$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe.cer File: 29540dcd-69da-45be-b57c-8c4aefcf66fe.cer (raw, json) Hash identifier: s/2ZWst0UGfzeAqeDPKu92WIyXEjzJzZ/2vlnttV+wQ= Subject key identifier: 3B:BC:A1:D1:81:08:2D:07:28:F5:F3:5E:C5:FB:87:AA:EF:00:7A:98 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848A90B934A9E56A9DFA38A4700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Jan 2025 09:21:49 +0000 Certificate not after: Fri 30 Apr 2027 08:21:49 +0000 Subordinate resources: IP: 23.132.220.0/24 IP: 2602:f720::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:0b:93:4a:9e:56:a9:df:a3:8a:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 25 09:21:49 2025 GMT Not After : Apr 30 08:21:49 2027 GMT Subject: CN=29540dcd-69da-45be-b57c-8c4aefcf66fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:73:ec:ae:b1:71:cd:d0:99:da:a1:f1:b9: 73:58:c0:99:bd:1b:cd:f4:b5:25:48:a3:48:30:5c: 50:b8:0b:ee:6f:3b:98:dc:85:dc:dd:e4:13:88:4e: 27:3b:0e:2a:55:a6:2e:62:aa:20:19:82:a1:d4:c6: 84:35:21:cd:10:82:5a:1d:90:ea:e2:d9:d7:5e:08: af:66:a8:f8:ea:c1:59:2c:f2:91:01:7a:f4:12:65: 4c:d1:12:d6:00:90:c3:aa:17:76:c7:0e:41:a4:3a: b1:6f:7d:18:8c:e5:08:b2:81:8d:d5:23:c2:b3:4b: 52:cc:4e:d9:be:ca:62:96:c5:5e:e3:bf:b5:44:8f: 95:25:d7:8b:7b:15:03:58:94:42:48:9e:42:16:2d: c6:0a:c3:91:23:6f:b2:33:87:0b:ff:e3:34:2a:9f: 67:ac:be:02:ba:fa:86:2b:32:f2:06:5b:8f:ae:9f: 6b:40:34:2c:ca:92:51:37:77:1d:28:ff:2e:80:9e: 48:95:ff:0b:a0:32:28:85:a6:a3:26:0c:fc:82:c4: 70:68:ea:b5:49:6b:8b:68:e1:f5:42:d2:3f:dd:90: e9:39:72:64:73:b8:37:65:0b:30:34:25:7b:56:03: 5e:e6:24:65:a9:f2:2e:6a:28:08:d1:2e:23:d5:40: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BC:A1:D1:81:08:2D:07:28:F5:F3:5E:C5:FB:87:AA:EF:00:7A:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.220.0/24 IPv6: 2602:f720::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9c:37:09:76:40:0e:a7:c3:74:cd:9d:4b:8b:0f:83:f1:e9: 72:95:13:32:70:3a:9b:c5:33:41:2d:59:13:22:55:6c:2c:32: f3:83:75:fa:eb:db:78:6c:72:f2:8f:49:92:df:d8:04:83:53: a6:24:86:13:71:d2:04:f3:48:27:f2:cb:4a:51:0b:6f:f5:b4: a3:87:f4:8d:25:50:77:21:c1:af:46:14:5f:21:c9:0f:24:49: ba:66:f6:45:c4:d1:b5:d4:1c:9c:b1:47:81:05:4e:76:b5:ab: 7c:5f:54:a1:86:32:ea:57:c1:4f:33:83:4c:34:30:76:ae:47: 30:16:4d:fd:21:a8:f2:75:d9:00:99:54:e2:a6:8b:b7:a6:ff: 00:38:8e:8a:87:f7:fc:17:e8:91:27:43:1c:ae:87:4c:e0:07: 42:67:bb:c6:2c:60:85:06:b2:de:43:58:68:5e:f6:14:d2:90: ec:fb:2c:48:93:d8:e4:dd:81:4a:ff:8b:1a:22:56:c4:d1:27: 7e:46:3c:a5:fa:a2:f2:98:bc:ac:03:4c:59:b3:2f:f5:df:ec: 2c:80:f9:25:9d:7a:70:4b:2c:01:a2:a3:1b:01:96:94:67:50: 9f:8a:c0:2f:ac:3b:07:7a:7a:c4:89:94:f7:36:31:5e:9e:06: 41:ed:64:bf -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEipC5NKnlap36OKRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyNTA5MjE0OVoXDTI3MDQzMDA4MjE0OVowLzEtMCsGA1UEAxMk Mjk1NDBkY2QtNjlkYS00NWJlLWI1N2MtOGM0YWVmY2Y2NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM1z7K6xcc3Qmdqh8blzWMCZvRvN9LUlSKNI MFxQuAvubzuY3IXc3eQTiE4nOw4qVaYuYqogGYKh1MaENSHNEIJaHZDq4tnXXgiv Zqj46sFZLPKRAXr0EmVM0RLWAJDDqhd2xw5BpDqxb30YjOUIsoGN1SPCs0tSzE7Z vspilsVe47+1RI+VJdeLexUDWJRCSJ5CFi3GCsORI2+yM4cL/+M0Kp9nrL4CuvqG KzLyBluPrp9rQDQsypJRN3cdKP8ugJ5Ilf8LoDIohaajJgz8gsRwaOq1SWuLaOH1 QtI/3ZDpOXJkc7g3ZQswNCV7VgNe5iRlqfIuaigI0S4j1UBmQwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDu8odGBCC0HKPXzXsX7h6rvAHqYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y OTU0MGRjZC02OWRhLTQ1YmUtYjU3Yy04YzRhZWZjZjY2ZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzI5NTQwZGNkLTY5ZGEtNDViZS1i NTdjLThjNGFlZmNmNjZmZS8yOTU0MGRjZC02OWRhLTQ1YmUtYjU3Yy04YzRhZWZj ZjY2ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhNwwDgQCAAIwCAMGACYC9yAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJGcNwl2QA6nw3TNnUuLD4Px6XKVEzJwOpvFM0EtWRMiVWwsMvODdfrr23hscvKP SZLf2ASDU6YkhhNx0gTzSCfyy0pRC2/1tKOH9I0lUHchwa9GFF8hyQ8kSbpm9kXE 0bXUHJyxR4EFTna1q3xfVKGGMupXwU8zg0w0MHauRzAWTf0hqPJ12QCZVOKmi7em /wA4joqH9/wX6JEnQxyuh0zgB0Jnu8YsYIUGst5DWGhe9hTSkOz7LEiT2OTdgUr/ ixoiVsTRJ35GPKX6ovKYvKwDTFmzL/Xf7CyA+SWdenBLLAGioxsBlpRnUJ+KwC+s Owd6esSJlPc2MV6eBkHtZL8= -----END CERTIFICATE-----Generated at Fri Apr 4 19:23:38 2025 by rpki-client