$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer File: bfe6b5ce-b18b-4608-80c9-5651cde85219.cer (raw, json) Hash identifier: KB/Sr5M/ll1K9OdPryzy6Am22HkK8039whluj3vm9ig= Subject key identifier: E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848A98E7683E0D7AA1CB0C49200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Jan 2025 13:45:33 +0000 Certificate not after: Fri 30 Apr 2027 12:45:33 +0000 Subordinate resources: AS: 396100 IP: 23.164.168.0/24 IP: 141.193.0.0/23 IP: 2607:7540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:8e:76:83:e0:d7:aa:1c:b0:c4:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 25 13:45:33 2025 GMT Not After : Apr 30 12:45:33 2027 GMT Subject: CN=bfe6b5ce-b18b-4608-80c9-5651cde85219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:be:72:a8:26:af:48:70:b4:18:82:58:7d: 8a:f4:2a:d1:66:dd:ce:1f:b2:89:b3:8b:e8:a1:03: e4:a8:80:c1:34:6d:9b:98:78:71:e0:ce:09:de:66: 0c:07:f5:29:b7:f6:d4:44:f3:6a:46:63:ef:b5:7e: ca:b4:39:0c:64:d4:0d:2a:18:98:9f:cf:53:01:ef: e8:f0:a4:8d:37:3e:1a:53:ab:02:af:8d:f3:58:08: 88:a0:ca:59:c8:73:fb:44:72:f9:bb:a4:5b:0d:c9: 13:13:60:77:ae:20:64:bb:3f:c0:1d:38:d0:03:74: 98:40:1e:94:9e:e4:29:a7:b3:87:bc:04:68:8c:06: 62:94:16:56:ef:b2:d0:34:50:99:b5:d5:0a:d9:d6: 33:18:d7:48:63:f4:09:ab:6d:fc:d6:1f:aa:96:d7: 0b:83:f9:cc:8b:e6:31:dc:70:91:30:28:6b:af:5b: 1f:fd:f1:cc:90:0a:8f:7e:c1:41:0c:cd:7d:d5:b9: cc:06:3c:8a:bf:a1:c6:83:77:fb:a0:78:d8:0d:3d: e4:bc:af:1e:07:a1:f2:15:4a:17:dc:4d:c6:b7:c5: 97:fd:9b:44:bb:b0:6d:e2:f1:65:64:3d:c2:d0:9f: b9:d9:33:4b:4d:79:f6:e0:ee:a9:70:26:40:f0:54: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.164.168.0/24 141.193.0.0/23 IPv6: 2607:7540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396100 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:11:6a:c4:fa:5f:43:25:a8:02:23:99:ef:c1:54:21:09:ae: e1:22:25:bb:10:a0:d6:54:0e:a2:63:a4:8f:7a:48:66:70:6a: e4:9e:6a:74:86:28:35:b7:56:e3:74:44:4f:09:0c:ec:84:a0: a8:d0:43:5f:06:e2:68:94:4c:a2:25:6a:a6:cf:d6:8a:b4:00: 9e:b1:e1:e9:ab:dc:86:55:ca:35:98:6e:4c:b6:2a:94:e0:b1: ed:d1:01:31:c3:6a:e8:8e:36:b5:60:ae:a1:91:c8:72:81:b8: 8f:e1:55:74:45:84:a7:e2:5d:b7:d4:56:85:89:e9:29:7c:b1: 07:1c:89:13:e0:02:dc:f2:85:c7:bc:c9:ce:33:bf:6d:ae:23: 7f:a9:85:5b:e5:09:66:3b:9d:cd:0b:54:17:84:57:9f:44:96: 67:38:1c:cd:64:30:12:10:16:46:11:39:35:2c:3e:11:2e:dc: 45:eb:54:a6:79:4b:34:68:84:cc:bd:53:07:41:42:fa:67:64: d3:c6:69:4f:6e:18:0f:16:df:d7:be:72:9a:c7:e5:97:b7:35: a0:6e:37:3e:07:c6:60:87:74:5b:cb:a5:44:24:89:9a:7b:e3: e1:c6:23:5e:24:4a:d0:dd:2f:9b:4d:79:0f:74:f5:9e:ef:52: dd:d3:dc:3a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEipjnaD4NeqHLDEkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyNTEzNDUzM1oXDTI3MDQzMDEyNDUzM1owLzEtMCsGA1UEAxMk YmZlNmI1Y2UtYjE4Yi00NjA4LTgwYzktNTY1MWNkZTg1MjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6i+cqgmr0hwtBiCWH2K9CrRZt3OH7KJs4vo oQPkqIDBNG2bmHhx4M4J3mYMB/Upt/bURPNqRmPvtX7KtDkMZNQNKhiYn89TAe/o 8KSNNz4aU6sCr43zWAiIoMpZyHP7RHL5u6RbDckTE2B3riBkuz/AHTjQA3SYQB6U nuQpp7OHvARojAZilBZW77LQNFCZtdUK2dYzGNdIY/QJq2381h+qltcLg/nMi+Yx 3HCRMChrr1sf/fHMkAqPfsFBDM191bnMBjyKv6HGg3f7oHjYDT3kvK8eB6HyFUoX 3E3Gt8WX/ZtEu7Bt4vFlZD3C0J+52TNLTXn24O6pcCZA8FQ9+QIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFOME1efkWxnMnH1ho6qkHJmLSLWnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9i ZmU2YjVjZS1iMThiLTQ2MDgtODBjOS01NjUxY2RlODUyMTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2JmZTZiNWNlLWIxOGItNDYwOC04 MGM5LTU2NTFjZGU4NTIxOS9iZmU2YjVjZS1iMThiLTQ2MDgtODBjOS01NjUxY2Rl ODUyMTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXpKgDBAGNwQAwDQQCAAIwBwMFACYHdUAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgtEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACQRasT6X0MlqAIjme/B VCEJruEiJbsQoNZUDqJjpI96SGZwauSeanSGKDW3VuN0RE8JDOyEoKjQQ18G4miU TKIlaqbP1oq0AJ6x4emr3IZVyjWYbky2KpTgse3RATHDauiONrVgrqGRyHKBuI/h VXRFhKfiXbfUVoWJ6Sl8sQcciRPgAtzyhce8yc4zv22uI3+phVvlCWY7nc0LVBeE V59Elmc4HM1kMBIQFkYROTUsPhEu3EXrVKZ5SzRohMy9UwdBQvpnZNPGaU9uGA8W 39e+cprH5Ze3NaBuNz4HxmCHdFvLpUQkiZp74+HGI14kStDdL5tNeQ909Z7vUt3T 3Do= -----END CERTIFICATE-----Generated at Mon Apr 28 01:03:44 2025 by rpki-client