$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer File: cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer (raw, json) Hash identifier: yOfFQ1occRN+VjYtFS01I28Rm/dp+2zt+bOC1qwSiVs= Subject key identifier: D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858491C9758C8AA05D6993A1E5180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Mar 2025 18:41:24 +0000 Certificate not after: Thu 10 Jun 2027 17:41:24 +0000 Subordinate resources: AS: 30433 IP: 23.185.88.0/24 IP: 2602:f869::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1c:97:58:c8:aa:05:d6:99:3a:1e:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 7 18:41:24 2025 GMT Not After : Jun 10 17:41:24 2027 GMT Subject: CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:1a:8f:9a:e2:89:3f:09:15:02:d3:72:1f: e8:d2:e9:e9:de:43:43:9b:5c:57:af:ca:61:3d:a8: 67:7d:64:01:ae:4e:60:09:d5:d6:3f:f4:67:05:b5: b8:1a:3d:05:80:59:ef:be:a0:28:3e:6f:e2:b6:00: e8:e9:80:e8:d7:b6:41:e3:ad:2c:8a:72:97:7b:aa: 03:c8:eb:16:ae:68:83:65:e9:d7:ad:68:b2:b7:02: cc:01:83:27:55:e5:7a:eb:4d:97:5e:0b:69:15:2d: 6c:4d:72:40:96:78:c4:68:5e:f4:e6:8a:dd:fb:0f: b2:50:2e:3c:e7:99:5b:dd:1e:54:cd:8c:ac:2f:15: 5d:f6:82:4d:fb:b3:21:82:3d:d6:ad:72:28:bf:90: 38:f8:d5:97:a2:f0:a9:96:88:47:d7:5a:92:ac:f7: 7a:6e:bc:68:82:d8:1d:2e:64:ae:6d:1e:c8:dc:07: 20:71:1a:37:20:14:d5:f4:b9:e7:52:20:49:53:e7: 61:72:88:f5:ef:9d:48:dd:0d:40:61:cb:42:5c:4e: f2:7d:b3:1a:9b:b2:0a:73:d2:0b:fa:8a:96:be:89: b6:a5:02:6f:f3:c9:af:2a:25:96:96:31:5a:1d:7c: 48:eb:3e:df:dc:d7:5b:84:12:5f:2c:64:36:e4:03: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.185.88.0/24 IPv6: 2602:f869::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30433 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:60:a9:99:fe:2a:83:e2:f0:57:ea:3b:da:8a:f6:70:fc:09: 73:d7:74:e2:e1:35:6d:60:76:ec:72:d3:6a:9f:25:f8:a0:76: df:eb:9c:15:2f:13:f4:fa:9d:26:16:ee:57:f4:3a:6d:e6:14: b0:0d:fc:9b:7d:b9:6e:96:c2:56:c6:29:fe:53:0c:c0:c0:e8: c6:34:db:ad:8f:5a:ba:5f:bb:e1:09:eb:41:86:d5:33:f0:ed: 35:ab:14:f7:ef:92:d1:62:95:20:cd:11:cc:f3:27:89:a1:7f: 37:f9:8b:34:f7:53:7a:48:62:da:65:5b:32:79:20:f2:d3:bb: 3d:69:ec:5d:63:41:08:30:9e:3c:79:9a:37:8d:4d:96:cb:82: 3d:24:77:19:e3:dd:bf:f7:fc:5b:18:81:9d:5b:72:4b:51:21: f5:16:a8:f0:85:6b:22:c6:a8:68:75:90:6a:68:c1:c7:c6:4e: d0:dd:0f:f8:99:ed:31:38:f1:54:81:d8:ef:ff:4c:45:ec:65: 29:40:82:a9:41:60:b5:5b:9c:98:e8:61:f6:ad:e6:5a:4b:33: fd:33:27:02:e2:92:f2:3e:cc:e3:63:73:67:02:e7:33:c8:aa: d6:47:ef:83:28:11:42:c9:0f:e1:84:ce:33:82:37:35:e2:6c: 1e:36:07:ab -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkcl1jIqgXWmToeUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDMwNzE4NDEyNFoXDTI3MDYxMDE3NDEyNFowLzEtMCsGA1UEAxMk Y2M2NjQ2ODMtZDU4ZS00ZDI2LThjZjEtZTVmNWM1ZGMyNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Eaj5riiT8JFQLTch/o0unp3kNDm1xXr8ph PahnfWQBrk5gCdXWP/RnBbW4Gj0FgFnvvqAoPm/itgDo6YDo17ZB460sinKXe6oD yOsWrmiDZenXrWiytwLMAYMnVeV6602XXgtpFS1sTXJAlnjEaF705ord+w+yUC48 55lb3R5UzYysLxVd9oJN+7Mhgj3WrXIov5A4+NWXovCplohH11qSrPd6brxogtgd LmSubR7I3AcgcRo3IBTV9LnnUiBJU+dhcoj1751I3Q1AYctCXE7yfbMam7IKc9IL +oqWvom2pQJv88mvKiWWljFaHXxI6z7f3NdbhBJfLGQ25AMYhQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFNBluRqLXt3z+hqcFz26xuHb5Gm/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j YzY2NDY4My1kNThlLTRkMjYtOGNmMS1lNWY1YzVkYzI0YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2NjNjY0NjgzLWQ1OGUtNGQyNi04 Y2YxLWU1ZjVjNWRjMjRjMi9jYzY2NDY4My1kNThlLTRkMjYtOGNmMS1lNWY1YzVk YzI0YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXuVgwDgQCAAIwCAMGBCYC+GkAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAnbhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGFgqZn+KoPi8FfqO9qK9nD8CXPX dOLhNW1gduxy02qfJfigdt/rnBUvE/T6nSYW7lf0Om3mFLAN/Jt9uW6WwlbGKf5T DMDA6MY0262PWrpfu+EJ60GG1TPw7TWrFPfvktFilSDNEczzJ4mhfzf5izT3U3pI YtplWzJ5IPLTuz1p7F1jQQgwnjx5mjeNTZbLgj0kdxnj3b/3/FsYgZ1bcktRIfUW qPCFayLGqGh1kGpowcfGTtDdD/iZ7TE48VSB2O//TEXsZSlAgqlBYLVbnJjoYfat 5lpLM/0zJwLikvI+zONjc2cC5zPIqtZH74MoEULJD+GEzjOCNzXibB42B6s= -----END CERTIFICATE-----Generated at Fri Apr 4 15:59:43 2025 by rpki-client