$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer File: a234649d-ab49-458b-a5e3-7765fe7a066c.cer (raw, json) Hash identifier: F8kn80yjxVZroyU/6qWgAq8OeJG8wzwtcDIsM5A/EKs= Subject key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848C5794DD67CD990EF5ACC1B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Feb 2025 13:45:33 +0000 Certificate not after: Mon 10 May 2027 12:45:33 +0000 Subordinate resources: AS: 27010 IP: 23.165.184.0/24 IP: 2602:f9f6::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:79:4d:d6:7c:d9:90:ef:5a:cc:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 4 13:45:33 2025 GMT Not After : May 10 12:45:33 2027 GMT Subject: CN=a234649d-ab49-458b-a5e3-7765fe7a066c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d9:fe:91:f8:86:6a:db:bb:41:a0:84:33:ce: e3:0c:1e:37:dc:10:d1:6c:75:74:27:e1:2a:06:2b: c4:23:1d:64:26:c1:93:03:1c:bf:cc:63:83:83:82: 28:f5:78:4f:97:a3:01:f8:17:71:1b:ae:d2:09:c1: 3e:07:f9:8c:a3:32:ae:ab:d6:a5:0d:90:5b:ae:81: 48:b4:37:51:95:c3:c1:2e:d2:4e:dc:31:21:3c:7a: eb:53:45:1a:8b:12:b9:12:51:17:e3:73:79:91:59: c3:d3:07:09:a7:44:c4:a4:90:c3:b5:8a:5b:80:ef: 34:f6:c8:f2:13:0a:57:4b:83:20:8e:8b:a4:f9:03: c9:bd:80:ab:ae:88:55:97:ea:34:f6:89:15:1e:19: de:1a:fd:13:40:0f:ef:db:d8:09:f5:19:b3:b2:f0: 72:2b:f0:2b:1b:b5:89:be:e0:0e:36:51:8b:f1:a2: 32:b1:34:83:11:4b:32:13:92:d5:26:6a:e0:1e:b1: 19:bd:26:c0:bc:78:ca:7a:d6:3f:1d:91:cb:2a:13: 9a:01:b2:bf:1d:10:de:53:15:94:8b:72:b7:b2:14: a5:b3:a3:be:a3:62:71:f9:76:e2:0e:71:e0:e7:32: da:af:d4:5e:14:f5:f3:5d:f3:1b:2e:bf:cc:70:d8: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.184.0/24 IPv6: 2602:f9f6::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27010 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0b:82:3b:20:ec:d1:cf:61:72:70:e6:37:95:fe:f1:16:0a: ec:c0:cd:05:87:a4:2f:2a:9d:a4:a5:7f:36:1c:c4:21:36:b5: 06:82:e4:36:5d:d5:54:46:78:8b:c7:ce:d0:ef:22:c2:dd:95: 19:1c:41:0d:60:cb:56:0e:c2:e5:b0:7e:1d:9f:b8:03:90:06: 1b:9c:07:f7:22:c4:7c:e9:95:99:8b:87:fd:2c:88:e4:8b:45: 89:b3:2a:fc:78:49:b6:d6:22:65:f1:23:a4:7c:a4:d7:71:f6: de:fd:3b:0c:39:e4:33:74:d0:16:ec:b3:41:af:f0:72:74:94: 9d:5f:33:e6:82:69:78:c6:75:10:c6:33:01:0f:7d:1e:c9:fa: 1d:b5:5f:77:02:cb:59:c3:18:94:c6:71:44:bd:e7:61:45:89: bd:2e:0b:8b:87:f8:67:2c:45:32:c1:73:05:46:9e:12:91:43: 93:76:b7:54:39:45:e0:98:50:bc:b7:b4:2e:ae:94:ef:3d:0e: ec:60:e9:d3:98:28:f7:5b:82:8e:d0:14:18:52:6e:94:ac:3e: e8:15:87:dd:65:5f:b1:4a:05:12:e9:2d:00:74:e9:9c:31:39: f2:9e:9b:23:33:f8:a2:d3:47:52:21:25:01:65:ab:e8:c3:1b: e5:62:be:76 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjFeU3WfNmQ71rMG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDIwNDEzNDUzM1oXDTI3MDUxMDEyNDUzM1owLzEtMCsGA1UEAxMk YTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2EwNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdn+kfiGatu7QaCEM87jDB433BDRbHV0J+Eq BivEIx1kJsGTAxy/zGODg4Io9XhPl6MB+BdxG67SCcE+B/mMozKuq9alDZBbroFI tDdRlcPBLtJO3DEhPHrrU0UaixK5ElEX43N5kVnD0wcJp0TEpJDDtYpbgO809sjy EwpXS4Mgjouk+QPJvYCrrohVl+o09okVHhneGv0TQA/v29gJ9RmzsvByK/ArG7WJ vuAONlGL8aIysTSDEUsyE5LVJmrgHrEZvSbAvHjKetY/HZHLKhOaAbK/HRDeUxWU i3K3shSls6O+o2Jx+XbiDnHg5zLar9ReFPXzXfMbLr/McNhBlQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJ8D5xpfQoLJ3uwLoR+QSPRXfaGZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h MjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2EyMzQ2NDlkLWFiNDktNDU4Yi1h NWUzLTc3NjVmZTdhMDY2Yy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3 YTA2NmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpbgwDgQCAAIwCAMGBCYC+fYAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmmCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAELgjsg7NHPYXJw5jeV/vEWCuzA zQWHpC8qnaSlfzYcxCE2tQaC5DZd1VRGeIvHztDvIsLdlRkcQQ1gy1YOwuWwfh2f uAOQBhucB/cixHzplZmLh/0siOSLRYmzKvx4SbbWImXxI6R8pNdx9t79Oww55DN0 0Bbss0Gv8HJ0lJ1fM+aCaXjGdRDGMwEPfR7J+h21X3cCy1nDGJTGcUS952FFib0u C4uH+GcsRTLBcwVGnhKRQ5N2t1Q5ReCYULy3tC6ulO89Duxg6dOYKPdbgo7QFBhS bpSsPugVh91lX7FKBRLpLQB06ZwxOfKemyMz+KLTR1IhJQFlq+jDG+VivnY= -----END CERTIFICATE-----Generated at Sun Jun 15 13:23:01 2025 by rpki-client