$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer File: f628cf4a-b330-4609-8c85-bdee7cf18d7d.cer (raw, json) Hash identifier: ip8jz7YawNjUlGJ5JCMAsIYwyMLr1IsyzDYsvUKsVk4= Subject key identifier: 1A:3A:65:D8:D8:C1:65:CE:F2:EE:80:4B:E6:18:8A:FE:04:62:33:94 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584902DFADA04CA921312C75BA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 13:36:08 +0000 Certificate not after: Tue 01 Jun 2027 12:36:08 +0000 Subordinate resources: IP: 23.135.76.0/24 IP: 2602:f6da::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:df:ad:a0:4c:a9:21:31:2c:75:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 26 13:36:08 2025 GMT Not After : Jun 1 12:36:08 2027 GMT Subject: CN=f628cf4a-b330-4609-8c85-bdee7cf18d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:d0:44:b2:6a:d2:54:e0:11:d1:0d:30:37: 59:57:a1:67:93:1d:09:ff:fa:6f:80:ee:bd:58:e0: 4f:45:40:a2:e1:40:6a:36:8b:88:7c:2a:95:db:7b: ab:5e:b9:d4:21:79:db:a0:d4:ff:e9:0b:72:a9:03: 79:db:8b:bf:1c:99:76:68:21:5b:dc:51:60:6c:bb: 91:78:2b:d6:63:60:5b:93:fe:c7:50:89:a5:77:8f: 5f:46:c2:01:50:7d:31:e7:1e:b6:68:d8:6e:d4:98: d7:96:51:0d:27:3a:1d:0c:35:71:5c:96:aa:bb:9b: e1:26:ff:19:c2:b8:75:72:89:38:e2:ca:36:e6:bd: 06:e5:a7:d9:3c:9e:33:ab:9a:6d:28:5a:48:49:85: 46:80:f5:8e:93:7f:65:a4:71:38:9b:87:dd:c5:66: 94:25:78:5d:21:82:6f:64:99:e7:b4:1f:bf:86:1a: 7c:4f:e7:c7:47:f4:cd:bc:a2:60:59:de:c4:75:06: d9:76:f6:5c:c8:13:9e:ff:72:d5:a7:e1:4d:65:c8: 27:cb:9c:be:56:21:e7:ba:21:9f:fc:1d:f1:fd:5b: 22:7d:e3:ea:0f:37:c4:2e:61:f2:3a:a3:23:c1:a4: 64:ec:f9:1f:53:38:40:99:c7:76:f9:7c:1d:11:37: c1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3A:65:D8:D8:C1:65:CE:F2:EE:80:4B:E6:18:8A:FE:04:62:33:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f628cf4a-b330-4609-8c85-bdee7cf18d7d/f628cf4a-b330-4609-8c85-bdee7cf18d7d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.76.0/24 IPv6: 2602:f6da::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:da:e7:80:17:4d:3f:b8:42:12:b3:07:31:25:4c:60:9a:9d: b9:ac:81:10:80:27:76:77:e0:8a:72:2d:2a:dd:c0:1d:7b:9c: 42:0e:bc:95:f0:c9:6d:ec:97:cf:b9:04:8c:03:46:4f:18:9e: 3d:cd:76:76:e0:47:6b:36:56:ac:ba:67:64:b4:40:e0:f3:75: 63:9f:88:0c:85:9a:cd:00:67:08:b5:ec:b5:8c:ef:c8:8c:56: fa:df:5f:f5:32:a7:75:4a:34:d3:30:a7:1c:cd:d4:c7:2c:70: 14:49:c4:bd:5b:38:d0:b7:b6:a3:ba:5a:f2:bf:87:66:c2:1e: 5f:fe:c3:c3:0c:07:25:83:8a:79:ea:d4:ea:55:40:59:18:11: de:b1:fa:48:64:85:0a:44:cf:4a:90:fa:55:1d:63:02:ed:e0: 28:09:8d:9f:89:c2:48:b3:85:e9:fc:f0:15:90:26:d6:02:69: ae:d0:c6:a3:a9:bd:54:2d:d4:50:8a:0c:81:28:0a:1f:42:d6: 6a:11:f5:4b:b2:78:b9:ee:bb:f2:22:eb:f9:1d:a4:9e:7b:2e: 35:fc:90:b3:46:4e:b0:03:ec:01:ca:89:59:c7:ad:bf:a8:0d: 43:c0:81:b2:2d:ee:44:f5:97:e8:a2:c8:5f:d3:04:f4:89:38: 95:04:83:9f -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEkC362gTKkhMSx1ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNjEzMzYwOFoXDTI3MDYwMTEyMzYwOFowLzEtMCsGA1UEAxMk ZjYyOGNmNGEtYjMzMC00NjA5LThjODUtYmRlZTdjZjE4ZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopLQRLJq0lTgEdENMDdZV6Fnkx0J//pvgO69 WOBPRUCi4UBqNouIfCqV23urXrnUIXnboNT/6QtyqQN524u/HJl2aCFb3FFgbLuR eCvWY2Bbk/7HUImld49fRsIBUH0x5x62aNhu1JjXllENJzodDDVxXJaqu5vhJv8Z wrh1cok44so25r0G5afZPJ4zq5ptKFpISYVGgPWOk39lpHE4m4fdxWaUJXhdIYJv ZJnntB+/hhp8T+fHR/TNvKJgWd7EdQbZdvZcyBOe/3LVp+FNZcgny5y+ViHnuiGf /B3x/VsifePqDzfELmHyOqMjwaRk7PkfUzhAmcd2+XwdETfBkwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBo6ZdjYwWXO8u6AS+YYiv4EYjOUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m NjI4Y2Y0YS1iMzMwLTQ2MDktOGM4NS1iZGVlN2NmMThkN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2Y2MjhjZjRhLWIzMzAtNDYwOS04 Yzg1LWJkZWU3Y2YxOGQ3ZC9mNjI4Y2Y0YS1iMzMwLTQ2MDktOGM4NS1iZGVlN2Nm MThkN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXh0wwDgQCAAIwCAMGACYC9toAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AKLa54AXTT+4QhKzBzElTGCanbmsgRCAJ3Z34IpyLSrdwB17nEIOvJXwyW3sl8+5 BIwDRk8Ynj3NdnbgR2s2Vqy6Z2S0QODzdWOfiAyFms0AZwi17LWM78iMVvrfX/Uy p3VKNNMwpxzN1McscBRJxL1bONC3tqO6WvK/h2bCHl/+w8MMByWDinnq1OpVQFkY Ed6x+khkhQpEz0qQ+lUdYwLt4CgJjZ+Jwkizhen88BWQJtYCaa7QxqOpvVQt1FCK DIEoCh9C1moR9UuyeLnuu/Ii6/kdpJ57LjX8kLNGTrAD7AHKiVnHrb+oDUPAgbIt 7kT1l+iiyF/TBPSJOJUEg58= -----END CERTIFICATE-----Generated at Fri Apr 4 16:05:05 2025 by rpki-client