$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer File: 4e0731c4-3d05-4440-8c74-77d5a579b356.cer (raw, json) Hash identifier: HNaQ/esFjZrv93vFmautYSCSw+mct1SRGUEw3+JLo00= Subject key identifier: 8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858499928BAD124B68B0DC902F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Apr 2025 09:34:34 +0000 Certificate not after: Sun 25 Jul 2027 09:34:34 +0000 Subordinate resources: IP: 23.137.220.0/24 IP: 2602:f67b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:28:ba:d1:24:b6:8b:0d:c9:02:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 21 09:34:34 2025 GMT Not After : Jul 25 09:34:34 2027 GMT Subject: CN=4e0731c4-3d05-4440-8c74-77d5a579b356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:6e:cf:c2:f3:b1:c6:d5:54:1b:ec:1b:90: 8f:5d:6d:c7:6d:88:d0:e2:c3:84:f6:ed:57:86:9e: 46:6f:48:f0:14:8a:0e:26:07:a8:e3:d1:f1:a2:02: ca:2b:3b:43:c6:25:30:a5:2e:06:0e:86:6e:af:c7: bc:14:ff:d7:68:5f:a2:4f:6b:17:0a:40:47:96:5b: d0:ab:0b:17:81:ba:eb:e4:bf:e5:3c:0e:f2:7c:c0: c6:55:7f:41:b9:2d:1d:63:8a:1c:11:cf:33:79:d7: 5d:d4:99:68:f3:86:a3:c2:d3:d8:3a:0a:8d:56:e9: 8f:8f:f0:81:94:44:b4:87:c7:bc:be:ab:fc:bd:61: 3b:da:7b:8a:7d:da:9c:71:dc:0a:c6:fa:4f:36:42: fb:51:13:64:9d:64:81:c0:66:27:2c:58:c1:99:45: 17:9e:cb:5c:f0:98:d3:ba:f0:9d:90:7c:4b:3f:dc: 7a:38:92:12:ef:77:3d:56:bd:8e:75:5f:70:db:27: 57:7c:cb:1a:36:f4:48:fe:aa:62:de:67:64:ce:37: 73:bf:97:69:dd:d0:84:7a:9d:8f:9f:a0:b3:7b:d3: 6b:4d:f8:f7:f3:66:09:16:c7:25:e6:f3:4b:8d:1e: 7a:ad:47:63:49:4d:cf:7c:99:e1:25:d7:e5:75:52: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.220.0/24 IPv6: 2602:f67b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:3d:5e:f4:c5:33:bc:03:18:47:99:d7:3e:f1:75:dd:6a:3f: 2c:af:67:d0:ec:49:c2:e7:15:9e:14:c9:8a:4f:31:55:6a:06: 40:03:bb:ca:e7:4d:26:b4:95:07:61:a0:c7:a7:6c:a7:13:a6: a5:39:0e:4a:0c:74:0f:eb:3d:f7:fa:76:09:17:21:02:3b:04: c1:77:bd:49:da:2f:e7:4b:a8:26:3a:29:6d:4e:bc:ab:63:1e: 55:ad:f4:69:8c:68:f4:6b:1d:87:e8:74:9b:35:ba:71:bd:03: 17:73:15:00:ee:f9:f0:29:e7:52:a7:40:eb:8e:27:d2:46:49: 1e:5d:f6:83:a3:e8:09:32:72:50:b3:c0:5a:d4:ef:a1:7a:3a: 89:11:6a:6e:eb:75:36:13:87:47:4b:38:ad:7e:2c:bb:77:1a: f8:07:5b:fb:76:5c:72:52:79:d2:6d:2e:13:86:9f:72:a7:92: e6:1e:2f:16:5e:99:32:b4:44:ad:d7:e4:ef:3c:2d:4c:6c:d2: 8c:29:dd:58:76:10:1b:42:ba:34:be:fe:62:d4:91:2d:bd:02: 3c:49:8d:8b:f9:9e:e2:fa:be:a0:94:21:08:5a:7a:e8:fe:5c: 4b:2a:a1:0e:9f:b4:3c:f4:a0:1c:b6:bb:dd:90:ce:e8:36:70: 4d:96:9f:82 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEmZKLrRJLaLDckC9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQyMTA5MzQzNFoXDTI3MDcyNTA5MzQzNFowLzEtMCsGA1UEAxMk NGUwNzMxYzQtM2QwNS00NDQwLThjNzQtNzdkNWE1NzliMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBNuz8LzscbVVBvsG5CPXW3HbYjQ4sOE9u1X hp5Gb0jwFIoOJgeo49HxogLKKztDxiUwpS4GDoZur8e8FP/XaF+iT2sXCkBHllvQ qwsXgbrr5L/lPA7yfMDGVX9BuS0dY4ocEc8zeddd1Jlo84ajwtPYOgqNVumPj/CB lES0h8e8vqv8vWE72nuKfdqccdwKxvpPNkL7URNknWSBwGYnLFjBmUUXnstc8JjT uvCdkHxLP9x6OJIS73c9Vr2OdV9w2ydXfMsaNvRI/qpi3mdkzjdzv5dp3dCEep2P n6Cze9NrTfj382YJFscl5vNLjR56rUdjSU3PfJnhJdfldVK1VwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFI5pnMoDzV6zpzvZN6R3CTLoU1kmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80 ZTA3MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1YTU3OWIzNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzRlMDczMWM0LTNkMDUtNDQ0MC04 Yzc0LTc3ZDVhNTc5YjM1Ni80ZTA3MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1YTU3 OWIzNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXidwwDgQCAAIwCAMGACYC9nsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AA49XvTFM7wDGEeZ1z7xdd1qPyyvZ9DsScLnFZ4UyYpPMVVqBkADu8rnTSa0lQdh oMenbKcTpqU5DkoMdA/rPff6dgkXIQI7BMF3vUnaL+dLqCY6KW1OvKtjHlWt9GmM aPRrHYfodJs1unG9AxdzFQDu+fAp51KnQOuOJ9JGSR5d9oOj6AkyclCzwFrU76F6 OokRam7rdTYTh0dLOK1+LLt3GvgHW/t2XHJSedJtLhOGn3KnkuYeLxZemTK0RK3X 5O88LUxs0owp3Vh2EBtCujS+/mLUkS29AjxJjYv5nuL6vqCUIQhaeuj+XEsqoQ6f tDz0oBy2u92Qzug2cE2Wn4I= -----END CERTIFICATE-----Generated at Sat Apr 26 23:03:11 2025 by rpki-client