$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer File: be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer (raw, json) Hash identifier: YxL1VcIPByUI/n5f7iR1HxQmRNAutUkSeyH+bKOsvW4= Subject key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584985FCBCBC6DE10E4D9A853420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 12:45:34 +0000 Certificate not after: Sun 18 Jul 2027 12:45:34 +0000 Subordinate resources: AS: 399935 IP: 23.168.216.0/24 IP: 2602:f99d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:85:fc:bc:bc:6d:e1:0e:4d:9a:85:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 14 12:45:34 2025 GMT Not After : Jul 18 12:45:34 2027 GMT Subject: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:67:a3:9f:43:38:ce:41:54:8a:94:54:14: 46:a8:85:6a:ec:be:e3:92:aa:a7:b5:3e:55:a4:bb: 5c:62:54:77:a8:23:4b:eb:f9:66:5a:1e:51:8c:4e: 30:1a:a1:ae:e7:f8:91:bd:9c:77:89:26:b1:78:49: 9f:92:f3:f7:cc:bc:b1:24:14:e6:2c:cb:b6:05:54: 21:c0:f5:f3:27:38:4a:e7:24:fa:8d:c1:73:06:b2: 35:97:cd:20:de:88:74:d2:6a:3d:4d:ca:19:19:2d: f9:e4:7a:6a:d1:b2:66:4d:ad:43:a4:f4:a5:ce:f4: 10:4e:e5:95:6b:c5:25:d7:61:34:b0:3b:a5:0e:2a: 86:2c:6f:d1:2d:24:93:20:bf:69:57:b1:05:cb:c8: 04:f3:6c:3e:64:3b:fa:91:83:f6:9b:05:7a:09:9e: c1:1c:4b:54:0d:2a:1f:f1:74:3c:7e:6c:87:27:fb: 80:6b:e0:bc:95:34:44:de:de:5f:66:7d:ad:af:85: 73:f0:4d:10:a4:43:ac:6a:6c:d1:fa:cd:5b:9f:e3: 26:6f:3d:21:db:d9:a3:7e:0b:7e:c1:aa:4a:96:fe: ad:59:7d:0f:8b:9b:d4:d8:3d:a3:42:11:28:85:4b: ca:cb:4b:96:a5:dd:d8:84:b6:33:cc:1a:19:b5:aa: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.168.216.0/24 IPv6: 2602:f99d::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399935 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:09:f5:21:97:c8:14:2e:89:d1:e4:53:51:49:e5:f4:8b:15: 59:a8:a8:9b:2c:7e:92:a1:d5:dc:99:67:eb:81:64:54:8f:99: be:1c:99:c8:29:74:cd:aa:51:4e:f2:46:17:73:5f:46:ec:9e: 9d:e9:f5:52:25:b1:c2:9c:cf:7b:e8:95:0d:ac:9f:90:e2:e0: ec:7f:dc:2d:04:be:63:02:13:5a:61:a2:a2:d1:80:c3:25:dd: 35:31:78:ac:cd:ed:f8:08:64:e0:d3:47:ab:5c:63:76:c5:7b: 7d:64:2c:3e:99:2a:fb:4e:3f:61:ae:f8:f6:2f:f6:0a:6e:69: 5d:d6:0c:1f:82:5a:32:8d:9a:ec:26:88:a9:5b:9b:1c:c4:70: 18:1a:be:ba:c4:6f:9b:a3:ff:b3:37:bd:0b:5b:d1:0c:1a:7e: 10:88:d0:15:73:01:4f:2a:f8:fb:4c:96:1e:8f:5e:01:71:22: 30:b5:9b:03:87:84:37:55:3b:75:b8:7e:ae:b3:8c:75:16:1c: 64:d3:78:fb:09:63:a2:df:96:46:03:6b:63:05:29:57:5b:b1: 7b:5f:0b:78:f3:73:b2:9c:39:f1:75:2f:bd:4a:33:6a:1f:c6: 6e:4b:19:32:9f:6e:2a:7b:ef:1a:28:c9:2d:bb:14:05:ec:a4: 89:00:e8:68 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEmF/Ly8beEOTZqFNCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQxNDEyNDUzNFoXDTI3MDcxODEyNDUzNFowLzEtMCsGA1UEAxMk YmU2OWU3YWUtNDY5ZC00MDBlLThmMmUtNGViZmMxYmUwMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtRno59DOM5BVIqUVBRGqIVq7L7jkqqntT5V pLtcYlR3qCNL6/lmWh5RjE4wGqGu5/iRvZx3iSaxeEmfkvP3zLyxJBTmLMu2BVQh wPXzJzhK5yT6jcFzBrI1l80g3oh00mo9TcoZGS355Hpq0bJmTa1DpPSlzvQQTuWV a8Ul12E0sDulDiqGLG/RLSSTIL9pV7EFy8gE82w+ZDv6kYP2mwV6CZ7BHEtUDSof 8XQ8fmyHJ/uAa+C8lTRE3t5fZn2tr4Vz8E0QpEOsamzR+s1bn+Mmbz0h29mjfgt+ wapKlv6tWX0Pi5vU2D2jQhEohUvKy0uWpd3YhLYzzBoZtapLjQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFBBEon9dy3sBGptt621HPp+2UaWEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i ZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFiZTAwOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2JlNjllN2FlLTQ2OWQtNDAwZS04 ZjJlLTRlYmZjMWJlMDA5OC9iZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFi ZTAwOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqNgwDgQCAAIwCAMGACYC+Z0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYaPzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJCfUhl8gULonR5FNRSeX0ixVZ qKibLH6SodXcmWfrgWRUj5m+HJnIKXTNqlFO8kYXc19G7J6d6fVSJbHCnM976JUN rJ+Q4uDsf9wtBL5jAhNaYaKi0YDDJd01MXisze34CGTg00erXGN2xXt9ZCw+mSr7 Tj9hrvj2L/YKbmld1gwfgloyjZrsJoipW5scxHAYGr66xG+bo/+zN70LW9EMGn4Q iNAVcwFPKvj7TJYej14BcSIwtZsDh4Q3VTt1uH6us4x1Fhxk03j7CWOi35ZGA2tj BSlXW7F7Xwt483OynDnxdS+9SjNqH8ZuSxkyn24qe+8aKMktuxQF7KSJAOho -----END CERTIFICATE-----Generated at Mon Apr 28 23:45:45 2025 by rpki-client