$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34.cer File: a81b6111-6888-4c67-a629-e33c0db56e34.cer (raw, json) Hash identifier: p3Wbu3EelKMw18pPVi0K3IVWB4B9Hu6riW9c4ISDdtY= Subject key identifier: A5:CA:AE:8D:5B:6B:21:66:52:B0:09:10:B3:04:98:BD:4B:65:11:B4 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848DC2B07BD3ECA38C40020A780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/a81b6111-6888-4c67-a629-e33c0db56e34.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 12 Feb 2025 16:51:25 +0000 Certificate not after: Sun 16 May 2027 17:06:40 +0000 Subordinate resources: AS: 26922 IP: 23.134.84.0/24 IP: 2602:f6f1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dc:2b:07:bd:3e:ca:38:c4:00:20:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 12 16:51:25 2025 GMT Not After : May 16 17:06:40 2027 GMT Subject: CN=a81b6111-6888-4c67-a629-e33c0db56e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:5b:d2:11:ed:6c:82:9a:00:c0:40:c3:74: 32:19:a9:15:8e:b7:a3:cb:48:f8:3a:71:d2:97:9f: aa:8a:8d:b5:95:df:94:82:d1:36:10:7a:1c:38:5f: 54:00:28:16:a4:6a:15:f1:57:32:38:85:08:38:94: b7:0f:23:8f:e5:7f:e9:5c:48:53:88:88:a5:b4:0c: b3:d3:5a:79:15:31:36:8c:b6:2a:da:57:f1:4b:0a: cb:08:cf:55:0f:5e:b1:9c:e6:b1:50:28:1a:a5:c6: 4f:a5:c6:7a:ff:d3:1b:dd:81:79:1a:f9:1e:6c:f7: c7:19:11:a8:5c:b8:80:e4:11:71:e2:69:d6:e6:99: d8:87:f1:dc:74:a0:09:ec:50:40:23:2d:f1:46:6b: 7f:58:79:cd:5a:db:ec:f4:c5:e5:b2:c9:64:7d:7e: 06:c0:2e:57:51:cc:16:cf:77:01:ea:7d:a2:d3:44: c5:06:b3:cf:68:44:a0:44:5f:f4:f4:a7:57:33:02: 64:50:5f:94:b5:01:f9:26:36:83:79:5b:de:6a:01: 3e:6d:8c:5c:ca:30:90:a7:5e:fe:9a:21:97:f6:21: 9a:71:0b:9a:b1:a0:a4:2a:f3:23:7c:85:b6:94:6e: 71:3f:f7:44:38:66:75:ad:9c:fc:85:69:88:4c:91: 85:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CA:AE:8D:5B:6B:21:66:52:B0:09:10:B3:04:98:BD:4B:65:11:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/a81b6111-6888-4c67-a629-e33c0db56e34.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.84.0/24 IPv6: 2602:f6f1::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26922 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:95:7f:c5:d2:03:1f:21:6a:d5:f5:bd:a7:0b:ff:ec:fb:8b: 65:7d:cf:ba:63:d2:ee:f9:bb:16:4f:2a:c5:0d:46:83:8e:c7: d5:83:bb:6c:fb:fd:96:c1:c0:00:fb:ac:f8:78:a1:0c:ab:18: 92:b2:67:2e:24:a8:83:2f:55:d9:53:72:05:f2:55:d2:bf:d9: 0f:5a:1d:58:42:de:1d:83:af:c9:aa:1d:94:1b:5b:44:6a:a2: 0e:59:1a:59:69:c2:01:ce:c8:fb:eb:05:55:92:9b:f5:52:92: ae:e3:33:8a:96:bc:33:ed:d6:33:55:71:5f:d2:3a:e5:a7:6e: 0b:91:b7:b8:62:76:a6:4d:04:18:8c:19:2f:39:67:fd:da:4e: 43:8b:7c:fe:46:c9:14:32:80:a5:c8:b2:69:56:ec:d6:6f:42: cc:51:b4:5e:d2:38:27:a1:fd:52:80:24:dd:80:e3:8f:ed:db: 7f:28:46:09:af:f2:f2:a3:8c:4a:3d:1b:6c:cf:37:68:9c:63: f9:a7:7c:6e:cd:28:2a:83:c9:c4:1c:93:1c:4c:36:92:f9:62: bc:0a:54:d0:cf:d6:20:8d:55:d0:f5:ed:d7:0d:96:33:ad:73: 9f:c0:2f:83:a4:6c:9a:53:2b:de:cd:6e:3d:13:da:9c:6e:6c: 94:48:c9:60 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjcKwe9Pso4xAAgp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxMjE2NTEyNVoXDTI3MDUxNjE3MDY0MFowLzEtMCsGA1UEAxMk YTgxYjYxMTEtNjg4OC00YzY3LWE2MjktZTMzYzBkYjU2ZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/5b0hHtbIKaAMBAw3QyGakVjrejy0j4OnHS l5+qio21ld+UgtE2EHocOF9UACgWpGoV8VcyOIUIOJS3DyOP5X/pXEhTiIiltAyz 01p5FTE2jLYq2lfxSwrLCM9VD16xnOaxUCgapcZPpcZ6/9Mb3YF5GvkebPfHGRGo XLiA5BFx4mnW5pnYh/HcdKAJ7FBAIy3xRmt/WHnNWtvs9MXlsslkfX4GwC5XUcwW z3cB6n2i00TFBrPPaESgRF/09KdXMwJkUF+UtQH5JjaDeVveagE+bYxcyjCQp17+ miGX9iGacQuasaCkKvMjfIW2lG5xP/dEOGZ1rZz8hWmITJGFVQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKXKro1bayFmUrAJELMEmL1LZRG0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9h ODFiNjExMS02ODg4LTRjNjctYTYyOS1lMzNjMGRiNTZlMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2E4MWI2MTExLTY4ODgtNGM2Ny1h NjI5LWUzM2MwZGI1NmUzNC9hODFiNjExMS02ODg4LTRjNjctYTYyOS1lMzNjMGRi NTZlMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhlQwDgQCAAIwCAMGBCYC9vEAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmkqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEyVf8XSAx8hatX1vacL/+z7i2V9 z7pj0u75uxZPKsUNRoOOx9WDu2z7/ZbBwAD7rPh4oQyrGJKyZy4kqIMvVdlTcgXy VdK/2Q9aHVhC3h2Dr8mqHZQbW0Rqog5ZGllpwgHOyPvrBVWSm/VSkq7jM4qWvDPt 1jNVcV/SOuWnbguRt7hidqZNBBiMGS85Z/3aTkOLfP5GyRQygKXIsmlW7NZvQsxR tF7SOCeh/VKAJN2A44/t238oRgmv8vKjjEo9G2zPN2icY/mnfG7NKCqDycQckxxM NpL5YrwKVNDP1iCNVdD17dcNljOtc5/AL4OkbJpTK97Nbj0T2pxubJRIyWA= -----END CERTIFICATE-----Generated at Fri Apr 4 16:12:21 2025 by rpki-client