$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4073286f-8e15-45e2-94b4-d57aafb712d0.cer File: 4073286f-8e15-45e2-94b4-d57aafb712d0.cer (raw, json) Hash identifier: O0zDvy+SeUjPPy3lq8ugmiTegBcCH9E06RCa9isNxr8= Subject key identifier: 7C:EE:9B:D8:A0:4C:E0:48:83:B7:90:B5:EE:1A:68:D9:0A:CE:53:C6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848FEBA251C63EF947BE8F53080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4073286f-8e15-45e2-94b4-d57aafb712d0/4073286f-8e15-45e2-94b4-d57aafb712d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4073286f-8e15-45e2-94b4-d57aafb712d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Feb 2025 01:57:16 +0000 Certificate not after: Mon 31 May 2027 00:57:16 +0000 Subordinate resources: AS: 23075 IP: 140.235.132.0/22 IP: 2607:4e40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:ba:25:1c:63:ef:94:7b:e8:f5:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 25 01:57:16 2025 GMT Not After : May 31 00:57:16 2027 GMT Subject: CN=4073286f-8e15-45e2-94b4-d57aafb712d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:ac:e7:93:c2:75:13:da:ad:b9:93:fd:d6: 76:96:8a:84:37:e5:5b:26:23:e7:fd:4c:85:c0:97: d9:dc:69:e7:3e:d9:7a:10:20:25:f8:9c:df:7b:b8: 98:8a:63:be:94:0f:40:ad:45:2b:c4:80:21:6c:82: d5:e2:21:dd:40:23:9f:d9:a1:60:2b:af:a8:ba:57: e2:06:74:b5:8e:64:54:ed:a7:20:ca:9b:2c:1a:46: c2:57:e1:ad:8d:4c:48:b2:8b:e1:44:72:43:c6:40: 7c:87:06:be:dc:9b:34:a0:65:00:0a:31:a6:31:0e: 56:21:b1:0c:96:dd:cd:ba:b5:50:88:34:9e:be:3d: 10:a1:80:27:cc:a7:98:8f:a2:53:90:79:02:df:13: c1:17:c0:29:ed:e1:60:98:65:9d:ea:fa:9c:74:2a: 42:60:ec:52:63:e3:7e:90:81:87:a2:6e:5f:a7:d2: e3:fa:c3:6e:ba:43:ae:32:71:c0:4a:a4:3f:6b:f2: 43:9d:36:f2:1a:a5:cc:eb:e0:1a:c0:f0:90:6a:3b: 18:2f:0d:7c:92:25:2b:91:0f:19:9b:59:5a:9a:d9: f7:a5:a1:be:7b:3a:c1:79:1c:40:f4:d6:61:62:d5: 57:47:ef:e3:7c:59:f4:0d:22:fe:cd:d1:07:aa:23: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EE:9B:D8:A0:4C:E0:48:83:B7:90:B5:EE:1A:68:D9:0A:CE:53:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4073286f-8e15-45e2-94b4-d57aafb712d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4073286f-8e15-45e2-94b4-d57aafb712d0/4073286f-8e15-45e2-94b4-d57aafb712d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 140.235.132.0/22 IPv6: 2607:4e40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23075 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9a:f4:4c:10:75:cf:42:03:73:e1:0a:a7:fd:c2:54:4b:d2: 29:f0:a7:5d:cb:26:4c:22:d5:fd:3a:24:07:cd:80:45:55:34: 9d:72:27:ae:ac:a8:24:40:70:92:27:42:22:45:35:5f:db:2f: de:7e:7e:a6:0c:61:79:64:6f:e8:f1:1d:b7:18:e6:53:52:98: ec:e3:9d:16:52:ea:cb:4b:82:18:d8:26:c1:56:3d:fb:9a:bc: ea:53:24:9e:f4:b4:00:f6:11:8a:ff:af:07:31:15:f4:de:8d: 53:89:87:b6:4e:17:13:8c:6b:f1:e0:c0:d2:d5:62:a6:d2:4c: e1:79:9d:04:d1:d6:f5:e0:3f:61:af:e1:af:68:7f:fb:9d:e4: dc:07:ed:38:d0:b4:67:9c:81:46:44:73:1c:bd:6c:b1:d7:fb: fe:20:db:c8:b5:b2:71:a3:1a:24:90:01:60:8c:e7:79:7d:1a: 71:d9:a4:53:8a:99:e3:d6:5b:12:04:56:38:45:62:c7:fe:de: 7c:3c:fb:a4:9a:4e:3b:49:e5:49:32:f2:bc:f4:70:08:01:89: fc:20:37:09:aa:35:60:09:6b:f3:7b:88:4f:66:82:b4:4a:31: fb:6c:b7:6f:fa:a5:ea:7e:90:2d:e3:6d:53:f6:fa:a0:a3:74: 04:63:5a:91 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEj+uiUcY++Ue+j1MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNTAxNTcxNloXDTI3MDUzMTAwNTcxNlowLzEtMCsGA1UEAxMk NDA3MzI4NmYtOGUxNS00NWUyLTk0YjQtZDU3YWFmYjcxMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkys55PCdRParbmT/dZ2loqEN+VbJiPn/UyF wJfZ3GnnPtl6ECAl+Jzfe7iYimO+lA9ArUUrxIAhbILV4iHdQCOf2aFgK6+oulfi BnS1jmRU7acgypssGkbCV+GtjUxIsovhRHJDxkB8hwa+3Js0oGUACjGmMQ5WIbEM lt3NurVQiDSevj0QoYAnzKeYj6JTkHkC3xPBF8Ap7eFgmGWd6vqcdCpCYOxSY+N+ kIGHom5fp9Lj+sNuukOuMnHASqQ/a/JDnTbyGqXM6+AawPCQajsYLw18kiUrkQ8Z m1lamtn3paG+ezrBeRxA9NZhYtVXR+/jfFn0DSL+zdEHqiNczQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFHzum9igTOBIg7eQte4aaNkKzlPGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80 MDczMjg2Zi04ZTE1LTQ1ZTItOTRiNC1kNTdhYWZiNzEyZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzQwNzMyODZmLThlMTUtNDVlMi05 NGI0LWQ1N2FhZmI3MTJkMC80MDczMjg2Zi04ZTE1LTQ1ZTItOTRiNC1kNTdhYWZi NzEyZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKM64QwDQQCAAIwBwMFACYHTkAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICWiMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAppr0TBB1z0IDc+EKp/3CVEvSKfCn XcsmTCLV/TokB82ARVU0nXInrqyoJEBwkidCIkU1X9sv3n5+pgxheWRv6PEdtxjm U1KY7OOdFlLqy0uCGNgmwVY9+5q86lMknvS0APYRiv+vBzEV9N6NU4mHtk4XE4xr 8eDA0tViptJM4XmdBNHW9eA/Ya/hr2h/+53k3AftONC0Z5yBRkRzHL1ssdf7/iDb yLWycaMaJJABYIzneX0acdmkU4qZ49ZbEgRWOEVix/7efDz7pJpOO0nlSTLyvPRw CAGJ/CA3Cao1YAlr83uIT2aCtEox+2y3b/ql6n6QLeNtU/b6oKN0BGNakQ== -----END CERTIFICATE-----Generated at Fri Apr 4 18:57:10 2025 by rpki-client