$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de.cer File: 9c0c1427-027c-46e0-badf-264566cd16de.cer (raw, json) Hash identifier: ROhjUPrrrF9XYHBbEFXrPw6wXIhjxiiLgItCYi9aBso= Subject key identifier: FA:E7:0D:DE:26:03:F4:B9:58:40:79:E2:88:77:68:0B:DF:B9:60:C9 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858489B1DE9E485A5FAB3EBAAD240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/9c0c1427-027c-46e0-badf-264566cd16de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Jan 2025 09:37:27 +0000 Certificate not after: Sun 25 Apr 2027 08:37:27 +0000 Subordinate resources: IP: 23.132.116.0/24 IP: 2602:f734::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:1d:e9:e4:85:a5:fa:b3:eb:aa:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 20 09:37:27 2025 GMT Not After : Apr 25 08:37:27 2027 GMT Subject: CN=9c0c1427-027c-46e0-badf-264566cd16de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:67:89:42:ee:8e:91:b2:19:c2:9f:ea:41: c7:ad:30:4b:ee:af:d6:07:90:01:8b:3b:bc:78:9e: d6:54:b9:9a:50:0e:2f:e1:16:c1:87:9b:72:88:6d: e9:8a:3c:9c:45:e7:58:fe:77:4c:52:6e:e3:aa:7a: 96:f3:97:00:29:fe:d4:bf:c9:31:0c:4e:01:7f:64: aa:84:76:6c:b1:21:50:3b:18:f4:41:4f:ba:84:56: 0c:7a:10:cb:57:8b:08:4d:d3:99:91:d8:22:87:7e: bc:1b:f8:41:6e:ea:d5:f8:6e:a8:c1:30:1e:5f:46: d0:bd:25:fa:e9:cd:a3:93:21:1f:0d:a5:18:ba:12: d9:98:fb:5b:e4:f5:f0:dc:dc:fd:71:eb:38:28:eb: 2d:84:80:02:5c:13:4d:19:02:96:16:1b:fb:ee:a7: f5:3b:d2:ce:cc:b5:f9:4d:af:4c:e9:8e:b7:30:e5: 73:05:ac:34:69:cd:83:a8:0f:c7:39:57:cc:13:9b: c2:32:67:89:f8:2a:ce:19:62:f2:8d:9a:3b:e6:5e: a8:31:72:0f:ea:09:34:88:76:c3:d9:98:2e:0c:c6: 78:45:e6:e4:e9:b0:69:2d:c2:60:cb:9f:d0:f2:e3: 83:96:79:c1:02:50:e4:50:4e:aa:f1:b1:aa:9d:42: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E7:0D:DE:26:03:F4:B9:58:40:79:E2:88:77:68:0B:DF:B9:60:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c0c1427-027c-46e0-badf-264566cd16de/9c0c1427-027c-46e0-badf-264566cd16de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.116.0/24 IPv6: 2602:f734::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:fe:a4:77:1c:c3:bf:95:ed:bf:e8:71:7e:2b:b7:73:d5:2a: e0:0e:09:d2:5e:1f:55:dc:ac:c0:96:5a:cc:9f:b7:af:0b:16: a2:23:d9:33:22:d2:f7:7e:d8:1a:26:46:62:e8:23:69:11:a8: 68:e1:c9:6a:0a:65:a6:ac:5d:10:6d:d0:b2:71:ae:e5:37:4b: 74:65:e9:25:f2:a6:2b:b6:0d:37:02:d8:7b:61:a0:f7:8f:4e: 6b:84:9f:f3:6b:8e:50:df:ce:5b:ac:f0:24:19:6f:d3:da:b5: 00:1c:65:ea:5a:cb:37:6b:63:5b:38:dd:4b:39:f5:e6:18:0a: 05:fd:0b:45:4b:57:d5:a8:99:64:bb:10:94:e1:59:40:bc:80: 40:12:00:3b:3d:bb:9e:99:64:ee:6c:10:a7:b3:63:16:af:a9: 47:09:92:b2:af:db:e5:e7:7d:25:04:e0:98:8d:65:f6:07:8a: 0f:f4:7e:5e:b9:38:51:d5:63:9d:d5:89:cf:b5:c3:b7:52:1a: d5:44:4d:57:16:1e:bd:f9:c8:a6:54:02:4c:9b:48:59:71:11: b1:73:bd:06:96:f4:aa:61:84:1f:11:00:67:93:90:4b:a0:54: b8:18:c7:48:ee:28:38:06:ad:2a:98:22:15:b6:17:ea:87:f4: 01:70:c7:05 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEibHenkhaX6s+uq0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyMDA5MzcyN1oXDTI3MDQyNTA4MzcyN1owLzEtMCsGA1UEAxMk OWMwYzE0MjctMDI3Yy00NmUwLWJhZGYtMjY0NTY2Y2QxNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIFniULujpGyGcKf6kHHrTBL7q/WB5ABizu8 eJ7WVLmaUA4v4RbBh5tyiG3pijycRedY/ndMUm7jqnqW85cAKf7Uv8kxDE4Bf2Sq hHZssSFQOxj0QU+6hFYMehDLV4sITdOZkdgih368G/hBburV+G6owTAeX0bQvSX6 6c2jkyEfDaUYuhLZmPtb5PXw3Nz9ces4KOsthIACXBNNGQKWFhv77qf1O9LOzLX5 Ta9M6Y63MOVzBaw0ac2DqA/HOVfME5vCMmeJ+CrOGWLyjZo75l6oMXIP6gk0iHbD 2ZguDMZ4Rebk6bBpLcJgy5/Q8uODlnnBAlDkUE6q8bGqnUKP9wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPrnDd4mA/S5WEB54oh3aAvfuWDJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85 YzBjMTQyNy0wMjdjLTQ2ZTAtYmFkZi0yNjQ1NjZjZDE2ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzljMGMxNDI3LTAyN2MtNDZlMC1i YWRmLTI2NDU2NmNkMTZkZS85YzBjMTQyNy0wMjdjLTQ2ZTAtYmFkZi0yNjQ1NjZj ZDE2ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhHQwDgQCAAIwCAMGACYC9zQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADH+pHccw7+V7b/ocX4rt3PVKuAOCdJeH1XcrMCWWsyft68LFqIj2TMi0vd+2Bom RmLoI2kRqGjhyWoKZaasXRBt0LJxruU3S3Rl6SXypiu2DTcC2HthoPePTmuEn/Nr jlDfzlus8CQZb9PatQAcZepayzdrY1s43Us59eYYCgX9C0VLV9WomWS7EJThWUC8 gEASADs9u56ZZO5sEKezYxavqUcJkrKv2+XnfSUE4JiNZfYHig/0fl65OFHVY53V ic+1w7dSGtVETVcWHr35yKZUAkybSFlxEbFzvQaW9KphhB8RAGeTkEugVLgYx0ju KDgGrSqYIhW2F+qH9AFwxwU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:08:20 2025 by rpki-client