$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0.cer File: fb993146-757e-4177-9a61-207cb7b716c0.cer (raw, json) Hash identifier: /udUYpSl6Qi8LrYUyZgJ6ajvzV2zJXdCm2vESe3aHuI= Subject key identifier: 3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858487D7132389C73CD4A54E63400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jan 2025 18:31:00 +0000 Certificate not after: Wed 14 Apr 2027 17:31:00 +0000 Subordinate resources: AS: 32598 IP: 23.150.136.0/24 IP: 2607:2fc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7d:71:32:38:9c:73:cd:4a:54:e6:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Jan 9 18:31:00 2025 GMT Not After : Apr 14 17:31:00 2027 GMT Subject: CN=fb993146-757e-4177-9a61-207cb7b716c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:ea:e2:ee:85:87:31:91:3e:3e:8a:0c:5b: f8:b9:07:97:ba:21:2a:36:85:7d:d0:21:5e:58:9f: a6:dd:84:0b:44:f1:17:56:09:e6:58:fe:65:17:94: 43:c7:ba:02:12:e9:f6:58:0c:59:68:d4:f8:94:05: 79:28:1f:ed:da:9f:25:28:8e:52:8b:ab:47:31:3d: 54:ec:e9:f5:06:3d:0a:08:da:87:a7:3e:8a:81:78: a4:5a:a5:a1:fb:77:d3:6c:cc:14:1f:27:8d:e5:d5: cb:16:ae:dd:1f:c8:26:28:87:e3:e4:79:a0:93:21: e6:a6:23:ea:ef:a4:dd:4d:1c:3a:16:1f:28:fe:66: fa:63:83:36:8b:df:39:20:c1:3f:16:99:41:9d:48: 46:98:5c:37:4b:6e:82:93:00:9b:25:15:22:38:b0: 0a:0a:1a:b2:0f:33:65:ce:1e:3e:5e:8f:ad:ab:b9: cf:3c:8e:8e:47:99:ea:31:c0:96:9d:ed:df:cc:fa: ec:9a:09:20:c9:ee:da:9f:83:47:5f:28:07:f4:e2: 53:e7:8c:67:e4:60:de:d5:21:ed:bb:13:6e:67:ff: 23:f1:e0:72:c7:bb:3f:84:a4:e5:0f:78:82:1a:d0: 0c:b9:81:da:b4:b2:14:92:91:fd:28:52:92:fb:5e: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C3:E4:8E:45:9B:3B:1E:30:3A:C1:62:5F:9D:FA:55:8B:BD:F0:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fb993146-757e-4177-9a61-207cb7b716c0/fb993146-757e-4177-9a61-207cb7b716c0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.150.136.0/24 IPv6: 2607:2fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32598 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:96:ec:80:79:0d:4e:38:93:cc:66:bd:33:77:fa:d9:ed:df: 06:1e:03:a1:fe:04:3c:32:5b:78:83:e6:7e:32:ca:da:f2:34: b0:cd:7d:ad:0c:a1:53:7e:ed:0d:83:f2:dc:9a:a0:94:93:ee: dd:f7:5d:f5:f1:e6:bd:65:92:f3:ca:32:d6:51:2b:a6:80:85: 0a:ff:78:64:3e:48:57:2d:39:60:df:74:17:af:01:78:a9:d8: e0:5d:68:46:b9:39:ce:64:4f:bb:4b:0b:9a:7f:9d:b3:3c:f2: b0:a3:ed:ff:5c:7a:62:07:f0:b3:df:e8:9e:49:4d:8b:dc:fc: 7f:74:b2:7a:00:22:ec:b5:88:32:b2:00:ac:c2:c6:5a:e6:61: 09:8a:7c:d7:82:73:0a:12:db:ff:fd:8d:5b:c5:e2:55:50:bf: 45:24:97:a3:b9:81:7d:fe:f1:5e:b4:ef:f9:58:14:0d:33:11: fd:24:2d:b9:1c:a2:d1:ab:b8:3a:af:4e:55:1f:ec:5d:93:69: 1d:5a:66:a5:5c:7f:e4:fc:84:12:72:f0:cd:a8:60:1b:3d:de: 92:f4:25:da:07:48:9b:cb:d7:c6:78:bc:8d:20:bd:9c:c9:15: 9e:1a:c6:57:4a:9c:a1:54:d1:0f:61:09:ec:8c:4c:3f:7e:13: 23:63:db:fd -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEh9cTI4nHPNSlTmNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDEwOTE4MzEwMFoXDTI3MDQxNDE3MzEwMFowLzEtMCsGA1UEAxMk ZmI5OTMxNDYtNzU3ZS00MTc3LTlhNjEtMjA3Y2I3YjcxNmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGnq4u6FhzGRPj6KDFv4uQeXuiEqNoV90CFe WJ+m3YQLRPEXVgnmWP5lF5RDx7oCEun2WAxZaNT4lAV5KB/t2p8lKI5Si6tHMT1U 7On1Bj0KCNqHpz6KgXikWqWh+3fTbMwUHyeN5dXLFq7dH8gmKIfj5HmgkyHmpiPq 76TdTRw6Fh8o/mb6Y4M2i985IME/FplBnUhGmFw3S26CkwCbJRUiOLAKChqyDzNl zh4+Xo+tq7nPPI6OR5nqMcCWne3fzPrsmgkgye7an4NHXygH9OJT54xn5GDe1SHt uxNuZ/8j8eByx7s/hKTlD3iCGtAMuYHatLIUkpH9KFKS+15cpQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFD/D5I5FmzseMDrBYl+d+lWLvfD2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m Yjk5MzE0Ni03NTdlLTQxNzctOWE2MS0yMDdjYjdiNzE2YzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2ZiOTkzMTQ2LTc1N2UtNDE3Ny05 YTYxLTIwN2NiN2I3MTZjMC9mYjk5MzE0Ni03NTdlLTQxNzctOWE2MS0yMDdjYjdi NzE2YzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXlogwDQQCAAIwBwMFACYHL8AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICf1YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAX5bsgHkNTjiTzGa9M3f62e3fBh4D of4EPDJbeIPmfjLK2vI0sM19rQyhU37tDYPy3JqglJPu3fdd9fHmvWWS88oy1lEr poCFCv94ZD5IVy05YN90F68BeKnY4F1oRrk5zmRPu0sLmn+dszzysKPt/1x6Ygfw s9/onklNi9z8f3SyegAi7LWIMrIArMLGWuZhCYp814JzChLb//2NW8XiVVC/RSSX o7mBff7xXrTv+VgUDTMR/SQtuRyi0au4Oq9OVR/sXZNpHVpmpVx/5PyEEnLwzahg Gz3ekvQl2gdIm8vXxni8jSC9nMkVnhrGV0qcoVTRD2EJ7IxMP34TI2Pb/Q== -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:20 2025 by rpki-client