$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207.cer File: 6a90d484-8cf5-4f91-8c7a-469325853207.cer (raw, json) Hash identifier: 4++ZdQ1f2kzjJMLpUHbvjc2SaZeCx3a0czi6Oz8Z/qY= Subject key identifier: 12:9B:D9:B8:55:06:FC:3A:7A:B0:26:41:F8:6A:0E:D6:26:39:BB:18 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849780750EA7C9D85F999C97300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 12:45:34 +0000 Certificate not after: Tue 13 Jul 2027 12:45:34 +0000 Subordinate resources: IP: 23.168.232.0/24 IP: 2602:f9af::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:07:50:ea:7c:9d:85:f9:99:c9:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 9 12:45:34 2025 GMT Not After : Jul 13 12:45:34 2027 GMT Subject: CN=6a90d484-8cf5-4f91-8c7a-469325853207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9d:12:15:c9:72:e9:24:23:b3:90:26:c8:04: 3a:3b:81:0e:36:f0:e8:5f:b3:72:a3:d0:1f:b6:a1: 5f:76:fe:40:6b:ef:3c:63:90:0f:ea:06:bd:3b:2c: 91:c6:7c:ea:24:98:a3:2d:4b:ed:d8:58:28:70:02: 75:60:9e:a6:0a:91:63:53:ac:4c:4d:30:d0:fb:ff: 6b:16:25:ae:12:c1:ed:96:4c:f4:ba:47:b6:5d:f9: 00:7d:c4:69:4e:cc:95:45:35:55:a0:91:01:d1:ae: 71:a4:1e:ab:e4:8e:6f:7c:d9:12:64:6d:3a:69:e9: f3:61:92:35:17:38:b5:e8:1a:cb:92:1e:41:76:f5: 37:23:9f:c7:17:4e:b8:fc:9e:7b:68:9a:6f:b1:a8: 26:ed:5d:24:d2:8a:8f:9e:db:f7:03:08:bc:1f:71: e2:78:6b:53:16:c6:4f:1f:da:bf:5a:f8:0b:1c:ab: f9:62:83:90:e2:7a:cf:da:bd:5f:63:93:41:70:15: 46:f3:6a:57:c9:b4:70:a5:dc:bb:0e:0d:4b:79:42: e9:ef:00:01:73:e3:b7:65:4e:91:24:08:cc:a9:81: 95:58:4e:1c:6f:85:36:e3:0e:82:f5:32:c3:56:c6: c7:b0:c8:19:92:1b:5b:8d:ed:af:84:f3:f8:bb:f8: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9B:D9:B8:55:06:FC:3A:7A:B0:26:41:F8:6A:0E:D6:26:39:BB:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6a90d484-8cf5-4f91-8c7a-469325853207/6a90d484-8cf5-4f91-8c7a-469325853207.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.168.232.0/24 IPv6: 2602:f9af::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a2:88:da:85:61:28:12:86:c4:93:08:2b:ae:ec:31:e6:93: 06:c1:75:4e:95:78:e0:24:49:a2:22:ae:44:83:f1:57:84:06: 06:f6:3e:d9:0c:1a:e0:4e:6c:8a:8c:59:25:a5:4d:5f:5d:9e: 32:f5:d2:f4:06:24:77:a3:1f:a9:04:c5:80:b2:11:ad:77:b2: b9:54:f9:a5:90:60:55:12:4a:ce:a4:ae:30:ed:cb:69:39:62: d5:bd:f8:dc:e7:87:45:95:c7:64:d6:2a:c8:23:6d:c7:49:43: c8:ce:83:a1:ef:3a:87:45:23:f1:9a:f2:98:6d:13:7e:40:fd: 3c:a3:82:bf:23:17:68:91:7e:9d:4e:28:5f:e2:dc:e8:38:b1: 1e:43:08:10:dc:37:f9:db:c5:ba:1c:18:f7:fa:87:a6:0f:f5: 15:aa:8a:ff:bc:a9:97:3f:12:9c:6d:d2:fd:6b:2b:b7:5c:01: ca:94:e7:1d:7a:f9:06:15:e9:5b:9a:d4:10:ac:71:f8:08:61: 37:e1:9b:2b:88:e3:94:2e:fb:2d:cb:6f:e7:04:10:d2:c4:c7: a3:98:16:90:3a:61:a9:be:a0:b5:02:e2:26:a5:fa:06:10:aa: dd:54:6c:53:7c:f8:29:7b:05:99:66:69:4c:05:f7:7d:cf:b9: 09:f4:87:a6 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEl4B1DqfJ2F+ZnJcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwOTEyNDUzNFoXDTI3MDcxMzEyNDUzNFowLzEtMCsGA1UEAxMk NmE5MGQ0ODQtOGNmNS00ZjkxLThjN2EtNDY5MzI1ODUzMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl50SFcly6SQjs5AmyAQ6O4EONvDoX7Nyo9Af tqFfdv5Aa+88Y5AP6ga9OyyRxnzqJJijLUvt2FgocAJ1YJ6mCpFjU6xMTTDQ+/9r FiWuEsHtlkz0uke2XfkAfcRpTsyVRTVVoJEB0a5xpB6r5I5vfNkSZG06aenzYZI1 Fzi16BrLkh5BdvU3I5/HF064/J57aJpvsagm7V0k0oqPntv3Awi8H3HieGtTFsZP H9q/WvgLHKv5YoOQ4nrP2r1fY5NBcBVG82pXybRwpdy7Dg1LeULp7wABc+O3ZU6R JAjMqYGVWE4cb4U24w6C9TLDVsbHsMgZkhtbje2vhPP4u/h58QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBKb2bhVBvw6erAmQfhqDtYmObsYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 YTkwZDQ4NC04Y2Y1LTRmOTEtOGM3YS00NjkzMjU4NTMyMDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZhOTBkNDg0LThjZjUtNGY5MS04 YzdhLTQ2OTMyNTg1MzIwNy82YTkwZDQ4NC04Y2Y1LTRmOTEtOGM3YS00NjkzMjU4 NTMyMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqOgwDgQCAAIwCAMGACYC+a8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJaiiNqFYSgShsSTCCuu7DHmkwbBdU6VeOAkSaIirkSD8VeEBgb2PtkMGuBObIqM WSWlTV9dnjL10vQGJHejH6kExYCyEa13srlU+aWQYFUSSs6krjDty2k5YtW9+Nzn h0WVx2TWKsgjbcdJQ8jOg6HvOodFI/Ga8phtE35A/Tyjgr8jF2iRfp1OKF/i3Og4 sR5DCBDcN/nbxbocGPf6h6YP9RWqiv+8qZc/Epxt0v1rK7dcAcqU5x16+QYV6Vua 1BCscfgIYTfhmyuI45Qu+y3Lb+cEENLEx6OYFpA6Yam+oLUC4ial+gYQqt1UbFN8 +Cl7BZlmaUwF933PuQn0h6Y= -----END CERTIFICATE-----Generated at Sat May 10 10:14:09 2025 by rpki-client