$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer File: 4559e616-17ae-4214-9407-2e51c3be0fa4.cer (raw, json) Hash identifier: +LzVKGisN6104UT+Cwv8gTHhgJDJdNFSs1KgYkXGRLE= Subject key identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584985FCBD1811A8F34F08700780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 12:45:34 +0000 Certificate not after: Sun 18 Jul 2027 12:45:34 +0000 Subordinate resources: IP: 23.165.232.0/24 IP: 2602:f9d4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:85:fc:bd:18:11:a8:f3:4f:08:70:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 14 12:45:34 2025 GMT Not After : Jul 18 12:45:34 2027 GMT Subject: CN=4559e616-17ae-4214-9407-2e51c3be0fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:5b:7f:65:fe:ba:08:06:e1:a1:62:af:04: 1a:6a:ec:b5:bf:b3:91:36:f1:cc:ce:f6:f9:70:2d: 96:cd:b7:45:a3:fd:0f:dd:6d:d9:b9:e3:cf:bb:a3: 85:a1:5b:83:f5:9d:dc:0c:ad:a4:6a:c5:c0:0a:d0: 6a:0f:a6:e5:b0:81:99:ce:eb:e3:1e:a0:bc:84:a4: 0e:54:04:34:68:78:84:32:c2:26:a8:a3:f6:73:5f: 3d:83:56:9d:33:36:ed:f0:6b:f8:17:c0:83:9b:3c: c3:57:43:23:2b:10:90:a6:23:2d:6d:ec:1b:6c:27: 64:44:22:cf:9f:0f:0d:77:a4:ad:61:c1:23:ec:22: 38:31:c4:9a:8d:53:99:16:11:0c:80:e9:61:0a:6e: b0:9d:2c:fc:cb:0a:14:e1:27:a3:22:26:42:2f:1c: 39:a2:39:93:f3:70:dd:f0:d0:13:a3:7f:23:93:dc: 96:b0:3a:1b:63:a6:28:09:40:92:b7:5d:c0:ed:0d: a8:fc:66:fc:3b:56:7c:2d:db:71:7d:52:5a:c2:34: 1f:b1:56:13:13:76:95:64:ac:e6:07:22:63:c5:45: c3:25:78:bc:dd:1d:4f:78:e2:b9:20:6f:c4:08:e3: 0f:64:dc:d5:71:e8:19:3a:10:70:36:e0:8d:4e:66: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.232.0/24 IPv6: 2602:f9d4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5b:b4:cb:a2:1d:c3:c9:5a:a2:63:06:60:0a:02:6e:fc:76: 75:8a:a6:be:7d:f2:cf:a5:b3:20:52:43:c7:f9:ec:d8:2e:57: b1:01:de:c6:65:63:ac:31:1a:33:52:40:8f:d1:a7:5d:74:f7: f2:da:fd:d1:14:13:d2:9b:65:f5:ae:38:7d:e8:44:5f:27:59: 0c:53:94:a3:21:79:0d:5a:e3:b5:3c:b9:3c:12:53:1d:35:af: f8:0c:f1:b4:70:15:31:4e:05:56:b7:bb:50:83:ae:92:5b:94: 78:63:84:0a:3d:bb:95:61:e1:7f:ba:ba:78:e2:59:2d:df:b1: 69:c2:2a:c2:b8:ca:e8:fe:2b:69:ad:92:c7:99:c4:c1:d2:11: 6b:20:47:46:c2:97:1d:ea:64:a7:bc:63:99:87:a8:39:87:3c: a2:f6:da:e2:83:bb:c3:c1:f4:29:2a:92:6a:c1:26:ea:77:3d: 25:4f:4c:46:08:48:8f:36:0c:a2:63:b4:df:a7:6c:a7:89:72: 6b:0f:90:68:1c:3c:81:94:95:ed:40:32:b0:b5:c9:44:6d:bf: c7:0a:6a:4e:e4:7c:6a:58:dd:92:e8:3b:9e:c8:09:d7:30:00: 53:d0:ad:14:8c:61:91:4b:6f:1e:1d:78:bc:74:90:19:b8:bf: 8e:5d:62:18 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEmF/L0YEajzTwhwB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQxNDEyNDUzNFoXDTI3MDcxODEyNDUzNFowLzEtMCsGA1UEAxMk NDU1OWU2MTYtMTdhZS00MjE0LTk0MDctMmU1MWMzYmUwZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZxbf2X+uggG4aFirwQaauy1v7ORNvHMzvb5 cC2WzbdFo/0P3W3ZuePPu6OFoVuD9Z3cDK2kasXACtBqD6blsIGZzuvjHqC8hKQO VAQ0aHiEMsImqKP2c189g1adMzbt8Gv4F8CDmzzDV0MjKxCQpiMtbewbbCdkRCLP nw8Nd6StYcEj7CI4McSajVOZFhEMgOlhCm6wnSz8ywoU4SejIiZCLxw5ojmT83Dd 8NATo38jk9yWsDobY6YoCUCSt13A7Q2o/Gb8O1Z8LdtxfVJawjQfsVYTE3aVZKzm ByJjxUXDJXi83R1PeOK5IG/ECOMPZNzVcegZOhBwNuCNTmY46QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFMfxKOinmmW1R5k9yu9ksdd7X4kPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 NTU5ZTYxNi0xN2FlLTQyMTQtOTQwNy0yZTUxYzNiZTBmYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQ1NTllNjE2LTE3YWUtNDIxNC05 NDA3LTJlNTFjM2JlMGZhNC80NTU5ZTYxNi0xN2FlLTQyMTQtOTQwNy0yZTUxYzNi ZTBmYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpegwDgQCAAIwCAMGACYC+dQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AE5btMuiHcPJWqJjBmAKAm78dnWKpr598s+lsyBSQ8f57NguV7EB3sZlY6wxGjNS QI/Rp1109/La/dEUE9KbZfWuOH3oRF8nWQxTlKMheQ1a47U8uTwSUx01r/gM8bRw FTFOBVa3u1CDrpJblHhjhAo9u5Vh4X+6unjiWS3fsWnCKsK4yuj+K2mtkseZxMHS EWsgR0bClx3qZKe8Y5mHqDmHPKL22uKDu8PB9CkqkmrBJup3PSVPTEYISI82DKJj tN+nbKeJcmsPkGgcPIGUle1AMrC1yURtv8cKak7kfGpY3ZLoO57ICdcwAFPQrRSM YZFLbx4deLx0kBm4v45dYhg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:24 2025 by rpki-client