$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer File: 9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer (raw, json) Hash identifier: 3/M89wRqGbuKfi6PMkxwZz6Vcpn93JQflQOVLMFYTjc= Subject key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584973D74A8C4C30191B45DF9780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Apr 2025 00:45:34 +0000 Certificate not after: Mon 12 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 35870 IP: 23.144.200.0/24 IP: 2602:fac0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:d7:4a:8c:4c:30:19:1b:45:df:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 8 00:45:34 2025 GMT Not After : Jul 12 00:45:34 2027 GMT Subject: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:66:0a:8c:c2:ec:31:dc:b8:d5:bf:5b:b1: 3d:8a:1f:c1:b0:6b:37:3c:ff:a6:bb:3d:03:2d:77: bc:c7:db:47:8d:77:f5:eb:55:9e:cf:a8:bb:7c:87: a2:7e:f7:1f:04:aa:9c:57:3c:a6:04:6b:4c:62:09: e9:3f:73:25:ff:24:6d:d8:a0:d1:4e:00:00:ae:1d: aa:f2:5b:da:1d:d9:66:4c:d5:fa:b5:d1:9d:e2:3b: cf:b7:7a:e5:e9:5f:e1:5a:ff:35:f6:40:c3:2d:9e: 57:be:8b:22:62:09:b9:09:b9:58:7b:9f:bb:69:08: 0b:3e:7f:ad:4d:6c:52:a3:a1:d4:4d:0e:c8:0b:f4: fb:68:9a:57:53:f6:e7:8d:b5:5f:f2:e7:dd:15:fe: 0b:d5:aa:30:63:11:50:ea:99:3b:16:0a:f6:c0:aa: f7:57:bd:f5:68:30:89:ce:ae:5a:02:9e:ff:b5:9b: fc:d9:ab:04:8a:c6:ca:3e:1c:e9:1d:86:1b:6f:73: 5c:cb:cc:73:ca:56:a3:da:bd:a8:7a:9b:a2:ab:2c: ad:0c:59:ab:3f:8c:49:45:7a:aa:b1:d9:21:7b:1b: 6b:72:09:00:a0:32:85:a7:1e:ac:e3:cd:2a:4f:24: ff:74:a0:f4:06:47:fc:7f:bb:91:9f:2e:4c:31:29: b7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.144.200.0/24 IPv6: 2602:fac0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35870 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3e:43:b7:28:29:56:05:94:fd:c8:2d:ee:11:d8:ec:d1:33: 28:ac:c0:10:95:aa:8b:53:11:71:ee:f4:7a:21:3c:96:69:d8: 2e:2c:b8:da:5c:49:5c:9d:79:03:cc:92:15:9c:0c:87:00:82: 48:41:12:79:56:df:95:e7:5e:46:36:34:53:9f:f9:0d:78:4e: 5f:ad:17:1a:e8:0e:86:45:c4:17:24:fb:22:dc:72:a4:3c:95: d6:6e:c6:ca:87:ca:6e:a2:ca:e6:f5:3f:d3:7c:39:8e:70:1e: 35:66:43:b2:25:29:3d:d8:c1:e3:ce:81:59:3a:0b:b3:d3:09: 0c:2a:10:98:eb:ef:16:6c:63:ff:70:ed:04:c3:34:1d:b4:31: 85:0d:d1:8f:74:a3:a7:f4:34:b2:b2:00:5a:3f:cc:68:48:37: 68:d7:5f:26:c2:be:4a:bd:37:39:fb:55:d4:1a:9a:38:b1:f4: 0c:1c:b0:fa:61:6e:d0:22:54:c7:14:03:df:61:a4:16:eb:41: 2b:a6:f1:49:10:b3:a7:e5:d0:27:c4:07:c0:59:08:8b:66:bf: f7:28:c2:3b:d5:d6:81:66:74:56:76:e4:cd:6a:51:17:b3:11: a3:3d:ef:be:f6:01:11:46:20:56:dc:aa:fa:91:5f:ba:e7:67: 1b:ad:16:df -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElz10qMTDAZG0Xfl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwODAwNDUzNFoXDTI3MDcxMjAwNDUzNFowLzEtMCsGA1UEAxMk OWY5Y2EwMmMtNzIxZS00Y2E4LTk2ZDQtNmViMTBkOGVhMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt1mCozC7DHcuNW/W7E9ih/BsGs3PP+muz0D LXe8x9tHjXf161Wez6i7fIeifvcfBKqcVzymBGtMYgnpP3Ml/yRt2KDRTgAArh2q 8lvaHdlmTNX6tdGd4jvPt3rl6V/hWv819kDDLZ5XvosiYgm5CblYe5+7aQgLPn+t TWxSo6HUTQ7IC/T7aJpXU/bnjbVf8ufdFf4L1aowYxFQ6pk7Fgr2wKr3V731aDCJ zq5aAp7/tZv82asEisbKPhzpHYYbb3Ncy8xzylaj2r2oepuiqyytDFmrP4xJRXqq sdkhextrcgkAoDKFpx6s480qTyT/dKD0Bkf8f7uRny5MMSm3EwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKY7GW5MMQhndFcFaq0dKOO/A8r1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4ZWEzOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzlmOWNhMDJjLTcyMWUtNGNhOC05 NmQ0LTZlYjEwZDhlYTM4ZS85ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4 ZWEzOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkMgwDgQCAAIwCAMGACYC+sAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCMHjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiPkO3KClWBZT9yC3uEdjs0TMo rMAQlaqLUxFx7vR6ITyWadguLLjaXElcnXkDzJIVnAyHAIJIQRJ5Vt+V515GNjRT n/kNeE5frRca6A6GRcQXJPsi3HKkPJXWbsbKh8puosrm9T/TfDmOcB41ZkOyJSk9 2MHjzoFZOguz0wkMKhCY6+8WbGP/cO0EwzQdtDGFDdGPdKOn9DSysgBaP8xoSDdo 118mwr5KvTc5+1XUGpo4sfQMHLD6YW7QIlTHFAPfYaQW60ErpvFJELOn5dAnxAfA WQiLZr/3KMI71daBZnRWduTNalEXsxGjPe++9gERRiBW3Kr6kV+652cbrRbf -----END CERTIFICATE-----Generated at Sun Apr 27 22:21:41 2025 by rpki-client