$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer File: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer (raw, json) Hash identifier: lURRA89H0sExwRxdG3ZgiYl4f2eB0+TgxQql0aBTr0M= Subject key identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F432858494ECF66A4550C931A138699A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Mar 2025 18:24:46 +0000 Certificate not after: Mon 28 Jun 2027 18:24:46 +0000 Subordinate resources: AS: 35941 IP: 23.136.116.0/24 IP: 2602:f6a7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:cf:66:a4:55:0c:93:1a:13:86:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 25 18:24:46 2025 GMT Not After : Jun 28 18:24:46 2027 GMT Subject: CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:48:7e:8d:f9:3a:f3:3e:6e:6e:9e:f1:83:38: 90:ed:77:ed:6b:9c:be:04:24:d7:b0:29:54:a3:92: d8:6c:6a:c7:aa:47:d5:13:29:84:6d:1c:99:ea:41: 59:ef:3d:b0:5a:99:20:67:72:2f:8a:62:6e:34:b0: 5e:5f:2a:40:2e:ad:ff:c7:f5:a5:cf:7b:91:f5:f7: 48:99:52:9b:1c:69:2a:74:df:9d:41:cf:b9:26:bf: 09:b0:4b:90:4a:15:46:7f:06:f7:6c:0d:a7:28:60: 91:b4:f1:17:d1:39:58:78:68:d6:52:ad:3d:da:ff: 93:50:78:df:c2:10:81:80:d8:13:66:09:7e:e5:f0: cf:1a:92:f4:9f:0e:7b:1f:ff:66:55:e5:b8:59:01: 79:4e:c9:52:f5:ab:39:d0:88:e8:f2:ce:c9:0a:c2: ae:d3:ee:54:e4:52:96:d9:75:15:53:73:e2:04:85: d7:71:c9:80:c2:c1:ec:ac:15:c9:6e:57:fb:c6:e3: da:61:0f:9d:c2:9e:31:f3:c0:eb:fc:6b:f2:67:06: 38:47:8c:6b:e7:b8:05:a1:88:8e:35:de:9e:6a:33: 60:f9:b4:2b:be:02:9e:c9:9c:fe:ac:c1:a4:d3:eb: 0d:56:e2:32:15:d6:ff:f7:5d:a3:08:65:73:65:80: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.116.0/24 IPv6: 2602:f6a7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35941 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ea:34:de:53:c1:b2:66:5e:db:26:68:be:99:35:a2:40:46: fb:0f:fc:bb:eb:01:46:d0:24:47:8a:5c:dd:5b:f6:2e:5b:b4: 7e:5a:65:73:4e:34:8a:29:3b:c1:68:15:5b:5a:2a:92:42:fd: a4:54:90:93:d1:35:f4:6d:b5:02:ab:0c:a5:e9:18:7b:76:81: e6:b7:e0:d1:2c:c7:9f:c0:08:4f:c2:73:ab:e5:cb:85:98:37: 90:76:be:6c:a0:31:9d:64:fe:00:22:df:4d:cd:0b:32:b5:21: 7a:62:14:18:9c:62:ac:5b:fb:84:54:b9:33:1f:9f:bb:fe:1a: 79:c2:68:aa:42:9f:8e:b6:75:31:5e:e1:13:35:ed:a6:36:f3: 71:cd:bd:98:6c:36:49:99:ee:77:b3:56:d0:a6:64:f2:3b:16: cf:bc:64:cc:eb:19:b5:0a:71:59:33:f0:7a:19:b1:13:e4:d7: 74:8e:3c:0c:47:3e:ff:e5:d5:2f:d5:69:e2:28:81:a2:ed:ab: e6:f1:f1:ed:c7:33:2b:05:9b:16:f0:4f:7c:e6:7b:f9:67:3d: 7b:af:42:31:b1:83:2a:62:09:c4:a4:d3:5d:47:08:d5:8c:e9: 9e:48:88:c1:f5:31:53:af:ac:95:06:f8:96:a4:07:6d:fc:94: 4e:9c:86:49 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElOz2akVQyTGhOGmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyNTE4MjQ0NloXDTI3MDYyODE4MjQ0NlowLzEtMCsGA1UEAxMk NzA0NTk1YzMtNmQ5Mi00ZmMxLWI3YTgtZDhlODFhMDRhYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEh+jfk68z5ubp7xgziQ7Xfta5y+BCTXsClU o5LYbGrHqkfVEymEbRyZ6kFZ7z2wWpkgZ3IvimJuNLBeXypALq3/x/Wlz3uR9fdI mVKbHGkqdN+dQc+5Jr8JsEuQShVGfwb3bA2nKGCRtPEX0TlYeGjWUq092v+TUHjf whCBgNgTZgl+5fDPGpL0nw57H/9mVeW4WQF5TslS9as50Ijo8s7JCsKu0+5U5FKW 2XUVU3PiBIXXccmAwsHsrBXJblf7xuPaYQ+dwp4x88Dr/GvyZwY4R4xr57gFoYiO Nd6eajNg+bQrvgKeyZz+rMGk0+sNVuIyFdb/912jCGVzZYAjgwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEVWCKlPPi4wLWqlXKLo5VD9WwQZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83 MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEwNGFhN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzcwNDU5NWMzLTZkOTItNGZjMS1i N2E4LWQ4ZTgxYTA0YWE3YS83MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEw NGFhN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiHQwDgQCAAIwCAMGBCYC9qcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCMZTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBl6jTeU8GyZl7bJmi+mTWiQEb7 D/y76wFG0CRHilzdW/YuW7R+WmVzTjSKKTvBaBVbWiqSQv2kVJCT0TX0bbUCqwyl 6Rh7doHmt+DRLMefwAhPwnOr5cuFmDeQdr5soDGdZP4AIt9NzQsytSF6YhQYnGKs W/uEVLkzH5+7/hp5wmiqQp+OtnUxXuETNe2mNvNxzb2YbDZJme53s1bQpmTyOxbP vGTM6xm1CnFZM/B6GbET5Nd0jjwMRz7/5dUv1WniKIGi7avm8fHtxzMrBZsW8E98 5nv5Zz17r0IxsYMqYgnEpNNdRwjVjOmeSIjB9TFTr6yVBviWpAdt/JROnIZJ -----END CERTIFICATE-----Generated at Sun Apr 27 00:26:24 2025 by rpki-client