$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer File: 7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.cer (raw, json) Hash identifier: x88pHb5lae0d3auPBOIbWUSPohJWdsOX3EQXIUqIAag= Subject key identifier: A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849796CA80107135128DDF14DA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Apr 2025 00:45:33 +0000 Certificate not after: Wed 14 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 46847 IP: 104.219.162.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:6c:a8:01:07:13:51:28:dd:f1:4d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 10 00:45:33 2025 GMT Not After : Jul 14 00:45:33 2027 GMT Subject: CN=7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:61:5c:b7:7c:37:31:af:e4:05:cd:23:c9: 0c:9d:93:17:2e:05:f9:ef:fa:58:9e:d2:e7:fb:14: 6f:dd:41:b7:d9:a3:77:5d:6a:ae:b5:0c:3e:67:67: 72:a0:6e:90:90:64:01:ab:8c:47:5d:86:a7:b8:3f: 43:63:dd:6c:fa:20:a2:c6:ae:5c:f5:f7:aa:bc:8a: a3:b8:4d:87:9a:fa:5c:4f:2a:11:8b:e6:8e:b8:3f: d6:4e:45:34:fc:08:04:c6:19:fc:0b:4b:9e:3a:3c: 71:6e:ac:dc:0f:1e:5e:f6:4d:82:c3:36:db:ca:ea: 3e:10:c4:a7:fb:95:38:47:07:f8:4e:a4:12:32:c7: fe:f5:a8:dd:04:86:55:33:e7:7f:c0:52:70:c4:4a: ab:82:fa:6d:a7:c3:c9:7a:a4:c8:52:17:72:33:a3: ab:5a:11:7e:6b:20:e7:bf:f3:a2:6f:3d:37:09:73: da:f0:61:43:63:a4:8a:e4:77:76:45:89:9f:a4:a1: f6:5f:26:8a:d0:be:8a:88:4b:5a:56:71:c8:55:1d: cf:93:28:c7:b1:b0:0a:af:61:30:ac:0f:21:ed:b8: 09:ca:48:5e:17:03:cc:df:12:f0:d6:d2:4f:71:2f: 98:67:bd:5e:9a:41:61:15:e4:ac:3d:0c:84:84:93: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F1:70:8A:B0:6A:28:01:E2:A1:0A:67:F9:6C:43:0E:5E:C1:C8:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb/7b660723-5a5f-4e7e-8f4d-99c28d5b8cbb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 104.219.162.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46847 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e4:d9:68:ea:9d:a5:5c:1c:8b:88:6c:20:7e:f0:ac:a3:6b: 6b:6d:2c:c4:1d:5e:a1:05:ae:0f:cf:0b:f9:3b:9d:22:3d:96: 68:9d:1c:ee:7d:04:6c:83:6e:5d:e0:f9:d9:43:36:78:f8:eb: 3d:93:90:5b:5c:21:b9:f7:b1:2e:8f:92:eb:ad:3c:67:79:6c: 60:d3:9d:32:bb:e0:78:48:41:d9:3d:4f:f3:14:f1:12:9e:1a: 86:4e:de:23:51:42:7b:93:f5:7a:1b:2b:36:a1:94:8f:27:f6: 2c:c5:38:b0:41:09:66:77:96:9d:76:4e:da:8a:97:27:41:81: 66:b9:b3:e4:7b:f0:11:48:c8:a3:fb:8b:9b:0d:f8:37:0f:0f: de:27:1c:e2:d8:67:10:79:6f:28:e3:94:ad:59:c9:a6:69:e9: 30:a8:aa:d2:d1:2f:ef:cf:66:2e:e5:95:6f:a5:2e:c0:8e:ea: bf:69:af:10:e5:a2:45:b9:0c:f9:55:c6:4b:63:c3:69:3f:23: 40:5e:07:c8:8e:91:56:1a:49:59:06:ba:06:1f:b1:5b:a3:84: a6:cd:b8:e9:a3:5a:f7:45:35:15:f0:c8:f3:b9:24:d9:4b:2d: c0:9b:30:f0:3f:18:52:e1:e3:fa:da:35:79:28:6e:60:da:f6: 93:7c:fe:7b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEl5bKgBBxNRKN3xTaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQxMDAwNDUzM1oXDTI3MDcxNDAwNDUzM1owLzEtMCsGA1UEAxMk N2I2NjA3MjMtNWE1Zi00ZTdlLThmNGQtOTljMjhkNWI4Y2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox1hXLd8NzGv5AXNI8kMnZMXLgX57/pYntLn +xRv3UG32aN3XWqutQw+Z2dyoG6QkGQBq4xHXYanuD9DY91s+iCixq5c9feqvIqj uE2HmvpcTyoRi+aOuD/WTkU0/AgExhn8C0ueOjxxbqzcDx5e9k2Cwzbbyuo+EMSn +5U4Rwf4TqQSMsf+9ajdBIZVM+d/wFJwxEqrgvptp8PJeqTIUhdyM6OrWhF+ayDn v/Oibz03CXPa8GFDY6SK5Hd2RYmfpKH2XyaK0L6KiEtaVnHIVR3PkyjHsbAKr2Ew rA8h7bgJykheFwPM3xLw1tJPcS+YZ71emkFhFeSsPQyEhJOaDQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKLxcIqwaigB4qEKZ/lsQw5ewcgdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83 YjY2MDcyMy01YTVmLTRlN2UtOGY0ZC05OWMyOGQ1YjhjYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzdiNjYwNzIzLTVhNWYtNGU3ZS04 ZjRkLTk5YzI4ZDViOGNiYi83YjY2MDcyMy01YTVmLTRlN2UtOGY0ZC05OWMyOGQ1 YjhjYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFo26IwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALb/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACzk2WjqnaVcHIuIbCB+8Kyja2ttLMQdXqEFrg/PC/k7nSI9 lmidHO59BGyDbl3g+dlDNnj46z2TkFtcIbn3sS6PkuutPGd5bGDTnTK74HhIQdk9 T/MU8RKeGoZO3iNRQnuT9XobKzahlI8n9izFOLBBCWZ3lp12TtqKlydBgWa5s+R7 8BFIyKP7i5sN+DcPD94nHOLYZxB5byjjlK1ZyaZp6TCoqtLRL+/PZi7llW+lLsCO 6r9prxDlokW5DPlVxktjw2k/I0BeB8iOkVYaSVkGugYfsVujhKbNuOmjWvdFNRXw yPO5JNlLLcCbMPA/GFLh4/raNXkobmDa9pN8/ns= -----END CERTIFICATE-----Generated at Sat Apr 26 18:00:23 2025 by rpki-client