$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer File: 23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer (raw, json) Hash identifier: 5U/gIE/WgIsj7cnDkUVcLF1vzgHlrQWh5zRjOEHrvbI= Subject key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Authority key identifier: 3A:B8:A2:5D:35:14:DD:1F:7C:28:FD:B3:CC:34:59:89:B7:E2:58:DA Certificate issuer: /CN=383bd50b-b192-44bd-9349-351225a13a33 Certificate serial: 010D0C9F432858494624D109E7A3F4D6CC663600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 22 Mar 2025 15:54:35 +0000 Certificate not after: Fri 25 Jun 2027 15:54:35 +0000 Subordinate resources: AS: 396064 IP: 23.136.20.0/24 IP: 2602:f6ba::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:46:24:d1:09:e7:a3:f4:d6:cc:66:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=383bd50b-b192-44bd-9349-351225a13a33 Validity Not Before: Mar 22 15:54:35 2025 GMT Not After : Jun 25 15:54:35 2027 GMT Subject: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7b:61:0e:43:b8:1e:ad:5a:36:57:94:55:c9: 4f:91:ba:b1:81:15:63:63:a9:ce:e5:54:4c:f3:55: 54:7b:88:da:a4:34:6d:e4:0e:6b:b9:88:a2:30:9a: 84:b0:c3:1c:27:18:96:24:56:6e:f8:4d:5c:7b:de: 2e:1c:e1:75:4d:64:7a:0c:46:86:9a:c2:7e:71:39: 55:f0:09:47:e1:3d:a5:40:6c:2e:88:8b:44:00:59: e9:80:2b:14:7f:de:ab:bf:c7:79:6c:14:6f:9c:7b: 5b:ec:f2:4c:d7:f9:fd:7b:da:57:76:f0:9b:12:3e: f5:e9:c3:3d:a9:9c:07:0b:de:74:53:9a:c9:42:c6: 71:e2:c4:22:38:80:cc:22:79:33:e0:f8:9f:82:ff: 93:e8:a6:14:be:23:fb:36:67:c1:36:cb:c6:5b:1d: af:bd:65:39:c5:48:7d:3e:07:73:9e:e3:02:01:46: d8:58:7f:96:e3:49:9b:5b:d6:b6:38:eb:86:1d:7f: f3:67:a1:0d:99:88:32:c5:c6:60:9f:bd:72:d4:d6: 8d:5e:c1:0e:2a:b1:62:76:71:34:24:e9:45:d6:ed: 91:d8:62:33:2b:56:c8:d4:2a:77:d0:ba:05:27:3c: b3:9f:a4:b1:ca:65:f8:b6:85:d1:f4:32:19:33:1a: 8e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl X509v3 Authority Key Identifier: keyid:3A:B8:A2:5D:35:14:DD:1F:7C:28:FD:B3:CC:34:59:89:B7:E2:58:DA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer sbgp-ipAddrBlock: critical IPv4: 23.136.20.0/24 IPv6: 2602:f6ba::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396064 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:38:ca:57:92:bf:64:81:d4:d9:76:2b:39:ab:f1:06:31:81: 1a:ef:b9:a4:90:51:b8:e0:31:7e:f0:c2:bb:79:21:19:ec:f3: 67:29:78:f1:b3:c6:24:39:f2:e9:dd:d1:ac:26:29:ff:09:3b: 44:f3:74:d4:fa:66:cf:e5:1a:ec:92:09:12:78:a1:81:82:ca: d9:b5:64:0c:5c:e1:39:d8:42:ab:e9:ee:36:86:f6:47:3e:2f: