$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af.cer File: c45d9c28-5e03-4cf6-8640-7b575dcd27af.cer (raw, json) Hash identifier: JhceZ+IZRs45I5Hosp6uo4D1dDURj15srOG4zZbq1Pc= Subject key identifier: 2F:F9:FE:C3:D8:D0:83:20:EB:14:A1:60:B9:6B:6A:64:89:C1:A5:2E Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584991B7D64E870BE197C2528C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/c45d9c28-5e03-4cf6-8640-7b575dcd27af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 17:36:27 +0000 Certificate not after: Mon 19 Jul 2027 06:46:26 +0000 Subordinate resources: AS: 33601 IP: 216.234.130.0/23 IP: 2602:f675::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:b7:d6:4e:87:0b:e1:97:c2:52:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Apr 18 17:36:27 2025 GMT Not After : Jul 19 06:46:26 2027 GMT Subject: CN=c45d9c28-5e03-4cf6-8640-7b575dcd27af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:a5:9f:47:3b:ba:f6:b2:cd:98:f5:ba:b9: 67:8f:ad:ad:98:4f:3e:15:80:cf:30:56:64:9b:4c: 6c:60:f3:01:e7:c1:db:42:64:e0:a2:d5:fd:82:01: a6:34:a9:40:6c:d5:91:25:02:d4:21:79:2f:76:13: e5:47:0c:96:82:da:e3:ef:00:5d:24:68:10:92:9d: 4d:9d:39:b3:2e:d5:1f:b7:f3:5f:9f:7b:d3:c5:ef: ac:c5:70:35:57:c6:fc:a0:03:8c:4b:0e:b4:e0:98: 5d:ee:6b:0b:e8:7d:1d:6a:83:e4:dc:45:a5:64:a5: 59:ee:4b:02:c0:4d:2e:85:7e:83:b9:a2:3a:9d:d2: 61:91:21:77:8f:d6:db:68:fa:da:85:72:1e:7f:f7: d7:b5:da:30:01:3d:cc:36:c3:86:35:26:f1:59:ca: 38:4d:44:6b:db:da:25:bc:c5:54:c9:a9:14:46:65: a6:63:a4:c9:9a:81:7b:38:a3:b0:5f:dd:a4:fc:26: e6:d5:7b:3b:58:8a:d0:22:05:10:5c:f3:3d:bf:fc: a7:c2:30:ad:cc:7b:0c:6b:d0:69:ad:34:ad:65:e2: 31:8c:4e:e3:39:43:38:93:1e:22:b8:f8:f2:02:97: 47:8a:59:c5:20:89:94:77:1d:92:06:4d:31:88:83: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F9:FE:C3:D8:D0:83:20:EB:14:A1:60:B9:6B:6A:64:89:C1:A5:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c45d9c28-5e03-4cf6-8640-7b575dcd27af/c45d9c28-5e03-4cf6-8640-7b575dcd27af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 216.234.130.0/23 IPv6: 2602:f675::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33601 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:98:1c:e0:40:2f:11:3a:ae:e1:2f:85:32:da:be:b5:20:14: 9d:09:88:46:82:26:88:20:0e:85:27:76:f3:59:35:28:a9:95: 39:97:b1:0f:b5:05:5b:ef:86:b4:07:56:20:e2:a2:c6:d5:51: 79:cb:3e:44:d4:5c:fc:1b:54:7c:da:19:9f:af:1e:ea:93:7a: 53:17:12:cc:38:ba:f9:6d:a3:d3:29:56:df:60:c7:51:f4:bf: d6:5c:58:17:f0:af:27:3e:c4:24:ff:a1:f6:cf:e2:43:d5:ce: 40:33:96:d1:18:da:8d:26:fc:2e:c0:70:0c:1d:91:e7:4f:07: 43:9b:d0:94:13:2d:29:bb:4c:b6:4b:12:e8:a5:00:77:f7:29: 39:43:44:0c:f6:40:66:fa:a5:e4:8e:6f:3c:6e:5a:e4:1a:49: 3d:78:cb:0f:88:e5:a7:f3:bd:6a:4c:ab:0b:ed:c0:1a:a7:12: 52:77:74:c8:06:fc:9b:61:34:7e:90:f5:83:67:52:62:2c:51: 43:6a:14:12:96:28:be:ce:94:e1:fe:a2:5d:84:f8:91:7d:74: 0f:97:17:33:e8:18:b0:6f:53:23:9d:83:23:7b:bb:28:3a:26: 2f:3e:86:db:a9:88:09:96:1b:53:72:ac:9c:39:57:c3:7c:e9: 6b:9d:f5:39 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmRt9ZOhwvhl8JSjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDQxODE3MzYyN1oXDTI3MDcxOTA2NDYyNlowLzEtMCsGA1UEAxMk YzQ1ZDljMjgtNWUwMy00Y2Y2LTg2NDAtN2I1NzVkY2QyN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurWln0c7uvayzZj1urlnj62tmE8+FYDPMFZk m0xsYPMB58HbQmTgotX9ggGmNKlAbNWRJQLUIXkvdhPlRwyWgtrj7wBdJGgQkp1N nTmzLtUft/Nfn3vTxe+sxXA1V8b8oAOMSw604Jhd7msL6H0daoPk3EWlZKVZ7ksC wE0uhX6DuaI6ndJhkSF3j9bbaPrahXIef/fXtdowAT3MNsOGNSbxWco4TURr29ol vMVUyakURmWmY6TJmoF7OKOwX92k/Cbm1Xs7WIrQIgUQXPM9v/ynwjCtzHsMa9Bp rTStZeIxjE7jOUM4kx4iuPjyApdHilnFIImUdx2SBk0xiIO2AwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFC/5/sPY0IMg6xShYLlramSJwaUuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9j NDVkOWMyOC01ZTAzLTRjZjYtODY0MC03YjU3NWRjZDI3YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2M0NWQ5YzI4LTVlMDMtNGNmNi04 NjQwLTdiNTc1ZGNkMjdhZi9jNDVkOWMyOC01ZTAzLTRjZjYtODY0MC03YjU3NWRj ZDI3YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHY6oIwDgQCAAIwCAMGBCYC9nUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCDQTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVmBzgQC8ROq7hL4Uy2r61IBSd CYhGgiaIIA6FJ3bzWTUoqZU5l7EPtQVb74a0B1Yg4qLG1VF5yz5E1Fz8G1R82hmf rx7qk3pTFxLMOLr5baPTKVbfYMdR9L/WXFgX8K8nPsQk/6H2z+JD1c5AM5bRGNqN JvwuwHAMHZHnTwdDm9CUEy0pu0y2SxLopQB39yk5Q0QM9kBm+qXkjm88blrkGkk9 eMsPiOWn871qTKsL7cAapxJSd3TIBvybYTR+kPWDZ1JiLFFDahQSlii+zpTh/qJd hPiRfXQPlxcz6Biwb1MjnYMje7soOiYvPobbqYgJlhtTcqycOVfDfOlrnfU5 -----END CERTIFICATE-----Generated at Sat Apr 26 22:48:51 2025 by rpki-client