$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350.cer File: 2c4ee9dd-c47d-4064-a749-1a1b95669350.cer (raw, json) Hash identifier: PnRP2D+4VaElwDjthp3iJIP/ke3i222hVOmG+189kjg= Subject key identifier: 10:32:52:7E:F3:C2:8F:11:AC:C4:C2:11:8F:FB:76:F9:33:D1:63:56 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858494353B1025A81D23E8DDAB2A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350/2c4ee9dd-c47d-4064-a749-1a1b95669350.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 15:41:37 +0000 Certificate not after: Thu 24 Jun 2027 15:41:37 +0000 Subordinate resources: AS: 22630 IP: 23.131.52.0/24 IP: 2602:f75f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:53:b1:02:5a:81:d2:3e:8d:da:b2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 21 15:41:37 2025 GMT Not After : Jun 24 15:41:37 2027 GMT Subject: CN=2c4ee9dd-c47d-4064-a749-1a1b95669350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:ce:1a:b9:60:ae:64:37:00:71:57:82:4e: 85:e0:1d:79:dd:d1:d2:11:2c:a6:00:2e:78:36:d5: 52:90:cd:23:1f:16:d8:5e:22:31:8d:2f:02:8f:67: 9c:d7:d8:2a:b4:e1:44:c6:0a:dc:e5:ac:f7:bb:18: 4c:61:09:4b:11:5b:02:4a:53:db:38:7b:37:af:e5: 51:31:fa:9f:76:57:8d:d7:9a:1b:bb:26:67:63:8a: a8:d3:77:fb:6c:e9:2f:92:b1:7e:bd:f6:be:d3:5a: 9d:50:90:aa:8c:60:77:2f:97:23:8d:73:46:cb:9b: 2c:32:92:ce:87:11:e4:9c:67:fd:78:42:57:34:a0: f6:b1:23:c1:f4:dd:a6:b4:36:ae:2b:a6:3d:93:ee: 79:11:f3:b2:e3:2c:b1:63:56:6d:fa:c1:ba:4d:47: 13:61:42:f6:39:cc:ff:30:dd:36:a4:dd:be:09:ad: 34:64:43:d6:0e:e7:ec:e7:3d:2e:77:15:38:1e:b2: e0:01:34:29:bb:27:55:fc:54:bb:35:bc:0b:74:3a: bb:ce:ba:c0:f5:3e:0e:14:68:6b:33:df:28:79:0c: a4:11:a9:fb:e5:ed:5a:3e:08:78:34:60:3a:ae:0e: a0:f3:04:db:64:cd:3a:81:9f:08:0e:24:dc:e1:76: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:32:52:7E:F3:C2:8F:11:AC:C4:C2:11:8F:FB:76:F9:33:D1:63:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c4ee9dd-c47d-4064-a749-1a1b95669350/2c4ee9dd-c47d-4064-a749-1a1b95669350.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.52.0/24 IPv6: 2602:f75f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22630 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6a:20:40:d9:1e:76:99:23:13:bf:11:8a:53:8e:56:bf:fc: 61:bb:47:57:d7:5c:a2:b4:6c:17:c8:bb:ee:eb:40:db:75:b4: 5f:4f:29:5e:15:ac:f9:73:e3:b3:57:3d:bf:b2:1a:92:1d:a3: 91:fb:f1:77:0e:06:b9:3c:80:52:8c:35:19:05:84:ff:38:6b: 46:2b:c7:a7:ca:a7:e6:7b:cc:78:e1:4e:1f:5a:58:b1:96:f0: e7:23:9f:c4:8c:3e:6e:0b:22:ce:29:06:2f:f1:89:12:11:d2: db:da:02:a9:d2:4a:35:46:c7:bf:9e:81:aa:54:77:1a:6b:4d: 4d:ef:c5:38:1e:d5:14:10:e6:52:51:69:bd:be:64:56:9f:92: 2a:ef:36:f0:05:dd:7e:53:b5:bd:08:bc:9b:01:16:ca:69:a2: 68:97:17:19:e6:97:bc:61:98:20:3b:b0:88:db:90:d9:5c:7a: f7:e5:af:2f:df:00:e0:c9:a3:c8:68:43:f2:c8:a6:7e:40:d7: ab:1d:a4:27:0b:77:26:f1:dd:07:29:64:e1:e7:4d:45:8d:11: 46:16:e7:d3:93:d5:be:e9:aa:bd:ea:b3:5f:fc:58:41:8f:08: c4:67:f5:1a:fd:0b:96:dd:83:f3:05:09:65:9a:57:bd:e0:b5: 2f:a0:ae:7a -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWElDU7ECWoHSPo3asqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMyMTE1NDEzN1oXDTI3MDYyNDE1NDEzN1owLzEtMCsGA1UEAxMk MmM0ZWU5ZGQtYzQ3ZC00MDY0LWE3NDktMWExYjk1NjY5MzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPbOGrlgrmQ3AHFXgk6F4B153dHSESymAC54 NtVSkM0jHxbYXiIxjS8Cj2ec19gqtOFExgrc5az3uxhMYQlLEVsCSlPbOHs3r+VR MfqfdleN15obuyZnY4qo03f7bOkvkrF+vfa+01qdUJCqjGB3L5cjjXNGy5ssMpLO hxHknGf9eEJXNKD2sSPB9N2mtDauK6Y9k+55EfOy4yyxY1Zt+sG6TUcTYUL2Ocz/ MN02pN2+Ca00ZEPWDufs5z0udxU4HrLgATQpuydV/FS7NbwLdDq7zrrA9T4OFGhr M98oeQykEan75e1aPgh4NGA6rg6g8wTbZM06gZ8IDiTc4XZMiQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBAyUn7zwo8RrMTCEY/7dvkz0WNWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y YzRlZTlkZC1jNDdkLTQwNjQtYTc0OS0xYTFiOTU2NjkzNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJjNGVlOWRkLWM0N2QtNDA2NC1h NzQ5LTFhMWI5NTY2OTM1MC8yYzRlZTlkZC1jNDdkLTQwNjQtYTc0OS0xYTFiOTU2 NjkzNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgzQwDgQCAAIwCAMGACYC918AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlhmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACpqIEDZHnaZIxO/EYpTjla//GG7 R1fXXKK0bBfIu+7rQNt1tF9PKV4VrPlz47NXPb+yGpIdo5H78XcOBrk8gFKMNRkF hP84a0Yrx6fKp+Z7zHjhTh9aWLGW8Ocjn8SMPm4LIs4pBi/xiRIR0tvaAqnSSjVG x7+egapUdxprTU3vxTge1RQQ5lJRab2+ZFafkirvNvAF3X5Ttb0IvJsBFsppomiX Fxnml7xhmCA7sIjbkNlcevflry/fAODJo8hoQ/LIpn5A16sdpCcLdybx3QcpZOHn TUWNEUYW59OT1b7pqr3qs1/8WEGPCMRn9Rr9C5bdg/MFCWWaV73gtS+grno= -----END CERTIFICATE-----Generated at Fri Apr 4 15:57:19 2025 by rpki-client