$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer File: 300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer (raw, json) Hash identifier: hSxLMOSKBZi/6f3aeI600RuqXjxMeXb26C+Ce0tkomg= Subject key identifier: 72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848658273523C78C2ED04213978 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jan 2025 04:46:22 +0000 Certificate not after: Tue 06 Apr 2027 03:46:22 +0000 Subordinate resources: AS: 401553 IP: 23.131.124.0/24 IP: 2602:f75e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:82:73:52:3c:78:c2:ed:04:21:39:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 1 04:46:22 2025 GMT Not After : Apr 6 03:46:22 2027 GMT Subject: CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:5b:71:f9:fc:c8:e4:13:c8:52:09:2b:66: bf:29:dd:48:4c:04:77:92:36:ea:72:f5:5b:43:b2: 7f:d4:06:09:72:fb:4d:fb:51:86:78:81:48:5e:1c: 36:7b:dd:ad:aa:0e:a5:0d:eb:61:f1:51:5f:e9:0e: 21:62:ee:a7:02:22:e1:30:42:d9:3d:a6:62:8f:e0: 9d:87:94:3f:06:d4:05:3c:0b:33:cd:71:d0:68:67: 79:63:3d:8b:fd:18:99:fe:fb:d8:b7:2a:54:2c:aa: c2:13:86:32:9e:2c:91:f2:ad:23:36:bb:ab:5d:a6: 32:8b:81:b9:f8:a4:37:41:ea:cf:94:0e:22:c5:98: 78:50:bc:47:ab:5e:9f:92:b0:12:20:49:c0:74:5a: 07:3d:0f:9f:4f:fe:aa:82:d3:31:12:28:fe:69:fe: d2:65:c8:a6:70:9c:2c:aa:e8:df:b4:00:26:73:72: 3a:e5:89:d9:8c:64:1a:7f:e7:2b:1b:82:9e:67:8a: ed:5c:2e:1f:d3:45:63:b1:52:7c:08:95:5a:86:e7: 39:ad:b5:e9:3b:72:84:14:4b:51:b8:ed:24:ec:35: eb:2c:cf:d9:f4:9c:d3:cc:86:77:2c:02:a5:85:f6: d2:21:0a:37:54:c3:7a:5f:c3:05:2f:aa:57:7b:a9: ac:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.124.0/24 IPv6: 2602:f75e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401553 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:db:f2:29:8f:6e:df:21:61:ae:58:65:4d:d7:92:9f:7f:bb: 32:f2:d3:df:a1:ff:52:7d:0b:64:7d:a3:49:b8:b8:be:4b:12: 5c:e8:9c:b3:9d:60:51:3e:99:57:5b:85:c6:e6:60:fe:be:21: 9e:c9:e1:7c:e7:ef:85:32:e2:9a:34:54:42:29:4d:c7:a1:54: 44:0e:1e:5c:7b:32:f5:99:41:12:67:ef:a3:dd:17:33:3d:31: af:2e:53:29:5c:cc:e3:ca:b6:c5:7a:02:0e:9c:de:f5:59:91: 54:d9:cf:ca:d9:52:c1:6e:fd:46:9d:fc:ae:64:f1:27:90:83: 08:aa:01:d3:7f:1c:da:d6:e2:24:68:7e:cf:f9:d7:6a:75:fb: d9:4e:fb:8f:c6:4a:95:a8:42:57:0e:b8:86:2f:0e:09:c2:60: 26:8c:4d:46:82:cd:83:2c:a4:4c:b1:1d:07:2e:a4:aa:7f:f3: ff:33:8b:b2:e3:a8:ad:66:40:42:bd:b5:df:70:9f:18:9c:9e: e7:db:5f:d6:36:57:c3:2d:89:a6:6e:46:e2:20:69:ae:d8:0c: eb:85:32:d6:5e:91:3e:3d:25:21:fc:7a:ff:3f:3d:da:06:63: d2:87:a7:c5:b4:4c:9e:6e:a9:3b:59:6e:6a:21:fc:78:16:bd: c8:cd:85:28 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEhlgnNSPHjC7QQhOXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwMTA0NDYyMloXDTI3MDQwNjAzNDYyMlowLzEtMCsGA1UEAxMk MzAwYTE4Y2EtYTllNS00MzBkLWI1YzQtZDE1ZTg4ZWE3OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofxbcfn8yOQTyFIJK2a/Kd1ITAR3kjbqcvVb Q7J/1AYJcvtN+1GGeIFIXhw2e92tqg6lDeth8VFf6Q4hYu6nAiLhMELZPaZij+Cd h5Q/BtQFPAszzXHQaGd5Yz2L/RiZ/vvYtypULKrCE4YyniyR8q0jNrurXaYyi4G5 +KQ3QerPlA4ixZh4ULxHq16fkrASIEnAdFoHPQ+fT/6qgtMxEij+af7SZcimcJws qujftAAmc3I65YnZjGQaf+crG4KeZ4rtXC4f00VjsVJ8CJVahuc5rbXpO3KEFEtR uO0k7DXrLM/Z9JzTzIZ3LAKlhfbSIQo3VMN6X8MFL6pXe6ms0wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHKfdHtHBILaV4olrvDPnO+YHwa6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z MDBhMThjYS1hOWU1LTQzMGQtYjVjNC1kMTVlODhlYTc5YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzMwMGExOGNhLWE5ZTUtNDMwZC1i NWM0LWQxNWU4OGVhNzlhMy8zMDBhMThjYS1hOWU1LTQzMGQtYjVjNC1kMTVlODhl YTc5YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg3wwDgQCAAIwCAMGBCYC914AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgkTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCb2/Ipj27fIWGuWGVN15Kff7sy 8tPfof9SfQtkfaNJuLi+SxJc6JyznWBRPplXW4XG5mD+viGeyeF85++FMuKaNFRC KU3HoVREDh5cezL1mUESZ++j3RczPTGvLlMpXMzjyrbFegIOnN71WZFU2c/K2VLB bv1GnfyuZPEnkIMIqgHTfxza1uIkaH7P+ddqdfvZTvuPxkqVqEJXDriGLw4JwmAm jE1Ggs2DLKRMsR0HLqSqf/P/M4uy46itZkBCvbXfcJ8YnJ7n21/WNlfDLYmmbkbi IGmu2AzrhTLWXpE+PSUh/Hr/Pz3aBmPSh6fFtEyebqk7WW5qIfx4Fr3IzYUo -----END CERTIFICATE-----Generated at Fri Apr 4 16:03:39 2025 by rpki-client