$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer File: 5cf06829-25a9-43c5-8a21-38599a1fb23f.cer (raw, json) Hash identifier: v3muy490bJrihfsBf9OSKSTgOWV9kNeaKCT3ygAOk5w= Subject key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487DD32F71E4DBC9813672C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jan 2025 21:48:27 +0000 Certificate not after: Wed 14 Apr 2027 20:48:27 +0000 Subordinate resources: AS: 397376 IP: 23.176.224.0/24 IP: 104.251.188.0/22 IP: 142.202.228.0/22 IP: 2602:fdff::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7d:d3:2f:71:e4:db:c9:81:36:72:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 9 21:48:27 2025 GMT Not After : Apr 14 20:48:27 2027 GMT Subject: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c1:6b:f6:67:66:43:a3:33:c8:fc:ff:e8:eb: d0:04:ef:3a:10:54:88:91:7a:05:c8:92:e4:60:97: 87:8a:49:d1:01:9e:87:87:42:37:6b:55:f5:78:4e: 83:3a:71:ee:6a:26:99:61:6a:57:23:a5:c9:59:d8: ce:0b:7d:b6:09:88:89:31:3a:17:3f:04:7e:f2:a6: 5e:31:69:55:e7:82:7e:6d:e0:43:56:22:c6:68:ef: c1:42:2b:5b:fc:66:da:e9:65:d7:43:c0:55:ad:d9: d9:46:45:10:bf:b7:bc:43:6d:2a:20:ba:d4:63:5a: 81:b9:93:67:49:6e:46:ad:85:61:03:4b:89:ec:4e: 10:13:e1:0d:a6:32:51:33:57:fd:da:27:ca:14:27: 36:60:d3:82:6e:d6:10:32:67:db:39:eb:29:f5:84: 71:63:1a:40:0d:60:c3:97:74:71:d1:7c:ef:10:3e: ee:72:70:d5:4b:ea:ec:9c:73:36:ce:bb:12:55:8d: e0:1c:c7:06:b4:8f:44:75:39:16:f1:8e:9c:45:c0: 13:40:81:49:28:0e:6e:9c:3c:dd:1f:fb:2f:b8:83: 68:cc:07:1c:52:07:b5:6b:ab:d4:dc:d1:68:bd:36: f4:07:cc:4b:a7:fd:ef:9f:11:05:79:00:59:57:2e: 80:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.176.224.0/24 104.251.188.0/22 142.202.228.0/22 IPv6: 2602:fdff::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397376 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ef:b0:40:87:ea:de:42:1f:d2:ca:f3:ea:5a:6b:25:49:09: 8d:88:e5:4d:8b:4f:94:cf:30:a7:77:63:6b:4e:dd:98:f8:a9: 4c:89:74:b4:0b:38:b3:6a:de:36:53:15:81:54:29:f7:7b:8e: 06:e1:6c:6d:c1:4b:0b:41:f2:7c:2f:a4:14:1a:31:3d:96:fa: 27:0d:4b:26:28:05:f7:d4:66:fe:fb:ad:37:4d:37:44:ed:e9: 39:97:09:34:4b:43:58:49:13:2f:1d:aa:7b:e2:6c:30:a3:93: 81:84:f8:a7:7e:e1:72:90:ea:9d:87:d0:1b:d6:c5:f5:3b:7a: 57:03:a6:df:a2:bd:eb:d8:74:95:07:a6:ba:79:31:a7:22:50: 39:bd:13:6f:23:8b:08:ed:21:33:2c:96:15:bd:4a:7a:78:67: 2a:5b:82:d3:15:02:ad:03:b5:96:fe:c1:df:e6:2e:35:b5:43: 28:47:54:54:51:36:83:cf:8a:de:09:e6:cb:ad:94:a6:d1:62: e1:fc:02:e0:aa:50:4f:b0:56:4c:e2:43:62:ac:93:6f:a4:71: 8b:3b:bc:d8:e9:9f:b3:fa:24:73:75:19:bd:b6:57:03:87:67: 38:f1:3b:39:3e:e3:2e:f9:08:bc:e7:c1:13:5a:0b:0d:a2:d2: 7f:aa:e1:a7 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEh90y9x5NvJgTZyyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwOTIxNDgyN1oXDTI3MDQxNDIwNDgyN1owLzEtMCsGA1UEAxMk NWNmMDY4MjktMjVhOS00M2M1LThhMjEtMzg1OTlhMWZiMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcFr9mdmQ6MzyPz/6OvQBO86EFSIkXoFyJLk YJeHiknRAZ6Hh0I3a1X1eE6DOnHuaiaZYWpXI6XJWdjOC322CYiJMToXPwR+8qZe MWlV54J+beBDViLGaO/BQitb/Gba6WXXQ8BVrdnZRkUQv7e8Q20qILrUY1qBuZNn SW5GrYVhA0uJ7E4QE+ENpjJRM1f92ifKFCc2YNOCbtYQMmfbOesp9YRxYxpADWDD l3Rx0XzvED7ucnDVS+rsnHM2zrsSVY3gHMcGtI9EdTkW8Y6cRcATQIFJKA5unDzd H/svuINozAccUge1a6vU3NFovTb0B8xLp/3vnxEFeQBZVy6AbQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFB/Z6eOhM/Eq4dDlRrjzINuhG23AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81 Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWExZmIyM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzVjZjA2ODI5LTI1YTktNDNjNS04 YTIxLTM4NTk5YTFmYjIzZi81Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWEx ZmIyM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXsOADBAJo+7wDBAKOyuQwDQQCAAIwBwMFACYC /f8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhBAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFHvsECH6t5C H9LK8+paayVJCY2I5U2LT5TPMKd3Y2tO3Zj4qUyJdLQLOLNq3jZTFYFUKfd7jgbh bG3BSwtB8nwvpBQaMT2W+icNSyYoBffUZv77rTdNN0Tt6TmXCTRLQ1hJEy8dqnvi bDCjk4GE+Kd+4XKQ6p2H0BvWxfU7elcDpt+ivevYdJUHprp5MaciUDm9E28jiwjt ITMslhW9Snp4ZypbgtMVAq0DtZb+wd/mLjW1QyhHVFRRNoPPit4J5sutlKbRYuH8 AuCqUE+wVkziQ2Ksk2+kcYs7vNjpn7P6JHN1Gb22VwOHZzjxOzk+4y75CLznwRNa Cw2i0n+q4ac= -----END CERTIFICATE-----Generated at Wed Feb 5 13:00:41 2025 by rpki-client