$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484.cer File: f1151c8e-10a0-40dc-b592-f275bf602484.cer (raw, json) Hash identifier: C3rCpYVyk53zTDCp0BPoAtiy1qFGJVJ/rrhmHTMGAdg= Subject key identifier: FB:53:5E:25:F6:CC:E6:4D:EC:80:7A:BF:E0:77:BA:3D:C6:E0:45:8F Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584902E1FAFBB29E01B36FB737C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/f1151c8e-10a0-40dc-b592-f275bf602484.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 13:40:46 +0000 Certificate not after: Tue 01 Jun 2027 12:40:46 +0000 Subordinate resources: IP: 23.135.60.0/24 IP: 2602:f6d5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:e1:fa:fb:b2:9e:01:b3:6f:b7:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Feb 26 13:40:46 2025 GMT Not After : Jun 1 12:40:46 2027 GMT Subject: CN=f1151c8e-10a0-40dc-b592-f275bf602484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:38:05:ea:40:d3:ba:4e:9d:ac:da:b5:ea: 47:34:27:63:50:8d:f4:39:2b:15:50:77:06:16:12: 24:b8:2b:a4:48:17:0a:6c:e5:36:ee:f7:81:b7:65: f5:ed:8a:19:97:b8:28:f5:8d:b1:e0:b1:83:0e:3d: 61:1b:da:fc:7d:3c:36:a2:c8:dd:f0:6b:65:8e:8f: 91:b0:1e:9e:0e:c6:92:2e:a8:11:1a:d6:e0:f6:09: 6a:f8:fb:de:bb:6e:20:d1:08:2e:a4:77:cc:21:36: cd:b4:5d:14:f0:43:8f:16:78:99:e2:dd:5e:62:6c: 21:f2:56:fd:86:a5:15:0f:be:94:ec:84:b8:8d:f0: d6:71:39:36:4e:4a:6f:42:c1:0e:98:a8:e3:b5:9a: e6:35:9e:1e:06:51:3a:1a:f8:5c:ca:c0:07:ab:58: 41:94:ed:1b:2b:4f:76:18:ef:c9:a7:de:51:02:db: f1:23:fe:32:2c:85:cd:78:6c:cb:78:36:24:38:e1: 19:95:ee:cc:ae:dd:31:7f:8c:3d:d4:32:44:6a:27: 19:09:5a:b1:ef:c2:ef:32:b5:7b:bd:e2:1d:09:e2: 86:1e:e7:c2:3a:1b:2a:4d:40:3a:69:f3:fc:6e:c5: 9a:6d:cb:aa:da:de:c1:72:f9:fa:48:58:3b:a2:aa: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:53:5E:25:F6:CC:E6:4D:EC:80:7A:BF:E0:77:BA:3D:C6:E0:45:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/f1151c8e-10a0-40dc-b592-f275bf602484.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.60.0/24 IPv6: 2602:f6d5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f3:f0:7a:d6:4e:1b:b9:b7:d7:e7:23:ed:ee:87:19:46:83: 2d:ca:33:d7:ef:4e:94:81:35:82:5e:33:ef:c3:38:cb:5a:39: 29:95:73:ac:c9:cd:9c:a4:c2:f6:e0:86:66:0c:d3:55:3b:01: cb:3b:06:fe:fe:02:24:00:4f:82:55:23:8a:bf:51:65:c9:29: cb:a7:06:ae:ee:aa:00:aa:5f:ee:da:1f:c7:eb:f8:b4:de:80: f6:db:e3:42:6a:66:d2:b3:ca:b1:75:33:06:74:a5:55:e2:cc: 24:d0:ae:f4:f7:5b:99:41:ca:22:92:da:1a:17:d5:12:c9:85: 81:42:fc:b0:3b:36:27:bc:2e:f6:c5:e3:50:d7:ae:b6:24:64: 3e:66:30:3e:0d:a5:a9:d7:46:f2:71:23:dd:81:80:aa:35:14: 48:d0:b6:05:ee:24:10:35:13:14:7b:e7:14:a6:3d:5f:00:db: 67:6d:e6:ae:9e:55:c4:5c:e9:0f:cb:0f:ba:a7:a9:9d:8c:3a: f7:c6:fe:9c:d5:21:28:67:7c:4f:3d:f2:af:f7:76:0a:97:77: 8c:cd:e4:88:45:63:04:30:68:11:10:17:c0:96:ee:64:3d:89: 2f:83:60:0c:56:d2:e6:18:58:34:02:0f:0e:fb:33:3a:9e:6a: 35:1c:5e:b8 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEkC4fr7sp4Bs2+3N8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI1MDIyNjEzNDA0NloXDTI3MDYwMTEyNDA0NlowLzEtMCsGA1UEAxMk ZjExNTFjOGUtMTBhMC00MGRjLWI1OTItZjI3NWJmNjAyNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKM4BepA07pOnazatepHNCdjUI30OSsVUHcG FhIkuCukSBcKbOU27veBt2X17YoZl7go9Y2x4LGDDj1hG9r8fTw2osjd8Gtljo+R sB6eDsaSLqgRGtbg9glq+Pveu24g0QgupHfMITbNtF0U8EOPFniZ4t1eYmwh8lb9 hqUVD76U7IS4jfDWcTk2TkpvQsEOmKjjtZrmNZ4eBlE6GvhcysAHq1hBlO0bK092 GO/Jp95RAtvxI/4yLIXNeGzLeDYkOOEZle7Mrt0xf4w91DJEaicZCVqx78LvMrV7 veIdCeKGHufCOhsqTUA6afP8bsWabcuq2t7Bcvn6SFg7oqplqQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFPtTXiX2zOZN7IB6v+B3uj3G4EWPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m MTE1MWM4ZS0xMGEwLTQwZGMtYjU5Mi1mMjc1YmY2MDI0ODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2YxMTUxYzhlLTEwYTAtNDBkYy1i NTkyLWYyNzViZjYwMjQ4NC9mMTE1MWM4ZS0xMGEwLTQwZGMtYjU5Mi1mMjc1YmY2 MDI0ODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhzwwDgQCAAIwCAMGACYC9tUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AI3z8HrWThu5t9fnI+3uhxlGgy3KM9fvTpSBNYJeM+/DOMtaOSmVc6zJzZykwvbg hmYM01U7Acs7Bv7+AiQAT4JVI4q/UWXJKcunBq7uqgCqX+7aH8fr+LTegPbb40Jq ZtKzyrF1MwZ0pVXizCTQrvT3W5lByiKS2hoX1RLJhYFC/LA7Nie8LvbF41DXrrYk ZD5mMD4NpanXRvJxI92BgKo1FEjQtgXuJBA1ExR75xSmPV8A22dt5q6eVcRc6Q/L D7qnqZ2MOvfG/pzVIShnfE898q/3dgqXd4zN5IhFYwQwaBEQF8CW7mQ9iS+DYAxW 0uYYWDQCDw77MzqeajUcXrg= -----END CERTIFICATE-----Generated at Sun Apr 27 10:33:26 2025 by rpki-client