$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer File: a28c0165-b200-4b04-831e-e344861ac9ad.cer (raw, json) Hash identifier: W/7k1pjhwxDxVjvChv9G3roty0+NX94Oc9x7RS0L4Zg= Subject key identifier: C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848EF5DF3F31593C4C2B8DEB420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 13:54:23 +0000 Certificate not after: Tue 25 May 2027 12:54:23 +0000 Subordinate resources: AS: 46850 IP: 23.134.212.0/24 IP: 2602:f6e0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:5d:f3:f3:15:93:c4:c2:b8:de:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 19 13:54:23 2025 GMT Not After : May 25 12:54:23 2027 GMT Subject: CN=a28c0165-b200-4b04-831e-e344861ac9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:14:27:d4:6a:c0:83:e0:2c:e8:74:de:ca:9c: 85:7a:9a:e5:f5:03:87:22:f0:35:7b:97:e5:b1:38: 58:ef:b1:9b:20:f5:7d:86:4e:8b:d4:dc:de:07:0f: ee:25:67:76:00:0f:3c:dd:d7:a8:3a:3a:7a:e2:7a: 19:1c:ef:de:10:c8:79:b3:ab:ac:f2:8f:71:8d:9e: e6:82:08:3a:c3:a3:a7:f3:c4:13:6d:7b:a2:10:78: d4:4d:1f:c7:f9:41:eb:53:f1:c5:5a:61:a1:2f:6a: 8b:20:02:69:8b:17:e1:6f:32:71:0d:2d:39:7b:a2: 69:d2:67:5c:5b:15:8b:ac:62:33:16:af:90:26:9e: fb:b9:ae:85:7a:fc:ee:2b:89:dd:7c:15:21:65:d0: 27:70:e6:bb:5f:73:69:8e:86:5a:b3:0a:19:a4:04: 15:7a:e3:58:16:cf:13:30:51:de:a3:79:e7:74:8f: 70:06:70:88:51:76:6e:4c:90:db:a9:93:5a:82:03: 74:61:a2:07:6a:67:36:86:07:5c:5a:c0:48:87:c3: 3a:15:77:6e:a4:c2:cf:18:ee:5d:a4:53:9c:5d:35: 3f:16:f9:24:69:28:eb:ef:47:13:ad:60:7a:83:cd: 76:66:fc:47:34:16:85:ea:85:73:b7:af:56:7d:39: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.212.0/24 IPv6: 2602:f6e0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46850 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8b:f8:4a:11:33:8a:db:4f:ab:6f:02:86:a6:ae:ca:49:f2: ec:59:6c:c7:76:77:3a:3f:b0:93:96:27:ea:8c:1d:a2:f8:e6: 19:43:1d:48:2f:05:94:6e:91:76:bd:7b:b2:27:e5:a2:22:0c: 68:2d:63:8e:4e:5d:0a:97:c6:a7:de:c6:68:b5:70:f1:45:b8: 36:74:07:94:09:8c:82:6b:c6:98:d4:b4:ca:76:f2:91:ef:a4: d2:38:a5:7a:15:99:44:5d:55:58:d7:82:7c:18:aa:2a:19:67: 17:a4:b2:a1:5a:2f:87:32:c7:68:2f:98:8b:e1:93:25:dc:cf: c6:48:8b:df:6c:fe:99:60:51:d5:ee:b7:de:67:bb:d6:36:70: bd:ed:9a:29:ee:ff:94:e4:a2:18:85:f1:b1:00:ea:60:dd:0c: a1:c7:44:9d:13:d5:22:34:ce:87:f3:cd:99:ae:39:66:f2:85: d4:2d:33:d7:af:9d:f5:c0:7f:bc:01:9e:28:d7:56:6e:dc:e0: 25:34:98:cd:09:fb:cd:93:15:33:1d:2e:ba:b6:e4:bf:3b:d7: f7:81:7b:09:93:8a:d5:38:0e:85:47:e2:dc:a5:bc:77:ba:98: a9:0c:0e:d9:75:c0:04:55:0d:5e:7d:42:ca:b1:49:da:ac:cb: a2:f5:8c:eb -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjvXfPzFZPEwrjetCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxOTEzNTQyM1oXDTI3MDUyNTEyNTQyM1owLzEtMCsGA1UEAxMk YTI4YzAxNjUtYjIwMC00YjA0LTgzMWUtZTM0NDg2MWFjOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBQn1GrAg+As6HTeypyFeprl9QOHIvA1e5fl sThY77GbIPV9hk6L1NzeBw/uJWd2AA883deoOjp64noZHO/eEMh5s6us8o9xjZ7m ggg6w6On88QTbXuiEHjUTR/H+UHrU/HFWmGhL2qLIAJpixfhbzJxDS05e6Jp0mdc WxWLrGIzFq+QJp77ua6FevzuK4ndfBUhZdAncOa7X3NpjoZaswoZpAQVeuNYFs8T MFHeo3nndI9wBnCIUXZuTJDbqZNaggN0YaIHamc2hgdcWsBIh8M6FXdupMLPGO5d pFOcXTU/FvkkaSjr70cTrWB6g812ZvxHNBaF6oVzt69WfTlIzwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMV8UAdrqSk19JFKF9pPHiSD7XlFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h MjhjMDE2NS1iMjAwLTRiMDQtODMxZS1lMzQ0ODYxYWM5YWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2EyOGMwMTY1LWIyMDAtNGIwNC04 MzFlLWUzNDQ4NjFhYzlhZC9hMjhjMDE2NS1iMjAwLTRiMDQtODMxZS1lMzQ0ODYx YWM5YWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhtQwDgQCAAIwCAMGACYC9uAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC3AjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgi/hKETOK20+rbwKGpq7KSfLs WWzHdnc6P7CTlifqjB2i+OYZQx1ILwWUbpF2vXuyJ+WiIgxoLWOOTl0Kl8an3sZo tXDxRbg2dAeUCYyCa8aY1LTKdvKR76TSOKV6FZlEXVVY14J8GKoqGWcXpLKhWi+H MsdoL5iL4ZMl3M/GSIvfbP6ZYFHV7rfeZ7vWNnC97Zop7v+U5KIYhfGxAOpg3Qyh x0SdE9UiNM6H882Zrjlm8oXULTPXr531wH+8AZ4o11Zu3OAlNJjNCfvNkxUzHS66 tuS/O9f3gXsJk4rVOA6FR+Lcpbx3upipDA7ZdcAEVQ1efULKsUnarMui9Yzr -----END CERTIFICATE-----Generated at Fri Apr 4 18:58:13 2025 by rpki-client