$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer File: 8d37a072-15ae-4905-810e-991fc6201b45.cer (raw, json) Hash identifier: uI6pmXoyR3XH3DEQdmknvY7LgxTYLrn3+5iFZ0rfM54= Subject key identifier: 31:F3:6A:E0:EB:81:E6:E3:7B:6C:55:02:40:E4:4F:91:B0:18:8C:B3 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285849B5948C7C5A7ECD65B5369B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 May 2025 13:54:27 +0000 Certificate not after: Sun 29 Nov 2026 20:20:41 +0000 Subordinate resources: AS: 19330 AS: 394839 IP: 23.168.24.0/24 IP: 2602:f9ba::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:94:8c:7c:5a:7e:cd:65:b5:36:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: May 1 13:54:27 2025 GMT Not After : Nov 29 20:20:41 2026 GMT Subject: CN=8d37a072-15ae-4905-810e-991fc6201b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:79:74:65:3d:8e:1a:34:05:54:db:8c:aa: 16:4a:c6:a3:ad:9b:85:a4:ee:d1:de:49:bc:e6:e8: 95:17:d6:9e:7d:a8:76:4e:73:d9:56:2e:4a:a2:4e: b7:9b:cb:52:eb:08:1f:7f:cb:5b:3b:7b:13:39:f9: be:fa:ab:19:63:3b:b8:d4:6c:70:a2:37:5b:72:63: 63:9c:0b:fe:ee:db:f1:67:1c:60:ed:b8:ec:ee:57: ca:42:4b:9c:52:67:70:b8:b8:be:15:10:0b:c4:e4: 94:69:1e:40:cc:b6:7a:54:09:57:cd:e3:ba:6b:80: 54:98:7c:84:8f:ea:90:b7:49:14:05:1a:63:49:a8: 6c:27:5b:a0:09:a8:40:a7:23:07:75:12:38:2d:5c: 99:1d:a6:69:74:99:20:c4:d8:51:55:f5:fc:70:3b: aa:94:06:89:c0:dc:3c:c7:7f:27:36:50:71:e2:be: 71:ac:17:92:ba:bb:74:4c:be:5b:45:c8:22:82:db: 7b:eb:46:c4:b0:98:75:8e:cf:42:94:e0:92:01:93: 17:67:58:74:3f:ae:54:f3:47:2a:70:14:b5:a0:df: 44:89:22:38:1f:16:97:51:93:fa:54:1e:99:0e:32: be:5d:04:b1:76:56:ce:5a:04:80:21:83:d3:22:7a: 11:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:6A:E0:EB:81:E6:E3:7B:6C:55:02:40:E4:4F:91:B0:18:8C:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.168.24.0/24 IPv6: 2602:f9ba::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19330 394839 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5e:6c:b2:fe:e1:24:9e:8b:7d:4f:47:97:f6:27:e7:41:2f: 72:31:29:49:ee:6e:79:3b:13:03:87:4c:aa:e0:03:3f:4c:d6: 00:9f:c5:f1:b1:3c:9b:1d:4c:7a:8f:1b:19:71:b4:b0:ba:f4: 2f:47:b4:ec:75:75:f4:85:bd:68:33:f9:61:d0:1c:94:c6:c3: df:10:bd:b4:7f:aa:a5:5b:30:c5:f7:c1:13:40:92:8e:67:42: 96:ad:ed:ab:e4:0f:4b:e0:93:b2:42:fb:77:bb:41:07:6b:61: b4:fb:b0:2b:c0:90:31:32:72:2a:85:9c:06:e6:db:d9:63:ea: 9e:d3:1e:37:53:0e:d2:40:1a:99:00:e0:3b:0a:2e:35:11:78: f7:12:f8:c0:00:8e:b5:9b:f1:bc:4c:71:31:32:49:3e:31:91: 48:c5:ca:0a:79:33:e3:f6:84:d9:4f:d2:91:64:24:0c:52:db: 02:e0:17:0b:3a:fc:fe:81:70:15:53:b4:6f:78:b9:09:75:e4: 06:37:51:3b:19:1e:90:28:b1:62:51:29:e2:f1:e1:1d:ad:31: 65:77:6f:c5:c2:60:7a:1c:b1:76:f6:02:ef:d8:b0:b2:d1:07: 0f:af:cb:8b:a7:72:18:c1:db:1b:ea:9e:2e:b8:8e:2e:6a:f8: c6:f0:ad:7d -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEm1lIx8Wn7NZbU2m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDUwMTEzNTQyN1oXDTI2MTEyOTIwMjA0MVowLzEtMCsGA1UEAxMk OGQzN2EwNzItMTVhZS00OTA1LTgxMGUtOTkxZmM2MjAxYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeV5dGU9jho0BVTbjKoWSsajrZuFpO7R3km8 5uiVF9aefah2TnPZVi5Kok63m8tS6wgff8tbO3sTOfm++qsZYzu41GxwojdbcmNj nAv+7tvxZxxg7bjs7lfKQkucUmdwuLi+FRALxOSUaR5AzLZ6VAlXzeO6a4BUmHyE j+qQt0kUBRpjSahsJ1ugCahApyMHdRI4LVyZHaZpdJkgxNhRVfX8cDuqlAaJwNw8 x38nNlBx4r5xrBeSurt0TL5bRcgigtt760bEsJh1js9ClOCSAZMXZ1h0P65U80cq cBS1oN9EiSI4HxaXUZP6VB6ZDjK+XQSxdlbOWgSAIYPTInoR+QIDAQABo4IELzCC BCswHQYDVR0OBBYEFDHzauDrgebje2xVAkDkT5GwGIyzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84 ZDM3YTA3Mi0xNWFlLTQ5MDUtODEwZS05OTFmYzYyMDFiNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04 MTBlLTk5MWZjNjIwMWI0NS84ZDM3YTA3Mi0xNWFlLTQ5MDUtODEwZS05OTFmYzYy MDFiNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqBgwDgQCAAIwCAMGBCYC+boAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAkuCAgMGBlcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKV5ssv7hJJ6LfU9Hl/Yn 50EvcjEpSe5ueTsTA4dMquADP0zWAJ/F8bE8mx1Meo8bGXG0sLr0L0e07HV19IW9 aDP5YdAclMbD3xC9tH+qpVswxffBE0CSjmdClq3tq+QPS+CTskL7d7tBB2thtPuw K8CQMTJyKoWcBubb2WPqntMeN1MO0kAamQDgOwouNRF49xL4wACOtZvxvExxMTJJ PjGRSMXKCnkz4/aE2U/SkWQkDFLbAuAXCzr8/oFwFVO0b3i5CXXkBjdROxkekCix YlEp4vHhHa0xZXdvxcJgehyxdvYC79iwstEHD6/Li6dyGMHbG+qeLriOLmr4xvCt fQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:42:52 2025 by rpki-client