$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer File: b12072dc-8b29-49de-800e-2439a1f4bf97.cer (raw, json) Hash identifier: 1qZETP14hy0ZWDur6SpJXyn1nzLAqoaMeHKlITIWQMU= Subject key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848EDF43AB6DDCC928AAD4BE700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Feb 2025 01:45:33 +0000 Certificate not after: Tue 25 May 2027 00:45:33 +0000 Subordinate resources: AS: 399737 IP: 23.165.8.0/24 IP: 2602:f9dc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:f4:3a:b6:dd:cc:92:8a:ad:4b:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 19 01:45:33 2025 GMT Not After : May 25 00:45:33 2027 GMT Subject: CN=b12072dc-8b29-49de-800e-2439a1f4bf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:c1:b6:fb:31:b9:b8:54:d9:42:e3:4d:8a: 80:4f:59:8d:5f:1a:3c:d8:7e:9b:0b:b3:b6:ad:a5: 9d:0d:6c:50:41:3e:2a:10:46:81:e2:6a:d9:36:58: e5:28:1b:3e:7f:59:16:68:90:b7:92:bd:d0:f9:f2: 56:f8:1c:16:30:37:b4:34:8b:f3:5f:3a:11:f9:3d: 41:aa:d7:bb:c1:ca:e0:ba:38:8b:de:99:fc:46:7c: a1:5b:6f:1d:db:8f:08:82:83:13:4c:4a:6f:62:fa: 44:93:ed:90:7f:9a:07:92:69:44:cd:19:ae:6f:d3: c7:1d:a5:7b:82:3e:b7:30:2f:0c:3f:3c:b8:99:5e: 5b:33:a5:f0:24:e2:49:76:5a:f0:d2:a1:48:d7:38: 23:18:de:77:ec:b8:45:d5:92:76:2a:bd:6a:f2:81: 86:3e:8c:b4:61:61:ff:02:f4:4c:0f:a2:a9:ba:93: 4c:c7:50:d0:ee:fc:a0:06:51:b1:03:b4:73:aa:14: 73:90:33:88:90:e6:97:f6:bd:02:66:c8:7c:a6:24: a8:57:05:a3:e1:b8:53:19:1e:2c:0c:d2:94:9b:35: 47:ad:8c:cf:06:a9:b2:14:97:4c:af:65:84:93:7c: 1d:5a:e9:c1:b6:ae:2b:8a:84:72:d1:fc:1d:b4:a4: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.8.0/24 IPv6: 2602:f9dc::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399737 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:db:7a:67:45:3b:9b:43:83:7f:7e:6e:73:30:ed:55:6f:df: 55:8a:b3:ac:da:25:d8:e5:7a:64:8a:ea:47:2e:a8:d4:52:b6: 90:b2:2f:38:40:ee:09:9d:51:38:1e:e5:f3:46:7a:7a:1f:b2: 79:bb:d2:7a:2d:9e:c9:78:db:5a:92:94:5e:66:b5:e9:9a:63: 43:f5:04:3d:67:73:fb:be:2c:91:8d:03:08:ec:a6:01:a6:bf: a0:c4:d4:47:ef:91:57:14:b6:2d:e0:fb:b8:f2:33:ca:4a:45: 70:ce:59:dd:e2:4d:80:fd:d0:5d:34:fa:dc:17:1b:9f:1d:e9: 91:e1:36:a6:60:e0:f3:8f:c9:ca:09:3d:e0:00:b8:f7:bc:1d: 98:27:a6:a1:f2:3a:2a:5f:6c:a5:8e:10:73:56:43:68:f6:6c: 92:bd:18:92:31:a0:6f:d3:0e:06:f6:cd:50:b6:dc:06:db:90: ff:b9:02:9f:9b:10:41:a3:3a:95:70:26:f0:b4:e5:4d:6b:57: e8:ba:0b:31:4c:50:c0:77:6d:01:21:59:ae:52:5b:1e:c4:df: 88:24:84:4b:30:ac:6c:1c:72:4b:52:30:07:98:8a:ad:2a:f2: 93:d4:e2:24:01:24:30:a6:75:63:4c:7d:26:e9:a2:46:f0:b7: 07:46:2d:af -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjt9Dq23cySiq1L5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIxOTAxNDUzM1oXDTI3MDUyNTAwNDUzM1owLzEtMCsGA1UEAxMk YjEyMDcyZGMtOGIyOS00OWRlLTgwMGUtMjQzOWExZjRiZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+nBtvsxubhU2ULjTYqAT1mNXxo82H6bC7O2 raWdDWxQQT4qEEaB4mrZNljlKBs+f1kWaJC3kr3Q+fJW+BwWMDe0NIvzXzoR+T1B qte7wcrgujiL3pn8RnyhW28d248IgoMTTEpvYvpEk+2Qf5oHkmlEzRmub9PHHaV7 gj63MC8MPzy4mV5bM6XwJOJJdlrw0qFI1zgjGN537LhF1ZJ2Kr1q8oGGPoy0YWH/ AvRMD6KpupNMx1DQ7vygBlGxA7RzqhRzkDOIkOaX9r0CZsh8piSoVwWj4bhTGR4s DNKUmzVHrYzPBqmyFJdMr2WEk3wdWunBtq4rioRy0fwdtKR01QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFG2xM7lKuFEKfUkncKRhV305WvRmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i MTIwNzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5YTFmNGJmOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2IxMjA3MmRjLThiMjktNDlkZS04 MDBlLTI0MzlhMWY0YmY5Ny9iMTIwNzJkYy04YjI5LTQ5ZGUtODAwZS0yNDM5YTFm NGJmOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpQgwDgQCAAIwCAMGACYC+dwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYZeTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZ23pnRTubQ4N/fm5zMO1Vb99V irOs2iXY5XpkiupHLqjUUraQsi84QO4JnVE4HuXzRnp6H7J5u9J6LZ7JeNtakpRe ZrXpmmND9QQ9Z3P7viyRjQMI7KYBpr+gxNRH75FXFLYt4Pu48jPKSkVwzlnd4k2A /dBdNPrcFxufHemR4TamYODzj8nKCT3gALj3vB2YJ6ah8joqX2yljhBzVkNo9myS vRiSMaBv0w4G9s1QttwG25D/uQKfmxBBozqVcCbwtOVNa1fougsxTFDAd20BIVmu UlsexN+IJIRLMKxsHHJLUjAHmIqtKvKT1OIkASQwpnVjTH0m6aJG8LcHRi2v -----END CERTIFICATE-----Generated at Sun May 11 01:46:15 2025 by rpki-client