$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/767831ed-7551-48ea-931f-bad01961193c.cer File: 767831ed-7551-48ea-931f-bad01961193c.cer (raw, json) Hash identifier: gwVWFl4bGtoCVGjdtkyKm2S6hihrhKMIzIZT16F2Nqc= Subject key identifier: 00:09:FC:C0:2A:69:A1:36:B4:41:B1:3B:C2:B7:35:BD:9E:34:FC:22 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F43285848EB968A6F259A21498ECB1A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/767831ed-7551-48ea-931f-bad01961193c/767831ed-7551-48ea-931f-bad01961193c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/767831ed-7551-48ea-931f-bad01961193c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 05:25:10 +0000 Certificate not after: Mon 24 May 2027 04:25:10 +0000 Subordinate resources: IP: 23.134.60.0/24 IP: 2602:f6f2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:96:8a:6f:25:9a:21:49:8e:cb:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 18 05:25:10 2025 GMT Not After : May 24 04:25:10 2027 GMT Subject: CN=767831ed-7551-48ea-931f-bad01961193c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a8:e0:f7:e2:ad:76:4f:d0:9b:e3:87:5a:f1: 7f:58:a3:4e:43:05:0a:3b:a4:21:f6:80:16:21:0d: 3d:14:73:67:83:22:4d:8a:1e:a6:a8:c8:f8:f4:ee: 2c:b4:9b:40:16:1d:72:5c:1c:e3:82:73:36:6c:eb: e2:b7:a5:cb:94:e3:e8:b9:ed:ae:9e:11:20:d4:a2: 50:75:4d:7b:38:9d:6d:8e:0a:d1:77:ad:b7:f6:6a: 15:cf:65:89:77:24:42:fc:01:45:25:f6:aa:40:1d: 88:97:4b:4b:22:d7:55:fb:df:fa:05:16:9b:60:c8: cb:02:3d:4c:4f:99:2b:de:eb:8c:80:9e:f1:a0:5d: 5c:b0:98:00:de:08:b6:ca:70:97:84:45:e8:a6:81: a0:87:2a:e7:37:5d:1e:32:ec:66:47:1d:74:ec:3f: 90:4c:4e:db:7e:65:81:ae:89:78:a7:e7:86:ad:25: 02:87:d5:a5:32:39:87:f2:a8:b7:63:34:a5:65:6b: 3a:fe:2a:39:79:0e:85:63:6b:db:be:32:6b:30:cd: 24:3a:df:a0:59:d0:78:d7:1c:d2:fe:ae:1d:1f:25: c4:46:25:2c:88:e4:d3:25:28:f7:3a:49:94:77:81: e0:11:90:0d:2d:fe:65:33:65:37:d1:8d:c6:8f:2f: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:09:FC:C0:2A:69:A1:36:B4:41:B1:3B:C2:B7:35:BD:9E:34:FC:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/767831ed-7551-48ea-931f-bad01961193c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/767831ed-7551-48ea-931f-bad01961193c/767831ed-7551-48ea-931f-bad01961193c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.60.0/24 IPv6: 2602:f6f2::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d3:9e:d6:9f:c3:d7:98:71:3f:5c:92:ee:ff:bb:9c:78:7d: 62:75:61:c8:49:c0:eb:9a:ed:fe:25:e1:3a:34:e2:5e:40:07: d7:58:e9:be:35:fe:4b:0f:66:09:52:92:4b:d0:5b:be:5b:47: b0:43:10:c7:94:69:9d:23:11:1a:78:79:75:97:59:ec:a7:cc: 6d:5b:3a:dd:f7:85:85:22:c4:df:91:ba:68:7d:a6:55:5f:3d: 40:ce:36:1b:ea:b7:d8:09:ad:ff:8a:20:3e:96:0c:9c:ca:6e: c4:c9:6f:40:56:2f:65:e8:17:4c:b6:60:3e:d8:f2:fe:ba:19: 35:34:a3:be:e3:95:59:24:16:f0:8b:a9:71:6f:eb:63:96:18: 64:3a:1a:e0:0f:60:96:26:ff:de:b1:9f:89:10:d8:e2:dd:9d: d8:b3:e6:d0:4c:aa:8b:1d:e5:22:07:03:11:04:e2:48:82:4d: 50:87:b5:49:f4:24:be:14:21:bc:1a:93:20:59:60:7d:89:0e: 19:b6:0c:64:88:f5:53:cd:ca:6f:ea:12:fd:c5:a9:d6:fd:3c: ef:69:91:d9:dd:a9:75:48:70:78:d2:6b:0a:25:90:87:ce:20: ee:e7:e6:ff:8b:12:53:e2:da:7f:1a:fc:e0:84:64:93:97:24: 28:1b:6b:7b -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEjrlopvJZohSY7LGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIxODA1MjUxMFoXDTI3MDUyNDA0MjUxMFowLzEtMCsGA1UEAxMk NzY3ODMxZWQtNzU1MS00OGVhLTkzMWYtYmFkMDE5NjExOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6jg9+Ktdk/Qm+OHWvF/WKNOQwUKO6Qh9oAW IQ09FHNngyJNih6mqMj49O4stJtAFh1yXBzjgnM2bOvit6XLlOPoue2unhEg1KJQ dU17OJ1tjgrRd6239moVz2WJdyRC/AFFJfaqQB2Il0tLItdV+9/6BRabYMjLAj1M T5kr3uuMgJ7xoF1csJgA3gi2ynCXhEXopoGghyrnN10eMuxmRx107D+QTE7bfmWB rol4p+eGrSUCh9WlMjmH8qi3YzSlZWs6/io5eQ6FY2vbvjJrMM0kOt+gWdB41xzS /q4dHyXERiUsiOTTJSj3OkmUd4HgEZANLf5lM2U30Y3Gjy/MzwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFAAJ/MAqaaE2tEGxO8K3Nb2eNPwiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 Njc4MzFlZC03NTUxLTQ4ZWEtOTMxZi1iYWQwMTk2MTE5M2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzc2NzgzMWVkLTc1NTEtNDhlYS05 MzFmLWJhZDAxOTYxMTkzYy83Njc4MzFlZC03NTUxLTQ4ZWEtOTMxZi1iYWQwMTk2 MTE5M2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhjwwDgQCAAIwCAMGACYC9vIAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAzTntafw9eYcT9cku7/u5x4fWJ1YchJwOua7f4l4To04l5AB9dY6b41/ksPZglS kkvQW75bR7BDEMeUaZ0jERp4eXWXWeynzG1bOt33hYUixN+Rumh9plVfPUDONhvq t9gJrf+KID6WDJzKbsTJb0BWL2XoF0y2YD7Y8v66GTU0o77jlVkkFvCLqXFv62OW GGQ6GuAPYJYm/96xn4kQ2OLdndiz5tBMqosd5SIHAxEE4kiCTVCHtUn0JL4UIbwa kyBZYH2JDhm2DGSI9VPNym/qEv3Fqdb9PO9pkdndqXVIcHjSawolkIfOIO7n5v+L ElPi2n8a/OCEZJOXJCgba3s= -----END CERTIFICATE-----Generated at Tue Apr 29 19:18:10 2025 by rpki-client