$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer File: 46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer (raw, json) Hash identifier: VqbwOMIcI+QloTDRc5nv28OpqlEtidryr/sWzOsyME8= Subject key identifier: 8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584985FCBCA74A17DCC0CC22E840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 12:45:34 +0000 Certificate not after: Sun 18 Jul 2027 12:45:34 +0000 Subordinate resources: IP: 23.167.56.0/24 IP: 2602:f9c4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:85:fc:bc:a7:4a:17:dc:c0:cc:22:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 14 12:45:34 2025 GMT Not After : Jul 18 12:45:34 2027 GMT Subject: CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:f9:36:17:65:f5:8b:60:62:9a:84:40:68: 72:91:2f:00:ff:85:5e:07:4d:c7:11:1e:f9:2a:73: 6e:62:77:73:62:61:1c:db:01:58:77:d3:f1:05:2b: ee:2c:bb:35:fa:90:2e:ae:ba:71:bc:d3:bb:f9:fb: f9:d1:46:bf:d9:7e:2c:ab:d2:aa:f7:d5:f1:db:b9: b8:c8:d9:ca:41:55:2f:70:b7:9f:f5:50:4d:8b:4c: 20:fa:1b:ad:e4:8b:30:d7:cd:7e:a4:eb:3e:7b:6d: 48:f5:f5:1e:7f:79:12:db:8d:e6:30:5a:41:e7:76: 5e:fb:30:4f:fd:a9:42:2d:55:12:b9:2a:d6:7f:2c: 39:f0:50:ab:f2:dd:d3:46:a8:1c:60:f5:b3:31:95: bb:4f:e4:82:e0:df:58:07:4f:c4:d8:44:e3:e9:3f: e1:9f:41:a2:08:91:33:ad:0f:a1:55:ac:ec:b0:b9: 96:af:e1:9e:f5:5d:f8:69:34:b6:67:dc:ff:f6:a6: ad:2a:42:4a:28:2d:3f:26:e6:45:9a:e8:6f:ab:d1: 37:9b:61:9c:78:3a:3b:7e:6a:33:c4:69:1c:57:7f: 93:37:b3:02:5e:a8:56:3e:e1:ee:e2:9c:d7:a0:50: e5:1a:c8:58:28:56:54:12:30:a6:60:de:7c:0a:d6: 06:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.167.56.0/24 IPv6: 2602:f9c4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:35:44:a4:39:9e:21:dd:e7:1c:c1:90:2e:b7:41:a2:f1:fc: fe:5c:6c:1d:92:91:94:d7:e5:fd:ed:f8:75:79:b3:ae:ad:50: d1:0f:a2:6d:48:a6:da:92:dc:d1:81:66:de:a1:3d:c0:6f:78: 21:1f:95:81:ae:4c:e6:59:10:10:94:03:c9:e1:5b:e9:62:af: 35:8f:dd:96:27:38:1b:aa:c3:86:db:8d:5a:16:be:0a:e2:af: ef:89:b7:2d:41:67:24:c9:b2:f6:ef:23:27:cc:cb:5e:8c:71: 94:1e:f7:a0:5e:0f:a4:22:0f:54:08:f5:d4:f7:1e:53:ab:79: b4:da:ac:d0:d9:65:8d:66:d5:f1:14:8b:02:16:2c:b3:e8:15: 02:c7:35:a6:eb:bf:e3:f5:10:8e:a4:88:4a:56:3b:1c:e7:4d: 25:5a:72:6e:44:b8:e7:b8:b3:ca:ad:40:29:ba:bf:d6:fe:2d: d4:3d:f4:37:32:69:cd:29:b5:52:9a:35:a1:5c:4b:82:14:02: a3:b4:2f:47:84:2d:2b:5e:26:6b:05:8d:35:81:53:96:73:a5: 6f:e4:be:15:93:d6:90:7b:02:50:60:4c:07:ac:cb:bf:50:42: b1:66:37:f5:9b:f2:00:8c:f7:ce:91:3f:93:88:fd:55:85:e8: f2:53:1e:14 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEmF/LynShfcwMwi6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQxNDEyNDUzNFoXDTI3MDcxODEyNDUzNFowLzEtMCsGA1UEAxMk NDZlYTZkMDctOTIwOS00YWQxLWIwYmYtZmNkOGY1MDE4YzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7f5Nhdl9YtgYpqEQGhykS8A/4VeB03HER75 KnNuYndzYmEc2wFYd9PxBSvuLLs1+pAurrpxvNO7+fv50Ua/2X4sq9Kq99Xx27m4 yNnKQVUvcLef9VBNi0wg+hut5Isw181+pOs+e21I9fUef3kS243mMFpB53Ze+zBP /alCLVUSuSrWfyw58FCr8t3TRqgcYPWzMZW7T+SC4N9YB0/E2ETj6T/hn0GiCJEz rQ+hVazssLmWr+Ge9V34aTS2Z9z/9qatKkJKKC0/JuZFmuhvq9E3m2GceDo7fmoz xGkcV3+TN7MCXqhWPuHu4pzXoFDlGshYKFZUEjCmYN58CtYGWwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFI9IQb6tT4v5QIGgkMNwI6yRaDZhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 NmVhNmQwNy05MjA5LTRhZDEtYjBiZi1mY2Q4ZjUwMThjNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzQ2ZWE2ZDA3LTkyMDktNGFkMS1i MGJmLWZjZDhmNTAxOGM3MC80NmVhNmQwNy05MjA5LTRhZDEtYjBiZi1mY2Q4ZjUw MThjNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpzgwDgQCAAIwCAMGACYC+cQAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIo1RKQ5niHd5xzBkC63QaLx/P5cbB2SkZTX5f3t+HV5s66tUNEPom1IptqS3NGB Zt6hPcBveCEflYGuTOZZEBCUA8nhW+lirzWP3ZYnOBuqw4bbjVoWvgrir++Jty1B ZyTJsvbvIyfMy16McZQe96BeD6QiD1QI9dT3HlOrebTarNDZZY1m1fEUiwIWLLPo FQLHNabrv+P1EI6kiEpWOxznTSVacm5EuOe4s8qtQCm6v9b+LdQ99Dcyac0ptVKa NaFcS4IUAqO0L0eELSteJmsFjTWBU5ZzpW/kvhWT1pB7AlBgTAesy79QQrFmN/Wb 8gCM986RP5OI/VWF6PJTHhQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:26:09 2025 by rpki-client