$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer File: b43c5615-9630-4bab-8258-f3b32e00f304.cer (raw, json) Hash identifier: njCtPidDywEUO6Ya664OLF1WcdB/QDSVplGuM/s7K3E= Subject key identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858491AF81FF039BCB1FB7E51C138 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Mar 2025 04:44:47 +0000 Certificate not after: Thu 10 Jun 2027 03:44:47 +0000 Subordinate resources: AS: 36832 IP: 23.132.172.0/24 IP: 2602:f8c4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:f8:1f:f0:39:bc:b1:fb:7e:51:c1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 7 04:44:47 2025 GMT Not After : Jun 10 03:44:47 2027 GMT Subject: CN=b43c5615-9630-4bab-8258-f3b32e00f304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:36:ab:c9:e6:69:9b:31:f6:5a:ea:38:50:20: 13:e8:e9:3b:b4:b4:a9:85:ad:8d:77:d2:f1:89:d3: 70:07:92:8b:64:9e:bf:10:4b:c8:02:42:8d:64:08: ee:c2:87:44:1e:3b:36:9e:34:e3:bf:06:ef:db:c8: 51:d0:2b:31:67:a2:5a:df:5c:1c:ad:a6:75:04:e8: bd:0d:f6:e7:3b:86:f7:17:0d:dd:4d:df:f0:1b:84: c2:c9:53:9e:1c:f3:e5:e0:b9:36:98:8c:2a:9a:1b: 76:f7:58:ee:74:3d:42:27:7a:5b:e5:3c:9c:c3:b0: 54:dc:f6:df:b1:4c:a9:29:d7:81:59:f8:fe:28:8a: 57:c6:23:48:0f:8a:9f:a0:00:f0:c2:57:97:c9:ec: d3:4e:db:fd:b4:e1:7f:56:bd:01:37:46:07:18:99: 6a:96:09:42:da:5f:c9:5b:92:91:59:23:8e:a2:44: b9:85:f7:bc:75:47:c0:99:fc:c7:d0:b4:05:0b:2f: 75:ad:cb:24:55:10:6f:8b:10:dd:56:12:a9:d1:e7: 8c:1f:72:1d:b0:52:af:7c:9b:81:eb:04:ee:24:2c: 64:ad:c6:31:29:17:39:31:12:6c:4f:01:b6:12:a8: b0:e4:91:21:36:47:84:a6:64:1e:90:62:f4:a9:bb: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.132.172.0/24 IPv6: 2602:f8c4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36832 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ea:c4:12:f4:b4:89:86:04:c4:71:7d:da:b6:20:77:a4:af: 71:b9:46:9b:3f:bd:f4:27:59:cb:86:a5:ca:16:af:b2:18:6a: 19:be:61:9b:4f:e6:db:69:ca:0b:86:64:68:ca:9f:69:fc:12: 3a:8c:a9:5e:ac:a5:86:2b:2c:84:ad:12:85:0d:5b:e6:4c:27: d8:63:fd:ce:69:a6:39:0d:22:31:c2:8e:17:a1:0e:f4:63:c2: b1:18:9c:04:48:c5:7f:34:a5:1c:f0:7c:b2:9a:d7:c7:c7:11: 02:21:41:90:27:f7:83:4f:e8:df:6c:c2:f1:52:0e:6d:1b:1b: e1:bd:29:96:c0:2c:46:1f:80:d0:6f:a2:03:5f:fb:2e:ed:5d: 9d:fe:75:4c:89:dc:0f:6d:c6:f9:c2:ce:05:d0:d9:12:e1:58: 8b:6c:44:d0:25:f9:3f:49:79:96:cc:e7:2d:22:70:30:67:2f: be:1b:33:37:f4:b3:79:bf:6d:b3:07:bd:26:f8:fb:42:52:5f: 31:b9:81:a7:b8:7d:e0:67:8c:d6:3f:8a:2d:fe:86:d8:3d:f0: b9:53:2d:12:6b:7a:77:65:48:55:f7:58:93:f3:2e:ee:5f:13: 55:13:ec:f8:1c:5a:1c:e7:c7:b5:b7:56:9d:59:5b:55:c4:51: 16:9d:4f:ec -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEka+B/wObyx+35RwTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNzA0NDQ0N1oXDTI3MDYxMDAzNDQ0N1owLzEtMCsGA1UEAxMk YjQzYzU2MTUtOTYzMC00YmFiLTgyNTgtZjNiMzJlMDBmMzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDaryeZpmzH2Wuo4UCAT6Ok7tLSpha2Nd9Lx idNwB5KLZJ6/EEvIAkKNZAjuwodEHjs2njTjvwbv28hR0CsxZ6Ja31wcraZ1BOi9 DfbnO4b3Fw3dTd/wG4TCyVOeHPPl4Lk2mIwqmht291judD1CJ3pb5Tycw7BU3Pbf sUypKdeBWfj+KIpXxiNID4qfoADwwleXyezTTtv9tOF/Vr0BN0YHGJlqlglC2l/J W5KRWSOOokS5hfe8dUfAmfzH0LQFCy91rcskVRBvixDdVhKp0eeMH3IdsFKvfJuB 6wTuJCxkrcYxKRc5MRJsTwG2Eqiw5JEhNkeEpmQekGL0qbugpwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPhoZNgCbt1RzTxU9YG/6KChMPwsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NDNjNTYxNS05NjMwLTRiYWItODI1OC1mM2IzMmUwMGYzMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I0M2M1NjE1LTk2MzAtNGJhYi04 MjU4LWYzYjMyZTAwZjMwNC9iNDNjNTYxNS05NjMwLTRiYWItODI1OC1mM2IzMmUw MGYzMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhKwwDgQCAAIwCAMGBCYC+MQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCP4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBy6sQS9LSJhgTEcX3atiB3pK9x uUabP730J1nLhqXKFq+yGGoZvmGbT+bbacoLhmRoyp9p/BI6jKlerKWGKyyErRKF DVvmTCfYY/3OaaY5DSIxwo4XoQ70Y8KxGJwESMV/NKUc8HyymtfHxxECIUGQJ/eD T+jfbMLxUg5tGxvhvSmWwCxGH4DQb6IDX/su7V2d/nVMidwPbcb5ws4F0NkS4ViL bETQJfk/SXmWzOctInAwZy++GzM39LN5v22zB70m+PtCUl8xuYGnuH3gZ4zWP4ot /obYPfC5Uy0Sa3p3ZUhV91iT8y7uXxNVE+z4HFoc58e1t1adWVtVxFEWnU/s -----END CERTIFICATE-----Generated at Thu Mar 13 10:48:55 2025 by rpki-client