$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer File: d622ae28-b14e-4021-900a-c9182c5b5a2e.cer (raw, json) Hash identifier: BS1AkzG9rLkpU3D9goUbx/+u2CGwRGvU9nxkhjl1jJw= Subject key identifier: 8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848EEFC2DC5369F0B31BDBDB180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 10:37:23 +0000 Certificate not after: Tue 25 May 2027 09:37:23 +0000 Subordinate resources: AS: 7289 IP: 23.133.12.0/24 IP: 2602:f721::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ee:fc:2d:c5:36:9f:0b:31:bd:bd:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 19 10:37:23 2025 GMT Not After : May 25 09:37:23 2027 GMT Subject: CN=d622ae28-b14e-4021-900a-c9182c5b5a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:82:96:04:81:d1:47:a7:85:0c:9e:f0:fb:a2: 61:f0:68:a9:cd:4f:16:bb:6f:da:8b:68:5c:0c:0e: 46:85:5a:86:96:fd:7a:fc:43:42:ef:70:18:20:64: ad:43:51:dd:ff:99:af:85:92:ab:16:65:73:df:ae: 1f:65:68:cd:01:fe:a5:2a:86:66:8e:9a:0b:2e:f0: d9:a6:e9:35:23:38:51:da:b3:f3:7c:29:5a:04:54: 06:a7:ba:5b:87:81:e7:65:f0:71:6a:3d:b0:ac:80: 3c:de:2b:ee:19:26:77:ba:b9:b3:f7:53:11:d4:a5: cd:8a:2e:d1:8f:41:0f:3a:5e:68:54:1e:6f:c9:c2: f7:0e:d0:b2:47:23:0f:d1:24:7a:5f:12:2b:c3:e5: 54:cc:80:84:37:ef:42:74:08:d5:da:c6:af:50:8c: df:81:f9:f2:90:54:c1:c6:99:38:10:17:04:68:8e: e0:f2:35:8b:c3:35:ff:c9:a4:ad:8d:65:89:20:cd: ef:ba:41:be:1a:9a:68:7e:1f:96:1f:b4:b2:0b:db: 21:04:0b:d7:27:52:f1:30:c6:c4:36:44:2c:9a:7f: 0c:c8:2e:b5:49:a3:01:54:ca:79:82:53:7b:b2:fb: d8:29:7a:3f:50:79:da:b3:37:0e:80:56:d9:2e:d7: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.133.12.0/24 IPv6: 2602:f721::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7289 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:42:d2:eb:30:26:3e:9b:5b:99:cd:21:be:ae:7c:d8:09:42: b8:5c:3d:55:a8:7e:e3:b2:c4:e6:7f:e3:65:9a:7a:17:db:67: 75:1d:34:b4:ee:90:0e:44:4d:f1:69:27:4c:e8:d1:0b:a2:de: a2:6d:ef:89:30:b0:9b:1c:40:d4:40:fa:73:ca:6d:cd:a3:b0: a9:64:a7:bf:92:cc:8c:97:61:33:48:59:cf:65:d0:30:5e:67: 44:7c:cd:e9:d8:84:0e:18:e8:23:dc:63:25:1f:b3:e3:fb:6b: b6:d0:7d:9a:b6:28:12:d9:19:83:71:80:14:fa:4c:46:31:cd: 61:16:9c:d4:30:62:17:79:34:8a:fa:7a:6f:33:48:54:8b:8e: 59:d6:e9:48:6c:2b:70:df:b0:f9:59:d2:f2:a5:a8:31:b9:4c: 1a:03:07:21:b2:41:5c:07:14:9e:e6:2e:73:9c:9f:40:1f:10: 42:e5:ee:d2:c7:ce:bd:b2:e2:03:77:61:03:c7:ee:be:c7:11: d5:44:9e:1f:01:58:90:78:bd:4e:8b:53:e5:7e:e1:25:22:4e: 5e:1e:15:71:32:85:d6:89:45:ee:41:3b:0a:98:6c:ff:8f:2d: d0:f1:6f:c5:fe:55:a5:91:31:c4:74:ba:db:97:68:26:74:ef: 01:d1:54:22 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEju/C3FNp8LMb29sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxOTEwMzcyM1oXDTI3MDUyNTA5MzcyM1owLzEtMCsGA1UEAxMk ZDYyMmFlMjgtYjE0ZS00MDIxLTkwMGEtYzkxODJjNWI1YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIKWBIHRR6eFDJ7w+6Jh8GipzU8Wu2/ai2hc DA5GhVqGlv16/ENC73AYIGStQ1Hd/5mvhZKrFmVz364fZWjNAf6lKoZmjpoLLvDZ puk1IzhR2rPzfClaBFQGp7pbh4HnZfBxaj2wrIA83ivuGSZ3urmz91MR1KXNii7R j0EPOl5oVB5vycL3DtCyRyMP0SR6XxIrw+VUzICEN+9CdAjV2savUIzfgfnykFTB xpk4EBcEaI7g8jWLwzX/yaStjWWJIM3vukG+Gppofh+WH7SyC9shBAvXJ1LxMMbE NkQsmn8MyC61SaMBVMp5glN7svvYKXo/UHnaszcOgFbZLtcAvQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFI6ZTikvVK7GEnjb53AO1Qcv+pRXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9k NjIyYWUyOC1iMTRlLTQwMjEtOTAwYS1jOTE4MmM1YjVhMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Q2MjJhZTI4LWIxNGUtNDAyMS05 MDBhLWM5MTgyYzViNWEyZS9kNjIyYWUyOC1iMTRlLTQwMjEtOTAwYS1jOTE4MmM1 YjVhMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhQwwDgQCAAIwCAMGACYC9yEAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAhx5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACZC0uswJj6bW5nNIb6ufNgJQrhc PVWofuOyxOZ/42WaehfbZ3UdNLTukA5ETfFpJ0zo0Qui3qJt74kwsJscQNRA+nPK bc2jsKlkp7+SzIyXYTNIWc9l0DBeZ0R8zenYhA4Y6CPcYyUfs+P7a7bQfZq2KBLZ GYNxgBT6TEYxzWEWnNQwYhd5NIr6em8zSFSLjlnW6UhsK3DfsPlZ0vKlqDG5TBoD ByGyQVwHFJ7mLnOcn0AfEELl7tLHzr2y4gN3YQPH7r7HEdVEnh8BWJB4vU6LU+V+ 4SUiTl4eFXEyhdaJRe5BOwqYbP+PLdDxb8X+VaWRMcR0utuXaCZ07wHRVCI= -----END CERTIFICATE-----Generated at Fri Apr 4 19:13:51 2025 by rpki-client