$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95.cer File: 608c8ba1-b17a-418a-a69d-751fc7e07f95.cer (raw, json) Hash identifier: pAThLfpZUhbN+v2vVwUEqjnWSufUmNOnvbesmnWqctA= Subject key identifier: 7A:6E:9C:E2:0A:1E:CF:C3:E2:C1:14:6A:71:A8:8F:56:CA:3E:12:D0 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858496F43738E1E2DCB734FD613C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/608c8ba1-b17a-418a-a69d-751fc7e07f95.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Apr 2025 09:24:27 +0000 Certificate not after: Sat 10 Jul 2027 09:24:27 +0000 Subordinate resources: AS: 401078 IP: 23.178.104.0/24 IP: 2602:f8ed::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:43:73:8e:1e:2d:cb:73:4f:d6:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 6 09:24:27 2025 GMT Not After : Jul 10 09:24:27 2027 GMT Subject: CN=608c8ba1-b17a-418a-a69d-751fc7e07f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3b:28:2f:5e:b6:2a:72:31:4c:5c:da:99:41: 44:b3:3e:d1:fe:6c:4f:d8:38:49:4d:d5:c1:8b:8f: 08:c9:e5:94:30:81:d0:3a:79:05:91:cd:a2:2e:a8: b4:55:1c:3a:a1:af:12:c5:03:ac:55:c8:8e:a2:91: 52:31:d6:6a:18:be:2f:bb:57:a0:7c:6e:49:7d:7e: 3e:03:0e:01:5e:a9:10:11:e8:cd:0a:08:0e:bd:d9: 9c:52:49:41:34:5e:fd:00:fc:01:cc:52:c1:9a:43: a4:17:fa:7c:a1:72:28:c9:8a:6a:da:2a:eb:5d:3f: 78:c6:a6:60:9d:e9:62:5b:01:28:03:e4:4c:9e:4c: 3e:06:c5:ac:51:62:1f:83:cf:72:e1:a4:b1:b7:54: e7:f8:a7:07:aa:9c:6c:40:89:5c:c9:8c:92:13:e1: 0d:d0:9b:2c:fd:88:3d:f4:a5:74:27:32:59:f7:7c: 16:6f:39:de:2a:47:36:3c:90:59:b3:d4:a1:8a:1a: 33:e5:e9:dd:77:1f:f0:7e:dd:24:0a:8b:1a:41:42: 0e:42:e1:2a:30:d8:4b:16:98:ca:21:80:4b:fb:3a: d5:bf:e5:14:b1:d9:a4:6b:bc:7e:c8:9f:ff:16:8e: bb:35:83:e7:96:39:05:26:02:53:6c:87:d3:bf:21: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6E:9C:E2:0A:1E:CF:C3:E2:C1:14:6A:71:A8:8F:56:CA:3E:12:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/608c8ba1-b17a-418a-a69d-751fc7e07f95/608c8ba1-b17a-418a-a69d-751fc7e07f95.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.178.104.0/24 IPv6: 2602:f8ed::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401078 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c6:1d:91:ed:1d:59:e5:c3:2d:70:1d:4b:ec:14:dd:04:1e: 36:e7:82:ef:a8:1a:fd:76:00:32:f8:8f:04:31:08:05:a3:8c: a7:c2:a4:54:80:d3:4d:e6:89:87:f5:72:c7:67:8c:32:b5:d1: cf:b9:09:45:87:37:7a:d2:ee:d6:07:8a:70:84:6f:08:06:2a: 6b:af:18:c7:ff:e6:ec:ff:bf:bc:c0:96:69:88:8d:87:76:e8: 60:bb:86:59:3a:a6:3c:51:93:b2:7e:0f:f3:a3:19:48:4a:20: 8a:f3:87:de:5c:f3:1f:03:e0:f4:0b:4e:c0:cf:d9:4d:a9:8b: b8:3b:d9:42:94:9e:ed:b9:3b:d0:b9:b7:a8:94:d2:87:ea:0a: 64:db:f7:28:09:85:5b:cc:2d:cf:fd:ad:c9:20:d2:bf:43:78: 0f:f8:07:c4:a4:b6:d5:8a:d3:93:9f:eb:5f:58:6d:99:b7:36: f3:03:45:55:5d:4d:8c:a4:6a:c1:c5:76:5c:fa:f4:0a:08:77: bc:77:80:ab:a4:c3:17:be:02:84:69:9d:18:a3:6f:5e:77:80: 23:1b:4c:04:0b:3c:80:23:03:57:54:a7:7f:16:43:cd:64:a2: 93:61:78:89:da:b3:84:92:27:e0:72:ad:99:ea:dd:ac:4c:22: ad:f7:a7:02 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElvQ3OOHi3Lc0/WE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQwNjA5MjQyN1oXDTI3MDcxMDA5MjQyN1owLzEtMCsGA1UEAxMk NjA4YzhiYTEtYjE3YS00MThhLWE2OWQtNzUxZmM3ZTA3Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDsoL162KnIxTFzamUFEsz7R/mxP2DhJTdXB i48IyeWUMIHQOnkFkc2iLqi0VRw6oa8SxQOsVciOopFSMdZqGL4vu1egfG5JfX4+ Aw4BXqkQEejNCggOvdmcUklBNF79APwBzFLBmkOkF/p8oXIoyYpq2irrXT94xqZg neliWwEoA+RMnkw+BsWsUWIfg89y4aSxt1Tn+KcHqpxsQIlcyYySE+EN0Jss/Yg9 9KV0JzJZ93wWbzneKkc2PJBZs9Shihoz5enddx/wft0kCosaQUIOQuEqMNhLFpjK IYBL+zrVv+UUsdmka7x+yJ//Fo67NYPnljkFJgJTbIfTvyHWlQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHpunOIKHs/D4sEUanGoj1bKPhLQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82 MDhjOGJhMS1iMTdhLTQxOGEtYTY5ZC03NTFmYzdlMDdmOTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzYwOGM4YmExLWIxN2EtNDE4YS1h NjlkLTc1MWZjN2UwN2Y5NS82MDhjOGJhMS1iMTdhLTQxOGEtYTY5ZC03NTFmYzdl MDdmOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXsmgwDgQCAAIwCAMGACYC+O0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYetjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0xh2R7R1Z5cMtcB1L7BTdBB42 54LvqBr9dgAy+I8EMQgFo4ynwqRUgNNN5omH9XLHZ4wytdHPuQlFhzd60u7WB4pw hG8IBiprrxjH/+bs/7+8wJZpiI2Hduhgu4ZZOqY8UZOyfg/zoxlISiCK84feXPMf A+D0C07Az9lNqYu4O9lClJ7tuTvQubeolNKH6gpk2/coCYVbzC3P/a3JINK/Q3gP +AfEpLbVitOTn+tfWG2ZtzbzA0VVXU2MpGrBxXZc+vQKCHe8d4CrpMMXvgKEaZ0Y o29ed4AjG0wECzyAIwNXVKd/FkPNZKKTYXiJ2rOEkifgcq2Z6t2sTCKt96cC -----END CERTIFICATE-----Generated at Tue Apr 29 12:14:33 2025 by rpki-client