$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer File: 51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer (raw, json) Hash identifier: O9dkEiSV/k0y4Tw0koPQinLcMh5kYZBhIVNxyel3j+w= Subject key identifier: 81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584878D7D89948888B5412C89D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Jan 2025 02:58:48 +0000 Certificate not after: Tue 13 Apr 2027 01:58:48 +0000 Subordinate resources: AS: 401567 IP: 23.131.244.0/24 IP: 2602:f74a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:78:d7:d8:99:48:88:8b:54:12:c8:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 8 02:58:48 2025 GMT Not After : Apr 13 01:58:48 2027 GMT Subject: CN=51ff4ddd-c38d-4309-8f4d-95441dc765f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:03:cb:84:ba:86:b2:6b:c8:39:b4:a4:1a: 85:51:45:c2:ac:48:3e:e3:1b:70:b9:20:28:37:b6: 24:ce:9f:89:55:db:0a:f3:9d:a7:2e:56:1c:22:03: 09:4d:8a:11:ba:b3:1f:0c:e4:3a:a7:f1:eb:46:46: 52:24:a5:31:bd:09:7c:fe:65:d0:24:9d:3a:0b:59: 09:83:78:03:82:39:d2:f9:de:fe:58:47:55:19:62: b7:51:41:15:72:ba:65:d6:d8:b1:7f:f0:17:9e:f2: ca:bb:e2:e7:3a:7a:32:7d:c1:f6:9c:79:16:0e:ba: 5c:86:e2:1b:b4:1c:7f:df:fe:7b:bc:ca:a7:4b:08: b0:d1:0a:1c:67:96:f9:10:08:01:22:a8:79:0f:2e: 5d:82:2f:ec:4c:3b:54:da:cd:83:54:09:af:f9:70: b8:58:bc:b6:27:fa:39:e4:ae:6b:66:e4:df:99:8c: 82:48:c8:86:2d:2f:e2:6b:f6:8e:72:37:f4:c1:b7: f5:55:ce:2f:96:74:38:81:5b:7f:c9:5e:fb:0e:36: da:a4:0c:e9:db:c6:e8:f7:dd:6d:12:0d:09:ca:6f: 53:fa:c2:f5:c6:f2:93:27:fd:d2:f0:f4:a8:76:2c: 15:c4:d0:a3:51:73:e4:af:d3:88:69:ad:cb:76:df: 53:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.244.0/24 IPv6: 2602:f74a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401567 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cc:84:aa:1e:82:8b:e2:5d:80:b3:ba:2f:ab:27:63:4e:d3: f0:1f:6b:83:55:50:3a:89:c9:a7:f1:ca:54:db:75:05:1a:c7: 53:d4:36:25:59:64:cf:73:dc:43:7e:1c:c5:46:c5:6e:4b:9f: 04:5f:ab:67:b8:3c:c8:50:c9:43:79:62:f2:4c:f8:34:30:64: 87:53:d0:83:77:8e:b6:a0:89:ae:7a:85:29:a6:cc:a1:d6:8f: a6:9f:d6:d7:f9:f9:03:9a:f2:fd:5a:44:25:43:41:5c:7c:5b: eb:09:0c:90:0b:f3:15:38:e0:e7:f9:08:7b:ac:37:19:47:f6: 4b:bc:2e:99:73:4d:5a:d3:62:81:f6:b6:50:95:b1:dd:2b:e9: 18:af:92:06:01:6d:83:21:27:91:96:fb:22:cb:a6:d5:98:ba: b2:b2:96:6a:85:e4:5d:f4:8b:a6:7c:b6:33:6d:41:74:5d:c7: 6c:8f:8b:f1:cc:31:e7:06:c5:26:93:39:77:9c:07:5c:5d:4c: 85:46:e9:37:e5:f0:14:86:b2:c2:d3:3f:08:42:8f:cb:79:cf: e0:b6:da:a8:de:63:6f:09:bd:c6:2c:a2:e0:50:ee:55:33:79: 93:f1:2e:5c:5f:77:45:9c:0d:b3:4f:be:25:8c:34:49:05:d0: 05:7f:42:3c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEh419iZSIiLVBLInYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwODAyNTg0OFoXDTI3MDQxMzAxNTg0OFowLzEtMCsGA1UEAxMk NTFmZjRkZGQtYzM4ZC00MzA5LThmNGQtOTU0NDFkYzc2NWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG8Dy4S6hrJryDm0pBqFUUXCrEg+4xtwuSAo N7Ykzp+JVdsK852nLlYcIgMJTYoRurMfDOQ6p/HrRkZSJKUxvQl8/mXQJJ06C1kJ g3gDgjnS+d7+WEdVGWK3UUEVcrpl1tixf/AXnvLKu+LnOnoyfcH2nHkWDrpchuIb tBx/3/57vMqnSwiw0QocZ5b5EAgBIqh5Dy5dgi/sTDtU2s2DVAmv+XC4WLy2J/o5 5K5rZuTfmYyCSMiGLS/ia/aOcjf0wbf1Vc4vlnQ4gVt/yV77DjbapAzp28bo991t Eg0Jym9T+sL1xvKTJ/3S8PSodiwVxNCjUXPkr9OIaa3Ldt9T8QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIHO6gxdHcekYhDWOZM3sMQpmCyNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 MWZmNGRkZC1jMzhkLTQzMDktOGY0ZC05NTQ0MWRjNzY1ZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzUxZmY0ZGRkLWMzOGQtNDMwOS04 ZjRkLTk1NDQxZGM3NjVmNS81MWZmNGRkZC1jMzhkLTQzMDktOGY0ZC05NTQ0MWRj NzY1ZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg/QwDgQCAAIwCAMGBCYC90oAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgnzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFzISqHoKL4l2As7ovqydjTtPw H2uDVVA6icmn8cpU23UFGsdT1DYlWWTPc9xDfhzFRsVuS58EX6tnuDzIUMlDeWLy TPg0MGSHU9CDd462oImueoUppsyh1o+mn9bX+fkDmvL9WkQlQ0FcfFvrCQyQC/MV OODn+Qh7rDcZR/ZLvC6Zc01a02KB9rZQlbHdK+kYr5IGAW2DISeRlvsiy6bVmLqy spZqheRd9IumfLYzbUF0Xcdsj4vxzDHnBsUmkzl3nAdcXUyFRuk35fAUhrLC0z8I Qo/Lec/gttqo3mNvCb3GLKLgUO5VM3mT8S5cX3dFnA2zT74ljDRJBdAFf0I8 -----END CERTIFICATE-----Generated at Fri Apr 4 19:26:14 2025 by rpki-client