$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer File: fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer (raw, json) Hash identifier: ZTuwKDI9P336r3DBG103uhiHAJWi8c9xSBSDwE/hOcY= Subject key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584976A1FAFBDDDF50B82F190900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 00:45:34 +0000 Certificate not after: Tue 13 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 399333 IP: 23.169.120.0/24 IP: 2602:f9ad::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a1:fa:fb:dd:df:50:b8:2f:19:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Apr 9 00:45:34 2025 GMT Not After : Jul 13 00:45:34 2027 GMT Subject: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:79:22:b6:bc:4a:b7:5b:a4:10:63:d5:9c: 54:01:65:cb:6e:7f:bf:0a:c5:f6:c3:ad:69:af:c6: 1d:29:ac:dd:71:78:be:0e:05:d0:88:23:3b:dc:10: c2:27:6f:fd:26:37:be:22:b9:49:05:d2:10:7f:cf: 6b:2a:0b:c0:8d:98:5c:c6:29:a9:c6:52:9f:02:b3: b0:e2:44:a5:0b:88:82:e5:10:78:af:b2:74:b9:e7: af:6f:9b:f6:c5:ff:05:cf:e8:3e:d0:61:2a:92:38: a0:9b:31:05:f0:64:f7:5c:dc:52:dd:60:3b:6d:03: 51:a7:f5:41:7d:64:ce:70:10:56:40:fe:bd:97:c9: 7f:0b:e4:a9:37:8f:4f:a6:6e:a5:3e:d8:f0:5f:07: 41:2f:1a:51:24:11:28:d3:8c:67:0f:4f:8a:86:3a: 9b:6c:11:b3:16:99:62:92:b0:95:f6:4f:4f:b7:bb: 43:0d:84:04:43:35:10:d8:24:1a:67:b0:27:59:10: be:dd:f8:42:9e:93:11:ef:df:ef:12:2e:a0:e2:e0: 31:7f:84:8e:f0:dc:85:0b:49:f5:8d:1a:01:0c:c7: 57:2a:4c:d3:26:46:26:23:0d:8e:af:18:c7:fd:9e: 10:43:7a:f2:e5:7d:5f:61:a0:31:ca:45:4c:f0:6f: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.169.120.0/24 IPv6: 2602:f9ad::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399333 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:46:8e:09:aa:66:34:95:f5:66:a2:b8:f0:7e:a5:2e:0f:17: 49:f6:3d:6b:7e:be:1f:fa:68:2d:c2:bc:03:7b:65:aa:4d:01: 98:96:00:eb:af:5b:3e:c5:27:95:3f:d3:a7:7a:93:09:4c:df: 11:5f:53:de:65:6d:e5:50:7c:76:cd:60:5a:c1:d4:57:12:26: 45:ff:16:b5:4f:9f:13:21:05:a8:4e:9c:59:87:9f:94:82:aa: 6c:ff:6f:7a:ba:a0:00:67:a3:af:08:11:14:71:83:47:94:39: 58:99:db:2c:2f:90:8a:1e:5e:ff:86:cf:91:94:1b:19:34:24: 6f:72:3d:a9:5f:96:e6:f9:6a:d1:75:da:d6:c8:1a:a2:d7:d8: 93:68:36:bd:49:fb:4b:8d:55:4e:ad:cd:1e:ee:8d:9c:49:d6: 09:27:e2:30:15:a2:d9:bb:b7:9a:cc:2e:6d:00:7d:f5:f1:ef: 23:ef:94:0a:b6:1e:23:fa:d1:e9:2a:fb:eb:5f:0b:47:ca:a0: a6:c5:af:81:4a:76:49:c1:06:36:12:92:2f:12:13:97:78:4a: 70:72:d0:26:42:a7:c0:ac:75:28:10:da:5d:59:a2:2d:e9:fe: cf:92:3d:51:81:d0:5e:60:49:37:ed:43:d9:62:35:34:9a:4a: 7f:01:28:e9 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEl2ofr73d9QuC8ZCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDQwOTAwNDUzNFoXDTI3MDcxMzAwNDUzNFowLzEtMCsGA1UEAxMk ZmRiM2ZlZTktMGIwMC00YThkLWIzMjAtZTI5M2I2MjdiYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0p5Ira8SrdbpBBj1ZxUAWXLbn+/CsX2w61p r8YdKazdcXi+DgXQiCM73BDCJ2/9Jje+IrlJBdIQf89rKgvAjZhcximpxlKfArOw 4kSlC4iC5RB4r7J0ueevb5v2xf8Fz+g+0GEqkjigmzEF8GT3XNxS3WA7bQNRp/VB fWTOcBBWQP69l8l/C+SpN49Ppm6lPtjwXwdBLxpRJBEo04xnD0+KhjqbbBGzFpli krCV9k9Pt7tDDYQEQzUQ2CQaZ7AnWRC+3fhCnpMR79/vEi6g4uAxf4SO8NyFC0n1 jRoBDMdXKkzTJkYmIw2OrxjH/Z4QQ3ry5X1fYaAxykVM8G9x9QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMw1juFcBncsbYnOxArUquQo2SENMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m ZGIzZmVlOS0wYjAwLTRhOGQtYjMyMC1lMjkzYjYyN2JiMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZkYjNmZWU5LTBiMDAtNGE4ZC1i MzIwLWUyOTNiNjI3YmIwNC9mZGIzZmVlOS0wYjAwLTRhOGQtYjMyMC1lMjkzYjYy N2JiMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqXgwDgQCAAIwCAMGACYC+a0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYX5TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzRo4JqmY0lfVmorjwfqUuDxdJ 9j1rfr4f+mgtwrwDe2WqTQGYlgDrr1s+xSeVP9OnepMJTN8RX1PeZW3lUHx2zWBa wdRXEiZF/xa1T58TIQWoTpxZh5+Ugqps/296uqAAZ6OvCBEUcYNHlDlYmdssL5CK Hl7/hs+RlBsZNCRvcj2pX5bm+WrRddrWyBqi19iTaDa9SftLjVVOrc0e7o2cSdYJ J+IwFaLZu7eazC5tAH318e8j75QKth4j+tHpKvvrXwtHyqCmxa+BSnZJwQY2EpIv EhOXeEpwctAmQqfArHUoENpdWaIt6f7Pkj1RgdBeYEk37UPZYjU0mkp/ASjp -----END CERTIFICATE-----Generated at Sun Apr 27 21:33:36 2025 by rpki-client