$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer File: 06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer (raw, json) Hash identifier: cnNvEFJOJTiM2Bxci1rSJYnv/PcZhdPpn2uMNixtwSk= Subject key identifier: D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848F91EF7706444431C9CF80A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Feb 2025 01:45:33 +0000 Certificate not after: Sat 29 May 2027 00:45:33 +0000 Subordinate resources: AS: 40690 IP: 162.251.207.0/24 IP: 2602:fa25::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:1e:f7:70:64:44:43:1c:9c:f8:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 23 01:45:33 2025 GMT Not After : May 29 00:45:33 2027 GMT Subject: CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:28:65:20:8b:25:4f:70:74:b4:d5:08:15: f2:51:41:e8:87:24:03:19:51:dd:f4:51:87:b2:d1: 92:31:44:19:5a:53:ce:29:f1:90:c0:91:19:2d:e1: 78:1f:27:95:95:66:27:c3:30:52:88:16:a8:ea:ca: c9:ce:ef:99:06:8d:ba:c8:4a:16:97:41:ee:aa:a1: 8d:42:c8:6c:26:4f:23:a3:90:66:cb:82:56:f2:ee: ef:8c:9f:aa:b6:1f:6b:ef:6f:d6:68:cd:38:ff:47: c9:d0:6d:3f:0d:9e:23:3f:84:63:da:48:59:51:6a: 57:29:db:58:ff:1d:88:2e:a3:be:18:3d:17:e2:5a: 21:a3:de:6c:f9:7b:01:ca:3d:52:07:b8:38:af:92: ac:ba:4f:45:ec:7f:67:69:6d:04:ef:da:2b:6c:d6: 0b:d4:7e:0e:cb:24:a5:78:0d:15:2f:c1:7a:aa:1e: c5:ea:e8:94:c0:fe:6e:c8:d2:94:e1:f0:c5:1d:72: d0:c7:a8:42:39:a1:76:76:41:d8:69:e9:3d:5d:c5: 56:ce:ae:e3:18:7c:f9:14:74:e3:a0:09:7f:89:fc: bc:56:56:a9:b5:3a:dd:3a:cd:24:e0:b3:85:d6:94: 11:28:f9:ec:d6:a0:73:90:52:fa:0b:1a:8b:e5:e6: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 162.251.207.0/24 IPv6: 2602:fa25::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40690 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6c:f3:65:9a:79:95:14:ca:4b:97:b4:d8:51:f5:d5:46:62: 6c:5f:ce:f6:34:8d:4e:d8:0e:cb:bd:56:9c:1a:04:2c:92:93: fd:8d:76:8d:d6:36:6c:b3:1e:f2:df:c8:46:82:50:74:45:70: b6:9b:01:07:2c:dd:00:6b:17:05:e0:be:aa:95:cd:69:7c:f9: 3e:ad:b0:ee:7e:c0:32:8d:ca:8c:02:81:1e:67:0d:23:3b:1b: 7a:98:25:0d:ba:4c:34:65:47:0c:a0:ef:8f:24:7b:dd:58:92: a6:d5:73:9d:2d:01:88:9b:65:09:a2:47:aa:9e:86:d2:67:4e: 45:38:d2:49:2b:5d:33:ed:ab:1a:ae:7c:69:ad:c1:88:f6:fd: 89:08:4c:06:a2:0e:b1:54:87:1d:b0:67:9f:0e:9f:35:0e:3f: e1:6b:fe:a8:7e:b7:89:6e:52:59:96:58:e1:6d:21:8f:b7:75: 6b:57:3e:6c:c2:96:26:de:1a:d9:00:ae:ac:9b:aa:87:e1:74: 91:2f:9a:77:bc:8c:02:42:5a:3a:70:d4:c1:56:5f:fe:2f:30: ee:18:00:fe:d8:29:aa:60:43:17:07:1b:84:e1:b0:b0:a9:f3: fa:99:5e:f8:27:3e:8f:fb:7d:f2:8c:d7:97:b7:26:5b:b3:7a: 34:2b:4b:aa -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEj5HvdwZERDHJz4CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIyMzAxNDUzM1oXDTI3MDUyOTAwNDUzM1owLzEtMCsGA1UEAxMk MDZhZGM1MWItOTVmNC00NGU5LWJmNmQtM2Y5YTM5NTBmZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTgoZSCLJU9wdLTVCBXyUUHohyQDGVHd9FGH stGSMUQZWlPOKfGQwJEZLeF4HyeVlWYnwzBSiBao6srJzu+ZBo26yEoWl0HuqqGN QshsJk8jo5Bmy4JW8u7vjJ+qth9r72/WaM04/0fJ0G0/DZ4jP4Rj2khZUWpXKdtY /x2ILqO+GD0X4loho95s+XsByj1SB7g4r5Ksuk9F7H9naW0E79orbNYL1H4OyySl eA0VL8F6qh7F6uiUwP5uyNKU4fDFHXLQx6hCOaF2dkHYaek9XcVWzq7jGHz5FHTj oAl/ify8VlaptTrdOs0k4LOF1pQRKPns1qBzkFL6CxqL5eYJQwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNAE/uILyMbD/iuEJRz/qLPaWGDWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NmFkYzUxYi05NWY0LTQ0ZTktYmY2ZC0zZjlhMzk1MGZlZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA2YWRjNTFiLTk1ZjQtNDRlOS1i ZjZkLTNmOWEzOTUwZmVlZS8wNmFkYzUxYi05NWY0LTQ0ZTktYmY2ZC0zZjlhMzk1 MGZlZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACi+88wDgQCAAIwCAMGACYC+iUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCe8jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPbPNlmnmVFMpLl7TYUfXVRmJs X872NI1O2A7LvVacGgQskpP9jXaN1jZssx7y38hGglB0RXC2mwEHLN0AaxcF4L6q lc1pfPk+rbDufsAyjcqMAoEeZw0jOxt6mCUNukw0ZUcMoO+PJHvdWJKm1XOdLQGI m2UJokeqnobSZ05FONJJK10z7asarnxprcGI9v2JCEwGog6xVIcdsGefDp81Dj/h a/6ofreJblJZlljhbSGPt3VrVz5swpYm3hrZAK6sm6qH4XSRL5p3vIwCQlo6cNTB Vl/+LzDuGAD+2CmqYEMXBxuE4bCwqfP6mV74Jz6P+33yjNeXtyZbs3o0K0uq -----END CERTIFICATE-----Generated at Mon Apr 28 00:12:15 2025 by rpki-client