$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer File: 8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer (raw, json) Hash identifier: 71U1lghKlhkXNj0YfqojaMCXKZzF51G4M4Tabatdp2Q= Subject key identifier: DF:36:92:D7:C0:A4:F1:C6:D1:82:25:BF:46:5C:6B:3D:26:AC:C4:BF Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858486B7155D839AAC72290F7E980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Jan 2025 07:46:44 +0000 Certificate not after: Thu 08 Apr 2027 06:46:44 +0000 Subordinate resources: AS: 20184 IP: 23.130.124.0/24 IP: 2602:f77b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6b:71:55:d8:39:aa:c7:22:90:f7:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 3 07:46:44 2025 GMT Not After : Apr 8 06:46:44 2027 GMT Subject: CN=8139fd38-b1a1-4ea2-b95d-7f36fe09dff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:05:81:f8:4a:19:dd:24:7d:ff:f5:18:72: 68:96:b1:58:31:3d:eb:77:7e:1c:41:e3:7b:64:36: ec:2c:ea:48:d2:ab:46:53:11:ac:b2:78:1d:89:cb: 7d:e8:cf:d6:3a:e5:fc:02:7d:00:1b:2e:b0:24:1f: 40:84:08:f8:f0:e4:a8:84:58:cf:ec:64:86:c8:13: 05:61:f3:a7:0a:17:95:f0:3f:7c:3e:d8:b8:bb:1f: 01:26:c5:ea:3b:49:cb:81:4e:a3:f4:ee:e4:a6:9a: 41:24:08:e6:4f:5f:a2:f2:b4:e8:f2:bc:af:7b:5d: 09:53:57:51:f8:9a:67:1d:7d:95:65:d2:bb:d4:c7: 4a:da:97:43:ba:96:99:24:a3:59:13:d3:eb:31:3a: ee:d8:0d:d6:79:69:68:3f:f3:ed:97:c8:b9:c1:4b: fb:7c:cc:cb:f0:df:8d:57:bc:34:39:0e:c5:f2:00: 0e:9e:bc:09:06:8e:e4:20:92:6d:2f:e7:a5:d2:a1: 1f:dc:8c:73:6e:cc:b1:af:07:78:fb:54:df:1b:99: 21:89:4c:71:c4:7e:e1:74:4b:8f:63:1a:d9:eb:f4: bd:17:c4:4e:d0:c2:6b:ac:c5:8d:60:31:08:ee:8e: de:b2:af:78:07:27:b9:ed:a0:5d:62:bc:22:57:ed: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:92:D7:C0:A4:F1:C6:D1:82:25:BF:46:5C:6B:3D:26:AC:C4:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.130.124.0/24 IPv6: 2602:f77b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20184 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1a:cb:fb:f1:5e:e8:84:3e:f8:f8:5c:dd:4d:28:c6:02:68: 69:00:8e:6b:54:8a:6b:2d:5f:f8:64:0b:7b:75:8c:50:e1:f0: 91:93:63:35:94:ae:97:39:c7:d9:cb:e8:c9:f9:ae:7a:7f:9e: 51:4c:df:79:86:68:5d:41:3a:18:cd:e5:67:f2:57:cc:96:04: 14:cd:e4:bd:49:18:76:44:58:cf:b4:36:1b:5e:74:75:5d:7d: f4:3f:35:55:f1:fa:34:9c:94:b3:20:5d:7d:8a:bf:42:36:2d: 4f:03:be:8c:bf:53:9e:ca:2f:5b:bd:ac:a7:b6:1d:8b:5f:2e: 53:14:94:00:12:1c:7f:c3:71:1c:fb:68:94:0a:f0:06:e8:74: 19:9f:70:f0:08:49:93:7e:2f:a6:95:38:69:b3:8e:2f:19:88: 5d:70:db:59:f9:a3:a4:66:01:0d:6b:a2:1d:d6:4b:53:12:fe: e6:c3:11:30:00:a2:47:6e:ff:3a:fd:e7:b3:db:e4:54:c2:ba: 57:82:06:81:1b:72:0f:f6:c0:7b:5a:53:bb:20:9e:24:91:1d: ee:4f:e8:9a:cd:fd:2d:cb:4d:9f:cc:1e:2d:db:5c:41:96:35: a5:90:6c:3a:79:66:63:58:9c:3b:80:c8:d9:d5:1e:2a:21:8b: 43:82:85:4f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEhrcVXYOarHIpD36YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwMzA3NDY0NFoXDTI3MDQwODA2NDY0NFowLzEtMCsGA1UEAxMk ODEzOWZkMzgtYjFhMS00ZWEyLWI5NWQtN2YzNmZlMDlkZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgYFgfhKGd0kff/1GHJolrFYMT3rd34cQeN7 ZDbsLOpI0qtGUxGssngdict96M/WOuX8An0AGy6wJB9AhAj48OSohFjP7GSGyBMF YfOnCheV8D98Pti4ux8BJsXqO0nLgU6j9O7kpppBJAjmT1+i8rTo8ryve10JU1dR +JpnHX2VZdK71MdK2pdDupaZJKNZE9PrMTru2A3WeWloP/Ptl8i5wUv7fMzL8N+N V7w0OQ7F8gAOnrwJBo7kIJJtL+el0qEf3Ixzbsyxrwd4+1TfG5khiUxxxH7hdEuP YxrZ6/S9F8RO0MJrrMWNYDEI7o7esq94Bye57aBdYrwiV+2QZwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN82ktfApPHG0YIlv0Zcaz0mrMS/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 MTM5ZmQzOC1iMWExLTRlYTItYjk1ZC03ZjM2ZmUwOWRmZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzgxMzlmZDM4LWIxYTEtNGVhMi1i OTVkLTdmMzZmZTA5ZGZmNi84MTM5ZmQzOC1iMWExLTRlYTItYjk1ZC03ZjM2ZmUw OWRmZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgnwwDgQCAAIwCAMGBCYC93sAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAk7YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABQay/vxXuiEPvj4XN1NKMYCaGkA jmtUimstX/hkC3t1jFDh8JGTYzWUrpc5x9nL6Mn5rnp/nlFM33mGaF1BOhjN5Wfy V8yWBBTN5L1JGHZEWM+0NhtedHVdffQ/NVXx+jSclLMgXX2Kv0I2LU8Dvoy/U57K L1u9rKe2HYtfLlMUlAASHH/DcRz7aJQK8AbodBmfcPAISZN+L6aVOGmzji8ZiF1w 21n5o6RmAQ1roh3WS1MS/ubDETAAokdu/zr957Pb5FTCuleCBoEbcg/2wHtaU7sg niSRHe5P6JrN/S3LTZ/MHi3bXEGWNaWQbDp5ZmNYnDuAyNnVHiohi0OChU8= -----END CERTIFICATE-----Generated at Fri Apr 4 19:10:46 2025 by rpki-client