$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer File: 95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer (raw, json) Hash identifier: JFa89gvfZgz+fhYdMoLPr8Csq1q0pKzp7pARa0Jzs4Y= Subject key identifier: 9C:BB:F4:D6:88:8A:45:17:B2:27:10:57:A4:76:FE:73:EB:63:03:04 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584902DD0B6AE91A064AEA9A6180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 13:30:49 +0000 Certificate not after: Tue 01 Jun 2027 12:30:49 +0000 Subordinate resources: IP: 23.134.220.0/24 IP: 2602:f6e1::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:dd:0b:6a:e9:1a:06:4a:ea:9a:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 26 13:30:49 2025 GMT Not After : Jun 1 12:30:49 2027 GMT Subject: CN=95280188-8bb7-4cee-9c9c-6ad9b785e0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:bc:91:bb:a9:cb:85:92:05:cb:85:6a:07: f5:04:44:88:31:4d:e3:cd:d0:62:a8:c9:d9:4c:48: e6:ae:b2:b3:5a:fd:df:9f:21:ce:0f:31:88:c7:7e: 81:31:6d:71:dc:04:53:cc:bb:8f:2f:72:17:ce:f6: 56:ee:d8:f8:aa:a5:4c:1c:17:aa:81:12:e3:96:27: 68:5a:7d:df:96:4d:6a:01:54:17:fe:e7:55:25:07: 39:56:ac:61:f8:9d:e5:e1:7e:da:da:54:42:a5:be: 15:bd:37:be:39:f1:ca:90:9c:1c:3a:ad:2a:15:83: a4:5d:f4:bd:85:78:56:15:64:be:d4:53:4b:64:31: 86:90:58:80:27:58:f8:a0:d9:36:75:43:c1:68:6a: 89:cf:0e:f4:04:0f:57:87:1c:10:03:24:6d:52:a7: 5d:f4:f0:e1:a7:6e:37:91:73:6e:d3:78:91:c5:cf: 7b:a0:d9:ff:2b:04:13:17:2b:3e:8e:05:34:bb:c5: 44:c0:e6:95:de:40:4d:79:f6:8d:d9:5d:01:37:aa: 17:76:6d:2f:1a:66:e8:08:4c:e8:69:96:9f:de:d7: 38:09:35:b6:b5:9d:5b:2d:0b:e6:f8:92:ab:c8:ed: bd:04:64:62:0c:80:20:ec:b0:42:d6:5b:b4:31:54: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BB:F4:D6:88:8A:45:17:B2:27:10:57:A4:76:FE:73:EB:63:03:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.220.0/24 IPv6: 2602:f6e1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e5:38:d4:42:01:ae:ab:94:87:64:05:a5:5c:a8:d3:6c:59: 69:6f:f9:90:22:cc:8f:ea:2f:79:07:48:38:64:8a:87:c3:51: a0:3e:4a:07:f7:6f:7b:2d:66:69:21:c6:1f:e3:32:eb:f9:19: e9:ef:1a:7e:64:33:34:0c:9d:76:29:98:94:7f:e6:db:ed:4e: b8:0d:26:77:6b:fa:78:76:57:c2:24:9e:b0:5d:4f:6a:64:3b: 0c:c3:fc:87:68:03:3f:bf:3a:a3:31:8c:e1:49:f2:a1:1d:5b: 46:f4:7b:07:01:b1:d3:54:b8:61:39:27:84:2b:84:a7:44:ad: 5f:e6:8c:3d:65:0f:55:1e:13:dd:5b:f1:cc:2c:3d:d9:00:61: 08:84:7a:2a:70:2c:91:87:30:e1:bf:45:f9:3a:cc:22:43:a2: 18:15:7c:b6:05:21:b5:3c:09:c2:70:cc:e5:12:42:f7:74:64: 87:d2:1a:f4:f0:e3:9b:7a:8e:61:60:46:72:4a:78:f5:22:5f: 6d:e5:29:45:8e:b1:2e:92:34:03:4c:5f:2f:3d:ee:03:df:bb: 02:6e:1b:4c:c4:37:ab:d5:da:2b:53:e7:11:57:21:f8:ee:37: da:9f:8e:46:8d:18:bb:94:ee:75:a2:f1:2f:2b:57:48:33:4b: 6d:2d:c2:fc -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEkC3Qtq6RoGSuqaYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNjEzMzA0OVoXDTI3MDYwMTEyMzA0OVowLzEtMCsGA1UEAxMk OTUyODAxODgtOGJiNy00Y2VlLTljOWMtNmFkOWI3ODVlMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9q8kbupy4WSBcuFagf1BESIMU3jzdBiqMnZ TEjmrrKzWv3fnyHODzGIx36BMW1x3ARTzLuPL3IXzvZW7tj4qqVMHBeqgRLjlido Wn3flk1qAVQX/udVJQc5Vqxh+J3l4X7a2lRCpb4VvTe+OfHKkJwcOq0qFYOkXfS9 hXhWFWS+1FNLZDGGkFiAJ1j4oNk2dUPBaGqJzw70BA9XhxwQAyRtUqdd9PDhp243 kXNu03iRxc97oNn/KwQTFys+jgU0u8VEwOaV3kBNefaN2V0BN6oXdm0vGmboCEzo aZaf3tc4CTW2tZ1bLQvm+JKryO29BGRiDIAg7LBC1lu0MVQtZQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFJy79NaIikUXsicQV6R2/nPrYwMEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 NTI4MDE4OC04YmI3LTRjZWUtOWM5Yy02YWQ5Yjc4NWUwYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzk1MjgwMTg4LThiYjctNGNlZS05 YzljLTZhZDliNzg1ZTBjMy85NTI4MDE4OC04YmI3LTRjZWUtOWM5Yy02YWQ5Yjc4 NWUwYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhtwwDgQCAAIwCAMGACYC9uEAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AFrlONRCAa6rlIdkBaVcqNNsWWlv+ZAizI/qL3kHSDhkiofDUaA+Sgf3b3stZmkh xh/jMuv5GenvGn5kMzQMnXYpmJR/5tvtTrgNJndr+nh2V8IknrBdT2pkOwzD/Ido Az+/OqMxjOFJ8qEdW0b0ewcBsdNUuGE5J4QrhKdErV/mjD1lD1UeE91b8cwsPdkA YQiEeipwLJGHMOG/Rfk6zCJDohgVfLYFIbU8CcJwzOUSQvd0ZIfSGvTw45t6jmFg RnJKePUiX23lKUWOsS6SNANMXy897gPfuwJuG0zEN6vV2itT5xFXIfjuN9qfjkaN GLuU7nWi8S8rV0gzS20twvw= -----END CERTIFICATE-----Generated at Fri Apr 4 16:09:11 2025 by rpki-client