$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer File: c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer (raw, json) Hash identifier: CzozJFSo7/xHN60dNSJ0JdypSC+o10Aa9rgzihbrb30= Subject key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848A49DF4B937A837799F93FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Jan 2025 19:17:43 +0000 Certificate not after: Wed 28 Apr 2027 18:17:43 +0000 Subordinate resources: AS: 11611 AS: 53397 IP: 23.158.112.0/24 IP: 2602:fd61::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:9d:f4:b9:37:a8:37:79:9f:93:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 23 19:17:43 2025 GMT Not After : Apr 28 18:17:43 2027 GMT Subject: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:74:c7:5a:b7:a0:9c:cd:00:6d:51:d9:41:1e: 39:59:a7:b6:c1:df:33:55:f5:d8:29:18:05:7c:ee: 86:b6:21:0c:26:d0:5f:36:aa:50:8a:8d:47:2d:5e: 0b:8c:17:b9:2e:ac:de:02:d4:d0:61:fb:ae:10:3f: ac:22:89:b2:03:45:92:55:c1:69:94:72:b0:e9:19: 15:71:7a:63:fa:84:41:fa:bc:00:d7:d7:ab:6c:89: 56:c2:29:ce:f8:5d:a8:bb:bb:87:cc:81:85:8b:c7: 37:97:58:fa:9b:75:34:70:21:e1:05:06:bd:97:38: 39:91:a1:4e:ec:6d:b8:45:9a:34:b0:e0:69:95:09: 41:c3:ae:c5:ac:ee:2a:d6:df:49:9e:60:2c:79:ba: 86:8a:80:7d:00:2b:74:d2:c9:9c:00:57:6a:10:a7: 38:ce:7a:3f:f6:13:16:b1:67:c8:6f:58:16:ae:aa: 8f:86:0e:b5:6f:c5:e7:c4:8d:85:f5:f2:d9:d7:76: aa:7e:db:bd:24:52:c3:9e:1b:8e:d6:63:40:41:f6: 22:f2:ca:b1:56:33:9a:85:ec:78:e1:7c:07:ea:89: cf:17:f6:45:60:b8:ad:4d:fa:eb:d9:e9:5d:a9:74: 74:7d:a9:cb:6b:4d:46:fc:4e:ee:b6:c7:9b:0f:3f: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.158.112.0/24 IPv6: 2602:fd61::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11611 53397 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e9:10:f4:a2:a9:bf:8d:ff:8d:60:05:6e:05:cb:9e:5b:0f: 8c:d1:47:05:b1:96:e2:f7:6b:58:78:10:2b:2e:80:be:b6:9e: ca:0c:e0:ec:6c:30:ac:a8:2c:d0:45:36:69:c5:f7:e1:84:b5: 63:2d:a9:96:de:ef:2d:61:98:f6:43:25:f2:c8:a3:10:aa:ad: 2f:04:f7:ed:a5:60:e2:98:9f:0b:ab:12:5b:f8:b5:6b:72:0d: d7:38:c8:b5:9b:d7:7c:00:c3:cc:39:11:13:1e:08:64:f7:08: 09:ef:29:92:ea:09:20:49:7f:2e:db:47:22:73:7e:f8:ee:0c: 60:b8:d2:43:e0:0e:ba:31:07:e6:18:1a:a1:80:3d:48:0d:ee: f4:4e:31:72:b3:36:6a:81:b3:50:1c:d0:c3:0c:38:47:02:8f: 31:56:d8:61:94:28:a5:6f:be:a6:e4:d5:02:c2:7b:01:9c:3d: c5:99:4d:e5:b0:27:d8:b2:2c:bc:b3:ce:dc:c2:73:b6:5c:ec: d0:7f:a7:22:18:0e:8a:39:14:29:26:6f:fb:ab:d4:68:c1:34: 3f:13:ce:9a:9c:70:54:fe:8c:18:5e:91:23:58:bd:30:41:a2: 10:f2:9e:a4:76:41:f6:07:c8:43:67:1c:93:69:4d:6e:26:7e: 43:e6:de:74 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEiknfS5N6g3eZ+T/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEyMzE5MTc0M1oXDTI3MDQyODE4MTc0M1owLzEtMCsGA1UEAxMk YzBiMWI2MmUtOWFiYS00NzMzLTlkOTYtOWI3YzU5ZGQ5NTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnTHWregnM0AbVHZQR45Wae2wd8zVfXYKRgF fO6GtiEMJtBfNqpQio1HLV4LjBe5LqzeAtTQYfuuED+sIomyA0WSVcFplHKw6RkV cXpj+oRB+rwA19erbIlWwinO+F2ou7uHzIGFi8c3l1j6m3U0cCHhBQa9lzg5kaFO 7G24RZo0sOBplQlBw67FrO4q1t9JnmAsebqGioB9ACt00smcAFdqEKc4zno/9hMW sWfIb1gWrqqPhg61b8XnxI2F9fLZ13aqftu9JFLDnhuO1mNAQfYi8sqxVjOahex4 4XwH6onPF/ZFYLitTfrr2eldqXR0fanLa01G/E7utsebDz9HZwIDAQABo4IELjCC BCowHQYDVR0OBBYEFNiDq6b61vglUif3BSBmpiB8rO2DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j MGIxYjYyZS05YWJhLTQ3MzMtOWQ5Ni05YjdjNTlkZDk1NjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2MwYjFiNjJlLTlhYmEtNDczMy05 ZDk2LTliN2M1OWRkOTU2OS9jMGIxYjYyZS05YWJhLTQ3MzMtOWQ5Ni05YjdjNTlk ZDk1NjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXnnAwDQQCAAIwBwMFACYC/WEwHgYIKwYBBQUH AQgBAf8EDzANoAswCQICLVsCAwDQlTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCM6RD0oqm/jf+NYAVuBcue Ww+M0UcFsZbi92tYeBArLoC+tp7KDODsbDCsqCzQRTZpxffhhLVjLamW3u8tYZj2 QyXyyKMQqq0vBPftpWDimJ8LqxJb+LVrcg3XOMi1m9d8AMPMORETHghk9wgJ7ymS 6gkgSX8u20cic3747gxguNJD4A66MQfmGBqhgD1IDe70TjFyszZqgbNQHNDDDDhH Ao8xVthhlCilb76m5NUCwnsBnD3FmU3lsCfYsiy8s87cwnO2XOzQf6ciGA6KORQp Jm/7q9RowTQ/E86anHBU/owYXpEjWL0wQaIQ8p6kdkH2B8hDZxyTaU1uJn5D5t50 -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:11 2025 by rpki-client