ea:e5:79:71:a4:89:25:3e:d9:58:0d:b6:54:a7:4c:a2:4f:b9: 5d:05:9c:e0:2a:c4:61:2d:a0:7f:5f:28:6f:3d:28:2e:7a:76: 13:cd:78:03:4c:39:cb:f4:31:56:72:48:25:47:80:9b:9b:12: f6:04:48:7a:cf:26:63:23:19:ea:20:43:b2:8c:b0:ab:bf:98: 9d:00:ce:57:0f:49:83:06:d6:af:3f:96:55:4c:8f:d3:61:8d: ae:df:fa:cf:56:eb:3f:ac:46:7d:e3:a0:fe:eb:aa:58:0d:79: bd:96:c5:a0:d3:a4:57:3d:a1:77:3d:e5:61:cc:c4:f7:51:cd: 6d:84:62:2b:12:9a:1c:0a:f2:5a:72:22:fc:4f:a4:25:fc:d0: 1b:11:9d:41:20:48:c9:9e:aa:29:12:df:88:5f:14:c2:dd:b8: 2b:30:3f:79 -----BEGIN CERTIFICATE----- MIIG6TCCBdGgAwIBAgIUAQ0Mn0MoWElGJNEJ56P01sxmNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgzYmQ1MGItYjE5Mi00NGJkLTkzNDktMzUxMjI1YTEz YTMzMB4XDTI1MDMyMjE1NTQzNVoXDTI3MDYyNTE1NTQzNVowPTE7MDkGA1UEAxMy MjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5ZjE2NmI2NTMwMWE5 ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDge2EOQ7gerVo2V5RV yU+RurGBFWNjqc7lVEzzVVR7iNqkNG3kDmu5iKIwmoSwwxwnGJYkVm74TVx73i4c 4XVNZHoMRoaawn5xOVXwCUfhPaVAbC6Ii0QAWemAKxR/3qu/x3lsFG+ce1vs8kzX +f172ld28JsSPvXpwz2pnAcL3nRTmslCxnHixCI4gMwieTPg+J+C/5PophS+I/s2 Z8E2y8ZbHa+9ZTnFSH0+B3Oe4wIBRthYf5bjSZtb1rY464Ydf/NnoQ2ZiDLFxmCf vXLU1o1ewQ4qsWJ2cTQk6UXW7ZHYYjMrVsjUKnfQugUnPLOfpLHKZfi2hdH0Mhkz Go5ZAgMBAAGjggPtMIID6TAdBgNVHQ4EFgQUH39ySaaB+M1BJwtQ2NfngViB2jYw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhk NC04ZmM0LTU4MGQxMzY5YjdjNC8xLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00 OGQ0LThmYzQtNTgwZDEzNjliN2M0LzEvMUY3RjcyNDlBNjgxRjhDRDQxMjcwQjUw RDhEN0U3ODE1ODgxREEzNi5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0 ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0zNTEyMjVhMTNhMzMvMzgzYmQ1 MGItYjE5Mi00NGJkLTkzNDktMzUxMjI1YTEzYTMzLmNybDAfBgNVHSMEGDAWgBQ6 uKJdNRTdH3wo/bPMNFmJt+JY2jAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzM4 M2JkNTBiLWIxOTItNDRiZC05MzQ5LTM1MTIyNWExM2EzMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiBQwDgQCAAIwCAMGACYC9roAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYLIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0OMpXkr9kgdTZdis5q/EGMYEa 77mkkFG44DF+8MK7eSEZ7PNnKXjxs8YkOfLp3dGsJin/CTtE83TU+mbP5RrskgkS eKGBgsrZtWQMXOE52EKr6e42hvZHPi/q5XlxpIklPtlYDbZUp0yiT7ldBZzgKsRh LaB/XyhvPSguenYTzXgDTDnL9DFWckglR4CbmxL2BEh6zyZjIxnqIEOyjLCrv5id AM5XD0mDBtavP5ZVTI/TYY2u3/rPVus/rEZ946D+66pYDXm9lsWg06RXPaF3PeVh zMT3Uc1thGIrEpocCvJaciL8T6Ql/NAbEZ1BIEjJnqopEt+IXxTC3bgrMD95 -----END CERTIFICATE-----Generated at Wed Apr 30 08:24:24 2025 by rpki-client