$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.cer File: b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.cer (raw, json) Hash identifier: sufxhiSu7SJcZAf759OO0vAOXpxlGK+DB2zxpop/c5c= Subject key identifier: 96:7E:79:55:0B:6B:8C:47:A6:70:47:B3:4B:B6:B5:67:1C:F5:BC:4C Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848FEBA3C9960F0688444DA0800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Feb 2025 01:57:27 +0000 Certificate not after: Mon 31 May 2027 00:57:27 +0000 Subordinate resources: AS: 62535 AS: 396136 IP: 23.189.64.0/23 IP: 2602:fe71::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:ba:3c:99:60:f0:68:84:44:da:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 25 01:57:27 2025 GMT Not After : May 31 00:57:27 2027 GMT Subject: CN=b6ece90f-e28e-4958-bcc3-3fa4be6f5db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:08:ba:f4:59:75:6b:16:24:2b:25:eb:28:6c: aa:a0:a9:b0:29:2a:4e:83:d3:7f:62:63:49:6a:11: b5:ca:aa:aa:56:11:e4:08:33:90:0e:e7:c9:f5:4d: 4f:e1:69:78:a7:11:53:c5:46:8c:b6:40:6d:1d:a6: b0:d8:5c:06:3d:9d:ac:c2:ad:09:b9:70:e1:ac:10: 53:b4:dd:2c:c3:d7:e4:f3:a8:af:ba:10:bf:da:b0: 4b:24:d7:63:e3:ac:c1:e1:5c:77:9a:70:5f:7b:44: 21:10:be:ae:9a:04:9c:89:5f:54:9f:38:01:93:cb: 19:05:7c:d0:90:22:e1:df:8c:1a:b1:1f:59:63:94: e9:15:cb:fa:a9:95:a3:fd:27:57:0a:c3:fe:0f:90: 80:18:16:36:8a:c3:7d:df:cf:84:ed:d2:c3:6f:d2: bf:d0:84:24:f2:4c:a0:71:dd:ac:de:cb:86:46:81: c8:d9:f9:be:4d:09:af:43:30:45:88:1e:a9:e0:89: 3e:6a:13:20:12:c7:d4:51:85:28:6d:d6:71:7b:67: 4c:88:f3:03:c0:59:81:e9:1c:15:ae:10:5b:d1:bf: 06:21:ea:13:c0:5b:2e:e7:45:2c:b6:8f:86:7e:b6: e0:23:1c:4b:cd:5e:40:9c:65:ed:34:e6:49:a2:85: 59:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7E:79:55:0B:6B:8C:47:A6:70:47:B3:4B:B6:B5:67:1C:F5:BC:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.189.64.0/23 IPv6: 2602:fe71::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62535 396136 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f5:a8:49:80:ba:c5:08:21:3c:02:12:f1:c5:0d:6e:63:7e: 46:43:1d:73:27:30:6f:d9:c5:c9:6c:4d:63:fc:97:48:a9:4e: ee:7d:8b:68:91:c5:ad:72:e8:1f:9e:49:ce:6f:dd:a9:2e:1d: e2:30:7e:47:20:13:99:f0:fd:45:ed:6e:f2:a8:6b:3e:69:6d: 79:6f:0a:fa:23:de:66:6e:8c:81:1e:94:2a:d8:ba:44:5a:13: de:cf:81:44:6b:57:d2:b2:fb:38:fe:c1:fc:2f:a0:16:ac:93: 9c:ea:21:94:57:5e:ec:df:db:7b:1e:04:f4:77:a1:cd:b2:98: d3:c3:4a:1d:ab:63:33:fe:80:9a:d2:5d:19:22:e1:93:fc:54: 88:d8:a6:a8:a3:a3:59:ce:d6:e1:42:90:ba:d1:cd:be:e3:50: 0a:59:68:8b:ba:12:62:c7:51:b0:3b:69:04:ad:47:ee:a2:7d: 13:eb:c9:cc:d6:e6:1b:c7:01:fe:70:f9:18:96:b5:e1:49:d2: f3:7f:7e:b5:10:ba:83:7f:df:a7:b8:ef:97:73:77:b5:88:59: 47:31:5b:24:1f:88:05:8f:cb:1c:9b:e0:a2:82:65:ad:18:08: 1c:12:eb:81:13:84:86:b7:f4:93:23:61:8d:0f:c1:46:0a:4d: 76:94:fd:c4 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEj+ujyZYPBohETaCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNTAxNTcyN1oXDTI3MDUzMTAwNTcyN1owLzEtMCsGA1UEAxMk YjZlY2U5MGYtZTI4ZS00OTU4LWJjYzMtM2ZhNGJlNmY1ZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAi69Fl1axYkKyXrKGyqoKmwKSpOg9N/YmNJ ahG1yqqqVhHkCDOQDufJ9U1P4Wl4pxFTxUaMtkBtHaaw2FwGPZ2swq0JuXDhrBBT tN0sw9fk86ivuhC/2rBLJNdj46zB4Vx3mnBfe0QhEL6umgSciV9UnzgBk8sZBXzQ kCLh34wasR9ZY5TpFcv6qZWj/SdXCsP+D5CAGBY2isN938+E7dLDb9K/0IQk8kyg cd2s3suGRoHI2fm+TQmvQzBFiB6p4Ik+ahMgEsfUUYUobdZxe2dMiPMDwFmB6RwV rhBb0b8GIeoTwFsu50Usto+GfrbgIxxLzV5AnGXtNOZJooVZNQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFJZ+eVULa4xHpnBHs0u2tWcc9bxMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i NmVjZTkwZi1lMjhlLTQ5NTgtYmNjMy0zZmE0YmU2ZjVkYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2I2ZWNlOTBmLWUyOGUtNDk1OC1i Y2MzLTNmYTRiZTZmNWRiNC9iNmVjZTkwZi1lMjhlLTQ5NTgtYmNjMy0zZmE0YmU2 ZjVkYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXvUAwDgQCAAIwCAMGBCYC/nEAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwD0RwIDBgtoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGn1qEmAusUIITwCEvHF DW5jfkZDHXMnMG/ZxclsTWP8l0ipTu59i2iRxa1y6B+eSc5v3akuHeIwfkcgE5nw /UXtbvKoaz5pbXlvCvoj3mZujIEelCrYukRaE97PgURrV9Ky+zj+wfwvoBask5zq IZRXXuzf23seBPR3oc2ymNPDSh2rYzP+gJrSXRki4ZP8VIjYpqijo1nO1uFCkLrR zb7jUApZaIu6EmLHUbA7aQStR+6ifRPryczW5hvHAf5w+RiWteFJ0vN/frUQuoN/ 36e475dzd7WIWUcxWyQfiAWPyxyb4KKCZa0YCBwS64EThIa39JMjYY0PwUYKTXaU /cQ= -----END CERTIFICATE-----Generated at Fri Apr 4 15:57:19 2025 by rpki-client