$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer File: 1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer (raw, json) Hash identifier: TcTvmNsXiY8h65dcapkMsMNIVxULBCX9CkJpXzx90Cc= Subject key identifier: 84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848C31550DBA0EC2713843B6680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Feb 2025 17:12:28 +0000 Certificate not after: Wed 07 Apr 2027 21:24:56 +0000 Subordinate resources: AS: 401557 IP: 23.132.76.0/24 IP: 2620:d2:2000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c3:15:50:db:a0:ec:27:13:84:3b:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 3 17:12:28 2025 GMT Not After : Apr 7 21:24:56 2027 GMT Subject: CN=1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:39:c7:2b:8e:fd:71:fb:b8:07:2c:c9:95: 82:63:85:e6:a2:24:78:7f:7a:3e:97:14:1d:62:f6: fa:e1:86:1e:e0:17:fc:48:50:8d:50:f2:8f:e8:f6: d7:a2:69:3b:bd:d7:68:ab:07:8a:5c:37:64:28:b9: 9a:d1:c2:b6:36:6e:fd:a3:2f:9a:01:d6:9a:d4:07: 63:40:dc:10:08:14:7c:d9:10:01:61:d1:9f:66:50: df:cc:d0:d3:53:2a:62:10:4d:6a:e8:44:ae:67:ff: 75:1b:2c:3a:43:3f:bb:1f:d3:52:74:f5:18:6f:44: d6:8d:a5:61:32:f5:1a:fb:31:7e:72:8d:5c:06:02: 6f:aa:1d:99:a8:6c:4c:77:66:82:1a:0b:85:76:c5: e6:52:6f:4e:ce:23:38:2e:68:9b:dc:70:32:84:0f: b1:6b:4b:58:2a:5e:19:c6:ba:43:f9:8f:77:2e:f2: 72:13:66:8c:03:71:13:66:5d:b4:ad:42:80:68:80: e5:30:78:e8:78:0c:75:f9:6c:dc:06:b6:8c:24:0b: 8a:68:fe:59:b7:d2:6d:00:49:7c:8e:55:9c:22:8b: b2:6a:b9:03:e9:21:22:cb:04:82:e5:73:10:70:a8: 37:66:d6:93:ce:0e:dc:f7:33:6b:60:5a:c7:09:16: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.76.0/24 IPv6: 2620:d2:2000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401557 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7f:c3:80:17:c5:de:ae:4b:c9:15:2b:77:0f:fb:77:e9:b2: b5:f4:e2:4e:ba:2d:22:f0:a0:7b:54:c7:ad:6b:78:7a:8d:36: d4:a3:88:17:93:01:d5:ef:0b:6f:88:a4:2c:91:e9:ac:ea:61: 06:51:bf:fe:e8:3f:79:16:9a:ca:17:1e:01:b6:d4:ce:86:26: cb:44:05:0e:c5:dc:ca:3d:cf:05:82:cb:56:7d:61:ae:bd:f7: 38:aa:67:4f:ff:8f:06:6d:00:89:b5:ed:0d:00:ee:a5:68:dd: b1:e9:3e:0f:df:70:93:3d:c8:b1:76:45:f9:b4:fa:11:27:7b: f3:a4:49:95:e3:57:ec:5b:d5:ec:ef:d5:29:84:f0:35:04:ed: f2:1a:0e:86:4d:1c:02:50:fb:c4:1e:dc:97:c3:8d:68:ff:92: d0:5d:3c:2d:55:db:fb:8c:c2:7f:81:e9:54:f9:8a:cb:98:6d: bc:bf:2d:a2:4d:13:f8:b3:e3:d1:f0:09:45:69:76:6b:7c:b4: 1c:b7:0d:58:81:ce:84:5a:f6:5e:48:0b:64:18:2b:1f:ed:be: 35:49:fa:a3:e6:1a:9f:1c:03:65:6e:88:2a:f7:e4:47:33:a9: c9:20:c6:67:0c:b0:1c:8e:1e:c1:ad:71:73:78:7a:d4:0c:a2: 42:4c:b8:ee -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEjDFVDboOwnE4Q7ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwMzE3MTIyOFoXDTI3MDQwNzIxMjQ1NlowLzEtMCsGA1UEAxMk MWRlOWQ4ZjAtOGIxZC00ODBkLWJjOWUtNzcwY2VjZDRjOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Q5xyuO/XH7uAcsyZWCY4XmoiR4f3o+lxQd Yvb64YYe4Bf8SFCNUPKP6PbXomk7vddoqweKXDdkKLma0cK2Nm79oy+aAdaa1Adj QNwQCBR82RABYdGfZlDfzNDTUypiEE1q6ESuZ/91Gyw6Qz+7H9NSdPUYb0TWjaVh MvUa+zF+co1cBgJvqh2ZqGxMd2aCGguFdsXmUm9OziM4Lmib3HAyhA+xa0tYKl4Z xrpD+Y93LvJyE2aMA3ETZl20rUKAaIDlMHjoeAx1+WzcBraMJAuKaP5Zt9JtAEl8 jlWcIouyarkD6SEiywSC5XMQcKg3ZtaTzg7c9zNrYFrHCRZShQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFISzrw9X3lesOm5UBW8dJoi7hymfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x ZGU5ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBjZWNkNGM4ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzFkZTlkOGYwLThiMWQtNDgwZC1i YzllLTc3MGNlY2Q0YzhmMi8xZGU5ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBjZWNk NGM4ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXhEwwDwQCAAIwCQMHBCYgANIgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGIJUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK3/DgBfF3q5LyRUrdw/7d+my tfTiTrotIvCge1THrWt4eo021KOIF5MB1e8Lb4ikLJHprOphBlG//ug/eRaayhce AbbUzoYmy0QFDsXcyj3PBYLLVn1hrr33OKpnT/+PBm0AibXtDQDupWjdsek+D99w kz3IsXZF+bT6ESd786RJleNX7FvV7O/VKYTwNQTt8hoOhk0cAlD7xB7cl8ONaP+S 0F08LVXb+4zCf4HpVPmKy5htvL8tok0T+LPj0fAJRWl2a3y0HLcNWIHOhFr2XkgL ZBgrH+2+NUn6o+YanxwDZW6IKvfkRzOpySDGZwywHI4ewa1xc3h61AyiQky47g== -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:53 2025 by rpki-client