$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e.cer File: 04723749-feb1-4da5-ac21-ba89ad1d057e.cer (raw, json) Hash identifier: 40Z3J4OdM3sI73bF92xVK6LBv4zmrG2I6MDN/9TxsW4= Subject key identifier: 60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858499A37388DF9FCE99D51A07580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Apr 2025 18:39:34 +0000 Certificate not after: Sun 25 Jul 2027 18:39:34 +0000 Subordinate resources: AS: 398766 IP: 23.252.16.0/20 IP: 162.118.96.0/19 IP: 2605:eb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:37:38:8d:f9:fc:e9:9d:51:a0:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 21 18:39:34 2025 GMT Not After : Jul 25 18:39:34 2027 GMT Subject: CN=04723749-feb1-4da5-ac21-ba89ad1d057e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fb:10:fb:9d:35:48:b1:27:31:61:34:0a:fc: 93:f3:fd:d6:ed:21:b3:a7:87:30:4c:a9:47:85:83: 83:13:b2:99:3e:54:4a:9b:50:5d:ac:41:0c:45:01: 2f:8c:27:5d:df:f6:cf:5e:8c:8a:05:c2:29:4e:f8: d8:86:bb:fd:78:e9:d5:29:ce:eb:e8:c8:d5:e2:9a: a9:e0:9a:d6:28:71:47:fa:fa:72:29:ad:ad:09:08: 17:61:cc:87:ee:ee:9d:dd:7e:4e:f7:79:d2:3c:20: b0:86:89:4c:72:44:d6:8b:6b:ee:62:c9:22:2c:ac: 6a:fa:33:40:4c:98:23:66:8e:34:98:d4:93:5d:78: 91:7e:28:1c:ce:f6:c7:aa:8f:58:1c:e4:f1:32:61: d1:6a:7b:82:36:e6:ca:1e:9e:6b:5d:f3:b1:b8:35: 5a:a6:44:2d:f9:84:ec:a7:ea:c7:72:bc:8b:bf:9e: 59:d9:88:0c:e7:4c:6b:c0:29:de:f7:96:01:51:53: 4f:5b:98:9f:e0:34:a9:dc:eb:c4:cb:ad:1d:c1:fa: df:5e:41:64:37:1a:17:f4:d2:26:7c:d1:e5:b7:28: 6b:fa:2e:2f:bf:8a:1f:93:7e:f9:10:0b:a1:0c:33: de:4e:f2:de:bb:17:26:11:2a:1b:f3:7e:11:0a:f2: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:28:32:B3:7E:3D:0C:CE:A9:F9:51:48:C3:8E:BD:E7:47:57:EC:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/04723749-feb1-4da5-ac21-ba89ad1d057e/04723749-feb1-4da5-ac21-ba89ad1d057e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.252.16.0/20 162.118.96.0/19 IPv6: 2605:eb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6c:60:1c:03:20:67:4d:f2:39:a7:5d:65:63:44:f7:91:fd: 92:ad:5b:d3:a4:d2:64:27:7b:93:fd:4a:eb:b5:3c:a1:ba:3c: 30:f7:f8:e8:e0:3f:22:f1:ab:ed:da:19:09:0c:4e:8b:e5:34: 27:f7:a2:47:b0:12:2b:41:0e:ab:2c:d7:fb:03:30:5b:bf:57: 43:a1:f4:ab:4d:f6:d1:45:24:4e:a3:7b:74:16:3c:e5:2f:96: 22:7e:35:32:93:c1:5c:4e:76:e9:ae:e2:07:64:48:e8:01:ed: 93:67:91:20:7e:87:94:c1:55:6a:12:bb:ca:3c:4c:7f:e2:f5: 26:71:4b:4c:13:a7:a1:08:49:02:42:19:35:85:0c:2d:35:60: d9:f2:18:95:8f:b5:8e:7a:00:94:99:41:3b:3c:3f:5d:89:49: 51:62:fa:5c:c5:76:e5:cb:11:37:94:1a:28:0c:61:49:dd:e4: 04:96:49:5b:21:c9:fd:8f:21:e5:2c:1b:7b:14:09:e0:6a:95: 28:8b:0c:05:e4:be:ba:13:23:d6:43:a5:50:6c:58:b0:11:0b: ce:24:b7:22:de:4e:1f:f0:4a:b2:68:31:70:74:4d:de:5a:0c: 32:cc:bc:54:e9:e2:13:33:40:51:1e:1f:51:95:9e:6a:af:ad: 5a:dd:cd:fa -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEmaNziN+fzpnVGgdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyMTE4MzkzNFoXDTI3MDcyNTE4MzkzNFowLzEtMCsGA1UEAxMk MDQ3MjM3NDktZmViMS00ZGE1LWFjMjEtYmE4OWFkMWQwNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/sQ+501SLEnMWE0CvyT8/3W7SGzp4cwTKlH hYODE7KZPlRKm1BdrEEMRQEvjCdd3/bPXoyKBcIpTvjYhrv9eOnVKc7r6MjV4pqp 4JrWKHFH+vpyKa2tCQgXYcyH7u6d3X5O93nSPCCwholMckTWi2vuYskiLKxq+jNA TJgjZo40mNSTXXiRfigczvbHqo9YHOTxMmHRanuCNubKHp5rXfOxuDVapkQt+YTs p+rHcryLv55Z2YgM50xrwCne95YBUVNPW5if4DSp3OvEy60dwfrfXkFkNxoX9NIm fNHltyhr+i4vv4ofk375EAuhDDPeTvLeuxcmESob834RCvK6fwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFGAoMrN+PQzOqflRSMOOvedHV+xLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8w NDcyMzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5YWQxZDA1N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzA0NzIzNzQ5LWZlYjEtNGRhNS1h YzIxLWJhODlhZDFkMDU3ZS8wNDcyMzc0OS1mZWIxLTRkYTUtYWMyMS1iYTg5YWQx ZDA1N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAQX/BADBAWidmAwDQQCAAIwBwMFACYF60AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhWuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAtsYBwDIGdN8jmnXWVj RPeR/ZKtW9Ok0mQne5P9Suu1PKG6PDD3+OjgPyLxq+3aGQkMTovlNCf3okewEitB Dqss1/sDMFu/V0Oh9KtN9tFFJE6je3QWPOUvliJ+NTKTwVxOdumu4gdkSOgB7ZNn kSB+h5TBVWoSu8o8TH/i9SZxS0wTp6EISQJCGTWFDC01YNnyGJWPtY56AJSZQTs8 P12JSVFi+lzFduXLETeUGigMYUnd5ASWSVshyf2PIeUsG3sUCeBqlSiLDAXkvroT I9ZDpVBsWLARC84ktyLeTh/wSrJoMXB0Td5aDDLMvFTp4hMzQFEeH1GVnmqvrVrd zfo= -----END CERTIFICATE-----Generated at Sun Apr 27 04:22:46 2025 by rpki-client