$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463.cer File: 69ee1cf0-f347-41cf-a2cf-620aecc0e463.cer (raw, json) Hash identifier: hFDqKOUT62noSVKbajQIBkR4tuPomEcgECypOhmZERM= Subject key identifier: FE:4B:DF:24:1E:58:31:A9:2E:B7:8D:74:0B:61:EF:8A:DF:B4:A3:E1 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487611889A6D246D0EBC88BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/69ee1cf0-f347-41cf-a2cf-620aecc0e463.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 03:07:36 +0000 Certificate not after: Mon 12 Apr 2027 02:07:36 +0000 Subordinate resources: AS: 401568 IP: 23.131.180.0/24 IP: 2602:f753::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:76:11:88:9a:6d:24:6d:0e:bc:88:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 7 03:07:36 2025 GMT Not After : Apr 12 02:07:36 2027 GMT Subject: CN=69ee1cf0-f347-41cf-a2cf-620aecc0e463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:99:65:2e:a7:34:10:2d:d9:2c:f6:c7:47: c9:7a:2c:a2:81:2c:f7:53:39:30:13:28:68:d4:21: e0:ec:17:92:37:8e:f8:1e:f0:c6:0d:c4:f1:42:e9: 22:b6:d9:4c:37:66:d2:7d:84:4c:86:66:07:4a:db: 74:13:e3:8f:4f:a7:73:53:65:95:2b:53:16:ac:2a: 16:e9:97:12:d5:24:78:60:e2:42:ae:e3:98:3e:f8: b4:6e:8d:9c:02:dd:df:45:02:7b:e0:02:0f:63:f1: 20:79:52:68:fb:6e:dd:60:ab:4e:42:9e:33:4e:63: 97:c7:cd:2a:8a:60:20:17:55:2f:96:b3:f5:c8:65: e1:b3:9c:b3:19:c5:a1:44:c6:a3:8a:1c:e4:6b:e1: 6f:81:db:fc:fa:d9:32:27:f8:97:b5:a2:d1:39:3a: 31:af:7c:dd:62:c5:92:fd:75:5c:a8:1d:cf:68:09: a8:3b:90:c6:0b:f5:63:29:5f:89:4f:a6:44:9d:f9: d8:19:25:b1:4f:1b:91:33:28:48:50:03:96:e4:60: d4:fd:fc:ce:07:d8:9f:d2:d9:c9:f7:05:ab:fd:ad: dc:73:de:e7:4d:89:b0:9e:6b:5e:88:f7:0e:55:82: f2:22:f8:f5:96:dd:7a:c1:98:f9:bd:a3:05:63:03: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4B:DF:24:1E:58:31:A9:2E:B7:8D:74:0B:61:EF:8A:DF:B4:A3:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69ee1cf0-f347-41cf-a2cf-620aecc0e463/69ee1cf0-f347-41cf-a2cf-620aecc0e463.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.131.180.0/24 IPv6: 2602:f753::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401568 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:28:07:36:0e:df:a9:33:f5:c4:97:d7:80:f0:16:4d:42:e7: f0:5b:fb:89:85:60:cb:72:22:c8:ee:13:50:bb:f8:ce:6d:0a: 6f:75:b5:bd:46:b7:0c:d9:a1:a7:3f:19:82:8c:b6:40:2b:a5: 68:83:95:35:55:f0:4f:22:35:f8:4a:10:23:dd:77:70:3e:83: 4e:58:ad:a0:19:63:46:cd:9c:f5:85:fb:6c:9c:c4:bd:ed:8c: af:b6:14:b4:ca:45:8f:92:55:c5:a9:64:13:55:00:55:6b:74: f5:6d:20:56:43:fb:5d:fa:93:a0:17:de:50:e6:96:4b:28:10: f4:5b:fc:6f:5f:e4:21:90:cf:5f:d9:b7:ef:bc:8b:cc:60:bb: 81:ab:4f:80:14:c1:9f:cf:86:3e:64:fc:85:6c:ff:cf:71:7f: 72:1c:e7:79:8b:1b:5f:13:ab:d9:a3:0e:56:07:61:d9:18:bc: d7:74:3f:1f:c2:f9:84:88:88:1b:9d:a7:84:e4:e4:5c:a6:88: 3d:87:cd:dc:55:18:f3:1b:64:d1:1a:f2:da:c5:cf:ef:91:16: ff:73:a5:66:70:7b:07:b9:1b:8a:78:37:5e:fd:9d:f0:64:b6: e7:c3:93:0c:06:fa:65:28:63:07:8c:a1:e1:60:30:5d:9e:75: bd:e6:c5:3a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEh2EYiabSRtDryIvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwNzAzMDczNloXDTI3MDQxMjAyMDczNlowLzEtMCsGA1UEAxMk NjllZTFjZjAtZjM0Ny00MWNmLWEyY2YtNjIwYWVjYzBlNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6CZZS6nNBAt2Sz2x0fJeiyigSz3UzkwEyho 1CHg7BeSN474HvDGDcTxQukittlMN2bSfYRMhmYHStt0E+OPT6dzU2WVK1MWrCoW 6ZcS1SR4YOJCruOYPvi0bo2cAt3fRQJ74AIPY/EgeVJo+27dYKtOQp4zTmOXx80q imAgF1UvlrP1yGXhs5yzGcWhRMajihzka+Fvgdv8+tkyJ/iXtaLROToxr3zdYsWS /XVcqB3PaAmoO5DGC/VjKV+JT6ZEnfnYGSWxTxuRMyhIUAOW5GDU/fzOB9if0tnJ 9wWr/a3cc97nTYmwnmteiPcOVYLyIvj1lt16wZj5vaMFYwNtFQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFP5L3yQeWDGpLreNdAth74rftKPhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82 OWVlMWNmMC1mMzQ3LTQxY2YtYTJjZi02MjBhZWNjMGU0NjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzY5ZWUxY2YwLWYzNDctNDFjZi1h MmNmLTYyMGFlY2MwZTQ2My82OWVlMWNmMC1mMzQ3LTQxY2YtYTJjZi02MjBhZWNj MGU0NjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg7QwDgQCAAIwCAMGBCYC91MAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYgoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6KAc2Dt+pM/XEl9eA8BZNQufw W/uJhWDLciLI7hNQu/jObQpvdbW9RrcM2aGnPxmCjLZAK6Vog5U1VfBPIjX4ShAj 3XdwPoNOWK2gGWNGzZz1hftsnMS97YyvthS0ykWPklXFqWQTVQBVa3T1bSBWQ/td +pOgF95Q5pZLKBD0W/xvX+QhkM9f2bfvvIvMYLuBq0+AFMGfz4Y+ZPyFbP/PcX9y HOd5ixtfE6vZow5WB2HZGLzXdD8fwvmEiIgbnaeE5ORcpog9h83cVRjzG2TRGvLa xc/vkRb/c6VmcHsHuRuKeDde/Z3wZLbnw5MMBvplKGMHjKHhYDBdnnW95sU6 -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:53 2025 by rpki-client