$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer File: f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer (raw, json) Hash identifier: 2dexe8vmHq9fgqZx//6ELQyJCWMCq9VeURN2LvMmjh0= Subject key identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848F91EF79B37C03FDC45FC3280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Feb 2025 01:45:33 +0000 Certificate not after: Sat 29 May 2027 00:45:33 +0000 Subordinate resources: AS: 40924 IP: 23.165.24.0/24 IP: 2602:816:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:1e:f7:9b:37:c0:3f:dc:45:fc:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 23 01:45:33 2025 GMT Not After : May 29 00:45:33 2027 GMT Subject: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:03:fd:17:8e:ad:dd:f8:ef:0f:03:31:7f: a0:59:3e:8b:c2:eb:d0:04:06:94:89:e8:0c:99:ae: 61:46:e2:28:33:31:c7:aa:45:f3:cf:35:4d:d5:5d: 17:9a:bf:d3:8c:ae:64:47:67:d2:56:da:56:94:e3: e1:cb:08:2f:81:e3:70:d9:d3:e7:13:b9:1d:69:d9: 48:1b:bf:84:50:82:66:95:e4:81:47:40:20:93:b7: 35:a5:3c:a0:1a:a4:61:10:bd:46:95:8d:92:66:f9: f8:9f:7a:0c:2f:ee:6c:5a:ab:03:10:eb:65:a1:32: 97:83:e1:29:26:ba:14:63:0c:55:a4:2d:93:d3:30: a0:cb:a8:db:a7:97:37:7a:79:7b:d6:9b:0b:07:e8: 14:88:35:23:2b:0c:7b:0d:33:8c:42:1a:7f:58:3f: 08:a4:99:e0:9e:26:4a:b6:eb:7a:dd:27:1f:f0:24: ed:cf:29:e3:99:3a:9e:5b:f3:b8:fa:6e:88:06:07: a8:68:d8:55:b7:ad:4b:6a:17:23:91:96:a8:c8:7d: 60:8f:22:02:95:c8:d5:7b:33:38:d4:25:5d:aa:3f: c7:4c:b6:86:21:ef:11:76:a9:a4:99:aa:bb:1f:a6: fd:2e:cc:78:31:b0:4b:54:a9:52:2e:31:d9:d2:48: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.24.0/24 IPv6: 2602:816:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40924 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:14:c4:8f:c8:70:2f:8a:71:ca:f3:4a:df:db:f0:9f:c5:09: ad:4d:f2:87:7b:be:86:45:cb:29:96:b7:7a:0c:4c:3b:c2:a3: bc:8a:69:09:f5:44:38:1d:ee:f3:96:46:10:22:93:75:dd:c7: 05:03:45:08:62:26:01:ac:ea:50:1a:8f:d6:f4:36:dc:53:8b: a8:f6:7b:24:e7:3f:84:03:2d:b8:4d:6b:f8:5e:9d:a4:93:31: af:9d:0b:42:3e:02:6a:ec:24:91:51:17:d0:7a:ee:6e:69:93: 31:7f:28:c2:6e:fc:64:79:76:c8:3e:2c:e3:2e:ad:6f:5b:4c: 93:2c:6b:85:d8:ea:1b:1e:8f:22:85:79:41:56:e9:b3:e1:7d: c0:3f:3c:b1:b1:77:12:55:cf:51:24:d6:57:d7:8e:e8:b6:24: 0f:32:7c:28:71:24:bc:98:87:14:ad:fd:56:c3:9e:45:96:9d: fc:4d:a4:92:91:86:09:9b:0b:71:e9:76:e5:c3:74:6c:ff:65: a8:a7:87:51:a5:b8:75:6c:2d:07:76:f7:cf:7c:53:30:73:9f: 1b:63:ea:6b:72:0f:31:e4:dc:a0:84:10:19:77:06:db:c4:97: 80:c7:4a:82:57:8f:bc:02:21:e2:94:2e:af:00:40:17:e6:26: 93:1f:d1:07 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEj5HvebN8A/3EX8MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIyMzAxNDUzM1oXDTI3MDUyOTAwNDUzM1owLzEtMCsGA1UEAxMk ZjAxZjdlMGItMDBjYi00N2EyLThlMjAtMDMzYjM1NjdjYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4sD/ReOrd347w8DMX+gWT6LwuvQBAaUiegM ma5hRuIoMzHHqkXzzzVN1V0Xmr/TjK5kR2fSVtpWlOPhywgvgeNw2dPnE7kdadlI G7+EUIJmleSBR0Agk7c1pTygGqRhEL1GlY2SZvn4n3oML+5sWqsDEOtloTKXg+Ep JroUYwxVpC2T0zCgy6jbp5c3enl71psLB+gUiDUjKwx7DTOMQhp/WD8IpJngniZK tut63Scf8CTtzynjmTqeW/O4+m6IBgeoaNhVt61LahcjkZaoyH1gjyIClcjVezM4 1CVdqj/HTLaGIe8Rdqmkmaq7H6b9Lsx4MbBLVKlSLjHZ0ki5ewIDAQABo4IELDCC BCgwHQYDVR0OBBYEFMQQsM/uzy1uWJ3gmGWBV4IhpChAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m MDFmN2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNiMzU2N2NjNmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2YwMWY3ZTBiLTAwY2ItNDdhMi04 ZTIwLTAzM2IzNTY3Y2M2ZC9mMDFmN2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNiMzU2 N2NjNmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXpRgwDwQCAAIwCQMHBCYCCBZwADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAn9wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALhTEj8hwL4pxyvNK39vwn8UJ rU3yh3u+hkXLKZa3egxMO8KjvIppCfVEOB3u85ZGECKTdd3HBQNFCGImAazqUBqP 1vQ23FOLqPZ7JOc/hAMtuE1r+F6dpJMxr50LQj4CauwkkVEX0HrubmmTMX8owm78 ZHl2yD4s4y6tb1tMkyxrhdjqGx6PIoV5QVbps+F9wD88sbF3ElXPUSTWV9eO6LYk DzJ8KHEkvJiHFK39VsOeRZad/E2kkpGGCZsLcel25cN0bP9lqKeHUaW4dWwtB3b3 z3xTMHOfG2Pqa3IPMeTcoIQQGXcG28SXgMdKglePvAIh4pQurwBAF+Ymkx/RBw== -----END CERTIFICATE-----Generated at Wed May 7 16:51:45 2025 by rpki-client