$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5.cer File: 06ed120e-7778-4219-8811-97d5203ce0c5.cer (raw, json) Hash identifier: blGeRN/8zSqmLgob9OKyjHCbj/10Hh0kq/Chxj+pLLE= Subject key identifier: 63:56:AC:A5:8C:5C:E1:EB:3A:E8:8D:45:9F:84:C8:15:66:15:02:AB Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849123F1FBD97614D4998A24100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Mar 2025 01:45:33 +0000 Certificate not after: Mon 07 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 54043 IP: 23.166.104.0/24 IP: 2607:7d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:3f:1f:bd:97:61:4d:49:98:a2:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Mar 4 01:45:33 2025 GMT Not After : Jun 7 00:45:33 2027 GMT Subject: CN=06ed120e-7778-4219-8811-97d5203ce0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:e3:1b:71:25:16:ca:0e:2c:08:26:d7:da: 3d:18:48:c0:ea:43:55:25:fc:58:56:6c:73:52:bf: 38:10:0f:0a:a8:40:39:fe:37:97:1f:bd:b2:05:7d: b7:d8:c8:a6:be:66:e7:3f:6f:52:f0:5b:de:42:5f: 9c:3a:e5:2e:f5:80:47:ba:3f:d7:51:d4:3b:b0:45: a4:6e:57:9c:e0:ee:20:a6:b0:c4:50:cc:37:d1:0b: c8:1a:19:3d:be:17:92:d7:64:68:10:21:10:ec:36: 63:56:1a:34:e9:b9:e6:bd:9b:04:77:30:53:8d:fb: 44:88:b2:cc:81:eb:c4:97:bf:df:ea:d1:51:29:d0: 4d:12:1b:68:5c:04:b2:10:96:29:76:a2:21:c5:34: d0:6c:ec:26:98:67:52:c7:03:eb:3e:0b:3a:67:b7: 1d:a1:1e:5b:19:c1:e7:81:2d:4e:55:ed:21:e5:41: 14:a1:d6:cf:d4:e3:89:9a:f4:07:58:05:89:28:02: 15:2a:1f:de:8b:61:51:de:c1:6f:7f:04:b1:d2:d8: 79:5a:f3:3a:aa:14:a1:83:de:8a:f2:e0:03:37:9a: fe:20:81:e8:e3:c1:13:2e:15:e0:e4:b1:5d:2c:a1: af:f1:84:7a:76:d5:7e:2c:e3:71:45:b2:18:0c:63: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:56:AC:A5:8C:5C:E1:EB:3A:E8:8D:45:9F:84:C8:15:66:15:02:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.166.104.0/24 IPv6: 2607:7d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54043 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:01:ee:dd:70:4b:2f:70:6a:a3:53:54:e2:ca:3f:30:38:93: 64:17:0a:78:fc:3f:1b:38:56:e6:18:c9:dd:a3:df:e8:42:28: 13:4f:10:55:ff:61:22:89:1f:11:f0:7b:89:c7:08:b3:9a:78: 13:8e:fb:49:25:43:0a:be:b8:0d:48:b7:05:50:e7:b0:28:98: cc:55:58:a9:aa:bd:ff:cc:57:eb:9d:40:ff:05:32:e0:46:25: c1:44:1c:a2:84:cb:68:27:81:60:f5:02:52:7f:91:cf:58:d3: 65:27:4d:aa:44:eb:c9:e8:91:57:6e:a7:08:5b:3e:13:29:3b: 29:03:91:2b:e7:25:77:22:49:66:e2:02:76:48:6c:7c:77:58: 3c:4a:a8:e2:76:93:cc:b5:c5:52:18:b1:88:1b:27:b8:03:ec: 71:b2:e6:b2:0e:7e:d6:08:34:ae:0a:9f:8e:17:6b:7e:0f:1d: a7:51:81:a2:37:a3:fb:37:dd:e7:68:f7:26:a0:e6:9b:dd:66: a1:01:8e:ed:2d:85:42:18:74:9e:a0:a3:44:70:da:62:86:fe: 3f:7e:b8:da:5f:e6:38:16:ed:26:dd:fe:dd:82:c6:e5:aa:2e: cf:1c:58:13:d0:78:7e:8f:90:bf:f1:d7:7c:df:e7:dc:ad:63: d0:8a:96:42 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkSPx+9l2FNSZiiQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDMwNDAxNDUzM1oXDTI3MDYwNzAwNDUzM1owLzEtMCsGA1UEAxMk MDZlZDEyMGUtNzc3OC00MjE5LTg4MTEtOTdkNTIwM2NlMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjvjG3ElFsoOLAgm19o9GEjA6kNVJfxYVmxz Ur84EA8KqEA5/jeXH72yBX232MimvmbnP29S8FveQl+cOuUu9YBHuj/XUdQ7sEWk blec4O4gprDEUMw30QvIGhk9vheS12RoECEQ7DZjVho06bnmvZsEdzBTjftEiLLM gevEl7/f6tFRKdBNEhtoXASyEJYpdqIhxTTQbOwmmGdSxwPrPgs6Z7cdoR5bGcHn gS1OVe0h5UEUodbP1OOJmvQHWAWJKAIVKh/ei2FR3sFvfwSx0th5WvM6qhShg96K 8uADN5r+IIHo48ETLhXg5LFdLKGv8YR6dtV+LONxRbIYDGMMLwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGNWrKWMXOHrOuiNRZ+EyBVmFQKrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8w NmVkMTIwZS03Nzc4LTQyMTktODgxMS05N2Q1MjAzY2UwYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzA2ZWQxMjBlLTc3NzgtNDIxOS04 ODExLTk3ZDUyMDNjZTBjNS8wNmVkMTIwZS03Nzc4LTQyMTktODgxMS05N2Q1MjAz Y2UwYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXpmgwDQQCAAIwBwMFACYHfUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANMbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIkB7t1wSy9waqNTVOLKPzA4k2QX Cnj8Pxs4VuYYyd2j3+hCKBNPEFX/YSKJHxHwe4nHCLOaeBOO+0klQwq+uA1ItwVQ 57AomMxVWKmqvf/MV+udQP8FMuBGJcFEHKKEy2gngWD1AlJ/kc9Y02UnTapE68no kVdupwhbPhMpOykDkSvnJXciSWbiAnZIbHx3WDxKqOJ2k8y1xVIYsYgbJ7gD7HGy 5rIOftYINK4Kn44Xa34PHadRgaI3o/s33edo9yag5pvdZqEBju0thUIYdJ6go0Rw 2mKG/j9+uNpf5jgW7Sbd/t2CxuWqLs8cWBPQeH6PkL/x13zf59ytY9CKlkI= -----END CERTIFICATE-----Generated at Tue Apr 29 00:30:42 2025 by rpki-client