$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a.cer File: 87764ab6-6bef-4cac-8229-126c25c80e9a.cer (raw, json) Hash identifier: CsssC3TW4UILTBHmEFs1ZI9NA1xAnTEF+oqZwkXIi1Y= Subject key identifier: 5D:EB:70:B0:3C:09:E5:1C:56:A7:53:BA:58:7F:30:B5:93:50:28:52 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584916A928F134894804BD15C1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/87764ab6-6bef-4cac-8229-126c25c80e9a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 15:42:27 +0000 Certificate not after: Thu 03 Jun 2027 04:16:34 +0000 Subordinate resources: AS: 32418 IP: 23.135.116.0/24 IP: 2602:f6d2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:16:a9:28:f1:34:89:48:04:bd:15:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 5 15:42:27 2025 GMT Not After : Jun 3 04:16:34 2027 GMT Subject: CN=87764ab6-6bef-4cac-8229-126c25c80e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:61:e2:01:c2:45:09:f6:59:19:f0:c2:d2: 18:98:25:2d:33:7f:de:5a:85:ea:eb:c2:44:a1:ce: ae:f6:95:85:1a:a9:20:56:fe:93:b8:1e:9e:c9:b2: 22:2d:bd:41:5c:1f:ca:c3:af:76:64:49:72:0c:9f: a9:f7:97:e5:8a:38:a9:c6:5c:0c:c1:ee:05:0e:eb: b2:70:15:df:ad:70:1e:ee:34:e8:d8:b6:35:18:4a: 31:ea:1f:7f:66:93:9e:36:48:26:0e:ed:5e:7f:8c: 4c:47:fb:fa:13:b6:63:d5:ee:59:b7:97:fe:6b:ca: b5:7c:93:8a:12:4a:86:11:74:ae:f5:d7:fe:02:58: 19:54:1b:51:99:5f:5a:78:88:9c:69:fe:83:fe:4d: 99:5a:d8:34:39:05:75:d6:2c:41:e7:a8:54:ca:b5: e6:fd:57:ab:51:97:42:3d:b1:6c:d7:00:0b:e2:64: 53:31:81:b8:3a:b3:1d:90:44:73:c3:73:10:a2:e5: 27:2f:c8:a8:55:03:b3:fe:ad:30:e1:54:d1:cb:fc: ee:f3:ed:5f:12:69:3b:b1:0d:eb:ae:8d:84:96:a3: 57:45:40:e6:ac:fe:b6:83:12:a2:5d:c7:2a:4b:bd: e4:c6:97:28:9a:74:46:02:f7:30:93:c6:bb:31:5a: f2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EB:70:B0:3C:09:E5:1C:56:A7:53:BA:58:7F:30:B5:93:50:28:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/87764ab6-6bef-4cac-8229-126c25c80e9a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.116.0/24 IPv6: 2602:f6d2::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32418 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:94:2d:3d:30:36:39:2e:1a:e7:13:93:bc:03:27:f8:78:dc: b4:12:c3:cf:ec:54:a1:2d:73:22:31:f8:77:a3:b6:0c:53:7a: bb:0b:4e:04:66:78:bc:4f:cd:9d:78:cf:c5:ee:f1:51:ef:ab: 73:20:34:e1:89:37:24:a7:1b:4c:91:03:5c:cd:a9:3d:0d:ec: f9:65:f1:29:a1:2b:dc:e5:60:40:78:06:a1:ba:b5:19:07:0f: 2e:39:93:32:52:2d:07:cc:fa:4f:93:08:bc:f1:01:93:6f:dc: ff:3e:34:a9:7c:62:2c:78:16:9e:80:f0:6e:67:e1:fa:69:f6: 59:44:f9:69:81:5c:65:83:0a:41:0d:3b:90:69:d0:2d:22:8c: da:fe:50:4a:be:f5:bc:40:40:9c:21:89:d8:0a:34:6a:42:12: 55:09:e1:69:e8:64:82:4e:4d:09:4f:8e:52:0d:91:fd:ea:2d: b3:f2:04:eb:5b:e9:84:55:4e:17:3f:0a:4a:5a:2e:a4:af:f2: c2:1b:a1:68:97:57:6d:ab:d2:a2:ba:f3:12:f9:d6:c9:93:66: 59:4d:8c:21:2e:02:17:96:bb:12:ec:91:e7:8b:a8:9c:77:fe: 88:a8:af:42:14:41:f2:fa:2f:8d:92:16:c6:2b:64:97:0d:e6: ff:dd:28:c7 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkWqSjxNIlIBL0VwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNTE1NDIyN1oXDTI3MDYwMzA0MTYzNFowLzEtMCsGA1UEAxMk ODc3NjRhYjYtNmJlZi00Y2FjLTgyMjktMTI2YzI1YzgwZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndlh4gHCRQn2WRnwwtIYmCUtM3/eWoXq68JE oc6u9pWFGqkgVv6TuB6eybIiLb1BXB/Kw692ZElyDJ+p95flijipxlwMwe4FDuuy cBXfrXAe7jTo2LY1GEox6h9/ZpOeNkgmDu1ef4xMR/v6E7Zj1e5Zt5f+a8q1fJOK EkqGEXSu9df+AlgZVBtRmV9aeIicaf6D/k2ZWtg0OQV11ixB56hUyrXm/VerUZdC PbFs1wAL4mRTMYG4OrMdkERzw3MQouUnL8ioVQOz/q0w4VTRy/zu8+1fEmk7sQ3r ro2ElqNXRUDmrP62gxKiXccqS73kxpcomnRGAvcwk8a7MVrywQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFF3rcLA8CeUcVqdTulh/MLWTUChSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84 Nzc2NGFiNi02YmVmLTRjYWMtODIyOS0xMjZjMjVjODBlOWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzg3NzY0YWI2LTZiZWYtNGNhYy04 MjI5LTEyNmMyNWM4MGU5YS84Nzc2NGFiNi02YmVmLTRjYWMtODIyOS0xMjZjMjVj ODBlOWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXh3QwDgQCAAIwCAMGACYC9tIAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn6iMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADCULT0wNjkuGucTk7wDJ/h43LQS w8/sVKEtcyIx+HejtgxTersLTgRmeLxPzZ14z8Xu8VHvq3MgNOGJNySnG0yRA1zN qT0N7Pll8SmhK9zlYEB4BqG6tRkHDy45kzJSLQfM+k+TCLzxAZNv3P8+NKl8Yix4 Fp6A8G5n4fpp9llE+WmBXGWDCkENO5Bp0C0ijNr+UEq+9bxAQJwhidgKNGpCElUJ 4WnoZIJOTQlPjlINkf3qLbPyBOtb6YRVThc/CkpaLqSv8sIboWiXV22r0qK68xL5 1smTZllNjCEuAheWuxLskeeLqJx3/oior0IUQfL6L42SFsYrZJcN5v/dKMc= -----END CERTIFICATE-----Generated at Fri Apr 4 19:22:11 2025 by rpki-client