$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer File: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer (raw, json) Hash identifier: a3TTdoSlrrMb6OAhYdA+Hd2MEzVavx4pdoIa8uNPrFA= Subject key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858492FFCE128DA19448E5C07B500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Mar 2025 17:26:20 +0000 Certificate not after: Thu 17 Jun 2027 17:26:20 +0000 Subordinate resources: AS: 398951 IP: 23.130.60.0/24 IP: 216.181.120.0/24 IP: 2602:f978::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2f:fc:e1:28:da:19:44:8e:5c:07:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 14 17:26:20 2025 GMT Not After : Jun 17 17:26:20 2027 GMT Subject: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:f7:a8:5c:f0:d8:d5:bf:b9:4a:ec:74:aa: 7c:42:53:51:1b:2b:36:ac:9e:35:7e:62:60:b9:83: 4c:9f:ff:da:03:16:c5:3a:69:68:0f:c0:b8:ec:07: 71:a1:63:31:9d:3e:78:85:f5:9f:9e:dd:89:55:1b: 5b:7f:39:f6:af:13:78:96:c0:1b:49:3f:8f:ec:b5: 06:c4:c6:41:d0:1d:15:b5:07:3a:b3:1e:ff:ce:cb: 34:70:76:33:df:1d:a5:00:be:a9:4b:91:0d:91:98: 74:d6:bb:8d:66:cb:e5:17:ee:e0:e9:96:ea:77:6f: 56:80:a4:de:4c:ca:d7:bf:12:05:53:fd:7c:e7:1c: 91:b7:f9:98:10:01:35:33:00:81:e4:fe:a1:1c:46: a9:d9:00:d4:e7:ea:d2:ce:58:b4:c8:bd:02:bb:45: 1f:7a:39:1e:6f:72:3c:f0:b2:60:39:a4:a2:1a:06: 6b:bd:c1:9a:8d:be:01:db:ee:11:59:25:23:d6:03: eb:a5:ae:45:6f:f0:2b:27:91:6e:7f:04:48:4f:62: 5d:4c:94:e8:3d:71:c3:32:c0:c3:a1:9f:66:5a:8d: c8:c7:00:16:41:8d:46:15:f2:31:65:b2:ac:35:a5: 75:a8:92:01:08:9f:1f:07:f5:b6:ca:89:fd:59:72: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.130.60.0/24 216.181.120.0/24 IPv6: 2602:f978::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398951 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:62:12:3d:5e:56:dd:24:2d:17:73:d3:d0:a5:29:87:e5:55: ce:11:3e:a4:3c:ba:f3:7d:2d:31:e1:8b:31:6a:1e:5d:47:3a: a3:fe:fa:65:aa:fa:cb:dc:b4:b9:c7:65:86:1b:b4:5e:80:d1: f2:c9:dc:ad:df:92:c1:38:0b:f1:c7:19:8c:68:d2:7f:88:fc: 60:28:e6:3e:2a:11:02:46:1a:c6:b9:58:13:17:9e:f0:d2:73: 78:f0:96:24:37:22:ec:69:2b:39:00:e9:41:df:64:ac:da:01: 5f:a5:92:46:be:f9:f8:4e:29:5e:6a:17:38:d1:4f:88:90:51: b2:0e:18:9d:9a:55:ab:ab:1f:61:4a:f4:85:08:39:b1:ad:72: 5c:fd:03:1f:45:5d:72:80:09:78:1d:87:19:e0:1c:9b:e1:cb: b7:06:20:d8:1e:db:fe:a7:d1:b5:9a:d5:fd:ab:12:6b:b5:b2: 24:78:66:2c:a2:df:c9:60:7d:2e:eb:15:06:93:8c:20:25:6c: ad:51:4f:9f:2c:8c:60:e2:aa:80:f8:1e:be:ed:3f:a9:04:2c: 9c:bd:ce:0f:96:46:4f:e6:f0:3b:12:48:1a:b4:d5:ef:54:ca: 6b:8f:fe:6b:7f:27:55:c4:a7:d7:db:45:08:61:42:03:28:33: 2e:bf:3c:28 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEkv/OEo2hlEjlwHtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMxNDE3MjYyMFoXDTI3MDYxNzE3MjYyMFowLzEtMCsGA1UEAxMk ODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIxYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpf3qFzw2NW/uUrsdKp8QlNRGys2rJ41fmJg uYNMn//aAxbFOmloD8C47AdxoWMxnT54hfWfnt2JVRtbfzn2rxN4lsAbST+P7LUG xMZB0B0VtQc6sx7/zss0cHYz3x2lAL6pS5ENkZh01ruNZsvlF+7g6Zbqd29WgKTe TMrXvxIFU/185xyRt/mYEAE1MwCB5P6hHEap2QDU5+rSzli0yL0Cu0Ufejkeb3I8 8LJgOaSiGgZrvcGajb4B2+4RWSUj1gPrpa5Fb/ArJ5FufwRIT2JdTJToPXHDMsDD oZ9mWo3IxwAWQY1GFfIxZbKsNaV1qJIBCJ8fB/W2yon9WXKtkQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFGo0y9l18kvK2+/dSUBSe4PJyuVBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg2ZjVjZDhhLWY5MDMtNDE3Ni05 N2E3LTY2NzFlNDliMWM5Yi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5 YjFjOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgjwDBADYtXgwDgQCAAIwCAMGBCYC+XgAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWZzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABYhI9XlbdJC0Xc9PQ pSmH5VXOET6kPLrzfS0x4Ysxah5dRzqj/vplqvrL3LS5x2WGG7RegNHyydyt35LB OAvxxxmMaNJ/iPxgKOY+KhECRhrGuVgTF57w0nN48JYkNyLsaSs5AOlB32Ss2gFf pZJGvvn4Tileahc40U+IkFGyDhidmlWrqx9hSvSFCDmxrXJc/QMfRV1ygAl4HYcZ 4Byb4cu3BiDYHtv+p9G1mtX9qxJrtbIkeGYsot/JYH0u6xUGk4wgJWytUU+fLIxg 4qqA+B6+7T+pBCycvc4PlkZP5vA7EkgatNXvVMprj/5rfydVxKfX20UIYUIDKDMu vzwo -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:28 2025 by rpki-client