$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.cer File: 5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.cer (raw, json) Hash identifier: tnR0ANOMPln3lXkigQQawxGiWx5EaBFyitrnGrFbT+A= Subject key identifier: 43:4E:A8:C1:E7:39:79:C9:C0:B7:35:80:0D:7A:E5:85:26:8E:0B:77 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848CD1741E04A44CFA25A530380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Feb 2025 07:14:28 +0000 Certificate not after: Thu 13 May 2027 06:14:28 +0000 Subordinate resources: AS: 401617 IP: 23.132.252.0/24 IP: 2602:f72f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:17:41:e0:4a:44:cf:a2:5a:53:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 7 07:14:28 2025 GMT Not After : May 13 06:14:28 2027 GMT Subject: CN=5a3c1ef7-d18b-4bf7-a6a9-d8959334423b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:75:95:04:de:ef:9f:cb:7a:82:a0:8c:73:5f: 28:d6:f3:20:32:01:75:05:90:97:2f:bb:05:a5:04: 4e:c6:95:d8:d3:c7:3f:ee:3e:f8:f1:0c:da:f6:1d: ac:bb:f7:db:45:2f:1b:dd:89:18:38:76:fe:b1:de: 13:ea:ca:ac:b8:de:ef:3e:55:0c:1e:3f:be:27:c1: 7d:ba:a6:1c:65:64:32:93:28:ef:4d:e3:5e:e9:98: 67:55:bb:b8:8c:15:2b:ba:a2:48:dc:50:7d:93:ef: c1:11:d5:95:1e:2d:14:4a:8f:6b:48:cf:30:8e:d5: 80:fd:f9:67:9a:bf:67:6f:eb:45:e0:f5:91:6d:51: 10:22:19:26:45:b1:74:cc:75:dd:98:96:ae:f3:88: 1f:b8:5d:23:7d:13:da:36:ae:46:d8:e1:61:89:ec: 2d:15:f9:8c:ab:14:22:84:2a:97:c2:2e:e7:78:1b: ac:d9:b6:a2:ce:87:9f:72:ab:e4:93:36:9a:4a:8e: 3c:b5:30:c8:1b:8a:e9:6b:db:6f:36:be:f1:f7:25: ec:b5:e0:d7:7e:ed:9e:68:35:95:2b:d2:e1:a4:26: 4f:52:a8:e9:93:2a:32:c7:70:5e:4e:79:30:bb:1e: 01:9a:02:a6:ff:7b:a9:ca:99:fc:89:fa:67:d6:26: 45:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4E:A8:C1:E7:39:79:C9:C0:B7:35:80:0D:7A:E5:85:26:8E:0B:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.252.0/24 IPv6: 2602:f72f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401617 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:c0:45:37:b0:0e:56:a1:21:8b:be:be:7d:f9:ec:e4:d3:74: c2:3c:3f:44:2e:e5:dc:4d:20:86:eb:d9:b3:89:13:88:f2:f4: 55:7e:61:7d:b4:b3:69:b0:56:86:32:41:eb:a1:22:0c:cb:3c: 51:d3:0a:8a:41:bf:35:5d:62:95:7e:e8:69:8e:f0:1a:a4:6d: 67:fd:8d:14:5f:db:c1:8e:1a:ca:d7:c8:4a:59:d1:7a:10:ab: 32:e2:6d:e0:99:c5:d7:ad:f8:b3:a5:94:68:42:bb:3f:a9:72: 3c:17:50:e6:db:97:03:b5:6f:86:36:28:ec:34:33:5d:be:83: 5b:45:2a:0a:d8:16:fb:69:9b:80:4b:39:aa:07:af:d2:c3:1a: 23:0a:e0:1b:2f:a1:6a:90:d6:95:a4:d2:62:d1:50:a1:3b:b1: 5b:20:4d:f2:a0:e6:7a:68:98:30:1f:a6:4e:fa:a7:29:01:69: 79:34:e2:06:9c:a1:77:9a:52:be:8c:8c:3c:d5:d9:a5:c2:10: 14:44:70:3f:eb:f3:12:c4:d4:0e:c6:a1:32:8c:f0:f6:2a:91: 04:e3:80:0a:be:27:d2:f8:25:b5:d1:31:0f:82:72:e6:54:b4: 27:f7:c6:61:ae:74:ee:2e:87:a6:32:e9:8d:3c:04:33:e6:60: c0:8c:da:4d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjNF0HgSkTPolpTA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIwNzA3MTQyOFoXDTI3MDUxMzA2MTQyOFowLzEtMCsGA1UEAxMk NWEzYzFlZjctZDE4Yi00YmY3LWE2YTktZDg5NTkzMzQ0MjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53WVBN7vn8t6gqCMc18o1vMgMgF1BZCXL7sF pQROxpXY08c/7j748Qza9h2su/fbRS8b3YkYOHb+sd4T6sqsuN7vPlUMHj++J8F9 uqYcZWQykyjvTeNe6ZhnVbu4jBUruqJI3FB9k+/BEdWVHi0USo9rSM8wjtWA/fln mr9nb+tF4PWRbVEQIhkmRbF0zHXdmJau84gfuF0jfRPaNq5G2OFhiewtFfmMqxQi hCqXwi7neBus2baizoefcqvkkzaaSo48tTDIG4rpa9tvNr7x9yXsteDXfu2eaDWV K9LhpCZPUqjpkyoyx3BeTnkwux4BmgKm/3upypn8ifpn1iZFNwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFENOqMHnOXnJwLc1gA165YUmjgt3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 YTNjMWVmNy1kMThiLTRiZjctYTZhOS1kODk1OTMzNDQyM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVhM2MxZWY3LWQxOGItNGJmNy1h NmE5LWQ4OTU5MzM0NDIzYi81YTNjMWVmNy1kMThiLTRiZjctYTZhOS1kODk1OTMz NDQyM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhPwwDgQCAAIwCAMGBCYC9y8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYg0TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJwEU3sA5WoSGLvr59+ezk03TC PD9ELuXcTSCG69mziROI8vRVfmF9tLNpsFaGMkHroSIMyzxR0wqKQb81XWKVfuhp jvAapG1n/Y0UX9vBjhrK18hKWdF6EKsy4m3gmcXXrfizpZRoQrs/qXI8F1Dm25cD tW+GNijsNDNdvoNbRSoK2Bb7aZuASzmqB6/SwxojCuAbL6FqkNaVpNJi0VChO7Fb IE3yoOZ6aJgwH6ZO+qcpAWl5NOIGnKF3mlK+jIw81dmlwhAURHA/6/MSxNQOxqEy jPD2KpEE44AKvifS+CW10TEPgnLmVLQn98ZhrnTuLoemMumNPAQz5mDAjNpN -----END CERTIFICATE-----Generated at Fri Apr 4 15:59:23 2025 by rpki-client