$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer File: 3dce7e6f-4588-4d9b-bb90-80f074656851.cer (raw, json) Hash identifier: r9lKWIxHMSy+/4Ry0sUPLe6mN5CoF1DeU7nMnt0Bh5Q= Subject key identifier: 25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848B2258D1A1482EE1247D3A780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jan 2025 15:36:26 +0000 Certificate not after: Sun 02 May 2027 16:33:56 +0000 Subordinate resources: AS: 15012 IP: 23.133.52.0/24 IP: 2602:f713::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:25:8d:1a:14:82:ee:12:47:d3:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 28 15:36:26 2025 GMT Not After : May 2 16:33:56 2027 GMT Subject: CN=3dce7e6f-4588-4d9b-bb90-80f074656851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:38:91:a3:5b:5f:ad:f6:76:1d:55:2d:bf:2b: c9:e0:18:78:64:b0:4e:80:e6:0d:9e:51:a2:03:c8: 39:ba:fe:a1:83:82:d7:5e:83:5d:b5:94:05:e3:43: fb:90:60:40:39:14:0b:b3:3d:92:81:36:d5:1c:6d: 39:ae:11:a8:77:69:58:07:10:94:fd:de:e9:f9:ac: 07:bc:a5:df:39:b9:44:91:fd:f2:d2:a6:5d:b1:c1: 04:00:6a:30:40:41:82:9d:2d:69:7a:8e:b8:43:94: b9:64:f9:04:11:23:e4:9c:26:a3:d1:9f:8b:36:ee: 48:91:12:e9:77:4e:69:31:d1:39:fc:0d:de:08:1d: 82:5b:a5:f8:ed:4c:07:c3:ce:04:dc:8d:c0:60:9f: cf:33:ed:32:b5:c8:d3:42:9e:f0:35:de:f2:21:61: c8:a1:82:90:5c:79:38:37:c0:f8:32:57:31:07:d0: a5:41:e4:e7:43:e5:cd:d2:78:8f:62:02:40:03:91: b1:32:1f:c2:dd:ac:10:4a:ba:03:7c:80:02:b2:cd: 57:97:ec:74:39:a0:0d:5d:03:d7:59:aa:ff:88:f7: 28:80:61:c5:9f:d9:60:77:c8:dc:53:03:c5:f7:93: e9:ad:48:dc:6e:c4:29:ce:58:99:b7:d5:a1:6e:41: a3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.52.0/24 IPv6: 2602:f713::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15012 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:92:20:02:96:78:1f:a5:cf:41:44:a4:6d:ac:95:a7:23:47: 4d:e7:cd:e0:6e:3b:26:e3:ef:f2:4f:9e:4b:93:dc:db:9f:a9: 2f:99:1d:27:27:1c:4b:d1:12:f5:b4:64:dd:ce:ce:90:fc:e5: 38:22:19:af:b9:1e:d4:80:af:a1:fa:25:e6:cd:a8:33:b8:ca: b7:d2:c3:55:bb:07:c2:3d:95:e4:9a:9b:20:3e:0c:94:4b:77: 43:19:50:6e:b6:28:7a:1b:65:c7:8c:70:d4:e9:91:6a:28:cc: 0d:79:c8:61:8e:fc:25:68:54:bb:ee:b2:cf:f4:45:03:cc:3d: 3b:0b:bc:20:54:1b:09:b2:05:79:55:15:f7:0e:1f:06:2e:93: 60:bc:03:47:d6:c2:99:f6:40:63:87:9c:bb:da:49:19:64:10: b8:a7:52:7a:d0:25:f8:29:59:7d:6a:b1:f9:ed:1c:e6:d4:4b: 0a:eb:e9:21:0b:bf:6e:90:86:ea:1f:70:9e:13:85:c1:80:d3: d3:a5:70:da:0d:b4:9b:e0:f2:df:0c:09:57:50:ca:12:8f:4e: 60:7e:6f:91:5f:e1:fe:19:69:55:ce:32:b2:60:87:98:fb:b2: 7d:ff:07:58:c5:44:e5:3b:dc:dd:af:00:75:46:03:76:47:30: 72:35:fe:87 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEiyJY0aFILuEkfTp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyODE1MzYyNloXDTI3MDUwMjE2MzM1NlowLzEtMCsGA1UEAxMk M2RjZTdlNmYtNDU4OC00ZDliLWJiOTAtODBmMDc0NjU2ODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjiRo1tfrfZ2HVUtvyvJ4Bh4ZLBOgOYNnlGi A8g5uv6hg4LXXoNdtZQF40P7kGBAORQLsz2SgTbVHG05rhGod2lYBxCU/d7p+awH vKXfOblEkf3y0qZdscEEAGowQEGCnS1peo64Q5S5ZPkEESPknCaj0Z+LNu5IkRLp d05pMdE5/A3eCB2CW6X47UwHw84E3I3AYJ/PM+0ytcjTQp7wNd7yIWHIoYKQXHk4 N8D4MlcxB9ClQeTnQ+XN0niPYgJAA5GxMh/C3awQSroDfIACss1Xl+x0OaANXQPX War/iPcogGHFn9lgd8jcUwPF95PprUjcbsQpzliZt9WhbkGj6wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCUw6QZzkGtxVzF84/Y+ie6U0H+lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8z ZGNlN2U2Zi00NTg4LTRkOWItYmI5MC04MGYwNzQ2NTY4NTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzNkY2U3ZTZmLTQ1ODgtNGQ5Yi1i YjkwLTgwZjA3NDY1Njg1MS8zZGNlN2U2Zi00NTg4LTRkOWItYmI5MC04MGYwNzQ2 NTY4NTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhTQwDgQCAAIwCAMGACYC9xMAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjqkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGuSIAKWeB+lz0FEpG2slacjR03n zeBuOybj7/JPnkuT3NufqS+ZHScnHEvREvW0ZN3OzpD85TgiGa+5HtSAr6H6JebN qDO4yrfSw1W7B8I9leSamyA+DJRLd0MZUG62KHobZceMcNTpkWoozA15yGGO/CVo VLvuss/0RQPMPTsLvCBUGwmyBXlVFfcOHwYuk2C8A0fWwpn2QGOHnLvaSRlkELin UnrQJfgpWX1qsfntHObUSwrr6SELv26QhuofcJ4ThcGA09OlcNoNtJvg8t8MCVdQ yhKPTmB+b5Ff4f4ZaVXOMrJgh5j7sn3/B1jFROU73N2vAHVGA3ZHMHI1/oc= -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:29 2025 by rpki-client