO8XSC1tzhwJgmtUDoB8B3LtKaBRv1347zo5uVPJ2CMPRxDoahFEAx zgIg2z8LH5LpGmmxVKZPsvmUSuxLGRVwhnEZKta7gtxMb6rbGQnmY0xGRIdsMH4g vxOJ2YLkydKL6C9RYWowo9UoqLj+bnJ2jHw848kF96yBhQv/dzndrO1N7SzQH1UM kojb82A6BRuQoqvykc41Xi15/J621if+TFQp9AJSaVZY0z9psQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLwTAxEF6Jqux48WVa5SNHNkcVChMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8w YTA4MDE2OC1jMTQ2LTQxYzYtOTM2Ny0zOTFjZDQyOWI4NTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzBhMDgwMTY4LWMxNDYtNDFjNi05 MzY3LTM5MWNkNDI5Yjg1Ni8wYTA4MDE2OC1jMTQ2LTQxYzYtOTM2Ny0zOTFjZDQy OWI4NTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg6wwDgQCAAIwCAMGBCYC91IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgjzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6Jj5pVkiS3zRbSx6lum8Gdi1b HzLenL77r1Y6td81fVKe63wHRdhven/tSsH0Jw3jCyV+FyDBmjkZiUJ1o4zwksMb CIQexs/EJllqJ50GSVpNGw9u4l7iGVNB+l5zLKdBJP5s8DKTReUcs4gUnJw78XCU YC/bTQLaEW7wI71tVOBp/xzTQ0RRCmkeveXtt1rIh6ttwg/IPIvfjALsp01mCAli GE8Jkc+Os9IeuXcA/F2756BUqCX/5wYK4L34C2a1VL/FLiTLTscwPD4hDnkp81p6 8soRZ7mtHMSLgXT2tSALT4SE91Fat50PLqOJflRyBqufRqDo8xFTOwoK5vRI -----END CERTIFICATE-----Generated at Mon Mar 10 19:01:34 2025 by rpki-client