$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf.cer File: e121c7c4-c415-4c4c-bf5a-394a602b65bf.cer (raw, json) Hash identifier: pN9MtTE1WZXo22HL1Hyp7t+7RaaOlGPnsTuH9BiNZTE= Subject key identifier: 68:7A:B4:04:74:7A:45:75:CC:DC:F1:80:E2:E1:93:34:1C:3F:9C:39 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584943C62A08E74D3DC3F1FBC000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/e121c7c4-c415-4c4c-bf5a-394a602b65bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 19:32:16 +0000 Certificate not after: Thu 24 Jun 2027 19:32:16 +0000 Subordinate resources: AS: 14847 IP: 23.136.84.0/24 IP: 2602:f6af::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:c6:2a:08:e7:4d:3d:c3:f1:fb:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 21 19:32:16 2025 GMT Not After : Jun 24 19:32:16 2027 GMT Subject: CN=e121c7c4-c415-4c4c-bf5a-394a602b65bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:94:38:48:95:ea:c9:4a:f7:6c:12:d0:46: 2e:02:1a:32:56:23:96:e7:84:0e:73:64:ec:33:d2: d1:de:2c:3c:f3:97:25:e6:8e:ea:6c:9a:c1:a2:2b: 07:7c:53:d6:5f:e0:b3:4b:da:52:f6:16:d7:72:02: 5d:7a:ef:f9:00:5c:fc:b9:e5:59:ed:f5:93:21:35: 15:74:4c:e4:6f:01:4f:70:0d:bb:ee:69:92:4a:31: ad:88:d8:8a:a5:93:f4:62:b4:61:42:1b:9f:d4:89: 77:48:09:88:08:a5:1c:78:80:5e:62:e6:55:9c:71: d7:7e:ef:23:fe:70:92:1f:78:08:02:f8:c9:fa:20: 62:34:1b:27:b7:36:7e:5a:4e:aa:b1:01:b9:d4:bc: 5d:24:8a:d1:65:1f:5e:ca:88:22:7c:b2:8b:6c:b5: 7a:a1:28:04:14:68:6c:27:a1:7f:19:7c:8b:eb:d4: 77:96:eb:bc:4c:9a:ed:d0:5d:3f:b3:ee:74:9e:6f: ff:d1:c6:1b:6b:1c:d2:b6:b7:0a:29:87:82:cc:3a: b8:a2:f3:6a:f6:80:0c:8e:c4:33:2c:a7:0d:58:22: 8a:6d:50:44:4c:19:69:0c:53:5a:c7:2d:aa:74:4e: d5:3a:83:26:d8:4b:02:3d:f8:9f:56:07:f8:54:4b: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7A:B4:04:74:7A:45:75:CC:DC:F1:80:E2:E1:93:34:1C:3F:9C:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e121c7c4-c415-4c4c-bf5a-394a602b65bf/e121c7c4-c415-4c4c-bf5a-394a602b65bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.84.0/24 IPv6: 2602:f6af::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14847 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7c:10:15:42:0f:b0:b1:d7:75:c6:4d:8a:9c:5a:5c:ce:e1: 0c:6f:d9:c5:04:b2:50:c0:2d:ba:d6:1d:0a:16:07:a7:e1:73: 76:fc:9f:e9:b8:c9:f9:ee:2c:73:5c:cb:cf:3b:cb:84:ae:39: 55:dd:be:79:43:06:76:44:fc:1f:2b:db:d1:be:d4:7d:98:9f: 32:6a:e5:13:27:50:79:73:de:de:1b:43:2f:d6:64:53:36:64: 1a:41:97:38:43:9b:49:5f:dd:57:20:b3:f1:63:bd:83:89:fc: 69:31:ae:a2:9a:bb:44:34:45:62:ad:a8:f3:ff:eb:66:4c:f2: 9b:97:d5:fc:6b:f1:57:7d:99:36:65:40:fd:6b:c2:6d:fb:76: b9:10:1c:2a:bb:fb:82:84:be:cc:36:e7:45:81:51:f1:89:41: 09:76:53:90:6b:a5:93:1a:22:87:2f:61:9c:3d:71:c4:13:82: 3d:08:d5:b5:5e:52:92:68:25:a3:e1:e2:5d:34:37:f2:b2:94: 96:70:aa:f2:ea:6d:dc:90:0b:ec:de:46:89:c9:75:dc:51:98: e0:6a:b5:ec:a6:61:62:49:bc:16:60:7d:92:85:e0:43:76:30: cf:b6:6d:7b:2d:cd:77:a9:15:34:52:11:e7:0c:18:29:46:d4: ff:aa:29:cd -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWElDxioI5009w/H7wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI1MDMyMTE5MzIxNloXDTI3MDYyNDE5MzIxNlowLzEtMCsGA1UEAxMk ZTEyMWM3YzQtYzQxNS00YzRjLWJmNWEtMzk0YTYwMmI2NWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXSUOEiV6slK92wS0EYuAhoyViOW54QOc2Ts M9LR3iw885cl5o7qbJrBoisHfFPWX+CzS9pS9hbXcgJdeu/5AFz8ueVZ7fWTITUV dEzkbwFPcA277mmSSjGtiNiKpZP0YrRhQhuf1Il3SAmICKUceIBeYuZVnHHXfu8j /nCSH3gIAvjJ+iBiNBsntzZ+Wk6qsQG51LxdJIrRZR9eyogifLKLbLV6oSgEFGhs J6F/GXyL69R3luu8TJrt0F0/s+50nm//0cYbaxzStrcKKYeCzDq4ovNq9oAMjsQz LKcNWCKKbVBETBlpDFNaxy2qdE7VOoMm2EsCPfifVgf4VEtl+wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGh6tAR0ekV1zNzxgOLhkzQcP5w5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l MTIxYzdjNC1jNDE1LTRjNGMtYmY1YS0zOTRhNjAyYjY1YmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2UxMjFjN2M0LWM0MTUtNGM0Yy1i ZjVhLTM5NGE2MDJiNjViZi9lMTIxYzdjNC1jNDE1LTRjNGMtYmY1YS0zOTRhNjAy YjY1YmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXiFQwDgQCAAIwCAMGACYC9q8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjn/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGF8EBVCD7Cx13XGTYqcWlzO4Qxv 2cUEslDALbrWHQoWB6fhc3b8n+m4yfnuLHNcy887y4SuOVXdvnlDBnZE/B8r29G+ 1H2YnzJq5RMnUHlz3t4bQy/WZFM2ZBpBlzhDm0lf3Vcgs/FjvYOJ/GkxrqKau0Q0 RWKtqPP/62ZM8puX1fxr8Vd9mTZlQP1rwm37drkQHCq7+4KEvsw250WBUfGJQQl2 U5BrpZMaIocvYZw9ccQTgj0I1bVeUpJoJaPh4l00N/KylJZwqvLqbdyQC+zeRonJ ddxRmOBqteymYWJJvBZgfZKF4EN2MM+2bXstzXepFTRSEecMGClG1P+qKc0= -----END CERTIFICATE-----Generated at Sun Apr 27 20:19:23 2025 by rpki-client