$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer File: ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer (raw, json) Hash identifier: jOz1T15gZ1oKay/Jv00bMUUkEm8R8LcuFxrFmo8FHaE= Subject key identifier: 0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858496B773A3AB48BC77691864520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 05 Apr 2025 00:45:33 +0000 Certificate not after: Fri 09 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 54785 IP: 23.160.104.0/24 IP: 2602:fa57::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:77:3a:3a:b4:8b:c7:76:91:86:45:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 5 00:45:33 2025 GMT Not After : Jul 9 00:45:33 2027 GMT Subject: CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f7:9a:87:9a:f1:c3:dd:98:05:bd:1b:bc:1a: d2:f3:86:7f:6b:41:a3:8b:89:7a:ab:c3:30:90:cd: bf:6a:47:5f:74:5d:74:84:36:e6:51:13:f7:57:75: b2:65:64:7f:32:ed:18:2e:5e:4e:5a:23:7a:54:34: 37:9d:07:94:58:77:49:36:2c:24:c3:37:d7:9e:d3: 16:7b:92:ff:c8:fb:f5:77:77:8b:26:ff:99:98:6d: d1:45:1b:28:7a:86:9f:06:15:c1:fd:da:1e:bf:2b: cd:0e:30:c3:60:09:64:c9:47:3b:64:22:0c:8b:fa: 6a:3f:04:98:d9:61:73:ce:d3:91:a9:18:7f:2c:8a: 9b:97:dd:55:b0:eb:31:b9:2e:8d:7d:b3:de:83:3a: 7d:c7:f9:c7:4b:a0:6c:d2:64:0f:51:e8:41:e0:bd: 5e:98:6c:0e:8b:1b:14:b9:d8:46:a0:92:7e:f1:07: db:4b:16:11:18:0a:7e:8e:a1:5e:d1:b5:44:58:21: 8d:d3:79:9c:91:7d:ac:d8:e5:ea:88:a4:b3:4a:a1: 12:f4:16:fb:c0:4e:15:b2:6f:6b:e6:81:ba:1d:22: a7:82:74:ca:9b:cc:5a:db:aa:55:ed:f0:11:7e:47: 88:75:a8:53:94:3e:bc:58:ff:da:1e:45:67:82:d9: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.160.104.0/24 IPv6: 2602:fa57::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54785 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:90:89:e7:c1:7e:3d:d8:43:13:bf:18:ed:b2:bc:16:d8:18: 71:76:51:d9:14:d6:a4:57:2b:de:3f:62:1b:7e:c8:18:57:12: 80:8e:12:d9:20:eb:35:e1:45:62:6c:02:3c:2c:6a:21:bb:6d: 91:d6:86:e2:da:91:1e:f7:b5:0b:68:47:9a:17:09:4b:d6:01: b1:b8:96:d3:2d:e2:e9:63:eb:1e:60:c5:b8:8b:b4:e3:23:53: 8c:02:15:5a:d0:dc:f6:20:03:ab:c3:3b:43:db:7d:21:07:d8: 3c:3c:22:00:d0:17:a0:4b:cd:75:91:a7:c9:b2:ec:8d:af:aa: bc:6b:7f:a5:72:bc:a3:cc:f5:e9:2b:4f:7b:46:72:1f:dc:e3: 79:3a:9b:ab:65:12:1f:9a:5b:fd:7b:86:da:74:6d:89:78:28: 6c:eb:3f:27:33:60:85:dd:e2:6f:b6:fd:d6:41:05:1f:3c:18: 85:82:d8:d5:3f:9f:04:6c:72:c6:78:8e:3e:6e:38:16:39:77: a0:03:e6:f0:2b:24:88:b8:de:ee:78:49:cc:1b:b6:38:6b:96: af:6c:a1:56:81:ff:33:05:0b:32:82:76:e3:c5:35:d8:b1:a5: 93:92:88:5c:16:52:b9:e4:3a:9e:ba:c3:6a:79:2c:36:2e:69: 4d:85:5c:32 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWElrdzo6tIvHdpGGRSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwNTAwNDUzM1oXDTI3MDcwOTAwNDUzM1owLzEtMCsGA1UEAxMk YWI1NTdiNDEtYjhmZi00YWE5LWI5ZWQtNmRlZmE5YTZiNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1veah5rxw92YBb0bvBrS84Z/a0Gji4l6q8Mw kM2/akdfdF10hDbmURP3V3WyZWR/Mu0YLl5OWiN6VDQ3nQeUWHdJNiwkwzfXntMW e5L/yPv1d3eLJv+ZmG3RRRsoeoafBhXB/doevyvNDjDDYAlkyUc7ZCIMi/pqPwSY 2WFzztORqRh/LIqbl91VsOsxuS6NfbPegzp9x/nHS6Bs0mQPUehB4L1emGwOixsU udhGoJJ+8QfbSxYRGAp+jqFe0bVEWCGN03mckX2s2OXqiKSzSqES9Bb7wE4Vsm9r 5oG6HSKngnTKm8xa26pV7fARfkeIdahTlD68WP/aHkVngtkOUQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFA646neO0sHK390yY4/EL4CqkVZKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h YjU1N2I0MS1iOGZmLTRhYTktYjllZC02ZGVmYTlhNmI1NzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2FiNTU3YjQxLWI4ZmYtNGFhOS1i OWVkLTZkZWZhOWE2YjU3Mi9hYjU1N2I0MS1iOGZmLTRhYTktYjllZC02ZGVmYTlh NmI1NzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoGgwDgQCAAIwCAMGACYC+lcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDWATBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXkInnwX492EMTvxjtsrwW2Bhx dlHZFNakVyveP2IbfsgYVxKAjhLZIOs14UVibAI8LGohu22R1obi2pEe97ULaEea FwlL1gGxuJbTLeLpY+seYMW4i7TjI1OMAhVa0Nz2IAOrwztD230hB9g8PCIA0Beg S811kafJsuyNr6q8a3+lcryjzPXpK097RnIf3ON5OpurZRIfmlv9e4badG2JeChs 6z8nM2CF3eJvtv3WQQUfPBiFgtjVP58EbHLGeI4+bjgWOXegA+bwKySIuN7ueEnM G7Y4a5avbKFWgf8zBQsygnbjxTXYsaWTkohcFlK55DqeusNqeSw2LmlNhVwy -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:00 2025 by rpki-client