$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999.cer File: 31c5953d-e37e-4639-a814-20faebab1999.cer (raw, json) Hash identifier: 2/l2rqwQHX55FV6lndtCt/A4f5F6B8Sh3ju4G3ZFtNY= Subject key identifier: BF:91:09:05:0E:8F:F1:2B:31:C1:2C:8E:DD:F8:72:A7:BB:01:C8:49 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848A76EFC04679CBA91F9FEAF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/31c5953d-e37e-4639-a814-20faebab1999.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 Jan 2025 19:30:30 +0000 Certificate not after: Fri 23 Apr 2027 22:19:26 +0000 Subordinate resources: AS: 401604 IP: 23.133.40.0/24 IP: 2602:f72c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a7:6e:fc:04:67:9c:ba:91:f9:fe:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 24 19:30:30 2025 GMT Not After : Apr 23 22:19:26 2027 GMT Subject: CN=31c5953d-e37e-4639-a814-20faebab1999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:9c:73:0c:12:40:6b:c6:c3:bb:0e:d8:7d: d0:e7:a8:10:2b:f9:6d:7f:08:e4:8b:fb:ba:31:46: dd:2e:1e:13:1a:00:6e:30:ed:94:a8:c5:84:1a:5a: f4:f4:0f:f2:f5:38:4b:93:10:88:56:40:64:67:18: 9e:9a:6d:d2:3a:e3:cb:4d:a6:da:63:63:e6:76:be: c7:dc:08:cd:5b:35:7f:76:8d:bb:bf:bb:fe:d4:a7: 0e:93:44:76:a6:49:0e:55:8e:50:9f:d4:58:ab:0d: dd:75:22:28:6c:63:61:10:97:9c:1c:2a:c4:b5:c1: 9e:3c:c9:ff:17:dc:a4:1b:39:ec:e9:0e:9e:1f:5f: 96:6d:35:10:a4:b5:05:66:62:eb:6e:05:dc:32:4e: ed:fc:13:f2:a0:e1:6c:30:4a:9f:43:eb:86:69:f7: 57:d0:23:e5:bc:e0:81:6b:19:d2:70:38:cd:87:30: 4c:d0:a0:d0:06:67:b3:70:65:3d:76:09:4f:47:a0: fa:3e:73:ce:41:78:3c:04:cb:7f:81:9f:f2:c2:a3: 92:59:87:de:e2:4a:57:03:a6:27:22:07:f2:4d:e9: 18:c5:77:62:a4:9f:ef:ae:9b:7f:f0:9e:f5:06:02: 46:7a:b1:c4:7a:6a:6c:9a:f6:36:7a:9c:05:19:df: f9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:91:09:05:0E:8F:F1:2B:31:C1:2C:8E:DD:F8:72:A7:BB:01:C8:49 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/31c5953d-e37e-4639-a814-20faebab1999.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.40.0/24 IPv6: 2602:f72c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401604 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:4c:8a:b6:2f:76:93:b4:d0:96:7a:aa:67:ce:16:12:0f:5c: 05:10:b4:bb:47:c4:4e:cc:af:3a:0f:25:4f:c1:43:ad:dd:c4: 33:3e:ff:ac:ed:12:38:3a:ee:4d:cb:56:05:ea:8b:f1:2b:9c: e6:7d:2a:a6:28:1d:a0:f0:6b:f7:b3:75:f5:2f:1e:41:3f:80: d4:92:dd:b6:e0:9d:e6:e8:8b:42:c1:b7:87:6c:04:50:58:da: e9:e0:a4:fb:f3:4d:51:64:c8:5b:89:76:b5:73:8c:97:73:05: 3a:89:4f:7c:6a:19:ce:73:b1:d0:b4:e8:e1:9b:8b:6c:77:f7: 42:69:a9:a6:1c:6b:ad:9c:7d:8b:0e:eb:c8:cf:2f:36:e5:ff: 0c:5d:8a:d3:17:4c:d8:88:3d:d1:f0:72:65:ee:1e:ab:b3:74: bf:53:03:a9:b2:47:75:d3:08:04:53:59:9d:68:bc:28:fd:92: f6:ed:ed:2b:68:50:a0:b5:75:ce:81:40:bc:08:17:fc:24:cd: f3:63:d1:8a:a9:00:e3:0e:a1:c7:44:fd:79:18:50:17:be:2c: 77:49:5f:95:cb:61:83:fc:c3:e8:25:6f:8d:5b:db:44:24:7b: e1:88:cc:de:d8:39:46:b2:f9:c5:91:e8:a5:78:19:64:25:1c: bb:57:d3:0e -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEinbvwEZ5y6kfn+r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyNDE5MzAzMFoXDTI3MDQyMzIyMTkyNlowLzEtMCsGA1UEAxMk MzFjNTk1M2QtZTM3ZS00NjM5LWE4MTQtMjBmYWViYWIxOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueyccwwSQGvGw7sO2H3Q56gQK/ltfwjki/u6 MUbdLh4TGgBuMO2UqMWEGlr09A/y9ThLkxCIVkBkZxiemm3SOuPLTabaY2Pmdr7H 3AjNWzV/do27v7v+1KcOk0R2pkkOVY5Qn9RYqw3ddSIobGNhEJecHCrEtcGePMn/ F9ykGzns6Q6eH1+WbTUQpLUFZmLrbgXcMk7t/BPyoOFsMEqfQ+uGafdX0CPlvOCB axnScDjNhzBM0KDQBmezcGU9dglPR6D6PnPOQXg8BMt/gZ/ywqOSWYfe4kpXA6Yn IgfyTekYxXdipJ/vrpt/8J71BgJGerHEempsmvY2epwFGd/5AQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFL+RCQUOj/ErMcEsjt34cqe7AchJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z MWM1OTUzZC1lMzdlLTQ2MzktYTgxNC0yMGZhZWJhYjE5OTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzMxYzU5NTNkLWUzN2UtNDYzOS1h ODE0LTIwZmFlYmFiMTk5OS8zMWM1OTUzZC1lMzdlLTQ2MzktYTgxNC0yMGZhZWJh YjE5OTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhSgwDgQCAAIwCAMGBCYC9ywAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgxDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5TIq2L3aTtNCWeqpnzhYSD1wF ELS7R8ROzK86DyVPwUOt3cQzPv+s7RI4Ou5Ny1YF6ovxK5zmfSqmKB2g8Gv3s3X1 Lx5BP4DUkt224J3m6ItCwbeHbARQWNrp4KT7801RZMhbiXa1c4yXcwU6iU98ahnO c7HQtOjhm4tsd/dCaammHGutnH2LDuvIzy825f8MXYrTF0zYiD3R8HJl7h6rs3S/ UwOpskd10wgEU1mdaLwo/ZL27e0raFCgtXXOgUC8CBf8JM3zY9GKqQDjDqHHRP15 GFAXvix3SV+Vy2GD/MPoJW+NW9tEJHvhiMze2DlGsvnFkeileBlkJRy7V9MO -----END CERTIFICATE-----Generated at Fri Apr 4 19:05:51 2025 by rpki-client