$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419.cer File: 2c83340a-e4d6-409b-acce-f660b0f8b419.cer (raw, json) Hash identifier: WiV5IWWUFy/BAdfHofmnrJR5Auj25GZsz4XdMyarA2Q= Subject key identifier: 38:E0:FC:FC:97:9C:98:39:01:7B:A0:E4:4A:44:31:2A:B0:7C:02:11 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584902D5C41C3AC29447D7D8FA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419/2c83340a-e4d6-409b-acce-f660b0f8b419.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 13:16:09 +0000 Certificate not after: Tue 01 Jun 2027 12:16:09 +0000 Subordinate resources: IP: 23.135.4.0/24 IP: 2602:f6df::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:d5:c4:1c:3a:c2:94:47:d7:d8:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 26 13:16:09 2025 GMT Not After : Jun 1 12:16:09 2027 GMT Subject: CN=2c83340a-e4d6-409b-acce-f660b0f8b419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:67:84:5e:96:da:43:8c:ec:3c:bb:9e:c9: 53:78:47:7a:41:93:0f:2a:17:4d:26:bf:f2:fc:bf: e4:14:43:da:85:0b:96:c6:04:bc:d2:1d:01:92:0e: 6a:63:06:c1:70:20:dc:ba:33:be:c5:b4:fa:a3:b6: 73:60:f6:fc:b0:35:16:2c:c5:97:a4:8c:ac:51:06: f6:d6:a2:81:48:de:1f:14:ca:cf:81:48:21:3a:d0: ba:79:b7:96:27:8c:32:e2:53:96:91:f1:00:8b:5d: 6d:b8:68:bf:ee:5e:2a:5e:07:d5:25:60:3e:9b:2a: 54:66:a8:2c:0b:f8:c3:21:4e:cb:bf:4f:a4:24:1e: c5:62:31:43:aa:fa:58:87:bd:bc:e6:ed:80:b9:2f: 62:93:29:97:44:17:ff:ba:2a:16:2c:12:b9:9f:1e: 2d:d2:42:85:15:9e:db:82:56:eb:9a:f0:fd:c4:68: c1:2b:b9:33:25:67:5f:d9:e3:50:df:b9:86:d6:69: c5:67:c3:3f:e1:ad:bd:dc:cf:29:62:8e:c8:9c:61: 3a:e6:86:76:1b:a8:63:f1:57:e5:33:68:f7:b0:55: 26:b5:03:2f:79:07:5e:dc:cd:a6:3e:0b:41:3e:cd: 71:24:a4:04:83:63:4a:3b:5e:d6:64:75:0d:cd:40: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E0:FC:FC:97:9C:98:39:01:7B:A0:E4:4A:44:31:2A:B0:7C:02:11 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c83340a-e4d6-409b-acce-f660b0f8b419/2c83340a-e4d6-409b-acce-f660b0f8b419.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.4.0/24 IPv6: 2602:f6df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:78:57:48:4f:d5:b1:3f:2a:28:27:9e:e0:03:9f:bd:70:ff: 66:e5:87:58:6a:61:f5:65:64:bf:87:18:f2:10:36:ae:dc:6c: d5:f9:42:1a:e3:12:bd:f0:3d:ac:c8:77:e5:0d:05:5d:bb:26: 65:6b:ae:6b:10:c6:ea:cc:12:83:88:86:7b:47:a5:83:85:e8: 68:82:a6:cd:1c:bd:33:0e:82:1e:f9:9d:f7:f5:b3:08:78:7f: 17:1a:3d:9d:07:9f:5b:f5:f7:fa:de:ea:88:6b:71:ee:3d:6c: 1d:a4:93:4d:1a:f7:8f:35:c0:95:0f:c5:1f:1e:42:e1:98:9e: 87:92:49:6d:85:b4:00:18:38:d7:af:89:d0:9e:b5:e1:1a:41: fc:13:97:39:57:10:a6:c6:aa:50:31:d6:f5:4b:1d:24:3c:42: d9:06:c7:ef:96:e5:1e:40:4a:dd:c1:d1:63:2c:f8:9e:3a:3b: 1f:db:8b:25:99:a9:3d:18:65:36:0e:f8:7d:f3:12:54:0d:6a: 53:62:59:ee:7a:c0:ec:21:16:99:00:11:d6:e1:12:ef:b3:c5: ff:3e:c1:67:df:33:0c:49:c2:85:4f:ab:25:64:e4:96:7e:a2: 72:9d:40:91:6e:42:74:fa:b3:10:2e:b7:7e:44:21:60:83:df: e1:93:fc:fe -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEkC1cQcOsKUR9fY+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNjEzMTYwOVoXDTI3MDYwMTEyMTYwOVowLzEtMCsGA1UEAxMk MmM4MzM0MGEtZTRkNi00MDliLWFjY2UtZjY2MGIwZjhiNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwVnhF6W2kOM7Dy7nslTeEd6QZMPKhdNJr/y /L/kFEPahQuWxgS80h0Bkg5qYwbBcCDcujO+xbT6o7ZzYPb8sDUWLMWXpIysUQb2 1qKBSN4fFMrPgUghOtC6ebeWJ4wy4lOWkfEAi11tuGi/7l4qXgfVJWA+mypUZqgs C/jDIU7Lv0+kJB7FYjFDqvpYh7285u2AuS9ikymXRBf/uioWLBK5nx4t0kKFFZ7b glbrmvD9xGjBK7kzJWdf2eNQ37mG1mnFZ8M/4a293M8pYo7InGE65oZ2G6hj8Vfl M2j3sFUmtQMveQde3M2mPgtBPs1xJKQEg2NKO17WZHUNzUBbfwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDjg/PyXnJg5AXug5EpEMSqwfAIRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y YzgzMzQwYS1lNGQ2LTQwOWItYWNjZS1mNjYwYjBmOGI0MTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJjODMzNDBhLWU0ZDYtNDA5Yi1h Y2NlLWY2NjBiMGY4YjQxOS8yYzgzMzQwYS1lNGQ2LTQwOWItYWNjZS1mNjYwYjBm OGI0MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhwQwDgQCAAIwCAMGACYC9t8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AE54V0hP1bE/KignnuADn71w/2blh1hqYfVlZL+HGPIQNq7cbNX5QhrjEr3wPazI d+UNBV27JmVrrmsQxurMEoOIhntHpYOF6GiCps0cvTMOgh75nff1swh4fxcaPZ0H n1v19/re6ohrce49bB2kk00a9481wJUPxR8eQuGYnoeSSW2FtAAYONevidCeteEa QfwTlzlXEKbGqlAx1vVLHSQ8QtkGx++W5R5ASt3B0WMs+J46Ox/biyWZqT0YZTYO +H3zElQNalNiWe56wOwhFpkAEdbhEu+zxf8+wWffMwxJwoVPqyVk5JZ+onKdQJFu QnT6sxAut35EIWCD3+GT/P4= -----END CERTIFICATE-----Generated at Fri Apr 4 19:18:42 2025 by rpki-client