$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer File: bcb3b598-8d83-4864-818b-f5833b7583e7.cer (raw, json) Hash identifier: HtCJ4njHRY3B1ptXINukitEgu5rhOcWGVvED+ADmNhg= Subject key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848F5C1DFECF0F1F3D09E0FF0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Feb 2025 20:50:34 +0000 Certificate not after: Thu 27 May 2027 19:50:34 +0000 Subordinate resources: IP: 23.134.180.0/24 IP: 2602:f6e4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f5:c1:df:ec:f0:f1:f3:d0:9e:0f:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 21 20:50:34 2025 GMT Not After : May 27 19:50:34 2027 GMT Subject: CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b5:b9:73:02:a5:a3:94:f0:e1:df:ea:f0:73: 84:69:57:75:8d:ce:df:38:47:5d:d1:f5:e3:cc:0a: d2:69:f8:15:a0:30:7e:7d:a0:43:76:39:9c:6c:ff: 00:84:2e:68:3a:30:d4:0a:60:72:a1:7a:68:40:42: 9c:9a:30:e8:5c:25:58:54:14:5e:dd:39:04:68:cf: 68:20:ac:6e:7a:0a:d3:0f:97:1e:b3:03:fb:66:2d: 3b:96:31:f4:37:57:2d:2a:e4:18:9a:66:2b:24:ef: 69:8d:41:0a:e9:31:6d:55:81:e4:38:db:99:23:c3: 15:b5:2d:f2:d2:d8:4a:7d:d7:69:9b:88:7e:31:aa: d9:bc:5a:97:59:40:21:df:c5:1d:db:46:2f:91:6d: d2:28:73:ba:fb:83:f5:64:85:4d:41:13:cc:b5:eb: 51:ca:72:56:4d:b2:6f:d7:cd:58:02:ca:fe:63:57: ae:f8:cb:cb:25:b6:8f:af:a9:d7:d9:11:be:a7:62: 51:27:65:20:1c:ab:63:2b:9b:64:46:fa:e8:58:f0: 3b:2a:73:9f:46:c3:b3:b9:f0:6e:35:e5:9e:c2:2f: 58:00:bd:d7:70:6a:1a:a0:22:aa:da:6d:e0:a0:93: d9:02:f0:1e:63:fe:47:0a:c7:39:a8:10:11:cb:94: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.180.0/24 IPv6: 2602:f6e4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6c:3d:91:79:40:57:ac:87:2a:7d:68:8e:cf:f3:68:9b:50: ab:b6:6e:40:10:4a:b2:7a:8e:4b:f3:27:e3:53:78:1d:39:39: d5:63:66:c9:17:09:16:30:1e:e5:77:d0:6c:cb:56:a7:b3:77: 20:a6:e4:29:65:1e:ba:df:5d:4f:b7:0e:05:b5:e8:97:e1:d2: b6:c8:25:63:29:ef:bb:1f:75:c3:f8:e5:30:80:0b:fa:c3:f4: 87:64:f7:b9:da:ae:47:25:70:af:17:ac:e0:9d:5f:f6:47:87: 4f:46:92:c1:6d:c5:3b:cf:d2:55:08:9e:33:6d:9a:8b:8b:6a: c9:ce:85:8e:7f:76:26:fc:4c:05:27:f8:56:6e:5c:12:35:20: 50:fa:d3:63:d2:4d:be:88:27:f8:93:5f:1c:15:8f:07:0d:b9: ab:af:7e:ab:e7:71:87:99:5e:c8:6d:13:15:b4:27:9d:6e:d4: 83:6b:51:f6:32:31:98:1b:93:4f:5b:09:7e:5c:ce:03:2c:38: 19:b4:8f:aa:f3:a8:d9:62:49:6d:bd:ec:fd:0e:6f:ba:d3:8a: 4e:3d:7d:96:50:1a:bb:cc:a1:e1:ae:c5:84:1f:0b:9d:f6:e1: c2:3e:85:44:5c:9d:f4:0f:2c:31:75:41:97:51:73:90:38:ed: 49:f8:44:48 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEj1wd/s8PHz0J4P8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyMTIwNTAzNFoXDTI3MDUyNzE5NTAzNFowLzEtMCsGA1UEAxMk YmNiM2I1OTgtOGQ4My00ODY0LTgxOGItZjU4MzNiNzU4M2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibW5cwKlo5Tw4d/q8HOEaVd1jc7fOEdd0fXj zArSafgVoDB+faBDdjmcbP8AhC5oOjDUCmByoXpoQEKcmjDoXCVYVBRe3TkEaM9o IKxuegrTD5ceswP7Zi07ljH0N1ctKuQYmmYrJO9pjUEK6TFtVYHkONuZI8MVtS3y 0thKfddpm4h+MarZvFqXWUAh38Ud20YvkW3SKHO6+4P1ZIVNQRPMtetRynJWTbJv 181YAsr+Y1eu+MvLJbaPr6nX2RG+p2JRJ2UgHKtjK5tkRvroWPA7KnOfRsOzufBu NeWewi9YAL3XcGoaoCKq2m3goJPZAvAeY/5HCsc5qBARy5TQwwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFE8B9XomnI6RqfQoC1PXKjxJeEOmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i Y2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3NTgzZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2JjYjNiNTk4LThkODMtNDg2NC04 MThiLWY1ODMzYjc1ODNlNy9iY2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3 NTgzZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhrQwDgQCAAIwCAMGACYC9uQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AGlsPZF5QFeshyp9aI7P82ibUKu2bkAQSrJ6jkvzJ+NTeB05OdVjZskXCRYwHuV3 0GzLVqezdyCm5CllHrrfXU+3DgW16Jfh0rbIJWMp77sfdcP45TCAC/rD9Idk97na rkclcK8XrOCdX/ZHh09GksFtxTvP0lUInjNtmouLasnOhY5/dib8TAUn+FZuXBI1 IFD602PSTb6IJ/iTXxwVjwcNuauvfqvncYeZXshtExW0J51u1INrUfYyMZgbk09b CX5czgMsOBm0j6rzqNliSW297P0Ob7rTik49fZZQGrvMoeGuxYQfC5324cI+hURc nfQPLDF1QZdRc5A47Un4REg= -----END CERTIFICATE-----Generated at Fri Apr 4 19:26:11 2025 by rpki-client